probleme installation anti virus
Dernière réponse : dans Sécurité
Lassé par la pub ? Créez un compte
On peut vérifier.
Télécharge puis installe Hijackthis (Trend Micro).
Poste ensuite un rapport dans ta prochaine réponse.
AIDE : Comment utiliser Hijackthis v2.0.2
Télécharge puis installe Hijackthis (Trend Micro).
Poste ensuite un rapport dans ta prochaine réponse.
AIDE : Comment utiliser Hijackthis v2.0.2
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:41:31, on 22/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\slserv.exe
C:\Program Files\Panda Software\Panda Antivirus 2007\PsCtrls.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
C:\Apps\Powercinema\PCMService.exe
C:\apps\ABoard\ABoard.exe
C:\PROGRA~1\Wanadoo\CnxMon.exe
C:\Program Files\Microsoft Works\WksSb.exe
C:\apps\ABoard\AOSD.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\BitComet\BitComet.exe
C:\Documents and Settings\XP familial\Mes documents\el-amrani.mohammed\kav7.0.0.125.fr.01NET.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Wanadoo\EspaceWanadoo.exe
C:\Program Files\Wanadoo\ComComp.exe
C:\Downloads\kis7.0.0.125.fr.01NET.exe
C:\Downloads\kis7.0.0.125.fr.01NET.exe
C:\Program Files\eMule\emule.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\DOCUME~1\XPFAMI~1\LOCALS~1\Temp\Rar$EX00.406\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.wanadoo.fr/go/page_recherche/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\system32\scvhost.exe
F3 - REG:win.ini: load=C:\WINDOWS\system32\scvhost.exe
F3 - REG:win.ini: run=C:\WINDOWS\system32\scvhost.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.9.24.dll
O2 - BHO: PBFRV2 - {4E7BD74F-2B8D-469E-A0E8-ED6AB685FA7D} - C:\WINDOWS\system32\pbfrv2.dll (file missing)
O2 - BHO: (no name) - {6EB6DFBC-AD3C-49A4-9F7C-1EB403EB0FE3} - C:\Program Files\Wanadoo Messager\hokelot24418.dll (file missing)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Internet Security Class - {A75E294E-C047-4D29-B07E-37B792881BEF} - (no file)
O3 - Toolbar: PBFRV2 - {4E7BD74F-2B8D-469E-A0E8-ED6AB685FA7D} - C:\WINDOWS\system32\pbfrv2.dll (file missing)
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKLM\..\Run: [LanzarL2007] "C:\DOCUME~1\XPFAMI~1\LOCALS~1\Temp\{FF736606-7B2F-43CF-99A0-9C58D6F88053}\{D1DA2BA7-2592-4036-9BB2-DCCABDE8DC1A}\..\..\L2007tmp\Setup.exe" /SETUP:"/l0x040c"
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
O4 - HKLM\..\Run: [autoclk] autoclk.exe
O4 - HKLM\..\Run: [adiras] adiras.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Secure] C:\WINDOWS\WindowsUpdates.exe
O4 - HKLM\..\Run: [Generic Host Process] C:\WINDOWS\system32\scvhost.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Microsoft] C:\WINDOWS\wuauclt.exe
O4 - HKLM\..\Run: [Winspn] C:\Program Files\Winspn\winspn.exe
O4 - HKLM\..\RunServices: [Generic Host Process] C:\WINDOWS\system32\scvhost.exe
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
O4 - HKLM\..\Policies\Explorer\Run: [Generic Host Process] C:\WINDOWS\system32\scvhost.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Rappels du Calendrier Microsoft Works.lnk = ?
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra button: BitComet Search - {461CC20B-FB6E-4f16-8FE8-C29359DB100E} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.9.24.dll
O9 - Extra button: Organise-notes - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Researcher\EROProj.dll
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe (file missing)
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe (file missing)
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {8A0DCBDB-6E20-489C-9041-C1E8A0352E75} (Mirar_Dummy_ATS1 Class) - http://awbeta.net-nucleus.com/FIX/WinATS.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
O17 - HKLM\System\CCS\Services\Tcpip\..\{97FB5D3F-D664-40D7-8E30-92E143D68D31}: NameServer = 81.253.149.9 80.10.246.132
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: MysqlInventime - Unknown owner - C:\Apps\INVENT~1\mysql\bin\mysqld-nt.exe
O23 - Service: Panda Software Controller - Unknown owner - C:\Program Files\Panda Software\Panda Antivirus 2007\PsCtrls.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O24 - Desktop Component 0: (no name) - C:\Program Files\ComPlus Applications\profsysyprun.html
--
End of file - 10258 bytes
Scan saved at 21:41:31, on 22/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\slserv.exe
C:\Program Files\Panda Software\Panda Antivirus 2007\PsCtrls.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
C:\Apps\Powercinema\PCMService.exe
C:\apps\ABoard\ABoard.exe
C:\PROGRA~1\Wanadoo\CnxMon.exe
C:\Program Files\Microsoft Works\WksSb.exe
C:\apps\ABoard\AOSD.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\BitComet\BitComet.exe
C:\Documents and Settings\XP familial\Mes documents\el-amrani.mohammed\kav7.0.0.125.fr.01NET.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Wanadoo\EspaceWanadoo.exe
C:\Program Files\Wanadoo\ComComp.exe
C:\Downloads\kis7.0.0.125.fr.01NET.exe
C:\Downloads\kis7.0.0.125.fr.01NET.exe
C:\Program Files\eMule\emule.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\DOCUME~1\XPFAMI~1\LOCALS~1\Temp\Rar$EX00.406\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.wanadoo.fr/go/page_recherche/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\system32\scvhost.exe
F3 - REG:win.ini: load=C:\WINDOWS\system32\scvhost.exe
F3 - REG:win.ini: run=C:\WINDOWS\system32\scvhost.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.9.24.dll
O2 - BHO: PBFRV2 - {4E7BD74F-2B8D-469E-A0E8-ED6AB685FA7D} - C:\WINDOWS\system32\pbfrv2.dll (file missing)
O2 - BHO: (no name) - {6EB6DFBC-AD3C-49A4-9F7C-1EB403EB0FE3} - C:\Program Files\Wanadoo Messager\hokelot24418.dll (file missing)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Internet Security Class - {A75E294E-C047-4D29-B07E-37B792881BEF} - (no file)
O3 - Toolbar: PBFRV2 - {4E7BD74F-2B8D-469E-A0E8-ED6AB685FA7D} - C:\WINDOWS\system32\pbfrv2.dll (file missing)
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKLM\..\Run: [LanzarL2007] "C:\DOCUME~1\XPFAMI~1\LOCALS~1\Temp\{FF736606-7B2F-43CF-99A0-9C58D6F88053}\{D1DA2BA7-2592-4036-9BB2-DCCABDE8DC1A}\..\..\L2007tmp\Setup.exe" /SETUP:"/l0x040c"
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
O4 - HKLM\..\Run: [autoclk] autoclk.exe
O4 - HKLM\..\Run: [adiras] adiras.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Secure] C:\WINDOWS\WindowsUpdates.exe
O4 - HKLM\..\Run: [Generic Host Process] C:\WINDOWS\system32\scvhost.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Microsoft] C:\WINDOWS\wuauclt.exe
O4 - HKLM\..\Run: [Winspn] C:\Program Files\Winspn\winspn.exe
O4 - HKLM\..\RunServices: [Generic Host Process] C:\WINDOWS\system32\scvhost.exe
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
O4 - HKLM\..\Policies\Explorer\Run: [Generic Host Process] C:\WINDOWS\system32\scvhost.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Rappels du Calendrier Microsoft Works.lnk = ?
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra button: BitComet Search - {461CC20B-FB6E-4f16-8FE8-C29359DB100E} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.9.24.dll
O9 - Extra button: Organise-notes - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Researcher\EROProj.dll
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe (file missing)
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe (file missing)
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {8A0DCBDB-6E20-489C-9041-C1E8A0352E75} (Mirar_Dummy_ATS1 Class) - http://awbeta.net-nucleus.com/FIX/WinATS.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
O17 - HKLM\System\CCS\Services\Tcpip\..\{97FB5D3F-D664-40D7-8E30-92E143D68D31}: NameServer = 81.253.149.9 80.10.246.132
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: MysqlInventime - Unknown owner - C:\Apps\INVENT~1\mysql\bin\mysqld-nt.exe
O23 - Service: Panda Software Controller - Unknown owner - C:\Program Files\Panda Software\Panda Antivirus 2007\PsCtrls.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O24 - Desktop Component 0: (no name) - C:\Program Files\ComPlus Applications\profsysyprun.html
--
End of file - 10258 bytes
Re,
Télécharge SDFix (créé par AndyManchesta) et sauvegarde le sur ton Bureau.
Double clique sur SDFix.exe et choisis Install pour l'extraire sur le Bureau.
Redémarre en mode sans échec
Ouvre le dossier SDFix qui vient d'être créé à la racine de ton dique dur (C:) et double clique sur RunThis.bat pour lancer le script.
Appuie sur Y pour commencer le processus de nettoyage.
Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
Appuie sur une touche pour redémarrer le PC.
Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum, avec un nouveau log Hijackthis.
Télécharge SDFix (créé par AndyManchesta) et sauvegarde le sur ton Bureau.
Double clique sur SDFix.exe et choisis Install pour l'extraire sur le Bureau.
Redémarre en mode sans échec
dailleur je dois préciser que quand j'allume lordi il y a Mes document qui souvre et un message d'erreur qui s'affiche :
![]()
J'ai essayé d'installer un pilote pour ma webcam cette aprem mais je n'ai pas pu car on me dit que le fichier spécifié est introubale puis "veuillez utiliser le panneau de configuration et instaler et configurer les composants du systeme"... est ce que cela à un rapport??

J'ai essayé d'installer un pilote pour ma webcam cette aprem mais je n'ai pas pu car on me dit que le fichier spécifié est introubale puis "veuillez utiliser le panneau de configuration et instaler et configurer les composants du systeme"... est ce que cela à un rapport??
j'ai redemarer en mode sans echec mais une page bleu s'est affiché en me disant qu'une erreur serieuse avait été repéré alors window a été stopé et tout le trala si c'est la 1ère fois redémarer... que je dois chercher un virus dans mes truk récement instalé... alors jai redemarer en mode normal
je fais quoi?
je fais quoi?
TOUT CA C EST CE QU IL Y A DANS LE FICHIER CATCH ME.LOG
catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-22 23:02:01
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden services & system hive ...
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword
9c6e513
"s2"=dword:6f3e9a18
"h0"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools\"
"h0"=dword:00000000
"khjeh"=hex:51,ec,f9,97,4e,00,4d,57,44,af,c6,5c,02,57,91,81,23,ee,d9,4c,92,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,c6,f6,46,8c,8f,c4,41,84,72,d4,d4,07,96,a1,d9,cf,a8,..
"khjeh"=hex:35,62,ec,07,51,aa,ad,86,06,4a,78,36,1a,7c,7a,36,7d,8e,b4,80,e4,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:64,62,03,00,b0,10,38,00,00,00,00,00,68,62,69,6e,00,10,38,00,00,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools\"
"h0"=dword:00000000
"khjeh"=hex:51,ec,f9,97,4e,00,4d,57,44,af,c6,5c,02,57,91,81,23,ee,d9,4c,92,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,c6,f6,46,8c,8f,c4,41,84,72,d4,d4,07,96,a1,d9,cf,a8,..
"khjeh"=hex:35,62,ec,07,51,aa,ad,86,06,4a,78,36,1a,7c,7a,36,7d,8e,b4,80,e4,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:64,62,03,00,a0,a0,33,00,00,00,00,00,a8,ff,ff,ff,6e,6b,20,00,12,..
scanning hidden registry entries ...
