Help - Virus Police Belge - Log ComboFIx

Résolu/Fermé
Utilisateur anonyme - 25 déc. 2012 à 22:48
 Utilisateur anonyme - 28 déc. 2012 à 20:13
Bonjour,



Mon portable VAIO a été infecté par le virus de la police belge (ordinateur bloqué et demande de paiement de 100 EUR)

Après avoir pu reprendre le contrôle de mon portable, j'ai effectué un scan avec ComboFix.

Celui-ci me signale qu'un rootkit (rootkit.zeroAccess!) est présent dans la pile tcp/ip.

Voici le log comboFix ci-dessous.

Quelqu'un peut-il m'aider pour l'analyse du log ? Est-ce qu'il y a encore des infections ?
Si oui, quelle est la procédure à suivre pour toutes les supprimer ?

Merci d'avance de votre aide


ComboFix 12-12-25.02 - X 25/12/2012 19:10:48.1.1 - x86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.2046.1672 [GMT 1:00]
Lancé depuis: c:\documents and settings\X\Bureau\ComboFix.exe
.
[i] ADS - explorer.exe: deleted 26 bytes in 1 streams. /i
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\All Users\Application Data\TEMP
C:\explorer.exe
c:\windows\$NtUninstallKB58345$
c:\windows\$NtUninstallKB58345$\1777109509\@
c:\windows\$NtUninstallKB58345$\1777109509\Desktop.ini
c:\windows\$NtUninstallKB58345$\1777109509\L\00000004.@
c:\windows\$NtUninstallKB58345$\1777109509\L\201d3dde
c:\windows\$NtUninstallKB58345$\1777109509\L\qeafzoax
c:\windows\$NtUninstallKB58345$\1777109509\U\00000004.@
c:\windows\$NtUninstallKB58345$\1777109509\U\00000008.@
c:\windows\$NtUninstallKB58345$\1777109509\U\000000cb.@
c:\windows\$NtUninstallKB58345$\1777109509\U\80000000.@
c:\windows\$NtUninstallKB58345$\1777109509\U\80000032.@
c:\windows\$NtUninstallKB58345$\4139392086
c:\windows\system32\PowerToyReadme.htm
c:\windows\system32\SET10.tmp
c:\windows\system32\SET11.tmp
c:\windows\system32\SET12.tmp
c:\windows\system32\SET13.tmp
c:\windows\system32\SET19.tmp
c:\windows\system32\SET1A.tmp
c:\windows\system32\SET1B.tmp
c:\windows\system32\SET1F.tmp
c:\windows\system32\SET22.tmp
c:\windows\system32\SET23.tmp
c:\windows\system32\SET25.tmp
c:\windows\system32\SET26.tmp
c:\windows\system32\SET2B.tmp
c:\windows\system32\SET31.tmp
c:\windows\system32\SET74D.tmp
c:\windows\system32\SET74F.tmp
c:\windows\system32\SET75B.tmp
c:\windows\system32\SETA0.tmp
c:\windows\UA000082.DLL
.
.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_NPF
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2012-11-25 au 2012-12-25 ))))))))))))))))))))))))))))))))))))
.
.
2012-12-25 01:54 . 2011-05-10 13:03 307928 ------w- c:\windows\system32\drivers\aswSP.sys
2012-12-25 01:54 . 2011-05-10 12:59 19544 ------w- c:\windows\system32\drivers\aswFsBlk.sys
2012-12-25 01:54 . 2011-05-10 13:02 49240 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-12-25 01:54 . 2011-05-10 12:59 25432 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2012-12-25 01:54 . 2011-05-10 13:03 441176 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-12-25 01:54 . 2011-05-10 13:02 102616 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2012-12-25 01:54 . 2011-05-10 13:02 96344 ----a-w- c:\windows\system32\drivers\aswmon.sys
2012-12-25 01:54 . 2011-05-10 12:59 30808 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2012-12-25 01:54 . 2011-05-10 13:10 199304 ------w- c:\windows\system32\aswBoot.exe
2012-12-25 01:54 . 2012-12-25 01:54 -------- d-----w- c:\program files\AVAST Software
2012-12-25 01:43 . 2012-12-25 01:43 -------- d-----w- c:\documents and settings\X\Application Data\Apple Computer
2012-12-24 16:39 . 2012-12-24 16:39 -------- d-----w- c:\windows\system32\config\systemprofile\Local Settings\Application Data\ESET
2012-12-24 15:18 . 2012-12-24 15:18 -------- d-----w- c:\documents and settings\X\Application Data\VadeRetro
2012-12-24 04:36 . 2012-12-19 15:55 11101152 ----a-w- C:\mseinstall.exe
2012-12-24 04:34 . 2012-12-24 04:34 -------- d-----w- c:\documents and settings\X\Application Data\2BrightSparks
2012-12-24 04:33 . 2012-12-24 04:34 -------- d-----w- c:\documents and settings\X\Local Settings\Application Data\2BrightSparks
