Je ne peut plus rien faire sous ma secion administrateur

salut

dézippe ceci et execute-le

http://dl.dropbox.com/u/21363431/linkfile_fix.zip

merci, j'essaye tout de suite.

ca ne marche pas, il y a un message d'erreur me disant que toutes les données n'on pas été inscrite correctement !

ok probleme d'associations de fichiers sans doute :

telecharge rstAssociations d'Xplode , execute-le , clique sur tous , puis executer

http://www.general-changelog-team.fr/telechargements/lo...

merci pour ta réponse gen-h@ckm@n mais une foi télécharger, je ne peut pas executer le fichier et je ne sait pas pour quoi !

si c bon, je m'etait tromper dans le mode de telechargement ! je te tien au courant

sa a rien changer !
j'avais par contre oublier de dire que j'avais fait " clic droit sur un icon non reconnus (itune) et en fouinant dans les programmes j'avais réussit a retrouver itune donc j'ai fait toujours ouvrir ce programme avec ..." et depuis, j'ai le logo itune sur tout les programmes a la place de la page blanche :-{

il est possible que je soit infecter par un virus agissant sur les programmes internes de Windows !?

telecharge rstassociations d'Xplode , clique sur tous , puis executer :

http://www.general-changelog-team.fr/outils/164-rst-ass...

RE: ;-) .
Merci pour tes lien, mais j'ai bien exécuter le programme, mais même après un redémarrage, rien a changer :-(

mmmmmmm....

vois si tu peux lancer ceci :

desactive ton antivirus

desactive Windows defender si présent

desactive ton pare-feu


Télécharge ici : http://dl.dropbox.com/u/21363431/Pre_scan.exe Pre_Scan , puis enregistre-le sur ton bureau

s'il n'est pas sur ton bureau coupe-le de ton dossier telechargements et colle-le sur ton bureau

Avertissement: Il y aura une extinction courte du bureau --> pas de panique.

une fois telechargé lance-le , laisse faire le scan jusqu'à l'apparition de "Pre_scan.txt" sur le bureau.

si l'outil detecte un proxy et que tu n'en as pas installé
clique sur "supprimer le proxy"

si l'outil semble ne pas avoir fonctionné renomme-le winlogon , ou change son extension en .com ou .scr

Il se peut que l'outil soit un peu long sur la reattribution des fichiers tout depend combien tu en as , laisse-le travailler

Poste Pre_Scan.txt qui apparaitra sur le bureau en fin de scan

NE LE POSTE PAS SUR LE FORUM (il est trop long)

clique sur ce lien : http://www.cijoint.fr/

Clique sur Parcourir et cherche le fichier ci-dessus.

Clique sur Ouvrir.

Clique sur "Cliquez ici pour déposer le fichier".

Un lien de cette forme :

http://www.cijoint.fr/cjlink.php?file=cjge368/cijSKAP5f...

est ajouté dans la page.

Copie ce lien dans ta réponse.

ok, je teste tout de suite. je doit désactiver ma connexion durant le processus ?

sa marche pas !
la première foi sa marchai, et arriver a un moment, sa ma enlever tout ce qu'il y avait sur le bureau ( comme tu l'avais prévue ) mais 2h après c'était toujours pareille ! Donc j'ai éteint mon ordi au bouton, et j'ai redémarrer ma session et réessayer, mais sa me met juste le petit rond bleu a coté de la flèche comme quoi que ca charge mais sa reste comme sa sans rien faire.
PS: merci pour ton aide, c'est sympa ;-)

franchement, je comprend pas ? pourtant je fait attention a ne pas télécharger nimporte quoi et nimporte ou !

je me demande un truc ? croie tu que si j'exécute ce programme sur ma session invité et qu'il s'exécute correctement sa recherchera aussi les problèmes de ma session administrateur ?

salut poste quand meme le rapport obtenu stp

le raport de"Pre_Scan" ? il n'y en a pas eu

Dans C:\

http://www.cijoint.fr/cjlink.php?file=cj201108/cijhnA8i...

je pence que c sa  

je n'y ai pas accès....:S

Bizar !!!!!!!

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Pre_Scan | 1.0.2.59 ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

¤¤¤¤¤ XP | Vista | Seven - 32/64 bits ¤¤¤¤¤

~ Mis à jour le 02/08/2011 | 11.00 par g3n-h@ckm@n
~ Informations : http://www.forum-fec.net/t1444-pre_scan-versions
~ Remontées : http://www.forum-fec.net/t1445-feedback-pre_scan

~ Utilisateur : Invité (Administrateurs)
~ Ordinateur : BOND-PC

~ Système d'exploitation : Windows 7 Home Premium (64 bits) HomePremium
~ Type d'installation : Client
~ Enregistré sous : Microsoft
~ Enregistré sous : Microsoft
~ Processeur : Pentium(R) Dual-Core CPU T4300 @ 2.10GHz
~ Identification : Intel64 Family 6 Model 23 Stepping 10
Internet Explorer : 8.0.7600.16385
Mozilla Firefox : 3.6.18 (fr)
Pare-feu windows : Actif
Windows Defender : Inactif

c:\ -> [Fixed] | [Packard Bell] | Total : 144890 Mo | Free : 45910 Mo -> NTFS
d:\ -> [Fixed] | [DATA] | Total : 144890 Mo | Free : 144780 Mo -> NTFS
e:\ -> [CDROM] | [] | Total : 0 Mo | Free : 0 Mo ->

Scan : 12:57:03 | 04/08/2011

~ Windows Non à jour , mettre à jour

¤¤¤¤¤¤¤¤¤¤ Sessions

~ [HKLM | ProfileList] | S-1-5-21-2956548573-3173664516-3959366155-1000 : ProfileImagePath -> C:\Users\bond
~ [HKLM | ProfileList] | S-1-5-21-2956548573-3173664516-3959366155-1000 : RefCount -> 1
~ [HKLM | ProfileList] | S-1-5-21-2956548573-3173664516-3959366155-1000 : State -> 0
~ [HKLM | ProfileList] | S-1-5-21-2956548573-3173664516-3959366155-501 : ProfileImagePath -> C:\Users\Invité
~ [HKLM | ProfileList] | S-1-5-21-2956548573-3173664516-3959366155-501 : RefCount -> 1
~ [HKLM | ProfileList] | S-1-5-21-2956548573-3173664516-3959366155-501 : State -> 256

¤¤¤¤¤¤¤¤¤¤ Processus en cours

Demarrage : Normal

1532 | C:\Program Files\Alwil Software\Avast5\AvastSvc.exe - Système - Normal - "C:\Program Files\Alwil Software\Avast5\AvastSvc.exe" - 600
1784 | C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe - bond - Normal - /loadhooks /Parent:00000000000006A0 - 1696
1892 | C:\Program Files (x86)\TouchSettings\TouchPortalOBR.exe - bond - Normal - "C:\Program Files (x86)\TouchSettings\TouchPortalOBR.exe" - 1776
2060 | c:\Program Files (x86)\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe - Système - Normal - "c:\Program Files (x86)\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe" - 600
2204 | C:\Program Files (x86)\uTorrent\uTorrent.exe - bond - Normal - "C:\Program Files (x86)\uTorrent\uTorrent.exe" - 1776
2280 | C:\Windows\SysWOW64\svchost.exe - Système - Normal - C:\Windows\SysWOW64\svchost.exe -k Akamai - 600
2468 | C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe - Système - Normal - "C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe" - 600
2700 | C:\Program Files (x86)\Bonjour\mDNSResponder.exe - Système - Normal - "C:\Program Files (x86)\Bonjour\mDNSResponder.exe" - 600
2812 | C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe - Système - Normal - "C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe" - 600
2888 | C:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe - bond - Normal - "C:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe" /s - 2488
2904 | C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe - bond - Normal - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" - 2488
2960 | C:\Program Files\Alwil Software\Avast5\AvastUI.exe - bond - Normal - "C:\Program Files\Alwil Software\Avast5\AvastUI.exe" /nogui - 2488
3020 | C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe - bond - Normal - "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" - 2488
3056 | C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe - bond - Normal - "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW - 2488
2052 | C:\Windows\SysWOW64\PnkBstrA.exe - Système - Normal - C:\Windows\SysWOW64\PnkBstrA.exe - 600
2844 | C:\Program Files (x86)\iTunes\iTunesHelper.exe - bond - Normal - "C:\Program Files (x86)\iTunes\iTunesHelper.exe" - 2488
3296 | C:\Windows\SysWOW64\PnkBstrB.exe - Système - Normal - C:\Windows\SysWOW64\PnkBstrB.exe - 600
3408 | C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe - Système - Normal - "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe" - 600
3572 | C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe - Système - Normal - "C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe" - 600
3636 | C:\Program Files (x86)\Winstep\WsxService.exe - Système - Normal - "C:\Program Files (x86)\Winstep\WsxService" - 600
5304 | C:\Users\bond\Downloads\Pre_scan(2).exe - Invité - Normal - "C:\Users\bond\Downloads\Pre_scan(2).exe" - 5144
5080 | C:\Windows\SysWOW64\cmd.exe - Invité - Normal - cmd /c ""C:\Kill'em\Pv.bat" " - 5304
4108 | C:\Kill'em\Pv.exe - Invité - Normal - \Kill'em\pv.exe -o"%i | %f - %u - %p - %l - %r" - 5080

¤¤¤¤¤¤¤¤¤¤ Démarrage principaux avant suppression

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PhotoGadgetFirstRun_Portal"=0 [?]
"Nexus"=C:\Program Files (x86)\Winstep\Nexus.exe autostart [?]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe /autoRun [?]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [?]
"NortonOnlineBackupReminder"="C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED [?]
"UCam_Menu"="C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\3.0" [?]
"YouCam Mirror Tray icon"="C:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe" /s [?]
"Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [?]
"avast5"="C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui [?]
"SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [?]
"DivXUpdate"="C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW [?]
"QuickTime Task"="C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime [?]
"iTunesHelper"="C:\Program Files (x86)\iTunes\iTunesHelper.exe" [?]