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\Microsoft Encarta\Encyclop\x00e9die DE LUXE 2002\Tasks\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Researcher\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Researcher\Samples\"=""
"C:\Program Files\Microsoft Encarta\Encyclop\x00e9die DE LUXE 2002\Pushpins\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\DSWMEDIA\SHARED\code\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\DSWMEDIA\SHARED\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\DSWMEDIA\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\DSWMEDIA\SHARED\ia\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\DSWMEDIA\SHARED\media\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\DSWMEDIA\SHARED\players\IAI\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\DSWMEDIA\SHARED\players\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\DSWMEDIA\SHARED\players\IIP\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\DSWMEDIA\SHARED\players\IMR\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\DSWMEDIA\SHARED\players\LOC_vwr\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\DSWMEDIA\SHARED\players\mcc\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\DSWMEDIA\SHARED\players\RFL\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\world\7015\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\world\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\anim\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IAI\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IAI\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t975520a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t975520a\F\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t631624a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t631624a\F\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620275a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620275a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620281a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620281a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t630096a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t630096a\F\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t630096a\Media\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620271a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620271a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t631317a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t631317a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620268a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620268a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t041755a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t041755a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t041755a\media\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t630095a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t630095a\F\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t630095a\Media\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620273a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620273a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620266a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620266a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t979063a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t979063a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620265a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620265a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t631789a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t631789a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t631182a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t631182a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t631791a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t631791a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t979062a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t979062a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620264a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620264a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620270a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620270a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t621387a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t621387a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620277a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620277a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\MCC\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\MCC\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620267a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620267a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t594172a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t594172a\f\"=""
"C:\Documents and Settings\All Users\Menu D\xe9marrer\Programmes\Microsoft Encarta\"=""
"C:\WINDOWS\Installer\{01020101-823E-46CD-A70E-BEE818F97169}\"=""
"c:\Program Files\MSXML 4.0\"="1"
"c:\WINDOWS\winsxs\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9848.0_x-ww_1b897e9a\"=""
"c:\WINDOWS\winsxs\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.0.0_x-ww_29c3ad6a\"=""
"c:\WINDOWS\winsxs\Policies\x86_policy.4.20.Microsoft.MSXML2_6bd6b9abf345378f_x-ww_88e8eab8\"=""
"c:\WINDOWS\Installer\{C04E32E0-0416-434D-AFB9-6969D703A9EF}\"=""
"C:\Program Files\Winspn\"="1"
"C:\Program Files\Fichiers communs\Microsoft Shared\DW\1036\"=""
"C:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\production\"=""
"C:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\18\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\8\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\25\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\7\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\1046\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\17\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\4\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\1028\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\10\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\12\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\11\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\20\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\9\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\16\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\29\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\6\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\31\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\22\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\19\"=""
"C:\WINDOWS\Installer\{F6326B60-1B1D-4ABF-BFCD-7B7404F44411}\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\Browser\"="1"
"C:\Program Files\Adobe\Acrobat 7.0\Reader\"="1"
"C:\Program Files\Adobe\Acrobat 7.0\Setup Files\RdrBig709\ENU\"="1"
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\VDKHome\FRA\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\VDKHome\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\VDKHome\ENU\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\AcroForm\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\WebSearch\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\AcroForm\PMP\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Multimedia\MPP\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Multimedia\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Help\ENU\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Help\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Help\FRA\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\PictureTasks\OLS\Locale\FRA\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\PictureTasks\OLS\Locale\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\PictureTasks\OLS\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\PictureTasks\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\PictureTasks\Howto\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\PictureTasks\OLS\Locale\ENU\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\PictureTasks\Templates\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\PictureTasks\Howto\images\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\Updater\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Resource\CMap\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Resource\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Resource\Font\PFM\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Resource\Font\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Annotations\Stamps\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Annotations\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Annotations\Stamps\FRA\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Annotations\Stamps\ENU\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\HowTo\FRA\Images\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\HowTo\FRA\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\HowTo\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\Optional\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\HowTo\ENU\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\HowTo\ENU\Images\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\SPPlugins\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Esl\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\Javascripts\"=""
"C:\Documents and Settings\All Users\Application Data\Adobe\Acrobat\7.0\Replicate\Security\"=""
"C:\Documents and Settings\All Users\Application Data\Adobe\Acrobat\7.0\Replicate\"=""
"C:\Documents and Settings\All Users\Application Data\Adobe\Acrobat\7.0\"=""
"C:\Documents and Settings\All Users\Application Data\Adobe\Acrobat\"=""
"C:\Documents and Settings\All Users\Application Data\Adobe\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\Legal\Adobe Reader\7.0.0\fr_FR\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\Legal\Adobe Reader\7.0.0\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\Legal\Adobe Reader\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\Legal\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\Messages\FRA\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\Messages\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\Messages\ENU\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\ImageViewer\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\ImageViewer\en_US\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\ImageViewer\fr_FR\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins3d\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Resource\Linguistics\Providers\Proximity\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Resource\Linguistics\Providers\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Resource\Linguistics\"=""
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\Mac\"=""
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\"=""
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\"=""
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\"=""
"C:\Program Files\Fichiers communs\Adobe\"=""
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\Adobe\"=""
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\win\"=""
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\ICU\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Resource\Linguistics\LanguageNames\"=""
"C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A70900000002}\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\PB\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\"=""
"C:\Program Files\Electronic Arts\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\PB\htm\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\PB\dll\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SOUND\SPEECH\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SOUND\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SOUND\SKIDS\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SOUND\SPLICER\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\TRACKS\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\TRACKS\L6R_AUTOBAHNDRIFT\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\TRACKS\L6R_AUTOPOLIS\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\TRACKS\L6R_CHICAGOAIRFIELD\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\TRACKS\L6R_EBISU\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\TRACKS\L6R_FE\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\TRACKS\L6R_INFINEON\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\TRACKS\L6R_MONDELLOPARK\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\TRACKS\L6R_NEVADADRIFT\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\TRACKS\L6R_PORTLANDRACEWAY\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\TRACKS\L6R_SHUTODRIFT\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\TRACKS\L6R_SHUTOEXPRESSWAY\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\TRACKS\L6R_TEXASSPEEDWAY\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\TRACKS\L6R_WILLOWSPRINGS\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SUBTITLES\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SOUND\NIs\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SOUND\NOS\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SOUND\SHIFTING\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SOUND\PFDATA\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\en-us\Error_Message\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\en-us\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\en-us\Online_Connectivity_and_Performance\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\en-us\Direct_X\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\en-us\Getting_More_Help_Online\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\en-us\Lock-up_and_Freeze\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\Cz\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\Da\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\De\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\en-uk\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\en-us\Controller\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\en-us\Crash\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\en-us\Graphics\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\en-us\Install\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\en-us\Sound\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\en-us\WebHelp_Skin_Files\XP_Silver\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\en-us\WebHelp_Skin_Files\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\en-us\whdata\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\en-us\Whitepages\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\en-us\whxdata\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\Es\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\Fi\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\fr-fr\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\Hu\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\It\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\NL\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\No\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\Pol\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\pt-br\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\pt\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\Ru\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\Sv\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\MEMCARD\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\LANGUAGES\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\MINI_MAPS\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\NIS\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\MOVIES\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\240SX\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\350Z\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\997GT2\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\997GT3\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\997GT3RS\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\997TT\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\BMWM3\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\BMWM3E92\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\BMWMZ4\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\BRAKE\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\BRAKEROTOR\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\CAMARO\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\CAMARON\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\CARRERAGT\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\CAYMANS\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\CCX\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\CHALLENGER71\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\CHALLENGERN\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\CHARGER69\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\CHEVELLE\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\CIVICHB\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\CIVICSI\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\COBALTSS\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\COROLLA\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\CORVETTE67\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\CORVETTE\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\CORVETTEZ06\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\COSWORTH\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\CTSV\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\CUDA\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\DAMAGE\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\DB9\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\DBR9\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\DELTA\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\ECLIPSE\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\ELISE\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\EXHAUST\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\FOCUSST\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\FORDGT\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\G35\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\GALLARDOS\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\GROUP01\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\GROUP02\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\GROUP03\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\GROUP04\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\GROUP05\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\GROUP06\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\GROUP07\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\GROUP08\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\GTI\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\GTO65\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\GTO\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\GTRPROTO\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\IMPREZAWRXSTI\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\INTEGRALS\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\INTEGRATYPER\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\IS350\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\LANCEREVO9\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\LANCEREVOX\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\LEONCUPRA\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\MAZDASPEED3\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\MCLARENF1\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\MURCIELAGO640\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\MUSTANG03\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\MUSTANGGT\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\MUSTANGSHLBYN\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\MUSTANGSHLBYO\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\NSX\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\PLATES\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\R32\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\R8PROD\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\ROADRUNNER\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\ROOFSCOOP\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\RS4\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\RSX\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\RX7\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\RX8\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\S2000\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\S3\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\S4\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\SEAT\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\SILVIA\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\SKYLINE\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\SKYLINER35\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\SL65\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\SOLSTICEGXP\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\SPOILER\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\SUPRA\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\TTN\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\VEYRON\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\VINYLS\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\VIPER\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\ZONDA\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\AIRACELINES\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Credits\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\GLOBAL\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\FRONTEND\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SOUND\FXEDIT\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SOUND\FE\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SOUND\GLOBAL\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SOUND\MIXMAPS\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SOUND\IG_GLOBAL\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SOUND\BLOWER\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\ONLINE\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SOUND\DAMAGE\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SOUND\EVT_SYS\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SOUND\ENGINE\"=""
"C:\Documents and Settings\All Users\Menu D\xe9marrer\Programmes\Electronic Arts\Need for Speed\x2122 ProStreet\"=""
"C:\Documents and Settings\All Users\Menu D\xe9marrer\Programmes\Electronic Arts\"=""
"C:\WINDOWS\Installer\{CC419DDC-E0F0-4013-B25A-6FA036516F0D}\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\1036\repairRedist.htm"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\VsaVb7rt.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\cscomp.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Microsoft.JScript.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Microsoft.VisualBasic.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ASP.NETClientFiles\SmartNav.js"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\InstallSqlState.sql"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\InstallPersistSqlState.sql"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ASP.NETClientFiles\WebUIValidation.js"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CORPerfMonSymbols.h"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Windows.Forms.ldo"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Xml.ldo"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Design.ldo"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\system.drawing.ldo"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\culture.nlp"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\region.nlp"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\RegCode.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ilasm.exe.config"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_regiis.exe"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.EnterpriseServices.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Security.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.DirectoryServices.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.ServiceProcess.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Web.RegularExpressions.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Web.Services.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Windows.Forms.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.XML.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Data.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Design.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Drawing.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Messaging.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\IEExecRemote.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\IEHost.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MigPol.exe"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MigPolWin.exe"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscordbc.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscordbi.dll"=dword:00000001
"C:\WINDOWS\system32\mscorier.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorlib.tlb"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorrc.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsec.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\PerfCounter.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SOS.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Data.OracleClient.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Management.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Runtime.Remoting.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Runtime.Serialization.Formatters.Soap.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Web.Mobile.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\WMINet_Utils.dll"=dword:00000001
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\09\01\Intel32\iKernel.dll"=dword:00000003
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\09\01\Intel32\Setup.dll"=dword:00000003
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\09\01\Intel32\DotNetInstaller.exe"=dword:00000003
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\09\01\Intel32\iscript.dll"=dword:00000003