2012-12-24 04:20 . 2012-12-24 04:20 896016 ----a-w- C:\jxpiinstall.exe
2012-12-24 04:17 . 2012-12-24 04:17 -------- d-----w- c:\program files\Disk1
2012-12-24 03:47 . 2012-12-24 03:50 -------- d-----w- c:\program files\Microsoft Security Client
2012-12-24 02:54 . 2012-12-24 02:54 -------- d-----w- c:\documents and settings\X\Local Settings\Application Data\ESET
2012-12-24 01:36 . 2012-05-31 10:25 237072 ------w- c:\windows\system32\MpSigStub.exe
2012-12-23 23:24 . 2012-12-23 23:25 11476952 ----a-w- C:\SyncBack_Setup.exe
2012-12-22 22:28 . 2012-12-24 15:43 -------- d-----w- c:\documents and settings\X\Application Data\IObit
2012-12-22 20:50 . 2012-12-22 20:50 -------- d-----w- C:\_OTL
2012-12-22 04:58 . 2012-12-22 22:33 -------- d-----w- c:\documents and settings\All Users\Application Data\IObit
2012-12-22 04:57 . 2012-12-22 04:58 -------- d-----w- c:\documents and settings\Administrateur\Application Data\IObit
2012-12-22 04:57 . 2012-12-24 15:43 -------- d-----w- c:\program files\IObit
2012-12-22 01:44 . 2012-12-22 01:44 -------- d-----w- c:\documents and settings\Administrateur\Application Data\Malwarebytes
2012-12-22 01:03 . 2012-12-22 01:03 -------- d-----w- c:\program files\Acronis
2012-12-20 17:43 . 2012-12-20 17:43 -------- d---a-w- C:\.Trashes
2012-12-19 15:49 . 2012-12-19 15:49 711168 ----a-w- c:\windows\is-JI27F.exe
2012-12-19 03:23 . 2012-12-19 03:23 -------- d-----w- c:\windows\system32\wbem\Repository
2012-12-19 03:03 . 2012-12-19 03:03 -------- d-----w- c:\documents and settings\Administrateur\Local Settings\Application Data\Mozilla
2012-12-02 17:52 . 2012-12-02 17:52 -------- d-----w- c:\program files\Fichiers communs\Adobe AIR
2012-11-30 12:45 . 2012-12-16 07:12 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-11-30 12:45 . 2012-12-16 07:12 697272 ----a-w- c:\windows\system32\FlashPlayerApp.exe
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-12-25 03:58 . 2005-08-09 03:48 1037824 ----a-w- c:\windows\explorer.exe
2012-10-18 15:23 . 2012-10-18 15:23 93672 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2012-10-18 15:23 . 2012-03-31 11:31 143872 ----a-w- c:\windows\system32\javacpl.cpl
2012-10-18 15:23 . 2011-11-15 01:42 746984 ----a-w- c:\windows\system32\deployJava1.dll
2012-09-29 18:54 . 2012-10-21 08:40 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-12-06 22:31 . 2012-12-06 22:31 262112 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-05-27 6746112]
"Apoint"="c:\program files\Apoint\Apoint.exe" [2003-11-07 114688]
"AzMixerSel"="c:\program files\Realtek\InstallShield\AzMixerSel.exe" [2005-05-20 57344]
"ISBMgr.exe"="c:\program files\Sony\ISB Utility\ISBMgr.exe" [2004-02-20 32768]
"SonyPowerCfg"="c:\program files\Sony\VAIO Power Management\SPMgr.exe" [2005-10-19 184320]
"SSBkgdUpdate"="c:\program files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2006-09-28 185896]
"beidsccertprop"="c:\program files\Belgium Identity Card\BeID Certprop\beidsccertprop.exe" [2012-02-21 31768]
"Adobe ARM"="c:\program files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe" [2012-09-23 926896]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-05-10 3459712]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"MP3 Skype Recorder"="c:\program files\MP3 Skype Recorder\MP3 Skype Recorder.exe" [2011-11-17 1975296]
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ \0
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Mouse Suite 98 Daemon]
2002-03-14 14:46 45056 ----a-w- c:\windows\system32\ico.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
.
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [25/12/2012 02:54 441176]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [25/12/2012 02:54 307928]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [25/12/2012 02:54 19544]
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [09/11/2012 11:21 160944]
R3 SPI;Sony Programmable I/O Control Device;c:\windows\system32\drivers\SonyPI.sys [09/08/2005 04:49 71961]