[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=%ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun [?]

[HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=%ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun [?]

[HKEY_CURRENT_USER\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [?]
"NortonOnlineBackupReminder"="C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED [?]
"UCam_Menu"="C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\3.0" [?]
"YouCam Mirror Tray icon"="C:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe" /s [?]
"Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [?]
"avast5"="C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui [?]
"SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [?]
"DivXUpdate"="C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW [?]
"QuickTime Task"="C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime [?]
"iTunesHelper"="C:\Program Files (x86)\iTunes\iTunesHelper.exe" [?]

¤¤¤¤¤¤¤¤¤¤ Autres Démarrages Silencieux


¤

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar] | Locked -> 0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar] | {872b5b88-9db5-4310-bdd0-ac189557e5f5} -> DVDVideoSoftTB Toolbar
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar] | {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} ->
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar] | {2318C2B1-4965-11d4-9B18-009027A5CD4F} -> 0x00
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\EnhancedStorageShell]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SharingPrivate]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved] | {00C6D95F-329C-409a-81D7-C46C66EA7F33} ->
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved] | {80009818-f38f-4af1-87b5-eadab9433e58} -> MF ADTS Property Handler
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved] | {5858A72C-C2B4-4dd7-B2BF-B76DB1BD9F6C} -> Microsoft Office OneNote Namespace Extension for Windows Desktop Search
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved] | {42042206-2D85-11D3-8CFF-005004838597} -> Microsoft Office HTML Icon Handler
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved] | {472083B0-C522-11CF-8763-00608CC02F24} -> avast
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved] | {0563DB41-F538-4B37-A92D-4659049B7766} -> WLMD Message Handler
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved] | {06A2568A-CED6-4187-BB20-400B8C02BE5A} ->
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved] | {00F33137-EE26-412F-8D71-F84E4C2C6625} ->
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved] | {2BE99FD4-A181-4996-BFA9-58C5FFD11F6C} -> Windows Live Photo Gallery Autoplay Drop Target
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved] | {00F30F64-AC33-42F5-8FD1-5DC2D3FDE06C} -> Windows Live Photo Gallery Viewer Drop Target
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved] | {00F374B7-B390-4884-B372-2FC349F2172B} -> Windows Live Photo Gallery Editor Drop Target
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved] | {00F346CB-35A4-465B-8B8F-65A29DBAB1F6} -> Windows Live Photo Gallery Viewer Drop Target Shim
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved] | {00F3712A-CA79-45B4-9E4D-D7891E7F8B9D} -> Windows Live Photo Gallery Editor Drop Target Shim
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved] | {00F30F90-3E96-453B-AFCD-D71989ECC2C7} -> Windows Live Photo Gallery Autoplay Drop Target Shim
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved] | {E0D79304-84BE-11CE-9641-444553540000} -> WinZip
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved] | {E0D79307-84BE-11CE-9641-444553540000} -> WinZip
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved] | {E0D79306-84BE-11CE-9641-444553540000} -> WinZip
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved] | {E0D79305-84BE-11CE-9641-444553540000} -> WinZip

¤¤¤¤¤¤¤¤¤¤ BHO

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}] | (Adobe PDF Link Helper) -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [23/09/2010|03:04:13]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}] | (Search Helper) -> C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [22/09/2010|13:03:38]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{872b5b88-9db5-4310-bdd0-ac189557e5f5}] | (DVDVideoSoftTB Toolbar) -> C:\Program Files (x86)\DVDVideoSoftTB\tbDVDV.dll [05/12/2010|13:10:18]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}] | (avast! WebRep) -> C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [31/07/2011|15:19:08]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] | (Programme d'aide de l'Assistant de connexion Windows Live ID) -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [21/09/2010|15:08:38]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}] | (Google Toolbar Helper) -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [19/06/2011|16:12:06]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}] | (Google Toolbar Notifier BHO) -> C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll [19/06/2011|16:12:10]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] | (Java(tm) Plug-In 2 SSV Helper) -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [25/07/2010|21:54:34]

¤¤¤¤¤¤¤¤¤¤ ActiveX

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] | WMPACCESS -> Microsoft Windows Media Player
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}] | IEACCESS -> Internet Explorer
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}] | BRANDING.CAB -> Browser Customizations
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}] | JAVAVM -> Java (Sun)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] | -> Microsoft Windows Media Player 12.0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] | Theme Component -> Themes Setup
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{3af36230-a269-11d1-b5bf-0000f8051515}] | MobilePk -> Offline Browsing Pack
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] | MailNews -> Microsoft Windows
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA855-CC51-11CF-AAFA-00AA00B6015F}] | DirectDrawEx -> DirectDrawEx
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{45ea75a0-a269-11d1-b5bf-0000f8051515}] | HelpCont -> Internet Explorer Help
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{4f645220-306d-11d2-995d-00c04f98bbc9}] | MSVBScript -> Microsoft Windows Script 5.6
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5fd399c0-a70a-11d1-9948-00c04f98bbc9}] | GenSetup -> Internet Explorer Setup Tools
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{630b1da0-b465-11d1-9948-00c04f98bbc9}] | ExtraPack -> Browsing Enhancements
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}] | Microsoft Windows Media Player -> Microsoft Windows Media Player
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6fab99d0-bab8-11d1-994a-00c04f98bbc9}] | MSN_Auth -> MSN Site Access
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}] | -> Address Book 7
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7C028AF8-F614-47B3-82DA-BA94E41B1089}] | .NETFramework -> .NET Framework
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}] | IE4_SHELLID -> Windows Desktop Update
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}] | BASEIE40_W2K -> Web Platform Customizations
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}] | DOTNETFRAMEWORKS ->
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9381D8F2-0288-11D0-9501-00AA00B911A5}] | Tridata -> Dynamic HTML Data Binding
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD}] | .NETFramework -> .NET Framework
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{C9E9A340-D1F1-11D0-821E-444553540600}] | Fontcore -> Internet Explorer Core Fonts
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{D27CDB6E-AE6D-11CF-96B8-444553540000}] | Flash -> Adobe Flash Player
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{de5aed00-a4bf-11d1-9948-00c04f98bbc9}] | HTMLHelp -> HTML Help
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{E92B03AB-B707-11d2-9CBD-0000F87A369E}] | ADSI -> Active Directory Service Interface
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}] | .NETFramework -> .NET Framework

¤¤¤¤¤¤¤¤¤¤ Windows

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"= C:\Windows\SysWOW64\guard32.dll
"LoadAppInit_DLLs"=1

¤¤¤¤¤¤¤¤¤¤ Winlogon


¤

[HKLM | Winlogon] | Shell : explorer.exe
[HKLM | Winlogon] | AutoRestartShell : -> 1
[HKLM | Winlogon] | userinit : userinit.exe -> C:\Windows\SysWOW64\userinit.exe,
[HKLM | Winlogon] | PowerDownAfterShutdown : -> 1
[HKLM | Winlogon] | System :

¤¤¤¤¤¤¤¤¤¤ Winlogon\Notify


¤¤¤¤¤¤¤¤¤¤ Associations

[.exe] : exefile
[exefile | command] : "%1" %*
[.com] : comfile
[comfile | command] : "%1" %*
[.reg] : regfile
[regfile | command] : regedit.exe "%1"
[.scr] : scrfile
[scrfile | command] : "%1" /S
[.bat] : batfile
[batfile | command] : "%1" %*
[.cmd] : cmdfile
[cmdfile | command] : "%1" %*
[.pif] : piffile
[piffile | command] : "%1" %*
[.url] : InternetShortcut
[InternetShortcut | command] : "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l -> "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l
[Application.Manifest | command] : rundll32.exe dfshim.dll,ShOpenVerbApplication %1
[Application.Reference | command] : rundll32.exe dfshim.dll,ShOpenVerbShortcut %1|%2
[Folder | command] : %SystemRoot%\Explorer.exe -> C:\Windows\explorer.exe

¤

[Firefox | Command] | @ : C:\Program Files (x86)\Mozilla Firefox\firefox.exe -> "C:\Program Files (x86)\Mozilla Firefox\Firefox.exe"
[Firefox - Safemode | Command] | @ : "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -safe-mode
[IE | Command] | @ : C:\Program Files (x86)\Internet Explorer\iexplore.exe -> "C:\Program Files (x86)\Internet Explorer\iexplore.exe"
[Applications | IE | Command] | @ : "C:\Program Files (x86)\Internet Explorer\iexplore.exe" %1
[Assoc | Applications] | @ : http://go.microsoft.com/fwlink/?LinkId=57426&Ext=%s -> http://shell.windows.com/fileassoc/%04x/xml/redir.asp?E...