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\09\01\Intel32\ctor.dll"=dword:00000003
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\09\01\Intel32\iuser.dll"=dword:00000003
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\09\01\Intel32\IGDI.dll"=dword:00000003
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\IsProBE.tlb"=dword:00000006
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\objectps.dll"=dword:00000006
"C:\Program Files\Fichiers communs\InstallShield\engine\6\Intel 32\corecomp.ini"=dword:00000012
"C:\Program Files\Fichiers communs\InstallShield\engine\6\Intel 32\ctor.dll"=dword:00000012
"C:\Program Files\Fichiers communs\InstallShield\engine\6\Intel 32\objectps.dll"=dword:00000012
"C:\Program Files\Fichiers communs\InstallShield\engine\6\Intel 32\iuser.dll"=dword:00000012
"C:\Program Files\Fichiers communs\InstallShield\engine\6\Intel 32\ILog.dll"=dword:00000003
"C:\Program Files\Fichiers communs\InstallShield\IScript\IScript.dll"=dword:00000012
"C:\Program Files\Fichiers communs\InstallShield\engine\6\Intel 32\iKernel.exe"=dword:00000012
"C:\Program Files\Fichiers communs\Java\Update\Base Images\j2re1.4.2-b28\core1.zip"=dword:00000001
"C:\Program Files\Fichiers communs\Java\Update\Base Images\j2re1.4.2-b28\core2.zip"=dword:00000001
"C:\Program Files\Fichiers communs\Java\Update\Base Images\j2re1.4.2-b28\core3.zip"=dword:00000001
"C:\WINDOWS\system32\VXBLOCK.dll"=dword:00000003
"C:\WINDOWS\system32\Px.dll"=dword:00000003
"C:\WINDOWS\system32\pxmas.dll"=dword:00000003
"C:\WINDOWS\system32\PxWave.dll"=dword:00000003
"C:\WINDOWS\system32\PXWMA.dll"=dword:00000003
"C:\WINDOWS\inf\pxhelp20.inf"=dword:00000002
"C:\WINDOWS\system32\drivers\pxhelp20.sys"=dword:00000003
"C:\WINDOWS\system32\px.ini"=dword:00000002
"C:\WINDOWS\system32\msvcp60.dll"=dword:00000005
"C:\WINDOWS\system32\pxdrv.dll"=dword:00000003
"C:\WINDOWS\system32\umloader.dll"=dword:00000002
"C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Update_OB\rnqu3270.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Update_OB\rnup3270.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Update_OB\upgr3270.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Update_OB\upgrdhlp.exe"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Update_OB\setu3270.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Update_OB\lang\faust_fr.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Update_OB\lang\athnoui_fr.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Update_OB\faus3270.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Update_OB\RealOneMessageCenter.exe"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Update_OB\rnad3201.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Update_OB\pnmi3270.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Update_OB\rnms3270.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Update_OB\rnxproc.exe"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Update_OB\nprfxins.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Common\rpun3260.dll"=dword:00000002
"C:\Program Files\Fichiers communs\Real\Plugins\authmgr.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\cdda3260.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\clbascauth.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\httpfsys.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\hxsdp.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\memfsys.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\ntlmauth.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\pacplin.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\plusplin.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\pxcb3210.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\ramfformat.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\ramrender.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\rmfformat.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\rn5auth.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\smlfformat.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\smlrender.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\smmrender.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\vidsite.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Common\pnen3260.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\smplfsys.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\zipf3260.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\clntxres.dll"=dword:00000001
"C:\WINDOWS\system32\pncrt.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\vsrcplin.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\vsrlocal.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Common\pnrs3260.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Common\pngu3267.dll"=dword:00000001
"C:\WINDOWS\system32\pndx5016.dll"=dword:00000001
"C:\WINDOWS\system32\pndx5032.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Common\rppr3260.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Common\twebbrowse.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\rarender.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Codecs\atrc.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Codecs\cook.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Codecs\raac.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Codecs\sipr.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\rvrender.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Codecs\drv1.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Codecs\drv2.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Codecs\drvc.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Codecs\hxltcolor.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Codecs\rv10.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Codecs\rv20.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Codecs\rv30.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Codecs\rv40.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\swfformat.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\swfrender.dll"=dword:00000001
"C:\WINDOWS\system32\rmoc3260.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\rtfformat.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\rtrender.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\imgrender.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\sdpplin.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\mp3fformat.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\mp3render.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\mp3metaff.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Common\rjbviz.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\stubdrm.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Common\objb3201.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\RCAPlugins\gct23201.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\RCAPlugins\uisy3201.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\RCAPlugins\rpcontrols1.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\RCAPlugins\rpcontrols2.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\hxxml.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\RCAPlugins\gema3201.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\RCAPlugins\gemx3201.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\RCAPlugins\xmlc3201.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\GToolbar\BarControl.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\GToolbar\GoogleToolbar.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\mp4arender.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\mp4fformat.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\aacff.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\wm9fformat.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\wm9writer.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\wmsechnd.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\RCAPlugins\sonr3210.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\recf3260.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\cont3260.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\RCAPlugins\locd3210.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\audplin.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\vidplin.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\mpgfformat.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\mpgrender.dll"=dword:00000001
"C:\Program Files\Fichiers communs\xing shared\mpeg encode\xmencmp3.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\mp4wrtr.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\rmwrtr.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Common\security.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\security.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\rmxrend.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\rmxfpln.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\tfilesys.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\fpsechnd.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\pdgenxferfsys.dll"=dword:00000001
"C:\WINDOWS\system32\oleaut32.dll"=dword:00000005
"C:\WINDOWS\system32\stdole2.tlb"=dword:00000003
"C:\WINDOWS\system32\olepro32.dll"=dword:00000005
"C:\WINDOWS\system32\atl.dll"=dword:00000003
"C:\WINDOWS\system32\comcat.dll"=dword:00000006
"C:\WINDOWS\system32\msvcrt.dll"=dword:00000006
"C:\WINDOWS\system32\mfc42.dll"=dword:00000004
"C:\WINDOWS\system32\mfc71.dll"=dword:00000001
"C:\WINDOWS\system32\mfc71u.dll"=dword:00000001
"C:\WINDOWS\system32\msvcp71.dll"=dword:00000003
"C:\WINDOWS\system32\msvcr71.dll"=dword:00000003
"C:\WINDOWS\system32\msvcirt.dll"=dword:00000003
"C:\WINDOWS\system32\atl71.dll"=dword:00000002
"C:\WINDOWS\system32\mscomctl.ocx"=dword:00000003
"C:\WINDOWS\system32\comctl32.ocx"=dword:00000002
"C:\WINDOWS\system32\asycfilt.dll"=dword:00000004
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\10\01\Intel32\iKernel.dll"=dword:00000001
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\10\01\Intel32\Setup.dll"=dword:00000001
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\10\01\Intel32\DotNetInstaller.exe"=dword:00000001
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\10\01\Intel32\iscript.dll"=dword:00000001
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\10\01\Intel32\ctor.dll"=dword:00000001
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\10\01\Intel32\iuser.dll"=dword:00000001
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\10\01\Intel32\IGDI.dll"=dword:00000001
"C:\Apps\Inventime\ireport\iReport.jar"=dword:00000001
"C:\Program Files\Fichiers communs\AOL\ACF\ActCntxt.dll"=dword:00000001
"C:\Program Files\Fichiers communs\AOL\ACF\FreeActr.dll"=dword:00000001
"C:\Program Files\Fichiers communs\AOL\ACF\StaActvr.dll"=dword:00000001
"C:\Program Files\Fichiers communs\AOL\aoltpspd.exe"=dword:00000001
"C:\Program Files\Fichiers communs\AOL\Flasha.ocx"=dword:00000002
"C:\WINDOWS\system32\QuickTime\QTUninst.dll"=dword:000003e7
"C:\WINDOWS\system32\QuickTime\QuickTimeUpdateHelper.exe"=dword:000003e7
"C:\WINDOWS\system32\Indeo4.qtx"=dword:000003e7
"C:\WINDOWS\system32\QuickTime.cpl"=dword:000003e7
"C:\WINDOWS\system32\QuickTime.qts"=dword:000003e7
"C:\WINDOWS\system32\QuickTime\QuickTimeAuthoring.qtx"=dword:000003e7
"C:\WINDOWS\system32\QuickTime\QuickTimeCapture.qtx"=dword:000003e7
"C:\WINDOWS\system32\QuickTime\QuickTimeEssentials.qtx"=dword:000003e7
"C:\WINDOWS\system32\QuickTime\QuickTimeImage.qtx"=dword:000003e7
"C:\WINDOWS\system32\QuickTime\QuickTimeInternetExtras.qtx"=dword:000003e7
"C:\WINDOWS\system32\QuickTime\QuickTimeStreaming.qtx"=dword:000003e7
"C:\WINDOWS\system32\QuickTimeVR.qtx"=dword:000003e7
"C:\WINDOWS\system32\QuickTime\QuickTimeMPEG.qtx"=dword:000003e7
"C:\WINDOWS\system32\QuickTimeCheck.OCX"=dword:000003e7
"C:\WINDOWS\system32\QuickTime\QuickTimeWebHelper.qtx"=dword:000003e7
"C:\WINDOWS\unvise32qt.exe"=dword:00000001
"C:\Program Files\Fichiers communs\aolshare\pictures\FnYGP.dll"=dword:00000001
"C:\Program Files\Fichiers communs\aolshare\pictures\YGPPicIntf.dll"=dword:00000001
"C:\Program Files\Fichiers communs\aolshare\pictures\YGPAppIntf.dll"=dword:00000001
"C:\Program Files\Fichiers communs\aolshare\pictures\YGPPicInfo.dll"=dword:00000001
"C:\Program Files\Fichiers communs\aolshare\pictures\YGPPicEdit.dll"=dword:00000001
"C:\Program Files\Fichiers communs\aolshare\pictures\YGPUPF.dll"=dword:00000001
"C:\Program Files\Fichiers communs\aolshare\pictures\YGPSvc.dll"=dword:00000001
"C:\Program Files\Fichiers communs\aolshare\pictures\YGPWz.dll"=dword:00000001
"C:\Program Files\Fichiers communs\aolshare\pictures\fr-FR\YGPPicEditRes.dll"=dword:00000001
"C:\Program Files\Fichiers communs\aolshare\pictures\fr-FR\YGPUPFRes.dll"=dword:00000001
"C:\Program Files\Fichiers communs\aolshare\pictures\fr-FR\YGPWzRes.dll"=dword:00000001
"C:\WINDOWS\system32\unzip32.dll"=dword:00000001
"C:\WINDOWS\system32\MSINET.OCX"=dword:00000001
"C:\WINDOWS\system32\FlatBtn6.ocx"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLSchema.ini"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.ini"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.ini"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.pdb"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLUPnPBrowser.exe"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLUPnPBrowser.pdb"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\Install.exe"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\PSUtil.exe"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\Readme.txt"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\Uninstall.exe"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\UninstallDLL.dll"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\se\CLMLExtractor.exe"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\se\CLMLExtractor.pdb"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\se\iconv.dll"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\se\libxml2.dll"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\se\pcre.dll"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\se\swish-e.exe"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\se\xmlparse.dll"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\se\xmltok.dll"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\se\zlib.dll"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\AudioFilter\CLAudRC.dll"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\AudioFilter\clds.dll"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\AudioFilter\CLDTSExtTab.dat"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\AudioFilter\CLDTSTab.dat"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\AudioFilter\clwo.dll"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\AudioFilter\dolbyhph.dll"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\AudioFilter\DVS1.1.lcf"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\AudioFilter\LakeControl.dll"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\AudioFilter\PL2XDLL.dll"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\NavFilter\dtcp.crt"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\NavFilter\dtcp.pvk"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\NavFilter\dtcp.rng"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\NavFilter\dtcp.srm"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\NavFilter\ippcppx.dll"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\AudioFilter\CLADR.ax"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\AudioFilter\CLAud.ax"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\AudioFilter\claudfx.ax"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\AudioFilter\CLAudioCD.AX"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\AudioFilter\clauts.ax"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\NavFilter\CLNavX.ax"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\NavFilter\CLStream.ax"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\VideoFilter\CLDemuxer.ax"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\VideoFilter\CLLine21.ax"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\VideoFilter\CLVSD.ax"=dword:00000001
"C:\WINDOWS\system32\msvcr70.dll"=dword:00000001
"C:\WINDOWS\system32\msvcp70.dll"=dword:00000001
"C:\WINDOWS\system32\gdiplus.dll"=dword:00000002
"C:\Program Files\Fichiers communs\Sonic Shared\DSAudioSRC.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\SonicFileWriter.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\sonicmcdsdv.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\SonicMCDVD_32.DLL"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\sonicmceampeg.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\SonicMCESMpeg.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\sonicmcevmpeg.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\SonicMCSampleBuffer.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\sonicmpg_dlg.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\sonicmpgaout.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\sonicmpgcap32.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\sonicmpgcheck.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\sonicmpgmux.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\sonicmpgvout.001"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\sonicmpgvout.002"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\sonicmpgvout.003"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\sonicmpgvout.004"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\sonicmpgvout.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\sonicpcmaout.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\DirectShowTap.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\DVDLPCMConverter.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\DVSceneDetector.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\Offset.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\RTStreamSink.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\RTStreamSourceFilter.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\SonicDSScaler.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\SonicRainbowFix.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\SonicVideoRenderer.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\VidPerfMonitor.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\FieldSwitch.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\AudioDepthConverter.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\TimeStampSmoother.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\SonicMPEGAudio.DLL"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\SonicMPEGSplitter.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\SonicMPEGVideo.DLL"=dword:00000001
"C:\Program Files\Microsoft Works\msworks.exe"=dword:00000001
"C:\Program Files\Microsoft Works\wklnfrps.dll"=dword:00000001
"C:\Program Files\Microsoft Works\wklnac.dll"=dword:00000001
"C:\WINDOWS\system32\msls2.dll"=dword:00000002
"C:\WINDOWS\system32\msls31.dll"=dword:00000003
"C:\WINDOWS\system32\usp10.dll"=dword:00000003
"C:\WINDOWS\system32\msvcp50.dll"=dword:00000003
"C:\WINDOWS\system32\riched20.dll"=dword:00000003
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalPse.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalImp.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalVp.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalPS.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalOle.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalSvc.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalAc.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\Sound\Banner.wav"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\1036\WorksPSS.chm"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkscal.exe"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkscal.htm"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkscal.aw"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WksCal.chm"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\1036\WkCalLng.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\1036\WkCalHol.txt"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\mswkscal.hlp"=dword:00000001
"C:\Documents and Settings\All Users\Application Data\Microsoft\Works\mswkscal.wcd"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkpr60.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\HtmlLite.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkWfx.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkWat.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkWbl.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkApComp.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\NumFmt60.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkhlp60.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\aw.dll"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\1036\WkPrL60.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\1036\WkHlpLng.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\1036\wkgl60.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\1036\WkApcLng.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\1036\NFmtLng.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkWinUni.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wks6warr.htm"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wks6eula.txt"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\EULAreg.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkerlang.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Equation\eqnedt32.exe"=dword:00000001
"C:\WINDOWS\Fonts\arial.ttf"=dword:00000003
"C:\WINDOWS\Fonts\cour.ttf"=dword:00000003
"C:\WINDOWS\Fonts\times.ttf"=dword:00000003
"C:\WINDOWS\Fonts\Mistral.TTF"=dword:00000002
"C:\WINDOWS\Fonts\lsansuni.ttf"=dword:00000002
"C:\WINDOWS\Fonts\Tahoma.ttf"=dword:00000005
"C:\WINDOWS\Fonts\Tahomabd.TTF"=dword:00000005
"C:\Program Files\Fichiers communs\Microsoft Shared\Grphflt\fpx32.flt"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Grphflt\Wpgimp32.flt"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Grphflt\gifimp32.flt"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Grphflt\jpegim32.flt"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Grphflt\png32.flt"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Grphflt\emfimp32.flt"=dword:00000001
"C:\WINDOWS\system32\hlp95en.dll"=dword:00000002
"C:\WINDOWS\system32\ochlp30e.dll"=dword:00000002
"C:\Program Files\Microsoft Works\1036\wkgl60.dll"=dword:00000001
"C:\Program Files\Microsoft Works\wkhlpqms.hlp"=dword:00000001
"C:\Program Files\Microsoft Works\wkwzadtx.dat"=dword:00000001
"C:\Program Files\Microsoft Works\Wkmmwdb.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkswab.dll"=dword:00000001
"C:\Program Files\Microsoft Works\WkMerge.dll"=dword:00000001
"C:\WINDOWS\system32\mfcuia32.dll"=dword:00000001
"C:\WINDOWS\system32\mfcans32.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\MSDraw\msdraw.exe"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Note-It\note-it.hlp"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Note-It\note-it.exe"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\csapi3t1.dll"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\ctapi3t2.dll"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\MSSP_FR.LEX"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\MSPFR32.DLL"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\MSTH_FR.LEX"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\MSTHFR32.DLL"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\MSsp3en.lex"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\MSSpell3.dll"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\msth3br.lex"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\msthes3.dll"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\Mssp_nl.lex"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\Mspnl32.dll"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\Msth_nl.lex"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\Msthnl32.dll"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\MSSP3GEA.LEX"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\MSSP3GE.DLL"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\MSTH3GEA.LEX"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\msth3ge.dll"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\cpitool5.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\cpitv.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\GTV.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Shoebox\ShoeboxU.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Shoebox\STVU.dll"=dword:00000001
"C:\WINDOWS\system32\PCDLIB32.DLL"=dword:00000002
"C:\WINDOWS\system32\Ltwvc11n.dll"=dword:00000002
"C:\WINDOWS\system32\ltkrn11n.dll"=dword:00000002
"C:\WINDOWS\system32\ltimg11n.dll"=dword:00000002
"C:\WINDOWS\system32\ltfil11n.DLL"=dword:00000002
"C:\WINDOWS\system32\LTDIS11n.dll"=dword:00000002
"C:\WINDOWS\system32\lfwmf11n.dll"=dword:00000002
"C:\WINDOWS\system32\lftif11n.dll"=dword:00000002
"C:\WINDOWS\system32\lftga11n.dll"=dword:00000002
"C:\WINDOWS\system32\lfpsd11n.dll"=dword:00000002
"C:\WINDOWS\system32\Lfpng11n.dll"=dword:00000002
"C:\WINDOWS\system32\lfpcx11n.dll"=dword:00000002
"C:\WINDOWS\system32\lfpcd11n.dll"=dword:00000002
"C:\WINDOWS\system32\lfgif11n.dll"=dword:00000002
"C:\WINDOWS\system32\lffax11n.dll"=dword:00000002
"C:\WINDOWS\system32\lfeps11n.dll"=dword:00000002
"C:\WINDOWS\system32\LFCMP11n.DLL"=dword:00000002
"C:\WINDOWS\system32\lfbmp11n.dll"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Shoebox\WKSCOR.SBS"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Shoebox\WKSCOR.SBT"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Shoebox\standard.SBT"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Shoebox\removabl.ico"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Shoebox\Default.ico"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Shoebox\Blank.sbc"=dword:00000001
"C:\Program Files\Microsoft Works\workssvc.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Textconv\MSWRD832.CNV"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Textconv\works432.cnv"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Textconv\MSWRD632.CNV"=dword:00000001
"C:\Program Files\Fichiers communs\Mi
catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-22 23:02:01
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden services & system hive ...
