Bonjour, j'ai un problème, quand je redémarre mon PC, j'ai 2 fenètres qui s'affichent et bloquent tout:
-la première: "Définition des paramètres personnalisés pour: Upda"
-la deuxième: "This programme was compressed with the demonstration version of shrinker, the .EXE, .DLL and .OCX compressor form blink,Inc. (www.blinkinc.com). puis select "yes" to continue qui permet de fermer les 2 fenêtres. Mais ces 2 fenêtres réaparaissent encore 2 fois avant que le PC ait complètement démarré.

Quelqu'un eut-il m'aider?

Cette question a déjà été résolue, mais comme il faut poster des rapport de Hijackthis et autres, je pense que la solution n'est pas pla même car je ne sais pas traduire ces rapports.

Merci de votre aide

je viens de lancer Hijackthis et la fenêtre disparait automatiquement, je n'arrive pas à lancer le scan!!!

lorsque je fais CTRL+ALT+SUP, la fenetre disparait elle aussi!!!

voici le resultat de SDFix mais je ne peux toujours pas lancer HiJack This,la fenetre disparait aussitot:


SDFix: Version 1.126

Run by Tanguy on 14/01/2008 at 21:50

Microsoft Windows XP [version 5.1.2600]

Running From: C:\SDFix

Safe Mode:
Checking Services:


Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting...


Normal Mode:
Checking Files:

Trojan Files Found:

C:\WINDOWS\SYSTEM32\SETUP_~1.EXE - Deleted
C:\WINDOWS\system32\setup_?????.exe - Deleted




Removing Temp Files...

ADS Check:

C:\WINDOWS
No streams found.

C:\WINDOWS\system32
No streams found.

C:\WINDOWS\system32\svchost.exe
No streams found.

C:\WINDOWS\system32\ntoskrnl.exe
No streams found.



Final Check:

catchme 0.3.1344.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-14 21:56:30
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:bb8d0584
"s2"=dword:caeb8f67
"h0"=dword:00000002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"p0"="C:\Program Files\Alcohol Soft\Alcohol 120\"
"h0"=dword:00000001
"ujdew"=hex:ce,71,fa,2b,d8,b4,4c,a0,fa,d9,54,1c,3e,cc,b2,be,21,aa,60,45,14,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools\"
"h0"=dword:00000000
"khjeh"=hex:7b,e4,e6,7b,be,d5,fc,e8,6c,da,6b,6c,62,be,3e,62,d0,00,ff,9c,89,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,ac,65,3c,7e,4d,a3,19,5a,9c,0c,32,f7,70,da,43,60,e2,..
"khjeh"=hex:12,ab,92,c6,14,5b,24,b7,03,ff,8e,37,61,64,df,da,56,87,1c,7b,e1,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:e4,29,1b,94,fb,fb,d3,1f,c6,5b,21,c2,a7,50,3c,e1,38,2c,d2,71,62,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41]
"khjeh"=hex:70,7d,7f,3e,cb,ca,18,a2,d9,66,04,ae,98,2e,24,82,7b,96,ec,dd,07,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf42]
"khjeh"=hex:4b,10,e0,3b,7b,5d,a3,bf,fd,1e,c7,ca,1b,0f,99,31,5b,35,8c,6d,74,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf43]
"khjeh"=hex:7e,09,a2,b0,ce,5e,8d,1a,1b,b4,7e,ac,f2,e7,59,45,c8,2f,64,6e,6b,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools\"
"h0"=dword:00000000
"khjeh"=hex:3d,90,80,2c,c7,96,e5,6b,b3,7a,23,03,4b,58,95,b1,97,c7,06,10,27,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,ac,65,3c,7e,4d,a3,19,5a,9c,0c,32,f7,70,da,43,60,e2,..
"khjeh"=hex:1f,7d,66,37,57,f0,72,9b,51,89,c5,ab,d8,37,31,ee,0c,15,e5,97,d0,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:a8,15,77,cc,4a,c0,ad,12,9d,73,8e,96,c8,11,57,3b,5f,67,df,cf,86,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"p0"="C:\Program Files\Alcohol Soft\Alcohol 120\"
"h0"=dword:00000001
"ujdew"=hex:ce,71,fa,2b,d8,b4,4c,a0,fa,d9,54,1c,3e,cc,b2,be,21,aa,60,45,14,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools\"
"h0"=dword:00000000
"khjeh"=hex:7b,e4,e6,7b,be,d5,fc,e8,6c,da,6b,6c,62,be,3e,62,d0,00,ff,9c,89,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,ac,65,3c,7e,4d,a3,19,5a,9c,0c,32,f7,70,da,43,60,e2,..
"khjeh"=hex:12,ab,92,c6,14,5b,24,b7,03,ff,8e,37,61,64,df,da,56,87,1c,7b,e1,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:e4,29,1b,94,fb,fb,d3,1f,c6,5b,21,c2,a7,50,3c,e1,38,2c,d2,71,62,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41]
"khjeh"=hex:70,7d,7f,3e,cb,ca,18,a2,d9,66,04,ae,98,2e,24,82,7b,96,ec,dd,07,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf42]
"khjeh"=hex:4b,10,e0,3b,7b,5d,a3,bf,fd,1e,c7,ca,1b,0f,99,31,5b,35,8c,6d,74,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf43]
"khjeh"=hex:7e,09,a2,b0,ce,5e,8d,1a,1b,b4,7e,ac,f2,e7,59,45,c8,2f,64,6e,6b,..