¤¤¤¤¤¤¤¤¤¤ Divers

[HKLM | HideDesktopIcons\ClassicStartMenu] | {9343812e-1c37-4a49-a12e-4b2d810d956b} : 1 -> 0
[HKLM | HideDesktopIcons\NewStartPanel] | {F02C1A0D-BE21-4350-88B0-7367FC96EF3C} : 1 -> 0
[HKLM | HideDesktopIcons\NewStartPanel] | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> 0
[HKLM | HideDesktopIcons\NewStartPanel] | {208D2C60-3AEA-1069-A2D7-08002B30309D} : 1 -> 0
[HKLM | HideDesktopIcons\NewStartPanel] | {871C5380-42A0-1069-A2EA-08002B30309D} : 1 -> 0
[HKLM | HideDesktopIcons\NewStartPanel] | {5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0} : 1 -> 0
[HKLM | HideDesktopIcons\NewStartPanel] | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> 0
[HKLM | HideDesktopIcons\NewStartPanel] | {9343812e-1c37-4a49-a12e-4b2d810d956b} : 1 -> 0
[HKCU | Desktop] | Wallpaper : C:\Users\Invité\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
[HKLM | policies\Explorer] | NoActiveDesktop : 1 -> 0
[HKLM | policies\Explorer] | NoActiveDesktopChanges : 1 -> 0

¤¤¤¤¤¤¤¤¤¤ Services

[Ndisuio] | Start : 3 : Actif
[Power] | Start : 2 : Actif
[Profsvc] | Start : 2 : Actif
[PlugPlay] | Start : 2 : Actif
[PEAUTH] | Start : 2 : Actif
[nsi] | Start : 2 : Actif
[NLASvc] | Start : 2 : Actif
[MPSsvc] | Start : 2 : Actif
[MMCSS] | Start : 2 : Actif
[luafv] | Start : 2 : Actif
[lltdio] | Start : 2 : Actif
[Iphlpsvc] | Start : 2 : Actif
[IKEEXT] | Start : 2 : Actif
[gpsvc] | Start : 2 : Actif
[lmhosts] | Start : 2 : Actif
[LanmanWorkstation] | Start : 2 : Actif
[LanmanServer] | Start : 2 : Actif
[agp440] | Start : 3 -> 2 : Inactif
[AudioEndpointBuilder] | Start : 2 : Actif
[Audiosrv] | Start : 2 : Actif
[BFE] | Start : 2 : Actif
[Bits] | Start : 2 : Actif
[CryptSvc] | Start : 2 : Actif
[EapHost] | Start : 3 -> 2 : Actif
[Wlansvc] | Start : 2 : Actif
[SharedAccess] | Start : 2 : Actif
[windefend] | Start : 3 -> 2 : Inactif
[wuauserv] | Start : 2 : Actif
[WerSvc] | Start : 3 -> 2 : Actif
[wscsvc] | Start : 2 : Actif

¤¤¤¤¤¤¤¤¤¤ Internet Explorer

[HKCU | Main] | Start Page : http://homepage.packardbell.com/rdr.aspx?b=ACPW&l=040c&... -> http://www.google.com/
[HKCU | Main] | Local Page : C:\Windows\system32\blank.htm -> C:\Windows\SysWOW64\blank.htm
[HKCU | Main] | Search Page : http://go.microsoft.com/fwlink/?LinkId=54896 -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iese...
[HKCU | Main] | Use Custom Search URL : -> 0

[HKLM | Search] | SearchAssistant : -> http://www.google.com/ie
[HKLM | Main] | Start Page : http://homepage.packardbell.com/rdr.aspx?b=ACPW&l=040c&... -> http://go.microsoft.com/fwlink/?LinkId=69157
[HKLM | Main] | Local Page : C:\Windows\SysWOW64\blank.htm
[HKLM | Main] | Default_Search_URL : http://go.microsoft.com/fwlink/?LinkId=54896
[HKLM | Main] | Default_Page_URL : http://homepage.packardbell.com/rdr.aspx?b=ACPW&l=040c&... -> http://go.microsoft.com/fwlink/?LinkId=69157
[HKLM | Main] | Search Page : http://go.microsoft.com/fwlink/?LinkId=54896

¤

[HKCU | PhishingFilter] | Enabled : -> 2
[HKCU | PhishingFilter] | EnabledV8 : 1
[HKCU | Internet settings] | ProxyOverride : -> *.local
[HKCU | Internet settings] | EnableHttp1_1 : 1
[HKCU | Internet Settings] | MigrateProxy : 1
[HKCU | Internet Settings] | WarnonBadCertRecving : -> 1
[HKCU | Internet Settings] | WarnOnHTTPSToHTTPRedirect : -> 1
[HKCU | Internet Settings] | WarnonZoneCrossing : 0 -> 1
[HKCU | Internet Settings] | AutoConfigProxy : wininet.dll
[HKLM | AboutURLs] | Tabs : res://ieframe.dll/tabswelcome.htm

¤¤¤¤¤¤¤¤¤¤ Extensions Firefox

C:\Users\Invité\AppData\Roaming\Mozilla\Firefox\Profiles\s9kurosx.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}

¤


¤¤¤¤¤¤¤¤¤¤ DNS

[HKLM\CCS | Tcpip\Parameters] | DhcpNameServer -> 192.168.1.1 192.168.1.1
[HKLM\CCS | Interfaces\{0FA9FF8C-947B-4972-8F66-47D57AC01FF3}] | DhcpNameServer -> 192.168.10.110 8.8.8.8
[HKLM\CCS | Interfaces\{2EF59813-DF93-40DE-A6F8-28DE0C68C9F0}] | DhcpNameServer -> 192.168.10.110 8.8.8.8
[HKLM\CCS | Interfaces\{42A660E8-FDBA-4A21-A925-FA97B2762C6D}] | DhcpNameServer -> 192.168.1.1 192.168.1.1
[HKLM\CCS | Interfaces\{A68C73EA-6D85-4561-B9C5-E47E206EB72D}] | DhcpNameServer -> 192.168.1.1 192.168.1.1
[HKLM\CS001 | Interfaces\{0FA9FF8C-947B-4972-8F66-47D57AC01FF3}] | DhcpNameServer -> 192.168.10.110 8.8.8.8
[HKLM\CS001 | Interfaces\{2EF59813-DF93-40DE-A6F8-28DE0C68C9F0}] | DhcpNameServer -> 192.168.10.110 8.8.8.8
[HKLM\CS001 | Interfaces\{42A660E8-FDBA-4A21-A925-FA97B2762C6D}] | DhcpNameServer -> 192.168.1.1 192.168.1.1
[HKLM\CS001 | Interfaces\{A68C73EA-6D85-4561-B9C5-E47E206EB72D}] | DhcpNameServer -> 192.168.1.1 192.168.1.1
[HKLM\CS002 | Interfaces\{0FA9FF8C-947B-4972-8F66-47D57AC01FF3}] | DhcpNameServer -> 192.168.10.110 8.8.8.8
[HKLM\CS002 | Interfaces\{2EF59813-DF93-40DE-A6F8-28DE0C68C9F0}] | DhcpNameServer -> 192.168.10.110 8.8.8.8
[HKLM\CS002 | Interfaces\{42A660E8-FDBA-4A21-A925-FA97B2762C6D}] | DhcpNameServer -> 192.168.1.1 192.168.1.1
[HKLM\CS002 | Interfaces\{A68C73EA-6D85-4561-B9C5-E47E206EB72D}] | DhcpNameServer -> 192.168.1.1 192.168.1.1
[HKLM\CCS | Tcpip\Parameters] | NameServer ->
[HKLM\CCS | Interfaces\{2EF59813-DF93-40DE-A6F8-28DE0C68C9F0}] | NameServer -> 156.154.70.22,156.154.71.22
[HKLM\CCS | Interfaces\{9A67A0F5-76DD-4F15-A2FE-812C1F334539}] | NameServer -> 156.154.70.22,156.154.71.22
[HKLM\CS001 | Interfaces\{2EF59813-DF93-40DE-A6F8-28DE0C68C9F0}] | NameServer -> 156.154.70.22,156.154.71.22
[HKLM\CS001 | Interfaces\{9A67A0F5-76DD-4F15-A2FE-812C1F334539}] | NameServer -> 156.154.70.22,156.154.71.22
[HKLM\CS002 | Interfaces\{2EF59813-DF93-40DE-A6F8-28DE0C68C9F0}] | NameServer -> 156.154.70.22,156.154.71.22
[HKLM\CS002 | Interfaces\{9A67A0F5-76DD-4F15-A2FE-812C1F334539}] | NameServer -> 156.154.70.22,156.154.71.22