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword
9c6e513"s2"=dword:6f3e9a18
"h0"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools\"
"h0"=dword:00000000
"khjeh"=hex:51,ec,f9,97,4e,00,4d,57,44,af,c6,5c,02,57,91,81,23,ee,d9,4c,92,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,c6,f6,46,8c,8f,c4,41,84,72,d4,d4,07,96,a1,d9,cf,a8,..
"khjeh"=hex:35,62,ec,07,51,aa,ad,86,06,4a,78,36,1a,7c,7a,36,7d,8e,b4,80,e4,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:64,62,03,00,b0,10,38,00,00,00,00,00,68,62,69,6e,00,10,38,00,00,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools\"
"h0"=dword:00000000
"khjeh"=hex:51,ec,f9,97,4e,00,4d,57,44,af,c6,5c,02,57,91,81,23,ee,d9,4c,92,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,c6,f6,46,8c,8f,c4,41,84,72,d4,d4,07,96,a1,d9,cf,a8,..
"khjeh"=hex:35,62,ec,07,51,aa,ad,86,06,4a,78,36,1a,7c,7a,36,7d,8e,b4,80,e4,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:64,62,03,00,a0,a0,33,00,00,00,00,00,a8,ff,ff,ff,6e,6b,20,00,12,..
scanning hidden registry entries ...
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\Microsoft Encarta\Encyclop\x00e9die DE LUXE 2002\Tasks\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Researcher\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Researcher\Samples\"=""
"C:\Program Files\Microsoft Encarta\Encyclop\x00e9die DE LUXE 2002\Pushpins\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\DSWMEDIA\SHARED\code\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\DSWMEDIA\SHARED\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\DSWMEDIA\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\DSWMEDIA\SHARED\ia\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\DSWMEDIA\SHARED\media\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\DSWMEDIA\SHARED\players\IAI\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\DSWMEDIA\SHARED\players\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\DSWMEDIA\SHARED\players\IIP\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\DSWMEDIA\SHARED\players\IMR\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\DSWMEDIA\SHARED\players\LOC_vwr\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\DSWMEDIA\SHARED\players\mcc\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\DSWMEDIA\SHARED\players\RFL\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\world\7015\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\world\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\anim\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IAI\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IAI\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t975520a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t975520a\F\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t631624a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t631624a\F\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620275a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620275a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620281a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620281a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t630096a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t630096a\F\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t630096a\Media\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620271a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620271a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t631317a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t631317a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620268a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620268a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t041755a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t041755a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t041755a\media\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t630095a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t630095a\F\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t630095a\Media\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620273a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620273a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620266a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620266a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t979063a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t979063a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620265a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620265a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t631789a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t631789a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t631182a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t631182a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t631791a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t631791a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t979062a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t979062a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620264a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620264a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620270a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620270a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t621387a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t621387a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620277a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620277a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\MCC\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\MCC\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620267a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t620267a\f\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t594172a\"=""
"C:\Program Files\Microsoft Encarta\2002 Contents\EE02FDLXC\dswMedia\IA\t594172a\f\"=""
"C:\Documents and Settings\All Users\Menu D\xe9marrer\Programmes\Microsoft Encarta\"=""
"C:\WINDOWS\Installer\{01020101-823E-46CD-A70E-BEE818F97169}\"=""
"c:\Program Files\MSXML 4.0\"="1"
"c:\WINDOWS\winsxs\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9848.0_x-ww_1b897e9a\"=""
"c:\WINDOWS\winsxs\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.0.0_x-ww_29c3ad6a\"=""
"c:\WINDOWS\winsxs\Policies\x86_policy.4.20.Microsoft.MSXML2_6bd6b9abf345378f_x-ww_88e8eab8\"=""
"c:\WINDOWS\Installer\{C04E32E0-0416-434D-AFB9-6969D703A9EF}\"=""
"C:\Program Files\Winspn\"="1"
"C:\Program Files\Fichiers communs\Microsoft Shared\DW\1036\"=""
"C:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\production\"=""
"C:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\18\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\8\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\25\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\7\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\1046\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\17\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\4\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\1028\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\10\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\12\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\11\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\20\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\9\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\16\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\29\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\6\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\31\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\22\"=""
"C:\Program Files\MSN Messenger\Device Manager\Loc\19\"=""
"C:\WINDOWS\Installer\{F6326B60-1B1D-4ABF-BFCD-7B7404F44411}\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\Browser\"="1"
"C:\Program Files\Adobe\Acrobat 7.0\Reader\"="1"
"C:\Program Files\Adobe\Acrobat 7.0\Setup Files\RdrBig709\ENU\"="1"
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\VDKHome\FRA\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\VDKHome\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\VDKHome\ENU\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\AcroForm\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\WebSearch\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\AcroForm\PMP\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Multimedia\MPP\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Multimedia\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Help\ENU\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Help\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Help\FRA\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\PictureTasks\OLS\Locale\FRA\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\PictureTasks\OLS\Locale\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\PictureTasks\OLS\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\PictureTasks\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\PictureTasks\Howto\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\PictureTasks\OLS\Locale\ENU\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\PictureTasks\Templates\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\PictureTasks\Howto\images\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\Updater\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Resource\CMap\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Resource\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Resource\Font\PFM\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Resource\Font\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Annotations\Stamps\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Annotations\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Annotations\Stamps\FRA\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Annotations\Stamps\ENU\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\HowTo\FRA\Images\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\HowTo\FRA\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\HowTo\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\Optional\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\HowTo\ENU\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\HowTo\ENU\Images\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\SPPlugins\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Esl\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\Javascripts\"=""
"C:\Documents and Settings\All Users\Application Data\Adobe\Acrobat\7.0\Replicate\Security\"=""
"C:\Documents and Settings\All Users\Application Data\Adobe\Acrobat\7.0\Replicate\"=""
"C:\Documents and Settings\All Users\Application Data\Adobe\Acrobat\7.0\"=""
"C:\Documents and Settings\All Users\Application Data\Adobe\Acrobat\"=""
"C:\Documents and Settings\All Users\Application Data\Adobe\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\Legal\Adobe Reader\7.0.0\fr_FR\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\Legal\Adobe Reader\7.0.0\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\Legal\Adobe Reader\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\Legal\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\Messages\FRA\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\Messages\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\Messages\ENU\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\ImageViewer\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\ImageViewer\en_US\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\ImageViewer\fr_FR\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins3d\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Resource\Linguistics\Providers\Proximity\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Resource\Linguistics\Providers\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Resource\Linguistics\"=""
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\Mac\"=""
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\"=""
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\"=""
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\"=""
"C:\Program Files\Fichiers communs\Adobe\"=""
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\Adobe\"=""
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\win\"=""
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\ICU\"=""
"C:\Program Files\Adobe\Acrobat 7.0\Resource\Linguistics\LanguageNames\"=""
"C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A70900000002}\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\PB\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\"=""
"C:\Program Files\Electronic Arts\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\PB\htm\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\PB\dll\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SOUND\SPEECH\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SOUND\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SOUND\SKIDS\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SOUND\SPLICER\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\TRACKS\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\TRACKS\L6R_AUTOBAHNDRIFT\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\TRACKS\L6R_AUTOPOLIS\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\TRACKS\L6R_CHICAGOAIRFIELD\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\TRACKS\L6R_EBISU\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\TRACKS\L6R_FE\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\TRACKS\L6R_INFINEON\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\TRACKS\L6R_MONDELLOPARK\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\TRACKS\L6R_NEVADADRIFT\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\TRACKS\L6R_PORTLANDRACEWAY\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\TRACKS\L6R_SHUTODRIFT\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\TRACKS\L6R_SHUTOEXPRESSWAY\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\TRACKS\L6R_TEXASSPEEDWAY\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\TRACKS\L6R_WILLOWSPRINGS\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SUBTITLES\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SOUND\NIs\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SOUND\NOS\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SOUND\SHIFTING\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SOUND\PFDATA\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\en-us\Error_Message\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\en-us\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\en-us\Online_Connectivity_and_Performance\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\en-us\Direct_X\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\en-us\Getting_More_Help_Online\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\en-us\Lock-up_and_Freeze\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\Cz\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\Da\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\De\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\en-uk\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\en-us\Controller\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\en-us\Crash\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\en-us\Graphics\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\en-us\Install\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\en-us\Sound\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\en-us\WebHelp_Skin_Files\XP_Silver\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\en-us\WebHelp_Skin_Files\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\en-us\whdata\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\en-us\Whitepages\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\en-us\whxdata\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\Es\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\Fi\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\fr-fr\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\Hu\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\It\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\NL\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\No\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\Pol\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\pt-br\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\pt\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\Ru\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Support\EA