scanning hidden registry entries ...

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E9F81423-211E-46B6-9AE0-38568BC5CF6F}]
"DisplayName"="Alcohol 120%"

scanning hidden files ...


scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 39


Remaining Services:
------------------



Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\BitComet\\BitComet.exe"="C:\\Program Files\\BitComet\\BitComet.exe:*:Enabled:BitComet - a BitTorrent Client"
"C:\\Program Files\\eMule\\eMule.exe"="C:\\Program Files\\eMule\\eMule.exe:*:Enabled:eMule Plus"
"C:\\Program Files\\IncrediMail\\bin\\ImLc.exe"="C:\\Program Files\\IncrediMail\\bin\\ImLc.exe:*:Enabled:Letter Creator"
"C:\\Program Files\\Mozilla Firefox\\firefox.exe"="C:\\Program Files\\Mozilla Firefox\\firefox.exe:*:Enabled:Mozilla Firefox"
"C:\\Program Files\\Lavasoft\\Ad-Aware SE Personal\\Ad-Aware.exe"="C:\\Program Files\\Lavasoft\\Ad-Aware SE Personal\\Ad-Aware.exe:*:Enabled:Ad-Aware SE Personal"
"C:\\Program Files\\IncrediMail\\bin\\IMApp.exe"="C:\\Program Files\\IncrediMail\\bin\\IMApp.exe:*:Enabled:IncrediMail"
"C:\\Program Files\\IncrediMail\\bin\\IncMail.exe"="C:\\Program Files\\IncrediMail\\bin\\IncMail.exe:*:Enabled:IncrediMail"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"
"C:\\Program Files\\Empire Interactive\\Strangelite\\Starship Troopers\\STGame.exe"="C:\\Program Files\\Empire Interactive\\Strangelite\\Starship Troopers\\STGame.exe:*:Enabled:Starship Troopers"
"E:\\TOXIC\\mohpa.exe"="E:\\TOXIC\\mohpa.exe:*:Enabled:Medal of Honor Pacific Assault(tm)"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\89exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\89exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\86exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\86exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\10exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\10exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\91exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\91exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\13exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\13exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\66exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\66exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\96exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\96exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\54exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\54exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\32exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\32exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\93exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\93exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\43exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\43exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\94exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\94exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\20exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\20exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\11exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\11exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\83exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\83exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\85exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\85exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\81exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\81exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\21exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\21exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\71exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\71exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\27exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\27exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\7exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\7exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\52exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\52exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\15exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\15exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\12exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\12exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\75exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\75exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\9exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\9exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\39exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\39exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\23exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\23exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\68exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\68exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\Program Files\\EA GAMES\\MOHDA\\MOHAA.exe"="C:\\Program Files\\EA GAMES\\MOHDA\\MOHAA.exe:*:Enabled:Medal of Honor Allied Assault(tm)"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\59exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\59exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\56exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\56exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\76exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\76exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\1exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\1exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\22exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\22exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\47exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\47exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\84exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\84exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\31exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\31exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\80exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\80exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\45exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\45exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\2exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\2exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\37exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\37exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\8exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\8exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\44exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\44exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\36exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\36exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\49exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\49exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\5exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\5exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\61exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\61exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\35exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\35exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\25exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\25exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\63exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\63exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\0exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\0exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\55exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\55exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\51exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\51exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\87exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\87exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\92exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\92exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\95exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\95exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\77exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\77exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\62exinjs.a9.exe"="C:\\DOCUME~1\\Tanguy\\LOCALS~1\\Temp\\62exinjs.a9.exe:*:Enabled:Microsoft Update"
"C:\\CS1.6 pod-Bot\\hl.exe"="C:\\CS1.6 pod-Bot\\hl.exe:*:Enabled:Half-Life Launcher"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype. The whole world can talk for free."
"C:\\Program Files\\GameSpy Arcade\\Aphex.exe"="C:\\Program Files\\GameSpy Arcade\\Aphex.exe:*:Enabled:GameSpy Arcade"
"C:\\Program Files\\Ubisoft\\Blue Byte\\THE SETTLERS - L'H‚ritage des Rois\\bin\\settlershok.exe"="C:\\Program Files\\Ubisoft\\Blue Byte\\THE SETTLERS - L'H‚ritage des Rois\\bin\\settlershok.exe:*:Enabled:Jouer … THE SETTLERS - L'H‚ritage des Rois"
"C:\\Program Files\\Valve\\Half Life 2\\hl2.exe"="C:\\Program Files\\Valve\\Half Life 2\\hl2.exe:*:Enabled:hl2"
"C:\\Program Files\\TVAnts\\Tvants.exe"="C:\\Program Files\\TVAnts\\Tvants.exe:*:Enabled:TVAnts"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\\WINDOWS\\PCHealth\\HelpCtr\\Binaries\\helpctr.exe"="C:\\WINDOWS\\PCHealth\\HelpCtr\\Binaries\\helpctr.exe:*:Enabled:Assistance … distance - Windows Messenger et voix"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