¤¤¤¤¤¤¤¤¤¤ Hosts

# 127.0.0.1 localhost
# ::1 localhost

¤¤¤¤¤¤¤¤¤¤ HKCU\Software

[HKEY_CURRENT_USER\Software\Adobe]
[HKEY_CURRENT_USER\Software\ALWIL Software]
[HKEY_CURRENT_USER\Software\AppDataLow]
[HKEY_CURRENT_USER\Software\Apple Computer, Inc.]
[HKEY_CURRENT_USER\Software\Apple Inc.]
[HKEY_CURRENT_USER\Software\AVAST Software]
[HKEY_CURRENT_USER\Software\BitTorrent]
[HKEY_CURRENT_USER\Software\Clients]
[HKEY_CURRENT_USER\Software\ComodoGroup]
[HKEY_CURRENT_USER\Software\CyberLink]
[HKEY_CURRENT_USER\Software\DivX]
[HKEY_CURRENT_USER\Software\DivXNetworks]
[HKEY_CURRENT_USER\Software\DVDVideoSoft]
[HKEY_CURRENT_USER\Software\EPSON]
[HKEY_CURRENT_USER\Software\g3n-h@ckm@n]
[HKEY_CURRENT_USER\Software\Google]
[HKEY_CURRENT_USER\Software\GRETECH]
[HKEY_CURRENT_USER\Software\Intel]
[HKEY_CURRENT_USER\Software\JavaSoft]
[HKEY_CURRENT_USER\Software\Licenses]
[HKEY_CURRENT_USER\Software\Macromedia]
[HKEY_CURRENT_USER\Software\Microsoft]
[HKEY_CURRENT_USER\Software\MozillaPlugins]
[HKEY_CURRENT_USER\Software\Netscape]
[HKEY_CURRENT_USER\Software\Nico Mak Computing]
[HKEY_CURRENT_USER\Software\ODBC]
[HKEY_CURRENT_USER\Software\OEM]
[HKEY_CURRENT_USER\Software\ORL]
[HKEY_CURRENT_USER\Software\Policies]
[HKEY_CURRENT_USER\Software\Realtek]
[HKEY_CURRENT_USER\Software\RtkPCEE3sMsg]
[HKEY_CURRENT_USER\Software\Trolltech]
[HKEY_CURRENT_USER\Software\WinSTEP2000]
[HKEY_CURRENT_USER\Software\WinZip Computing]
[HKEY_CURRENT_USER\Software\Wow6432Node]
[HKEY_CURRENT_USER\Software\Classes]

¤¤¤¤¤¤¤¤¤¤ HKLM\Software

[HKEY_LOCAL_MACHINE\Software\ABBYY]
[HKEY_LOCAL_MACHINE\Software\Acer Corp.]
[HKEY_LOCAL_MACHINE\Software\Acer Incorporated]
[HKEY_LOCAL_MACHINE\Software\Adobe]
[HKEY_LOCAL_MACHINE\Software\ALWIL Software]
[HKEY_LOCAL_MACHINE\Software\Apple Computer, Inc.]
[HKEY_LOCAL_MACHINE\Software\Apple Inc.]
[HKEY_LOCAL_MACHINE\Software\Audible]
[HKEY_LOCAL_MACHINE\Software\AVAST Software]
[HKEY_LOCAL_MACHINE\Software\AVS4YOU]
[HKEY_LOCAL_MACHINE\Software\Conduit]
[HKEY_LOCAL_MACHINE\Software\CyberLink]
[HKEY_LOCAL_MACHINE\Software\Digital River]
[HKEY_LOCAL_MACHINE\Software\DivX]
[HKEY_LOCAL_MACHINE\Software\DivXNetworks]
[HKEY_LOCAL_MACHINE\Software\Dofus 2]
[HKEY_LOCAL_MACHINE\Software\DVDVideoSoft]
[HKEY_LOCAL_MACHINE\Software\DVDVideoSoftTB]
[HKEY_LOCAL_MACHINE\Software\Electronic Arts]
[HKEY_LOCAL_MACHINE\Software\EPSON]
[HKEY_LOCAL_MACHINE\Software\Firaxis Games]
[HKEY_LOCAL_MACHINE\Software\FRANCE TELECOM]
[HKEY_LOCAL_MACHINE\Software\Google]
[HKEY_LOCAL_MACHINE\Software\GRETECH]
[HKEY_LOCAL_MACHINE\Software\InstallShield]
[HKEY_LOCAL_MACHINE\Software\Intel]
[HKEY_LOCAL_MACHINE\Software\ITE]
[HKEY_LOCAL_MACHINE\Software\JavaSoft]
[HKEY_LOCAL_MACHINE\Software\JreMetrics]
[HKEY_LOCAL_MACHINE\Software\Macromedia]
[HKEY_LOCAL_MACHINE\Software\Macrovision]
[HKEY_LOCAL_MACHINE\Software\Microsoft]
[HKEY_LOCAL_MACHINE\Software\Mozilla]
[HKEY_LOCAL_MACHINE\Software\mozilla.org]
[HKEY_LOCAL_MACHINE\Software\MozillaPlugins]
[HKEY_LOCAL_MACHINE\Software\Nero]
[HKEY_LOCAL_MACHINE\Software\Nico Mak Computing]
[HKEY_LOCAL_MACHINE\Software\Oberon Media]
[HKEY_LOCAL_MACHINE\Software\ODBC]
[HKEY_LOCAL_MACHINE\Software\OEM]
[HKEY_LOCAL_MACHINE\Software\Packard Bell]
[HKEY_LOCAL_MACHINE\Software\PocketSoft]
[HKEY_LOCAL_MACHINE\Software\Realtek]
[HKEY_LOCAL_MACHINE\Software\Realtek Semiconductor Corp.]
[HKEY_LOCAL_MACHINE\Software\Sims]
[HKEY_LOCAL_MACHINE\Software\Sonic]
[HKEY_LOCAL_MACHINE\Software\Symantec]
[HKEY_LOCAL_MACHINE\Software\Ubisoft]
[HKEY_LOCAL_MACHINE\Software\VirtualDJ]
[HKEY_LOCAL_MACHINE\Software\Vivendi Universal Games]
[HKEY_LOCAL_MACHINE\Software\Xilisoft]
[HKEY_LOCAL_MACHINE\Software\Classes]
[HKEY_LOCAL_MACHINE\Software\Clients]
[HKEY_LOCAL_MACHINE\Software\Even Balance]
[HKEY_LOCAL_MACHINE\Software\Policies]
[HKEY_LOCAL_MACHINE\Software\RegisteredApplications]

¤¤¤¤¤¤¤¤¤¤ Processus


¤¤¤¤¤¤¤¤¤¤ Traitement Fichiers | Dossiers | Registre

Mise en quarantaine : \$Recycle.bin\S-1-5-18\$IUYSWX0.Gadget
Erreur de suppression : \$Recycle.bin\S-1-5-18\$RUYSWX0.Gadget
Mise en quarantaine : \$Recycle.bin\S-1-5-18\desktop.ini
Mise en quarantaine : \$Recycle.bin\S-1-5-20\desktop.ini
Mise en quarantaine : \$Recycle.bin\S-1-5-21-2956548573-3173664516-3959366155-1000\$ITIZK99.lnk
Mise en quarantaine : \$Recycle.bin\S-1-5-21-2956548573-3173664516-3959366155-1000\desktop.ini
Mise en quarantaine : \$Recycle.bin\S-1-5-21-2956548573-3173664516-3959366155-500\desktop.ini
Mise en quarantaine : \$Recycle.bin\S-1-5-21-2956548573-3173664516-3959366155-501\desktop.ini
Mise en quarantaine : \$Recycle.bin\S-1-5-21-3387428125-3313751229-1700584240-500\desktop.ini
Clé supprimée : [HKCU | Run] | PhotoGadgetFirstRun_Portal -> 0
Erreur de Suppression : C:\Users\Invité\Downloads\winzip155.exe
Erreur de suppression : C:\Users\INVIT~1\AppData\Local\Temp\div4D45.tmp
Supprimé : C:\Users\INVIT~1\AppData\Local\Temp\div4D45.tmp
Erreur de suppression : C:\Users\INVIT~1\AppData\Local\Temp\divAED3.tmp
Supprimé : C:\Users\INVIT~1\AppData\Local\Temp\divAED3.tmp
Mise en quarantaine : C:\Users\INVIT~1\AppData\Local\Temp\MSIA9B6.tmp
Mise en quarantaine : C:\Users\INVIT~1\AppData\Local\Temp\MSIAAFF.tmp
Mise en quarantaine : C:\Users\INVIT~1\AppData\Local\Temp\MSIBE51.tmp
Mise en quarantaine : C:\Users\INVIT~1\AppData\Local\Temp\MSIEC.tmp
Mise en quarantaine : C:\Users\INVIT~1\AppData\Local\Temp\MSIF6EC.tmp
Mise en quarantaine : C:\Users\INVIT~1\AppData\Local\Temp\MSIF7E6.tmp
Mise en quarantaine : C:\Users\INVIT~1\AppData\Local\Temp\~DFF57D595E498E6DD8.TMP
Mise en quarantaine : C:\Windows\Temp\_avast_\unp58562407.tmp
Mise en quarantaine : C:\ProgramData\FullRemove.exe