Help\Sv\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\MEMCARD\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\LANGUAGES\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\MINI_MAPS\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\NIS\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\MOVIES\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\240SX\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\350Z\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\997GT2\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\997GT3\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\997GT3RS\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\997TT\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\BMWM3\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\BMWM3E92\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\BMWMZ4\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\BRAKE\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\BRAKEROTOR\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\CAMARO\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\CAMARON\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\CARRERAGT\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\CAYMANS\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\CCX\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\CHALLENGER71\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\CHALLENGERN\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\CHARGER69\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\CHEVELLE\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\CIVICHB\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\CIVICSI\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\COBALTSS\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\COROLLA\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\CORVETTE67\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\CORVETTE\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\CORVETTEZ06\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\COSWORTH\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\CTSV\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\CUDA\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\DAMAGE\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\DB9\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\DBR9\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\DELTA\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\ECLIPSE\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\ELISE\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\EXHAUST\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\FOCUSST\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\FORDGT\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\G35\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\GALLARDOS\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\GROUP01\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\GROUP02\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\GROUP03\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\GROUP04\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\GROUP05\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\GROUP06\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\GROUP07\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\GROUP08\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\GTI\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\GTO65\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\GTO\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\GTRPROTO\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\IMPREZAWRXSTI\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\INTEGRALS\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\INTEGRATYPER\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\IS350\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\LANCEREVO9\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\LANCEREVOX\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\LEONCUPRA\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\MAZDASPEED3\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\MCLARENF1\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\MURCIELAGO640\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\MUSTANG03\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\MUSTANGGT\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\MUSTANGSHLBYN\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\MUSTANGSHLBYO\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\NSX\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\PLATES\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\R32\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\R8PROD\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\ROADRUNNER\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\ROOFSCOOP\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\RS4\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\RSX\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\RX7\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\RX8\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\S2000\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\S3\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\S4\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\SEAT\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\SILVIA\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\SKYLINE\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\SKYLINER35\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\SL65\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\SOLSTICEGXP\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\SPOILER\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\SUPRA\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\TTN\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\VEYRON\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\VINYLS\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\VIPER\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\CARS\ZONDA\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\AIRACELINES\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\Credits\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\GLOBAL\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\FRONTEND\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SOUND\FXEDIT\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SOUND\FE\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SOUND\GLOBAL\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SOUND\MIXMAPS\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SOUND\IG_GLOBAL\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SOUND\BLOWER\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\ONLINE\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SOUND\DAMAGE\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SOUND\EVT_SYS\"=""
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\SOUND\ENGINE\"=""
"C:\Documents and Settings\All Users\Menu D\xe9marrer\Programmes\Electronic Arts\Need for Speed\x2122 ProStreet\"=""
"C:\Documents and Settings\All Users\Menu D\xe9marrer\Programmes\Electronic Arts\"=""
"C:\WINDOWS\Installer\{CC419DDC-E0F0-4013-B25A-6FA036516F0D}\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\1036\repairRedist.htm"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\VsaVb7rt.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\cscomp.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Microsoft.JScript.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Microsoft.VisualBasic.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ASP.NETClientFiles\SmartNav.js"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\InstallSqlState.sql"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\InstallPersistSqlState.sql"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ASP.NETClientFiles\WebUIValidation.js"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CORPerfMonSymbols.h"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Windows.Forms.ldo"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Xml.ldo"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Design.ldo"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\system.drawing.ldo"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\culture.nlp"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\region.nlp"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\RegCode.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ilasm.exe.config"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_regiis.exe"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.EnterpriseServices.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Security.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.DirectoryServices.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.ServiceProcess.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Web.RegularExpressions.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Web.Services.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Windows.Forms.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.XML.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Data.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Design.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Drawing.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Messaging.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\IEExecRemote.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\IEHost.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MigPol.exe"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MigPolWin.exe"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscordbc.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscordbi.dll"=dword:00000001
"C:\WINDOWS\system32\mscorier.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorlib.tlb"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorrc.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsec.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\PerfCounter.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SOS.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Data.OracleClient.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Management.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Runtime.Remoting.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Runtime.Serialization.Formatters.Soap.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Web.Mobile.dll"=dword:00000001
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\WMINet_Utils.dll"=dword:00000001
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\09\01\Intel32\iKernel.dll"=dword:00000003
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\09\01\Intel32\Setup.dll"=dword:00000003
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\09\01\Intel32\DotNetInstaller.exe"=dword:00000003
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\09\01\Intel32\iscript.dll"=dword:00000003
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\09\01\Intel32\ctor.dll"=dword:00000003
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\09\01\Intel32\iuser.dll"=dword:00000003
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\09\01\Intel32\IGDI.dll"=dword:00000003
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\IsProBE.tlb"=dword:00000006
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\objectps.dll"=dword:00000006
"C:\Program Files\Fichiers communs\InstallShield\engine\6\Intel 32\corecomp.ini"=dword:00000012
"C:\Program Files\Fichiers communs\InstallShield\engine\6\Intel 32\ctor.dll"=dword:00000012
"C:\Program Files\Fichiers communs\InstallShield\engine\6\Intel 32\objectps.dll"=dword:00000012
"C:\Program Files\Fichiers communs\InstallShield\engine\6\Intel 32\iuser.dll"=dword:00000012
"C:\Program Files\Fichiers communs\InstallShield\engine\6\Intel 32\ILog.dll"=dword:00000003
"C:\Program Files\Fichiers communs\InstallShield\IScript\IScript.dll"=dword:00000012
"C:\Program Files\Fichiers communs\InstallShield\engine\6\Intel 32\iKernel.exe"=dword:00000012
"C:\Program Files\Fichiers communs\Java\Update\Base Images\j2re1.4.2-b28\core1.zip"=dword:00000001
"C:\Program Files\Fichiers communs\Java\Update\Base Images\j2re1.4.2-b28\core2.zip"=dword:00000001
"C:\Program Files\Fichiers communs\Java\Update\Base Images\j2re1.4.2-b28\core3.zip"=dword:00000001
"C:\WINDOWS\system32\VXBLOCK.dll"=dword:00000003
"C:\WINDOWS\system32\Px.dll"=dword:00000003
"C:\WINDOWS\system32\pxmas.dll"=dword:00000003
"C:\WINDOWS\system32\PxWave.dll"=dword:00000003
"C:\WINDOWS\system32\PXWMA.dll"=dword:00000003
"C:\WINDOWS\inf\pxhelp20.inf"=dword:00000002
"C:\WINDOWS\system32\drivers\pxhelp20.sys"=dword:00000003
"C:\WINDOWS\system32\px.ini"=dword:00000002
"C:\WINDOWS\system32\msvcp60.dll"=dword:00000005
"C:\WINDOWS\system32\pxdrv.dll"=dword:00000003
"C:\WINDOWS\system32\umloader.dll"=dword:00000002
"C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Update_OB\rnqu3270.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Update_OB\rnup3270.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Update_OB\upgr3270.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Update_OB\upgrdhlp.exe"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Update_OB\setu3270.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Update_OB\lang\faust_fr.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Update_OB\lang\athnoui_fr.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Update_OB\faus3270.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Update_OB\RealOneMessageCenter.exe"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Update_OB\rnad3201.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Update_OB\pnmi3270.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Update_OB\rnms3270.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Update_OB\rnxproc.exe"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Update_OB\nprfxins.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Common\rpun3260.dll"=dword:00000002
"C:\Program Files\Fichiers communs\Real\Plugins\authmgr.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\cdda3260.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\clbascauth.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\httpfsys.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\hxsdp.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\memfsys.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\ntlmauth.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\pacplin.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\plusplin.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\pxcb3210.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\ramfformat.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\ramrender.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\rmfformat.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\rn5auth.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\smlfformat.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\smlrender.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\smmrender.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\vidsite.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Common\pnen3260.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\smplfsys.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\zipf3260.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\clntxres.dll"=dword:00000001
"C:\WINDOWS\system32\pncrt.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\vsrcplin.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\vsrlocal.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Common\pnrs3260.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Common\pngu3267.dll"=dword:00000001
"C:\WINDOWS\system32\pndx5016.dll"=dword:00000001
"C:\WINDOWS\system32\pndx5032.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Common\rppr3260.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Common\twebbrowse.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\rarender.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Codecs\atrc.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Codecs\cook.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Codecs\raac.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Codecs\sipr.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\rvrender.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Codecs\drv1.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Codecs\drv2.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Codecs\drvc.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Codecs\hxltcolor.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Codecs\rv10.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Codecs\rv20.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Codecs\rv30.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Codecs\rv40.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\swfformat.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\swfrender.dll"=dword:00000001
"C:\WINDOWS\system32\rmoc3260.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\rtfformat.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\rtrender.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\imgrender.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\sdpplin.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\mp3fformat.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\mp3render.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\mp3metaff.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Common\rjbviz.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\stubdrm.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Common\objb3201.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\RCAPlugins\gct23201.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\RCAPlugins\uisy3201.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\RCAPlugins\rpcontrols1.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\RCAPlugins\rpcontrols2.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\hxxml.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\RCAPlugins\gema3201.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\RCAPlugins\gemx3201.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\RCAPlugins\xmlc3201.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\GToolbar\BarControl.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\GToolbar\GoogleToolbar.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\mp4arender.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\mp4fformat.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\aacff.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\wm9fformat.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\wm9writer.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\wmsechnd.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\RCAPlugins\sonr3210.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\recf3260.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\cont3260.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\RCAPlugins\locd3210.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\audplin.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\vidplin.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\mpgfformat.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\mpgrender.dll"=dword:00000001
"C:\Program Files\Fichiers communs\xing shared\mpeg encode\xmencmp3.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\mp4wrtr.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\rmwrtr.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Common\security.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\security.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\rmxrend.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\rmxfpln.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\tfilesys.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\fpsechnd.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Real\Plugins\pdgenxferfsys.dll"=dword:00000001
"C:\WINDOWS\system32\oleaut32.dll"=dword:00000005
"C:\WINDOWS\system32\stdole2.tlb"=dword:00000003
"C:\WINDOWS\system32\olepro32.dll"=dword:00000005
"C:\WINDOWS\system32\atl.dll"=dword:00000003
"C:\WINDOWS\system32\comcat.dll"=dword:00000006