Remaining Files:
---------------

File Backups: - C:\SDFix\backups\backups.zip

Files with Hidden Attributes:

Tue 22 Jul 2003 11,236,973 ..SH. --- "C:\WINDOWS\msmg.exe"
Thu 19 Aug 2004 60,416 A.SH. --- "C:\Program Files\Outlook Express\msimn.exe"
Thu 5 Apr 2007 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Tue 22 Jul 2003 57,856 A.SH. --- "C:\WINDOWS\BricoPacks\SysFiles\69_msimn.exe"
Thu 19 Aug 2004 60,416 A.SH. --- "C:\WINDOWS\ServicePackFiles\i386\msimn.exe"
Thu 22 Mar 2007 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
Thu 20 Sep 2007 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\778fd2fc3fe6b905e366b5ddbba384c8\BIT8.tmp"
Tue 16 May 2006 33,280 A..H. --- "C:\Documents and Settings\Tanguy\Mes documents\My Docs\Professionnel\OPEX\f‚vrier juin 2006\Stup\~WRL0005.tmp"
Wed 10 May 2006 35,328 A..H. --- "C:\Documents and Settings\Tanguy\Mes documents\My Docs\Professionnel\OPEX\f‚vrier juin 2006\Stup\~WRL1573.tmp"
Wed 10 May 2006 34,816 A..H. --- "C:\Documents and Settings\Tanguy\Mes documents\My Docs\Professionnel\OPEX\f‚vrier juin 2006\Stup\~WRL1772.tmp"
Tue 16 May 2006 34,304 A..H. --- "C:\Documents and Settings\Tanguy\Mes documents\My Docs\Professionnel\OPEX\f‚vrier juin 2006\Stup\~WRL1787.tmp"
Wed 10 May 2006 38,400 A..H. --- "C:\Documents and Settings\Tanguy\Mes documents\My Docs\Professionnel\OPEX\f‚vrier juin 2006\Stup\~WRL3189.tmp"
Tue 16 May 2006 34,304 A..H. --- "C:\Documents and Settings\Tanguy\Mes documents\My Docs\Professionnel\OPEX\f‚vrier juin 2006\Stup\~WRL3837.tmp"
Tue 16 May 2006 68,608 A..H. --- "C:\Documents and Settings\Tanguy\Mes documents\My Docs\Professionnel\OPEX\f‚vrier juin 2006\Commandes\AVRIL\~WRL0001.tmp"
Tue 18 Apr 2006 67,072 A..H. --- "C:\Documents and Settings\Tanguy\Mes documents\My Docs\Professionnel\OPEX\f‚vrier juin 2006\Commandes\AVRIL\~WRL0171.tmp"
Tue 18 Apr 2006 67,072 A..H. --- "C:\Documents and Settings\Tanguy\Mes documents\My Docs\Professionnel\OPEX\f‚vrier juin 2006\Commandes\AVRIL\~WRL2003.tmp"
Sat 13 May 2006 68,096 A..H. --- "C:\Documents and Settings\Tanguy\Mes documents\My Docs\Professionnel\OPEX\f‚vrier juin 2006\Commandes\MAI\~WRL0002.tmp"

Finished!