¤¤¤¤¤¤¤¤¤¤ IFEO


¤¤¤¤¤¤¤¤¤¤ Mountpoints2



¤¤¤¤¤¤¤¤¤¤ %Userprofile%

[13/05/2011|18:50:20] | C:\Users\Invité\AppData
[13/05/2011|18:50:21] | C:\Users\Invité\Application Data
[13/05/2011|18:50:32] | C:\Users\Invité\Contacts
[13/05/2011|18:50:21] | C:\Users\Invité\Cookies
[13/05/2011|18:50:20] | C:\Users\Invité\Desktop
[13/05/2011|18:50:20] | C:\Users\Invité\Documents
[13/05/2011|18:50:20] | C:\Users\Invité\Downloads
[13/05/2011|18:50:20] | C:\Users\Invité\Favorites
[31/07/2011|11:28:14] | C:\Users\Invité\ims_radios.xml
[13/05/2011|18:50:20] | C:\Users\Invité\Links
[13/05/2011|18:50:21] | C:\Users\Invité\Local Settings
[13/05/2011|18:50:21] | C:\Users\Invité\Menu Démarrer
[13/05/2011|18:50:20] | C:\Users\Invité\Mes documents
[13/05/2011|18:50:21] | C:\Users\Invité\Modèles
[13/05/2011|18:50:20] | C:\Users\Invité\Music
[13/05/2011|18:50:19] | C:\Users\Invité\NTUSER.DAT
[13/05/2011|18:50:20] | C:\Users\Invité\ntuser.dat.LOG1
[13/05/2011|18:50:20] | C:\Users\Invité\ntuser.dat.LOG2
[13/05/2011|18:50:20] | C:\Users\Invité\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
[13/05/2011|18:50:20] | C:\Users\Invité\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
[13/05/2011|18:50:20] | C:\Users\Invité\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
[27/07/2011|13:12:50] | C:\Users\Invité\NTUSER.DAT{07ec3c0b-b78e-11e0-8bbe-eceb7a6e78d6}.TM.blf
[27/07/2011|13:12:50] | C:\Users\Invité\NTUSER.DAT{07ec3c0b-b78e-11e0-8bbe-eceb7a6e78d6}.TMContainer00000000000000000001.regtrans-ms
[27/07/2011|13:12:50] | C:\Users\Invité\NTUSER.DAT{07ec3c0b-b78e-11e0-8bbe-eceb7a6e78d6}.TMContainer00000000000000000002.regtrans-ms
[27/07/2011|19:40:18] | C:\Users\Invité\NTUSER.DAT{fc76a0d9-b875-11e0-ab36-ecdf8e1a94d4}.TM.blf
[27/07/2011|19:40:18] | C:\Users\Invité\NTUSER.DAT{fc76a0d9-b875-11e0-ab36-ecdf8e1a94d4}.TMContainer00000000000000000001.regtrans-ms
[27/07/2011|19:40:18] | C:\Users\Invité\NTUSER.DAT{fc76a0d9-b875-11e0-ab36-ecdf8e1a94d4}.TMContainer00000000000000000002.regtrans-ms
[13/05/2011|18:50:21] | C:\Users\Invité\ntuser.ini
[13/05/2011|18:50:20] | C:\Users\Invité\Pictures
[13/05/2011|18:50:21] | C:\Users\Invité\Recent
[13/05/2011|18:50:20] | C:\Users\Invité\Saved Games
[13/05/2011|18:50:44] | C:\Users\Invité\Searches
[13/05/2011|18:50:21] | C:\Users\Invité\SendTo
[31/05/2011|19:33:16] | C:\Users\Invité\Sti_Trace.log
[31/07/2011|11:28:15] | C:\Users\Invité\swap.xml
[13/05/2011|18:50:20] | C:\Users\Invité\Videos
[13/05/2011|18:50:21] | C:\Users\Invité\Voisinage d'impression
[13/05/2011|18:50:21] | C:\Users\Invité\Voisinage réseau

¤¤¤¤¤¤¤¤¤¤ %StartMenu%

[14/07/2009|07:01:14] | C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk
[14/07/2009|06:49:40] | C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini
[25/12/2009|20:24:03] | C:\ProgramData\Microsoft\Windows\Start Menu\Programmes
[14/07/2009|05:20:08] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs
[14/07/2009|06:49:40] | C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
[31/07/2011|00:57:34] | C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk

¤¤¤¤¤¤¤¤¤¤ %StartMenu%\Programs

[05/09/2010|15:44:24] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABBYY FineReader 6.0 Sprint
[14/07/2009|05:20:08] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
[14/07/2009|07:32:38] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[25/09/2009|23:01:58] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop Elements 7.0.lnk
[11/09/2009|05:23:31] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader 9.lnk
[20/08/2010|19:09:03] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
[22/07/2010|12:34:34] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
[22/02/2011|16:29:55] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Codemasters
[04/08/2011|12:50:04] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\COMODO
[11/09/2009|05:30:36] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Contact a friend for assistance.lnk
[14/07/2009|06:54:23] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini
[04/08/2010|21:53:44] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DicoMots
[18/01/2011|23:56:59] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX Plus
[26/12/2010|17:10:52] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dofus 2
[05/12/2010|13:10:10] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
[22/07/2010|13:05:17] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Electronic Arts
[05/09/2010|15:33:38] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
[05/09/2010|15:45:45] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Creativity Suite
[05/09/2010|15:33:16] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Scan
[14/07/2009|07:32:38] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
[17/02/2010|16:58:33] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOM Player
[12/05/2011|19:51:15] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[30/12/2009|21:54:43] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JoWooD
[25/09/2009|23:11:31] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lanceur de tâches Microsoft Works.lnk
[14/07/2009|05:20:08] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
[11/09/2009|04:34:02] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[11/09/2009|05:03:51] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
[25/07/2010|21:48:40] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
[30/07/2010|23:03:31] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[11/09/2009|04:52:27] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Touch Pack for Windows 7
[25/09/2009|23:11:31] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Works
[01/11/2010|22:27:27] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox
[11/09/2009|05:19:08] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
[11/09/2009|05:30:20] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Online Backup
[11/09/2009|05:00:18] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Packard Bell
[11/09/2009|05:13:25] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Packard Bell - Security & Support
[11/09/2009|04:55:12] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Packard Bell GameZone
[25/09/2009|23:14:27] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerCinema
[12/05/2011|19:49:35] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
[14/07/2009|06:57:08] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
[14/07/2009|05:20:08] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
[14/07/2009|09:44:38] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
[04/06/2010|20:14:51] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ubisoft
[25/05/2010|22:11:19] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Virtual DJ
[25/09/2009|23:11:59] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visionneuse Microsoft Office PowerPoint 2007.lnk
[29/08/2010|11:24:18] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vivendi Universal Games
[11/09/2009|05:16:58] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Welcome Center.lnk
[14/07/2009|06:57:09] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk
[11/09/2009|04:33:58] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[14/07/2009|06:54:59] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
[25/09/2009|23:07:01] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
[25/03/2011|22:56:58] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
[25/03/2011|22:56:33] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
[25/03/2011|22:57:28] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Movie Maker.lnk
[25/03/2011|22:57:17] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Photo Gallery.lnk
[14/07/2009|06:57:06] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
[31/07/2011|15:27:32] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winstep
[31/07/2011|00:57:34] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
[14/07/2009|06:57:08] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk

¤¤¤¤¤¤¤¤¤¤ %StartMenu%\Programs\Startup

[14/07/2009|06:54:23] | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini

¤¤¤¤¤¤¤¤¤¤ %AppData%

[14/05/2011|13:07:56] | C:\Users\Invité\AppData\Roaming\Adobe
[13/05/2011|18:51:08] | C:\Users\Invité\AppData\Roaming\Apple Computer
[20/05/2011|22:46:39] | C:\Users\Invité\AppData\Roaming\CyberLink
[19/05/2011|20:19:19] | C:\Users\Invité\AppData\Roaming\DivX
[11/06/2011|13:24:59] | C:\Users\Invité\AppData\Roaming\DVDVideoSoft
[31/05/2011|19:48:50] | C:\Users\Invité\AppData\Roaming\EPSON
[26/06/2011|22:35:19] | C:\Users\Invité\AppData\Roaming\Google
[19/05/2011|19:48:51] | C:\Users\Invité\AppData\Roaming\GRETECH
[13/05/2011|18:50:35] | C:\Users\Invité\AppData\Roaming\Identities
[13/05/2011|18:50:20] | C:\Users\Invité\AppData\Roaming\Macromedia
[13/05/2011|18:50:20] | C:\Users\Invité\AppData\Roaming\Media Center Programs
[13/05/2011|18:50:20] | C:\Users\Invité\AppData\Roaming\Microsoft
[14/05/2011|13:06:45] | C:\Users\Invité\AppData\Roaming\Mozilla
[15/05/2011|10:21:16] | C:\Users\Invité\AppData\Roaming\Template
[13/05/2011|18:51:18] | C:\Users\Invité\AppData\Roaming\TouchGadget
[12/06/2011|13:16:19] | C:\Users\Invité\AppData\Roaming\uTorrent
[01/08/2011|00:45:24] | C:\Users\Invité\AppData\Roaming\Windows Live Writer
[31/07/2011|23:39:55] | C:\Users\Invité\AppData\Roaming\WinZip
[15/05/2011|10:21:15] | C:\Users\Invité\AppData\Roaming\wklnhst.dat

¤¤¤¤¤¤¤¤¤¤ %CommonAppData%

[11/09/2009|05:23:25] | C:\ProgramData\Adobe
[31/08/2010|11:54:04] | C:\ProgramData\Age of Empires 3
[10/02/2010|14:05:53] | C:\ProgramData\AirportMania
[22/07/2010|12:33:47] | C:\ProgramData\Alwil Software
[20/08/2010|19:08:35] | C:\ProgramData\Apple
[20/08/2010|19:09:13] | C:\ProgramData\Apple Computer
[14/07/2009|07:08:56] | C:\ProgramData\Application Data
[11/09/2009|04:52:07] | C:\ProgramData\Applications
[22/08/2010|11:26:49] | C:\ProgramData\AVS4YOU
[11/02/2010|12:06:19] | C:\ProgramData\AWEM
[25/12/2009|20:24:03] | C:\ProgramData\Bureau
[31/07/2011|14:17:17] | C:\ProgramData\Comodo
[31/07/2011|14:17:11] | C:\ProgramData\Comodo Downloader
[25/09/2009|23:13:15] | C:\ProgramData\CyberLink
[14/07/2009|07:08:56] | C:\ProgramData\Desktop
[18/01/2011|22:32:51] | C:\ProgramData\DivX
[14/07/2009|07:08:56] | C:\ProgramData\Documents
[10/02/2010|14:03:52] | C:\ProgramData\EA
[25/02/2010|18:57:07] | C:\ProgramData\Electronic Arts
[05/09/2010|15:33:26] | C:\ProgramData\EPSON
[25/12/2009|20:24:03] | C:\ProgramData\Favoris
[14/07/2009|07:08:56] | C:\ProgramData\Favorites
[24/03/2011|20:58:54] | C:\ProgramData\FLEXnet
[11/09/2009|05:17:14] | C:\ProgramData\Google
[25/12/2009|20:24:03] | C:\ProgramData\Menu Démarrer
[14/07/2009|05:20:08] | C:\ProgramData\Microsoft
[11/09/2009|05:01:27] | C:\ProgramData\Microsoft Help
[25/12/2009|20:24:03] | C:\ProgramData\Modèles
[11/09/2009|05:18:51] | C:\ProgramData\Nero
[11/09/2009|05:26:20] | C:\ProgramData\Norton
[11/09/2009|05:26:06] | C:\ProgramData\NortonInstaller
[11/09/2009|05:29:23] | C:\ProgramData\OEM
[11/09/2009|05:14:32] | C:\ProgramData\Packard Bell
[11/09/2009|05:17:18] | C:\ProgramData\Partner
[14/07/2009|07:08:56] | C:\ProgramData\Start Menu
[25/07/2010|21:55:07] | C:\ProgramData\Sun
[11/09/2009|05:30:18] | C:\ProgramData\Symantec
[25/09/2009|22:57:52] | C:\ProgramData\Temp
[14/07/2009|07:08:56] | C:\ProgramData\Templates
[05/09/2010|15:45:44] | C:\ProgramData\UDL
[10/08/2010|19:09:09] | C:\ProgramData\WinZip
[25/09/2009|23:13:21] | C:\ProgramData\{2637C347-9DAD-11D6-9EA2-00055D0CA761}.log
[25/09/2009|23:14:36] | C:\ProgramData\{70CC0095-AA68-45BE-AE98-D8170182E9EB}.log
[20/08/2010|19:10:07] | C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}

¤¤¤¤¤¤¤¤¤¤ %LocalAppData%

[21/06/2011|00:22:58] | C:\Users\Invité\AppData\Local\Adobe
[20/06/2011|23:36:13] | C:\Users\Invité\AppData\Local\Apple
[13/05/2011|19:21:29] | C:\Users\Invité\AppData\Local\Apple Computer
[13/05/2011|18:50:21] | C:\Users\Invité\AppData\Local\Application Data
[27/07/2011|20:36:57] | C:\Users\Invité\AppData\Local\ars.cache
[27/07/2011|20:37:20] | C:\Users\Invité\AppData\Local\census.cache
[20/05/2011|22:46:38] | C:\Users\Invité\AppData\Local\CyberLink
[29/06/2011|18:19:18] | C:\Users\Invité\AppData\Local\ElevatedDiagnostics
[13/05/2011|19:21:34] | C:\Users\Invité\AppData\Local\GDIPFONTCACHEV1.DAT
[26/06/2011|22:35:18] | C:\Users\Invité\AppData\Local\Google
[13/05/2011|18:50:21] | C:\Users\Invité\AppData\Local\Historique
[27/07/2011|19:40:23] | C:\Users\Invité\AppData\Local\housecall.guid.cache
[13/05/2011|20:05:32] | C:\Users\Invité\AppData\Local\IconCache.db
[13/05/2011|18:50:20] | C:\Users\Invité\AppData\Local\Microsoft
[13/05/2011|18:50:20] | C:\Users\Invité\AppData\Local\Microsoft Help
[14/05/2011|13:06:46] | C:\Users\Invité\AppData\Local\Mozilla
[31/07/2011|19:39:01] | C:\Users\Invité\AppData\Local\Resmon.ResmonCfg
[13/05/2011|18:50:20] | C:\Users\Invité\AppData\Local\Temp
[13/05/2011|18:50:21] | C:\Users\Invité\AppData\Local\Temporary Internet Files
[13/05/2011|18:50:28] | C:\Users\Invité\AppData\Local\VirtualStore
[01/08/2011|00:45:24] | C:\Users\Invité\AppData\Local\Windows Live Writer
[31/07/2011|00:57:24] | C:\Users\Invité\AppData\Local\WinZip
[01/08/2011|00:45:38] | C:\Users\Invité\AppData\Local\{B57DFA02-4EAB-44C7-8287-863F4F47814A}