"C:\WINDOWS\system32\msvcrt.dll"=dword:00000006
"C:\WINDOWS\system32\mfc42.dll"=dword:00000004
"C:\WINDOWS\system32\mfc71.dll"=dword:00000001
"C:\WINDOWS\system32\mfc71u.dll"=dword:00000001
"C:\WINDOWS\system32\msvcp71.dll"=dword:00000003
"C:\WINDOWS\system32\msvcr71.dll"=dword:00000003
"C:\WINDOWS\system32\msvcirt.dll"=dword:00000003
"C:\WINDOWS\system32\atl71.dll"=dword:00000002
"C:\WINDOWS\system32\mscomctl.ocx"=dword:00000003
"C:\WINDOWS\system32\comctl32.ocx"=dword:00000002
"C:\WINDOWS\system32\asycfilt.dll"=dword:00000004
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\10\01\Intel32\iKernel.dll"=dword:00000001
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\10\01\Intel32\Setup.dll"=dword:00000001
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\10\01\Intel32\DotNetInstaller.exe"=dword:00000001
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\10\01\Intel32\iscript.dll"=dword:00000001
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\10\01\Intel32\ctor.dll"=dword:00000001
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\10\01\Intel32\iuser.dll"=dword:00000001
"C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\10\01\Intel32\IGDI.dll"=dword:00000001
"C:\Apps\Inventime\ireport\iReport.jar"=dword:00000001
"C:\Program Files\Fichiers communs\AOL\ACF\ActCntxt.dll"=dword:00000001
"C:\Program Files\Fichiers communs\AOL\ACF\FreeActr.dll"=dword:00000001
"C:\Program Files\Fichiers communs\AOL\ACF\StaActvr.dll"=dword:00000001
"C:\Program Files\Fichiers communs\AOL\aoltpspd.exe"=dword:00000001
"C:\Program Files\Fichiers communs\AOL\Flasha.ocx"=dword:00000002
"C:\WINDOWS\system32\QuickTime\QTUninst.dll"=dword:000003e7
"C:\WINDOWS\system32\QuickTime\QuickTimeUpdateHelper.exe"=dword:000003e7
"C:\WINDOWS\system32\Indeo4.qtx"=dword:000003e7
"C:\WINDOWS\system32\QuickTime.cpl"=dword:000003e7
"C:\WINDOWS\system32\QuickTime.qts"=dword:000003e7
"C:\WINDOWS\system32\QuickTime\QuickTimeAuthoring.qtx"=dword:000003e7
"C:\WINDOWS\system32\QuickTime\QuickTimeCapture.qtx"=dword:000003e7
"C:\WINDOWS\system32\QuickTime\QuickTimeEssentials.qtx"=dword:000003e7
"C:\WINDOWS\system32\QuickTime\QuickTimeImage.qtx"=dword:000003e7
"C:\WINDOWS\system32\QuickTime\QuickTimeInternetExtras.qtx"=dword:000003e7
"C:\WINDOWS\system32\QuickTime\QuickTimeStreaming.qtx"=dword:000003e7
"C:\WINDOWS\system32\QuickTimeVR.qtx"=dword:000003e7
"C:\WINDOWS\system32\QuickTime\QuickTimeMPEG.qtx"=dword:000003e7
"C:\WINDOWS\system32\QuickTimeCheck.OCX"=dword:000003e7
"C:\WINDOWS\system32\QuickTime\QuickTimeWebHelper.qtx"=dword:000003e7
"C:\WINDOWS\unvise32qt.exe"=dword:00000001
"C:\Program Files\Fichiers communs\aolshare\pictures\FnYGP.dll"=dword:00000001
"C:\Program Files\Fichiers communs\aolshare\pictures\YGPPicIntf.dll"=dword:00000001
"C:\Program Files\Fichiers communs\aolshare\pictures\YGPAppIntf.dll"=dword:00000001
"C:\Program Files\Fichiers communs\aolshare\pictures\YGPPicInfo.dll"=dword:00000001
"C:\Program Files\Fichiers communs\aolshare\pictures\YGPPicEdit.dll"=dword:00000001
"C:\Program Files\Fichiers communs\aolshare\pictures\YGPUPF.dll"=dword:00000001
"C:\Program Files\Fichiers communs\aolshare\pictures\YGPSvc.dll"=dword:00000001
"C:\Program Files\Fichiers communs\aolshare\pictures\YGPWz.dll"=dword:00000001
"C:\Program Files\Fichiers communs\aolshare\pictures\fr-FR\YGPPicEditRes.dll"=dword:00000001
"C:\Program Files\Fichiers communs\aolshare\pictures\fr-FR\YGPUPFRes.dll"=dword:00000001
"C:\Program Files\Fichiers communs\aolshare\pictures\fr-FR\YGPWzRes.dll"=dword:00000001
"C:\WINDOWS\system32\unzip32.dll"=dword:00000001
"C:\WINDOWS\system32\MSINET.OCX"=dword:00000001
"C:\WINDOWS\system32\FlatBtn6.ocx"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLSchema.ini"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.ini"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.ini"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.pdb"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLUPnPBrowser.exe"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLUPnPBrowser.pdb"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\Install.exe"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\PSUtil.exe"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\Readme.txt"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\Uninstall.exe"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\UninstallDLL.dll"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\se\CLMLExtractor.exe"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\se\CLMLExtractor.pdb"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\se\iconv.dll"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\se\libxml2.dll"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\se\pcre.dll"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\se\swish-e.exe"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\se\xmlparse.dll"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\se\xmltok.dll"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\CLML_NTService\se\zlib.dll"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\AudioFilter\CLAudRC.dll"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\AudioFilter\clds.dll"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\AudioFilter\CLDTSExtTab.dat"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\AudioFilter\CLDTSTab.dat"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\AudioFilter\clwo.dll"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\AudioFilter\dolbyhph.dll"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\AudioFilter\DVS1.1.lcf"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\AudioFilter\LakeControl.dll"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\AudioFilter\PL2XDLL.dll"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\NavFilter\dtcp.crt"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\NavFilter\dtcp.pvk"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\NavFilter\dtcp.rng"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\NavFilter\dtcp.srm"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\NavFilter\ippcppx.dll"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\AudioFilter\CLADR.ax"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\AudioFilter\CLAud.ax"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\AudioFilter\claudfx.ax"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\AudioFilter\CLAudioCD.AX"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\AudioFilter\clauts.ax"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\NavFilter\CLNavX.ax"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\NavFilter\CLStream.ax"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\VideoFilter\CLDemuxer.ax"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\VideoFilter\CLLine21.ax"=dword:00000001
"C:\Program Files\CyberLink\Shared Files\VideoFilter\CLVSD.ax"=dword:00000001
"C:\WINDOWS\system32\msvcr70.dll"=dword:00000001
"C:\WINDOWS\system32\msvcp70.dll"=dword:00000001
"C:\WINDOWS\system32\gdiplus.dll"=dword:00000002
"C:\Program Files\Fichiers communs\Sonic Shared\DSAudioSRC.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\SonicFileWriter.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\sonicmcdsdv.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\SonicMCDVD_32.DLL"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\sonicmceampeg.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\SonicMCESMpeg.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\sonicmcevmpeg.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\SonicMCSampleBuffer.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\sonicmpg_dlg.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\sonicmpgaout.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\sonicmpgcap32.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\sonicmpgcheck.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\sonicmpgmux.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\sonicmpgvout.001"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\sonicmpgvout.002"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\sonicmpgvout.003"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\sonicmpgvout.004"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\sonicmpgvout.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\sonicpcmaout.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\DirectShowTap.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\DVDLPCMConverter.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\DVSceneDetector.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\Offset.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\RTStreamSink.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\RTStreamSourceFilter.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\SonicDSScaler.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\SonicRainbowFix.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\SonicVideoRenderer.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\VidPerfMonitor.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\FieldSwitch.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\AudioDepthConverter.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\TimeStampSmoother.ax"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\SonicMPEGAudio.DLL"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\SonicMPEGSplitter.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Sonic Shared\SonicMPEGVideo.DLL"=dword:00000001
"C:\Program Files\Microsoft Works\msworks.exe"=dword:00000001
"C:\Program Files\Microsoft Works\wklnfrps.dll"=dword:00000001
"C:\Program Files\Microsoft Works\wklnac.dll"=dword:00000001
"C:\WINDOWS\system32\msls2.dll"=dword:00000002
"C:\WINDOWS\system32\msls31.dll"=dword:00000003
"C:\WINDOWS\system32\usp10.dll"=dword:00000003
"C:\WINDOWS\system32\msvcp50.dll"=dword:00000003
"C:\WINDOWS\system32\riched20.dll"=dword:00000003
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalPse.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalImp.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalVp.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalPS.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalOle.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalSvc.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalAc.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\Sound\Banner.wav"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\1036\WorksPSS.chm"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkscal.exe"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkscal.htm"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkscal.aw"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WksCal.chm"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\1036\WkCalLng.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\1036\WkCalHol.txt"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\mswkscal.hlp"=dword:00000001
"C:\Documents and Settings\All Users\Application Data\Microsoft\Works\mswkscal.wcd"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkpr60.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\HtmlLite.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkWfx.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkWat.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkWbl.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkApComp.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\NumFmt60.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkhlp60.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\aw.dll"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\1036\WkPrL60.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\1036\WkHlpLng.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\1036\wkgl60.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\1036\WkApcLng.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\1036\NFmtLng.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkWinUni.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wks6warr.htm"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wks6eula.txt"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\EULAreg.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkerlang.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Equation\eqnedt32.exe"=dword:00000001
"C:\WINDOWS\Fonts\arial.ttf"=dword:00000003
"C:\WINDOWS\Fonts\cour.ttf"=dword:00000003
"C:\WINDOWS\Fonts\times.ttf"=dword:00000003
"C:\WINDOWS\Fonts\Mistral.TTF"=dword:00000002
"C:\WINDOWS\Fonts\lsansuni.ttf"=dword:00000002
"C:\WINDOWS\Fonts\Tahoma.ttf"=dword:00000005
"C:\WINDOWS\Fonts\Tahomabd.TTF"=dword:00000005
"C:\Program Files\Fichiers communs\Microsoft Shared\Grphflt\fpx32.flt"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Grphflt\Wpgimp32.flt"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Grphflt\gifimp32.flt"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Grphflt\jpegim32.flt"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Grphflt\png32.flt"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Grphflt\emfimp32.flt"=dword:00000001
"C:\WINDOWS\system32\hlp95en.dll"=dword:00000002
"C:\WINDOWS\system32\ochlp30e.dll"=dword:00000002
"C:\Program Files\Microsoft Works\1036\wkgl60.dll"=dword:00000001
"C:\Program Files\Microsoft Works\wkhlpqms.hlp"=dword:00000001
"C:\Program Files\Microsoft Works\wkwzadtx.dat"=dword:00000001
"C:\Program Files\Microsoft Works\Wkmmwdb.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkswab.dll"=dword:00000001
"C:\Program Files\Microsoft Works\WkMerge.dll"=dword:00000001
"C:\WINDOWS\system32\mfcuia32.dll"=dword:00000001
"C:\WINDOWS\system32\mfcans32.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\MSDraw\msdraw.exe"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Note-It\note-it.hlp"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Note-It\note-it.exe"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\csapi3t1.dll"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\ctapi3t2.dll"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\MSSP_FR.LEX"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\MSPFR32.DLL"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\MSTH_FR.LEX"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\MSTHFR32.DLL"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\MSsp3en.lex"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\MSSpell3.dll"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\msth3br.lex"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\msthes3.dll"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\Mssp_nl.lex"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\Mspnl32.dll"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\Msth_nl.lex"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\Msthnl32.dll"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\MSSP3GEA.LEX"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\MSSP3GE.DLL"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\MSTH3GEA.LEX"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Proof\msth3ge.dll"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\cpitool5.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\cpitv.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\GTV.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Shoebox\ShoeboxU.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Shoebox\STVU.dll"=dword:00000001
"C:\WINDOWS\system32\PCDLIB32.DLL"=dword:00000002
"C:\WINDOWS\system32\Ltwvc11n.dll"=dword:00000002
"C:\WINDOWS\system32\ltkrn11n.dll"=dword:00000002
"C:\WINDOWS\system32\ltimg11n.dll"=dword:00000002
"C:\WINDOWS\system32\ltfil11n.DLL"=dword:00000002
"C:\WINDOWS\system32\LTDIS11n.dll"=dword:00000002
"C:\WINDOWS\system32\lfwmf11n.dll"=dword:00000002
"C:\WINDOWS\system32\lftif11n.dll"=dword:00000002
"C:\WINDOWS\system32\lftga11n.dll"=dword:00000002
"C:\WINDOWS\system32\lfpsd11n.dll"=dword:00000002
"C:\WINDOWS\system32\Lfpng11n.dll"=dword:00000002
"C:\WINDOWS\system32\lfpcx11n.dll"=dword:00000002
"C:\WINDOWS\system32\lfpcd11n.dll"=dword:00000002
"C:\WINDOWS\system32\lfgif11n.dll"=dword:00000002
"C:\WINDOWS\system32\lffax11n.dll"=dword:00000002
"C:\WINDOWS\system32\lfeps11n.dll"=dword:00000002
"C:\WINDOWS\system32\LFCMP11n.DLL"=dword:00000002
"C:\WINDOWS\system32\lfbmp11n.dll"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Shoebox\WKSCOR.SBS"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Shoebox\WKSCOR.SBT"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Shoebox\standard.SBT"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Shoebox\removabl.ico"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Shoebox\Default.ico"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Shoebox\Blank.sbc"=dword:00000001
"C:\Program Files\Microsoft Works\workssvc.dll"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Textconv\MSWRD832.CNV"=dword:00000002
"C:\Program Files\Fichiers communs\Microsoft Shared\Textconv\works432.cnv"=dword:00000001
"C:\Program Files\Fichiers communs\Microsoft Shared\Textconv\MSWRD632.CNV"=dword:00000001
"C:\Program Files\Fichiers communs\Mi
On va faire autrement.
Désactive tes protections résidentes (antivirus...) ![/#f]
Télécharge [#ff0000]combofix.exe (par sUBs) sur ton Bureau.
Double clique combofix.exe.
Tape sur la touche 1 (Yes) pour démarrer le scan.
Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.
NOTE : Le rapport se trouve également ici : C:\Combofix.txt
Désactive tes protections résidentes (antivirus...) ![/#f]
NOTE : Le rapport se trouve également ici : C:\Combofix.txt
ComboFix 07-12-21.4 - XP familial 2007-12-23 14:14:11.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.577 [GMT 1:00]
Running from: C:\Downloads\ComboFix.exe
* Created a new restore point
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Documents and Settings\XP familial\Application Data\SKS~1
C:\Documents and Settings\XP familial\Application Data\WinTouch
C:\Documents and Settings\XP familial\Application Data\WinTouch\WinTouch.exe
C:\Program Files\ComPlus Applications\profsysyprun.html
C:\WINDOWS\exefld
C:\WINDOWS\exefld\18094828.exe
C:\WINDOWS\exefld\47208859.exe
C:\WINDOWS\system32\drivers\hidr.exe
C:\WINDOWS\system32\drivers\srosa.sys
C:\WINDOWS\system32\scvhost.exe
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\LEGACY_SROSA
-------\srosa
((((((((((((((((((((((((((((( Fichiers cr‚‚s 2007-11-23 to 2007-12-23 ))))))))))))))))))))))))))))))))))))
.
2007-12-23 14:14 . 2007-02-28 17:02 2,138,112 --a------ C:\WINDOWS\system32\ntoskrnl.exe
2007-12-23 14:14 . 2007-02-28 17:02 2,138,112 --a------ C:\WINDOWS\system32\dllcache\ntkrnlmp.exe
2007-12-23 11:55 . 2007-12-23 11:55 <REP> d-------- C:\Program Files\Vista Start Menu
2007-12-23 11:55 . 2007-12-23 14:03 <REP> d-------- C:\Documents and Settings\XP familial\Application Data\Vista Start Menu
2007-12-23 09:49 . 2007-12-23 13:04 <REP> d-------- C:\Documents and Settings\XP familial\Application Data\D-Jix Media
2007-12-23 09:48 . 2007-12-23 09:48 <REP> d-------- C:\Program Files\D-Jix
2007-12-22 17:47 . 2007-12-22 17:47 <REP> d-------- C:\Program Files\Logitech
2007-12-22 14:25 . 2007-12-22 14:25 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2007-12-22 14:25 . 2007-12-22 14:25 1,409 --a------ C:\WINDOWS\QTFont.for
2007-12-22 11:05 . 2007-12-22 22:34 1,187,872 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat
2007-12-22 11:05 . 2007-12-22 22:34 18,720 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.dat
2007-12-22 11:05 . 2007-12-22 22:34 14,996 --ahs---- C:\WINDOWS\system32\drivers\fidbox.idx
2007-12-22 11:05 . 2007-12-22 22:34 2,804 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.idx
2007-12-21 23:23 . 2007-12-23 11:44 <REP> d-------- C:\Program Files\MediaVideoCodec
2007-12-21 23:13 . 2007-12-21 23:13 <REP> d-------- C:\Documents and Settings\XP familial\Application Data\STOIK
2007-12-21 21:55 . 2006-08-31 15:06 230,518 ---hs---- C:\WINDOWS\wuauclt.exe
2007-12-16 11:15 . 2007-12-16 11:15 <REP> d-------- C:\Documents and Settings\XP familial\Application Data\Creative
2007-12-16 11:10 . 1999-10-11 02:00 41,984 --------- C:\WINDOWS\Ctregrun.exe
2007-12-16 11:07 . 2007-12-23 11:41 <REP> d-------- C:\Program Files\Creative
2007-12-16 11:07 . 2004-04-01 14:20 35,938 --------- C:\WINDOWS\system32\drivers\StMp3Rec.sys
2007-12-14 21:41 . 2007-12-22 12:25 103,736 --a------ C:\WINDOWS\system32\PnkBstrB.exe
2007-12-14 21:41 . 2007-12-14 22:19 66,872 --a------ C:\WINDOWS\system32\PnkBstrA.exe
2007-12-14 21:41 . 2007-12-22 12:25 22,328 --a------ C:\WINDOWS\system32\drivers\PnkBstrK.sys
2007-12-09 16:02 . 2007-12-09 16:02 <REP> d-------- C:\NVIDIA
2007-12-09 15:20 . 2007-12-23 14:17 499,996 --a------ C:\WINDOWS\system32\ckl009.dat
2007-12-09 15:20 . 2007-12-09 15:20 160 --a------ C:\WINDOWS\system32\del32.bat
2007-12-09 15:19 . 2007-11-25 13:22 1,393,849 -r-hs---- C:\WINDOWS\system32\o1jlw1b7U1.ini
2007-12-09 15:19 . 2007-12-23 09:44 163,328 --a------ C:\WINDOWS\system32\wsock32.sys
2007-12-09 13:42 . 2007-12-09 13:42 <REP> dr-h----- C:\Documents and Settings\XP familial\Application Data\SecuROM
2007-12-09 13:40 . 2007-12-09 13:40 <REP> d-------- C:\WINDOWS\system32\LogFiles
2007-12-09 13:31 . 2007-12-09 13:31 <REP> d-------- C:\Program Files\Electronic Arts
2007-11-25 13:15 . 2007-11-25 13:15 69,632 --a------ C:\WINDOWS\AutoUpdateWin31.dll
2007-11-25 13:15 . 2007-11-25 13:15 45,056 --a------ C:\WINDOWS\AutoUpdateWin32.exe
2007-11-25 13:15 . 2007-11-25 13:15 32,768 --a------ C:\WINDOWS\AutoUpdateWin33.exe
2007-11-25 13:15 . 2007-11-25 13:15 24,576 --a------ C:\WINDOWS\WindowsUpdates.exe
2007-11-25 12:31 . 2007-11-30 23:16 <REP> d-------- C:\Temp
2007-11-25 11:55 . 2007-11-25 11:55 2,560 --a------ C:\WINDOWS\system32\bitcometres.dll
2007-11-25 10:36 . 2007-11-25 10:36 <REP> d-------- C:\Program Files\Fichiers communs\Adobe
2007-11-24 22:20 . 2007-11-24 13:13 359,808 --a------ C:\WINDOWS\system32\dllcache\tcpip.sys.ORIGINAL
2007-11-24 21:43 . 2004-08-05 13:00 17,920 --a------ C:\WINDOWS\system32\dllcache\tftp.exe
2007-11-24 21:38 . 2007-11-24 21:38 <REP> d-------- C:\Program Files\QuickZip4
2007-11-24 21:22 . 2007-11-24 21:39 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WinZip
2007-11-24 19:35 . 2007-11-25 11:56 <REP> d-------- C:\Program Files\BitComet
2007-11-24 19:35 . 2007-12-23 13:05 <REP> d-------- C:\Downloads
2007-11-24 13:13 . 2007-11-24 13:13 359,808 --a------ C:\WINDOWS\system32\drivers\TCPIP.SYS.ORIGINAL
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-12-23 12:59 --------- d-----w C:\Program Files\Wanadoo
2007-12-23 12:47 --------- d-----w C:\Program Files\eMule
2007-12-23 10:44 --------- d-----w C:\Program Files\Winspn
2007-12-23 10:44 --------- d-----w C:\Program Files\Sony Ericsson
2007-12-23 10:43 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-12-09 13:53 --------- d-----w C:\Program Files\Micro Application
2007-11-25 09:27 --------- d-----w C:\Documents and Settings\XP familial\Application Data\AdobeUM
2007-11-24 21:20 359,808 ----a-w C:\WINDOWS\system32\drivers\TCPIP.SYS
2007-11-24 20:18 --------- d-----w C:\Program Files\AOL 9.0
2007-11-17 15:03 --------- d-----w C:\Documents and Settings\All Users\Application Data\QuickTime
2007-11-11 11:56 --------- d-----w C:\Program Files\ImTOO
2007-11-10 10:48 --------- d-----w C:\Program Files\DivX
2007-11-10 10:47 --------- d-----w C:\Program Files\Webteh
2007-11-10 10:47 --------- d-----w C:\Documents and Settings\XP familial\Application Data\BSplayer
2007-11-10 10:43 --------- d-----w C:\Documents and Settings\XP familial\Application Data\Media Player Classic
2007-11-10 10:19 --------- d-----w C:\Documents and Settings\XP familial\Application Data\vlc
2007-11-10 10:17 --------- d-----w C:\Program Files\VideoLAN
2007-11-10 07:10 --------- d-----w C:\Program Files\GDivX Zenith Player
2007-11-10 07:05 23 ----a-w C:\WINDOWS\system32\drivers\adidsl.cfg
2007-11-10 07:05 --------- d-----w C:\Program Files\SAGEM
2007-11-04 10:58 --------- d-----w C:\Documents and Settings\All Users\Application Data\DVD X Studios
2007-11-02 07:08 --------- d-----w C:\Documents and Settings\XP familial\Application Data\BSplayer Pro
2007-10-28 13:12 73,728 ----a-w C:\WINDOWS\ALCFDRTM.EXE
2007-10-28 12:36 --------- d-----w C:\Program Files\MSN Messenger
2006-08-31 14:06 230,518 --sh--w C:\WINDOWS\wuauclt.exe
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{4E7BD74F-2B8D-469E-A0E8-ED6AB685FA7D}]
C:\WINDOWS\system32\pbfrv2.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6EB6DFBC-AD3C-49A4-9F7C-1EB403EB0FE3}]
C:\Program Files\Wanadoo Messager\hokelot24418.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A75E294E-C047-4D29-B07E-37B792881BEF}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{4E7BD74F-2B8D-469E-A0E8-ED6AB685FA7D}
[HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-a0e8-ed6ab685fa7d}]
[HKEY_CLASSES_ROOT\pbfrv2.PBFRV2]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{4E7BD74F-2B8D-469E-A0E8-ED6AB685FA7D}"= C:\WINDOWS\system32\pbfrv2.dll [ ]
[HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-a0e8-ed6ab685fa7d}]
[HKEY_CLASSES_ROOT\pbfrv2.PBFRV2]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"updateMgr"="C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 16:45]
"VistaStartMenu"="C:\Program Files\Vista Start Menu\VistaStartMenu.exe" [2007-08-23 12:37]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe" [2004-08-05 13:00]
"PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2004-08-05 13:00]
"PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2004-08-05 13:00]
"NvCplDaemon"="RUNDLL32.exe" [2004-08-05 13:00 C:\WINDOWS\system32\rundll32.exe]
"nwiz"="nwiz.exe" [2007-10-04 17:14 C:\WINDOWS\system32\nwiz.exe]
"Raccourci vers la page des propriétés de High Definition Audio"="HDAudPropShortcut.exe" [2004-03-17 14:10 C:\WINDOWS\system32\Hdaudpropshortcut.exe]
"SoundMan"="SOUNDMAN.EXE" [2004-09-10 17:29 C:\WINDOWS\SoundMan.exe]
"AlcWzrd"="ALCWZRD.EXE" [2004-09-15 10:20 C:\WINDOWS\ALCWZRD.EXE]
"SunJavaUpdateSched"="C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe" [2004-06-03 21:05]
"PCMService"="c:\Apps\Powercinema\PCMService.exe" [2005-01-28 10:10]
"ACTIVBOARD"="c:\apps\ABoard\ABoard.exe" [2003-05-02 10:31]
"WooCnxMon"="C:\PROGRA~1\Wanadoo\CnxMon.exe" [2004-10-13 16:12]
"WOOWATCH"="C:\PROGRA~1\Wanadoo\Watch.exe" [2004-10-13 16:12]
"WorksFUD"="C:\Program Files\Microsoft Works\wkfud.exe" [2000-07-12 11:59]
"Microsoft Works Portfolio"="C:\Program Files\Microsoft Works\WksSb.exe" [2000-07-12 13:14]
"Microsoft Works Update Detection"="C:\Program Files\Microsoft Works\WkDetect.exe" [2000-08-04 02:01]
"DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2006-09-14 21:09]
"TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2005-07-27 22:55]
"WOOTASKBARICON"="C:\PROGRA~1\Wanadoo\TaskbarIcon.exe" [2004-10-13 16:12]
"autoclk"="autoclk.exe" []
"adiras"="adiras.exe" []
"WinampAgent"="C:\Program Files\Winamp\winampa.exe" []
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2005-07-27 23:01]
"Secure"="C:\WINDOWS\WindowsUpdates.exe" [2007-11-25 13:15]
"Generic Host Process"="C:\WINDOWS\system32\scvhost.exe" []
"NvMediaCenter"="RUNDLL32.exe" [2004-08-05 13:00 C:\WINDOWS\system32\rundll32.exe]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
"Generic Host Process"="C:\WINDOWS\system32\scvhost.exe" []
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 13:00]
SafeBoot registry key needs repairs. This machine cannot enter Safe Mode.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system]
@="Driver Group"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vgasave.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]
@="DiskDrive"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
@="Hdc"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
@="Keyboard"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
@="Mouse"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
@="System"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
@="Volume"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5f67979e-9b35-11dc-b637-4d6564696130}]
\Shell\Auto\command - J:\sxs.exe
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL sxs.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7b270338-b133-11dc-b674-4d6564696130}]
\Shell\Auto\command - cmd /C launch.bat
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL cmd /C launch.bat
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{88fb81b4-a648-11dc-b653-4d6564696130}]
\Shell\Auto\command - sxs.exe
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL sxs.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{fcc5a52c-a65f-11dc-b656-4d6564696130}]
\Shell\Auto\command - J:\sxs.exe
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL sxs.exe
.
**************************************************************************
catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-23 14:20:05
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2007-12-23 14:21:15 - machine was rebooted
.
2007-12-23 13:21:02 --- E O F ---
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.577 [GMT 1:00]
Running from: C:\Downloads\ComboFix.exe
* Created a new restore point
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Documents and Settings\XP familial\Application Data\SKS~1
C:\Documents and Settings\XP familial\Application Data\WinTouch
C:\Documents and Settings\XP familial\Application Data\WinTouch\WinTouch.exe
C:\Program Files\ComPlus Applications\profsysyprun.html
C:\WINDOWS\exefld
C:\WINDOWS\exefld\18094828.exe
C:\WINDOWS\exefld\47208859.exe
C:\WINDOWS\system32\drivers\hidr.exe
C:\WINDOWS\system32\drivers\srosa.sys
C:\WINDOWS\system32\scvhost.exe
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\LEGACY_SROSA
-------\srosa
((((((((((((((((((((((((((((( Fichiers cr‚‚s 2007-11-23 to 2007-12-23 ))))))))))))))))))))))))))))))))))))
.