¤¤¤¤¤¤¤¤¤¤ %ProgramFiles%

[05/09/2010|15:43:40] | C:\Program Files (x86)\ABBYY FineReader 6.0 Sprint
[11/09/2009|05:23:07] | C:\Program Files (x86)\Adobe
[20/08/2010|19:09:03] | C:\Program Files (x86)\Apple Software Update
[22/08/2010|11:26:49] | C:\Program Files (x86)\AVS4YOU
[11/06/2011|19:52:20] | C:\Program Files (x86)\BitTorrent
[12/05/2011|19:48:31] | C:\Program Files (x86)\Bonjour
[14/07/2009|05:20:08] | C:\Program Files (x86)\Common Files
[05/12/2010|13:10:18] | C:\Program Files (x86)\Conduit
[25/09/2009|22:58:50] | C:\Program Files (x86)\CyberLink
[14/07/2009|06:54:24] | C:\Program Files (x86)\desktop.ini
[29/08/2010|11:42:01] | C:\Program Files (x86)\directx
[18/01/2011|22:40:31] | C:\Program Files (x86)\DivX
[26/12/2010|17:10:51] | C:\Program Files (x86)\Dofus 2
[05/12/2010|13:10:07] | C:\Program Files (x86)\DVDVideoSoft
[05/12/2010|13:10:18] | C:\Program Files (x86)\DVDVideoSoftTB
[25/02/2010|18:33:26] | C:\Program Files (x86)\Electronic Arts
[05/09/2010|15:33:16] | C:\Program Files (x86)\epson
[11/09/2009|05:17:14] | C:\Program Files (x86)\Google
[17/02/2010|16:58:23] | C:\Program Files (x86)\GRETECH
[11/09/2009|05:00:11] | C:\Program Files (x86)\InstallShield Installation Information
[11/09/2009|04:39:12] | C:\Program Files (x86)\Intel
[14/07/2009|05:20:08] | C:\Program Files (x86)\Internet Explorer
[25/09/2009|22:52:16] | C:\Program Files (x86)\ITE
[12/05/2011|19:51:00] | C:\Program Files (x86)\iTunes
[25/07/2010|21:54:33] | C:\Program Files (x86)\Java
[11/09/2009|04:49:17] | C:\Program Files (x86)\JMicron
[22/08/2010|19:24:17] | C:\Program Files (x86)\LimeWire
[22/07/2010|12:54:31] | C:\Program Files (x86)\Microsoft
[31/08/2010|10:51:04] | C:\Program Files (x86)\Microsoft Games
[11/09/2009|05:01:27] | C:\Program Files (x86)\Microsoft Office
[11/09/2009|05:06:10] | C:\Program Files (x86)\Microsoft Office Suite Activation Assistant
[11/09/2009|05:07:22] | C:\Program Files (x86)\Microsoft Silverlight
[25/09/2009|23:09:02] | C:\Program Files (x86)\Microsoft SQL Server Compact Edition
[11/09/2009|04:52:13] | C:\Program Files (x86)\Microsoft Touch Pack for Windows 7
[25/09/2009|23:17:38] | C:\Program Files (x86)\Microsoft Visual Studio 8
[11/09/2009|05:03:08] | C:\Program Files (x86)\Microsoft Works
[25/02/2010|18:55:58] | C:\Program Files (x86)\Microsoft WSE
[11/09/2009|04:51:35] | C:\Program Files (x86)\Microsoft XNA
[11/09/2009|05:02:56] | C:\Program Files (x86)\Microsoft.NET
[01/11/2010|22:27:24] | C:\Program Files (x86)\Mozilla Firefox
[14/07/2009|07:32:38] | C:\Program Files (x86)\MSBuild
[22/07/2010|14:43:49] | C:\Program Files (x86)\MSXML 4.0
[11/09/2009|05:19:01] | C:\Program Files (x86)\Nero
[25/12/2009|20:24:33] | C:\Program Files (x86)\OEM
[04/08/2010|21:53:43] | C:\Program Files (x86)\olibul
[29/10/2010|00:20:59] | C:\Program Files (x86)\OrangeFrance
[11/09/2009|05:00:11] | C:\Program Files (x86)\Packard Bell
[11/09/2009|04:54:59] | C:\Program Files (x86)\Packard Bell GameZone
[12/05/2011|19:49:30] | C:\Program Files (x86)\QuickTime
[25/09/2009|22:45:25] | C:\Program Files (x86)\Realtek
[14/07/2009|07:32:38] | C:\Program Files (x86)\Reference Assemblies
[11/09/2009|05:30:18] | C:\Program Files (x86)\Symantec
[25/09/2009|22:45:25] | C:\Program Files (x86)\Temp
[11/09/2009|05:24:20] | C:\Program Files (x86)\TouchSettings
[04/06/2010|20:14:51] | C:\Program Files (x86)\Ubisoft
[14/07/2009|06:57:06] | C:\Program Files (x86)\Uninstall Information
[11/06/2011|17:20:32] | C:\Program Files (x86)\uTorrent
[11/09/2009|04:51:41] | C:\Program Files (x86)\Virtual Earth 3D
[25/05/2010|22:11:16] | C:\Program Files (x86)\VirtualDJ
[29/08/2010|11:24:33] | C:\Program Files (x86)\Vivendi Universal Games
[14/07/2009|07:32:38] | C:\Program Files (x86)\Windows Defender
[25/09/2009|23:06:50] | C:\Program Files (x86)\Windows Live
[14/07/2009|05:20:08] | C:\Program Files (x86)\Windows Mail
[14/07/2009|07:32:38] | C:\Program Files (x86)\Windows Media Player
[14/07/2009|05:20:08] | C:\Program Files (x86)\Windows NT
[14/07/2009|07:32:38] | C:\Program Files (x86)\Windows Photo Viewer
[14/07/2009|07:32:38] | C:\Program Files (x86)\Windows Portable Devices
[14/07/2009|07:32:38] | C:\Program Files (x86)\Windows Sidebar
[31/07/2011|15:24:48] | C:\Program Files (x86)\Winstep
[31/07/2011|00:57:08] | C:\Program Files (x86)\WinZip
[25/07/2010|21:51:05] | C:\Program Files (x86)\WordBiz

¤¤¤¤¤¤¤¤¤¤ %CommonFiles%

[11/09/2009|05:23:07] | C:\Program Files (x86)\Common Files\Adobe
[11/09/2009|05:23:52] | C:\Program Files (x86)\Common Files\Adobe AIR
[06/01/2011|23:56:32] | C:\Program Files (x86)\Common Files\Akamai
[20/08/2010|19:08:35] | C:\Program Files (x86)\Common Files\Apple
[22/08/2010|11:26:53] | C:\Program Files (x86)\Common Files\AVSMedia
[11/09/2009|05:03:02] | C:\Program Files (x86)\Common Files\DESIGNER
[18/01/2011|23:56:53] | C:\Program Files (x86)\Common Files\DivX Shared
[05/12/2010|13:10:07] | C:\Program Files (x86)\Common Files\DVDVideoSoft
[25/09/2009|22:45:21] | C:\Program Files (x86)\Common Files\InstallShield
[25/07/2010|21:55:07] | C:\Program Files (x86)\Common Files\Java
[25/09/2009|23:02:01] | C:\Program Files (x86)\Common Files\Macrovision Shared
[31/08/2010|11:06:17] | C:\Program Files (x86)\Common Files\Microsoft Games
[14/07/2009|05:20:08] | C:\Program Files (x86)\Common Files\microsoft shared
[11/09/2009|05:18:51] | C:\Program Files (x86)\Common Files\Nero
[11/09/2009|04:54:59] | C:\Program Files (x86)\Common Files\Oberon Media
[11/09/2009|04:54:58] | C:\Program Files (x86)\Common Files\packardbell.ico
[25/09/2009|23:01:46] | C:\Program Files (x86)\Common Files\PX Storage Engine
[14/07/2009|05:20:08] | C:\Program Files (x86)\Common Files\Services
[25/09/2009|23:01:46] | C:\Program Files (x86)\Common Files\Sonic Shared
[14/07/2009|05:20:08] | C:\Program Files (x86)\Common Files\SpeechEngines
[01/03/2010|11:54:28] | C:\Program Files (x86)\Common Files\Symantec Shared
[14/07/2009|05:20:08] | C:\Program Files (x86)\Common Files\System
[25/09/2009|23:03:14] | C:\Program Files (x86)\Common Files\Windows Live

¤¤¤¤¤¤¤¤¤¤ %Temp%\Low


¤¤¤¤¤¤¤¤¤¤ Tasks

[19/06/2011 | 16:11:49] | C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[19/06/2011 | 16:11:51] | C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job