2007-12-23 14:14 . 2007-02-28 17:02 2,138,112 --a------ C:\WINDOWS\system32\ntoskrnl.exe
2007-12-23 14:14 . 2007-02-28 17:02 2,138,112 --a------ C:\WINDOWS\system32\dllcache\ntkrnlmp.exe
2007-12-23 11:55 . 2007-12-23 11:55 <REP> d-------- C:\Program Files\Vista Start Menu
2007-12-23 11:55 . 2007-12-23 14:03 <REP> d-------- C:\Documents and Settings\XP familial\Application Data\Vista Start Menu
2007-12-23 09:49 . 2007-12-23 13:04 <REP> d-------- C:\Documents and Settings\XP familial\Application Data\D-Jix Media
2007-12-23 09:48 . 2007-12-23 09:48 <REP> d-------- C:\Program Files\D-Jix
2007-12-22 17:47 . 2007-12-22 17:47 <REP> d-------- C:\Program Files\Logitech
2007-12-22 14:25 . 2007-12-22 14:25 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2007-12-22 14:25 . 2007-12-22 14:25 1,409 --a------ C:\WINDOWS\QTFont.for
2007-12-22 11:05 . 2007-12-22 22:34 1,187,872 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat
2007-12-22 11:05 . 2007-12-22 22:34 18,720 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.dat
2007-12-22 11:05 . 2007-12-22 22:34 14,996 --ahs---- C:\WINDOWS\system32\drivers\fidbox.idx
2007-12-22 11:05 . 2007-12-22 22:34 2,804 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.idx
2007-12-21 23:23 . 2007-12-23 11:44 <REP> d-------- C:\Program Files\MediaVideoCodec
2007-12-21 23:13 . 2007-12-21 23:13 <REP> d-------- C:\Documents and Settings\XP familial\Application Data\STOIK
2007-12-21 21:55 . 2006-08-31 15:06 230,518 ---hs---- C:\WINDOWS\wuauclt.exe
2007-12-16 11:15 . 2007-12-16 11:15 <REP> d-------- C:\Documents and Settings\XP familial\Application Data\Creative
2007-12-16 11:10 . 1999-10-11 02:00 41,984 --------- C:\WINDOWS\Ctregrun.exe
2007-12-16 11:07 . 2007-12-23 11:41 <REP> d-------- C:\Program Files\Creative
2007-12-16 11:07 . 2004-04-01 14:20 35,938 --------- C:\WINDOWS\system32\drivers\StMp3Rec.sys
2007-12-14 21:41 . 2007-12-22 12:25 103,736 --a------ C:\WINDOWS\system32\PnkBstrB.exe
2007-12-14 21:41 . 2007-12-14 22:19 66,872 --a------ C:\WINDOWS\system32\PnkBstrA.exe
2007-12-14 21:41 . 2007-12-22 12:25 22,328 --a------ C:\WINDOWS\system32\drivers\PnkBstrK.sys
2007-12-09 16:02 . 2007-12-09 16:02 <REP> d-------- C:\NVIDIA
2007-12-09 15:20 . 2007-12-23 14:17 499,996 --a------ C:\WINDOWS\system32\ckl009.dat
2007-12-09 15:20 . 2007-12-09 15:20 160 --a------ C:\WINDOWS\system32\del32.bat
2007-12-09 15:19 . 2007-11-25 13:22 1,393,849 -r-hs---- C:\WINDOWS\system32\o1jlw1b7U1.ini
2007-12-09 15:19 . 2007-12-23 09:44 163,328 --a------ C:\WINDOWS\system32\wsock32.sys
2007-12-09 13:42 . 2007-12-09 13:42 <REP> dr-h----- C:\Documents and Settings\XP familial\Application Data\SecuROM
2007-12-09 13:40 . 2007-12-09 13:40 <REP> d-------- C:\WINDOWS\system32\LogFiles
2007-12-09 13:31 . 2007-12-09 13:31 <REP> d-------- C:\Program Files\Electronic Arts
2007-11-25 13:15 . 2007-11-25 13:15 69,632 --a------ C:\WINDOWS\AutoUpdateWin31.dll
2007-11-25 13:15 . 2007-11-25 13:15 45,056 --a------ C:\WINDOWS\AutoUpdateWin32.exe
2007-11-25 13:15 . 2007-11-25 13:15 32,768 --a------ C:\WINDOWS\AutoUpdateWin33.exe
2007-11-25 13:15 . 2007-11-25 13:15 24,576 --a------ C:\WINDOWS\WindowsUpdates.exe
2007-11-25 12:31 . 2007-11-30 23:16 <REP> d-------- C:\Temp
2007-11-25 11:55 . 2007-11-25 11:55 2,560 --a------ C:\WINDOWS\system32\bitcometres.dll
2007-11-25 10:36 . 2007-11-25 10:36 <REP> d-------- C:\Program Files\Fichiers communs\Adobe
2007-11-24 22:20 . 2007-11-24 13:13 359,808 --a------ C:\WINDOWS\system32\dllcache\tcpip.sys.ORIGINAL
2007-11-24 21:43 . 2004-08-05 13:00 17,920 --a------ C:\WINDOWS\system32\dllcache\tftp.exe
2007-11-24 21:38 . 2007-11-24 21:38 <REP> d-------- C:\Program Files\QuickZip4
2007-11-24 21:22 . 2007-11-24 21:39 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WinZip
2007-11-24 19:35 . 2007-11-25 11:56 <REP> d-------- C:\Program Files\BitComet
2007-11-24 19:35 . 2007-12-23 13:05 <REP> d-------- C:\Downloads
2007-11-24 13:13 . 2007-11-24 13:13 359,808 --a------ C:\WINDOWS\system32\drivers\TCPIP.SYS.ORIGINAL
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-12-23 12:59 --------- d-----w C:\Program Files\Wanadoo
2007-12-23 12:47 --------- d-----w C:\Program Files\eMule
2007-12-23 10:44 --------- d-----w C:\Program Files\Winspn
2007-12-23 10:44 --------- d-----w C:\Program Files\Sony Ericsson
2007-12-23 10:43 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-12-09 13:53 --------- d-----w C:\Program Files\Micro Application
2007-11-25 09:27 --------- d-----w C:\Documents and Settings\XP familial\Application Data\AdobeUM
2007-11-24 21:20 359,808 ----a-w C:\WINDOWS\system32\drivers\TCPIP.SYS
2007-11-24 20:18 --------- d-----w C:\Program Files\AOL 9.0
2007-11-17 15:03 --------- d-----w C:\Documents and Settings\All Users\Application Data\QuickTime
2007-11-11 11:56 --------- d-----w C:\Program Files\ImTOO
2007-11-10 10:48 --------- d-----w C:\Program Files\DivX
2007-11-10 10:47 --------- d-----w C:\Program Files\Webteh
2007-11-10 10:47 --------- d-----w C:\Documents and Settings\XP familial\Application Data\BSplayer
2007-11-10 10:43 --------- d-----w C:\Documents and Settings\XP familial\Application Data\Media Player Classic
2007-11-10 10:19 --------- d-----w C:\Documents and Settings\XP familial\Application Data\vlc
2007-11-10 10:17 --------- d-----w C:\Program Files\VideoLAN
2007-11-10 07:10 --------- d-----w C:\Program Files\GDivX Zenith Player
2007-11-10 07:05 23 ----a-w C:\WINDOWS\system32\drivers\adidsl.cfg
2007-11-10 07:05 --------- d-----w C:\Program Files\SAGEM
2007-11-04 10:58 --------- d-----w C:\Documents and Settings\All Users\Application Data\DVD X Studios
2007-11-02 07:08 --------- d-----w C:\Documents and Settings\XP familial\Application Data\BSplayer Pro
2007-10-28 13:12 73,728 ----a-w C:\WINDOWS\ALCFDRTM.EXE
2007-10-28 12:36 --------- d-----w C:\Program Files\MSN Messenger
2006-08-31 14:06 230,518 --sh--w C:\WINDOWS\wuauclt.exe
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{4E7BD74F-2B8D-469E-A0E8-ED6AB685FA7D}]
C:\WINDOWS\system32\pbfrv2.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6EB6DFBC-AD3C-49A4-9F7C-1EB403EB0FE3}]
C:\Program Files\Wanadoo Messager\hokelot24418.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A75E294E-C047-4D29-B07E-37B792881BEF}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{4E7BD74F-2B8D-469E-A0E8-ED6AB685FA7D}
[HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-a0e8-ed6ab685fa7d}]
[HKEY_CLASSES_ROOT\pbfrv2.PBFRV2]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{4E7BD74F-2B8D-469E-A0E8-ED6AB685FA7D}"= C:\WINDOWS\system32\pbfrv2.dll [ ]
[HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-a0e8-ed6ab685fa7d}]
[HKEY_CLASSES_ROOT\pbfrv2.PBFRV2]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"updateMgr"="C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 16:45]
"VistaStartMenu"="C:\Program Files\Vista Start Menu\VistaStartMenu.exe" [2007-08-23 12:37]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe" [2004-08-05 13:00]
"PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2004-08-05 13:00]
"PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2004-08-05 13:00]
"NvCplDaemon"="RUNDLL32.exe" [2004-08-05 13:00 C:\WINDOWS\system32\rundll32.exe]
"nwiz"="nwiz.exe" [2007-10-04 17:14 C:\WINDOWS\system32\nwiz.exe]
"Raccourci vers la page des propriétés de High Definition Audio"="HDAudPropShortcut.exe" [2004-03-17 14:10 C:\WINDOWS\system32\Hdaudpropshortcut.exe]
"SoundMan"="SOUNDMAN.EXE" [2004-09-10 17:29 C:\WINDOWS\SoundMan.exe]
"AlcWzrd"="ALCWZRD.EXE" [2004-09-15 10:20 C:\WINDOWS\ALCWZRD.EXE]
"SunJavaUpdateSched"="C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe" [2004-06-03 21:05]
"PCMService"="c:\Apps\Powercinema\PCMService.exe" [2005-01-28 10:10]
"ACTIVBOARD"="c:\apps\ABoard\ABoard.exe" [2003-05-02 10:31]
"WooCnxMon"="C:\PROGRA~1\Wanadoo\CnxMon.exe" [2004-10-13 16:12]
"WOOWATCH"="C:\PROGRA~1\Wanadoo\Watch.exe" [2004-10-13 16:12]
"WorksFUD"="C:\Program Files\Microsoft Works\wkfud.exe" [2000-07-12 11:59]
"Microsoft Works Portfolio"="C:\Program Files\Microsoft Works\WksSb.exe" [2000-07-12 13:14]
"Microsoft Works Update Detection"="C:\Program Files\Microsoft Works\WkDetect.exe" [2000-08-04 02:01]
"DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2006-09-14 21:09]
"TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2005-07-27 22:55]
"WOOTASKBARICON"="C:\PROGRA~1\Wanadoo\TaskbarIcon.exe" [2004-10-13 16:12]
"autoclk"="autoclk.exe" []
"adiras"="adiras.exe" []
"WinampAgent"="C:\Program Files\Winamp\winampa.exe" []
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2005-07-27 23:01]
"Secure"="C:\WINDOWS\WindowsUpdates.exe" [2007-11-25 13:15]
"Generic Host Process"="C:\WINDOWS\system32\scvhost.exe" []
"NvMediaCenter"="RUNDLL32.exe" [2004-08-05 13:00 C:\WINDOWS\system32\rundll32.exe]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
"Generic Host Process"="C:\WINDOWS\system32\scvhost.exe" []
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 13:00]
SafeBoot registry key needs repairs. This machine cannot enter Safe Mode.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system]
@="Driver Group"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vgasave.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]
@="DiskDrive"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
@="Hdc"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
@="Keyboard"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
@="Mouse"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
@="System"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
@="Volume"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5f67979e-9b35-11dc-b637-4d6564696130}]
\Shell\Auto\command - J:\sxs.exe
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL sxs.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7b270338-b133-11dc-b674-4d6564696130}]
\Shell\Auto\command - cmd /C launch.bat
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL cmd /C launch.bat
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{88fb81b4-a648-11dc-b653-4d6564696130}]
\Shell\Auto\command - sxs.exe
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL sxs.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{fcc5a52c-a65f-11dc-b656-4d6564696130}]
\Shell\Auto\command - J:\sxs.exe
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL sxs.exe
.
**************************************************************************
catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-23 14:20:05
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2007-12-23 14:21:15 - machine was rebooted
.
2007-12-23 13:21:02 --- E O F ---
c'est bon je sais j'ai trouvé pr la section hardware et finalement j'ai réussi à résoudre le probleme parce que j'ai réussi a installer kaspersky et meme les programmes qui ne voulai pas s'installer, c'est surement grave à vos manip merci beaucoup. kaspersky il a tout viré...
Au fait défois il détecte des espionS? il me donne leur adresse ip et tout, y'a t-il moyen de leur envoyer un message?...
Au fait défois il détecte des espionS? il me donne leur adresse ip et tout, y'a t-il moyen de leur envoyer un message?...
Lassé par la pub ? Créez un compte
- Contenus similaires :
Tags :
- ForumInstallation anti virus sur nokia e5
- ForumInstallation anti virus
- ForumVirus bloque installation anti virus
- ForumInstallation d un anti virus
- ForumVirus probleme installation antivirus
- downloadInstallation d'un anti virus parallels desktop
- ForumProblem installation kaspersky anti virus 7.0
- ForumKaspersky anti virus installation
- ForumAnti virus installation bizarre svp je vous
- downloadAnti virus installation bizarre
- Voir plus