¤¤¤¤¤¤¤¤¤¤ Firewall

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

¤

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

¤¤¤¤¤¤¤¤¤¤ CURRENT_USER | UNINSTALL


¤¤¤¤¤¤¤¤¤¤ LOCAL_MACHINE | UNINSTALL

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AddressBook] | ->
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe AIR] | Adobe AIR -> 2.5.1.17730
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player ActiveX] | Adobe Flash Player 10 ActiveX -> 10.3.181.26
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player Plugin] | -> 10.0.45.2
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Photoshop Elements 7] | Adobe Photoshop Elements 7.0 -> 7.0.1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Akamai] | Akamai NetSession Interface ->
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\avast] | avast! Free Antivirus -> 6.0.1203.0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Connection Manager] | ->
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DicoMots_is1] | DicoMots désinstallation ->
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DirectDrawEx] | ->
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DivX Setup.divx.com] | Configuration DivX -> 2.2.1.2
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DVDVideoSoftTB Toolbar] | DVDVideoSoftTB Toolbar ->
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\EA Download Manager] | EA Download Manager -> 6.0.4.10
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\EPSON Scanner] | EPSON Scan ->
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ESDX5000_CX4900 Guide d’utilisation] | ESDX5000_CX4900 Guide d’utilisation ->
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Fontcore] | ->
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Free Video to MP3 Converter_is1] | Free Video to MP3 Converter version 4.2.12 ->
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GOM Player] | GOM Player -> 2.1.28.5039
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HOMESTUDENTR] | Microsoft Office Home and Student 2007 -> 12.0.6425.1000
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Identity Card] | Identity Card -> 1.00.3001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE40] | ->
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE4Data] | ->
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE5BAKEX] | ->
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IEData] | ->
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield Uninstall Information] | ->
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}] | CyberLink YouCam -> 3.0.2102
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{20C45B32-5AB6-46A4-94EF-58950CAF05E5}] | EPSON Attach To Email -> 1.01.0000
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}] | CyberLink PowerCinema -> 7.0.3306
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{70CC0095-AA68-45BE-AE98-D8170182E9EB}] | -> 9.0.5631
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{70F8B183-99EB-4304-BA35-080E2DFFD2A3}] | Age of Empires III -> 1.00.0000
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Metaboli] | Metaboli -> 1.00.0006
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MobileOptionPack] | ->
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Mozilla Firefox (3.6.18)] | Mozilla Firefox (3.6.18) -> 3.6.18 (fr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OMUI.fr-fr] | Microsoft Office Language Pack 2007 - French/Français -> 12.0.6425.1000
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Packard Bell InfoCentre] | Packard Bell InfoCentre -> 3.02.3000
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Packard Bell Registration] | Packard Bell Registration -> 1.02.3006
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Packard Bell Screensaver] | Packard Bell ScreenSaver -> 1.1.0812
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Packard Bell Software Suite SE] | Packard Bell Software Suite SE -> 2.01.3001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Packard Bell Welcome Center] | Welcome Center -> 1.00.3006
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PunkBusterSvc] | PunkBuster Services -> 0.986
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SchedulingAgent] | ->
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Uninstall_is1] | Uninstall 1.0.0.1 ->
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Virtual DJ - Atomix Productions] | Virtual DJ - Atomix Productions ->
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WIC] | ->
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinLiveSuite] | Windows Live -> 15.4.3502.0922
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Winstep Xtreme_is1] | Nexus 11.6 ->
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{01FB4998-33C4-4431-85ED-079E3EEFE75D}] | CyberLink YouCam -> 3.0.2102
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0214A441-A4AB-43A8-8DEF-2F73C5364673}] | Microsoft Works -> 9.7.0621
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{09F56A49-A7B1-4AAB-95B9-D13094254AD1}] | Windows Live UX Platform Language Pack -> 15.4.3502.0922
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0B0F231F-CE6A-483D-AA23-77B364F75917}] | Windows Live Installer -> 15.4.3502.0922
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{117E3AE2-10D1-41C1-9FA6-F4C382F767A8}_is1] | Packard Bell GameZone Console -> 5.1.2.5
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{18455581-E099-4BA8-BC6B-F34B2F06600C}] | Google Toolbar for Internet Explorer -> 1.0.0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}] | Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 -> 9.0.30729.4148
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}] | Junk Mail filter update -> 15.4.3502.0922
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{200FEC62-3C34-4D60-9CE8-EC372E01C08F}] | Windows Live SOXE Definitions -> 15.4.3502.0922
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{20400dbd-e6db-45b8-9b6b-1dd7033818ec}] | Nero InfoTool Help -> 6.4.4.100
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{20C45B32-5AB6-46A4-94EF-58950CAF05E5}] | EPSON Attach To Email -> 1.01.0000
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2318C2B1-4965-11d4-9B18-009027A5CD4F}] | Google Toolbar for Internet Explorer -> 7.1.1920.1238
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2348b586-c9ae-46ce-936c-a68e9426e214}] | Nero StartSmart Help -> 9.4.1.100
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2637C347-9DAD-11D6-9EA2-00055D0CA761}] | CyberLink PowerCinema -> 7.0.3306
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{26604C7E-A313-4D12-867F-7C6E7820BE4C}] | JMicron Flash Media Controller Driver -> 1.0.31.3
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{26A24AE4-039D-4CA4-87B4-2F83216021FF}] | Java(TM) 6 Update 21 -> 6.0.210
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{287ECFA4-719A-2143-A09B-D6A12DE54E40}] | Acrobat.com -> 1.6.65
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}] | EPSON Scan Assistant -> 1.10.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2EB81825-E9EE-44F4-8F51-1240C3898DC6}] | EPSON File Manager -> 1.3.0.0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{30D1F3D2-54CF-481D-A005-F94B0E98FEEC}] | Sid Meier's Civilization 4 Complete -> 1.74
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3336F667-9049-4D46-98B6-4C743EEBC5B1}] | Windows Live Photo Gallery -> 15.4.3502.0922
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{33cf58f5-48d8-4575-83d6-96f574e4d83a}] | Nero DriveSpeed -> 4.4.7.201
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}] | Windows Live -> 15.4.3502.0922
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3898934B-05AE-41CD-96BE-70DA9BFBCE1F}] | Microsoft XNA Framework Redistributable 3.0 -> 3.0.11010.0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3B9A92DA-6374-4872-B646-253F18624D5F}] | Windows Live Writer -> 15.4.3502.0922
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3BB33584-3860-4772-AEE9-D8E61F552896}] | Tom Clancy's Rainbow Six: Lockdown -> 1.00.000
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{40580068-9B10-40B5-9548-536CE88AB23C}] | ITECIR -> 1.00.0000
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}] | Adobe AIR -> 2.5.1.17730
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{488F0347-C4A7-4374-91A7-30818BEDA710}] | Galerie de photos Windows Live -> 15.4.3502.0922
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4A03706F-666A-4037-7777-5F2748764D10}] | Java Auto Updater -> 2.0.2.4
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4B5F58F7-C7D1-3CE3-9B37-B657F0852643}.KB2478663] | Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2478663) -> 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4B5F58F7-C7D1-3CE3-9B37-B657F0852643}.KB2518870] | Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2518870) -> 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}] | Windows Live PIMT Platform -> 15.4.3502.0922
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4D43D635-6FDA-4fa5-AA9B-23CF73D058EA}] | Nero StartSmart OEM -> 9.4.10.100
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5511C07D-A83C-45AD-92B6-42DF99729A3C}] | Adobe Photoshop Elements 7.0 -> 7.0.1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{56C049BE-79E9-4502-BEA7-9754A3E60F9B}] | neroxml -> 1.0.0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{57752979-A1C9-4C02-856B-FBB27AC4E02C}] | QuickTime -> 7.69.80.9
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{595a3116-40bb-4e0f-a2e8-d7951da56270}] | NeroExpress -> 9.4.10.505
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5EE7D259-D137-4438-9A5F-42F432EC0421}] | VC80CRTRedist - 8.0.50727.4053 -> 1.1.0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6057E21C-ABE9-4059-AE3E-3BEB9925E660}] | Windows Live Messenger -> 15.4.3502.0922
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{62687B11-58B5-4A18-9BC3-9DF4CE03F194}] | Windows Live Writer Resources -> 15.4.3502.0922
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{67EDD823-135A-4D59-87BD-950616D6E857}] | EPSON Copy Utility 3 -> 3.2.0.0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{682B3E4F-696A-42DE-A41C-4C07EA1678B4}] | Windows Live SOXE -> 15.4.3502.0922
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}] | Windows Live Movie Maker -> 15.4.3502.0922
[HK

G éyé obliger de faire comme ca ! dsl

essaie de le poster ici et edite ton precedent message en mettant le lien

http://cjoint.com

http://cjoint.com/?AHglaYVQN0Z

desinstalle DVDVideoSoftTB Toolbar c'est un ramasse-Adwares

Télécharge ici : http://www.teamxscript.org/adremoverTelechargement.html Ad-remover sur ton bureau :

Déconnecte toi et ferme toutes applications en cours !

si tu as XP => double clique
si tu as Vista ou windows 7 => clic droit "executer en tant que...."

sur "Ad-R.exe" pour lancer l'installation et laisse les paramètres d'installation par défaut .

clique le raccourci Ad-remover qui est sur ton bureau pour lancer l'outil .

Au menu principal choisis "option Nettoyer " et tape sur [entrée] .

Laisse travailler l'outil et ne touche à rien ...

Poste le rapport qui apparait à la fin , sur le forum ...

( Le rapport est sauvegardé aussi sous C:\Ad-report.log )
( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )

Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

je teste !

salut le rapport ?

excuse moi ! j'aie été un peut occuper par plein de chose ces dernier jour ! :-s
pour le dernier programme que tu ma fait essayer, une foi que je fait ce que tu ma dit de faire et que j'exécute le programme, sa me met un message d'erreur comme quoi que le fichier n'est pas complets, même en le re-téléchargent sa me met la même erreur ?????!!!!!

ca le fait sur tous les navigateurs ?

j'ai fait qu'avec firefox

esssaie avec internet explorer ?

je peut plus accéder au lien, il me dit quil est rompu ( sur touts les navigateurs )

Télécharge http://dl.dropbox.com/u/21363431/Reload_Tdsskiller.exe Reload_TDSSKiller

Lance le

choisis : lancer le nettoyage

le logiciel va automatiquement telecharger la derniere version puis

TDSSKiller va s'ouvrir , clique sur " Start Scan "

une fois qu'il a terminé , redemarre s'il te le demande (Reboot Now)pour finir de nettoyer

sinon , ferme tdssKiller et le rapport s'affichera sur le bureau

Copie/Colle son contenu dans ta prochaine réponse.