S3 ACSSCR;ACR38 Smart Card Reader;c:\windows\system32\drivers\a38usb.sys [25/07/2012 01:09 33536]
S3 esgiguard;esgiguard;\??\c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys --> c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [?]
S3 pcouffin;VSO Software pcouffin;c:\windows\system32\drivers\pcouffin.sys [16/08/2011 00:31 47360]
S3 PID_400C;Video Blaster WebCam 5 (WDM);c:\windows\system32\drivers\Pd100Vid.sys [15/06/2011 01:29 335980]
S4 TomTomHOMEService;TomTomHOMEService; [x]
S4 VUAgent;VUAgent;c:\program files\Sony\VAIO Update Common\VUAgent.exe [27/10/2011 17:10 1086568]
.
Contenu du dossier 'Tâches planifiées'
.
2012-12-25 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-11-30 07:12]
.
.
------- Examen supplémentaire -------
.
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
IE: Ajouter la cible du lien à un fichier PDF existant
IE: Ajouter à un fichier PDF existant
IE: Convertir au format Adobe PDF
IE: Convertir la cible du lien au format Adobe PDF
IE: E&xporter vers Microsoft Excel
TCP: DhcpNameServer = 192.168.36.1
FF - ProfilePath - c:\documents and settings\X\Application Data\Mozilla\Firefox\Profiles\ecnyfqvz.default-1351616813921\
FF - prefs.js: browser.startup.homepage - about:home
FF - ExtSQL: 2012-10-27 14:15; belgiumeid@eid.belgium.be; c:\program files\Mozilla Firefox\extensions\belgiumeid@eid.belgium.be
FF - ExtSQL: 2012-12-02 19:05; web2pdfextension@web2pdf.adobedotcom; c:\program files\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF - ExtSQL: 2012-12-15 18:32; en-gb@flyingtophat.co.uk; c:\documents and settings\X\Application Data\Mozilla\Firefox\Profiles\ecnyfqvz.default-1351616813921\extensions\en-gb@flyingtophat.co.uk
FF - ExtSQL: 2012-12-19 16:43; {635abd67-4fe9-1b23-4f01-e679fa7484c1}; c:\documents and settings\X\Application Data\Mozilla\Firefox\Profiles\ecnyfqvz.default-1351616813921\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
FF - ExtSQL: !HIDDEN! 2012-10-27 14:15; belgiumeid@eid.belgium.be; c:\program files\Mozilla Firefox\extensions\belgiumeid@eid.belgium.be
FF - user.js: yahoo.homepage.dontask - true
FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.request.max-start-delay - 0
FF - user.js: network.http.max-connections - 48
FF - user.js: network.http.max-connections-per-server - 16
FF - user.js: network.http.max-persistent-connections-per-proxy - 16
FF - user.js: network.http.max-persistent-connections-per-server - 8
FF - user.js: browser.turbo.enabled - true
FF - user.js: browser.display.show_image_placeholders - true
FF - user.js: browser.chrome.favicons - false
FF - user.js: browser.urlbar.autocomplete.enabled - true
FF - user.js: browser.cache.memory.capacity - 65536
FF - user.js: content.notify.ontimer - true
FF - user.js: content.interrupt.parsing - true
FF - user.js: content.max.tokenizing.time - 2250000
FF - user.js: content.switch.threshold - 750000
FF - user.js: plugin.expose_full_path - true
FF - user.js: ui.submenuDelay - 0
.
- - - - ORPHELINS SUPPRIMES - - - -
.
ShellIconOverlayIdentifiers-{472083B0-C522-11CF-8763-00608CC02F24} - (no file)
MSConfigStartUp-UVS11 Preload - c:\program files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe
AddRemove-Creative Video Blaster WebCam 5 - c:\windows\CtDrvIns.exe -uninstall usb\vid_041E&pid_400C&MI_00 -plugin pd100pin.dll
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-12-25 19:29
Windows 5.1.2600 Service Pack 3 NTFS
.
Recherche de processus cachés ...
.
Recherche d'éléments en démarrage automatique cachés ...
.
Recherche de fichiers cachés ...
.
Scan terminé avec succès
Fichiers cachés: 0
.
**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_USERS\S-1-5-21-2831647132-4134117731-276175365-1006\Software\InterVideo\Common]
@DACL=(02 0000)
@SACL=
.
[HKEY_USERS\S-1-5-21-2831647132-4134117731-276175365-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tif\OpenWithProgids]
@DACL=(02 0000)
@SACL=
"TIFImage.Document"=hex(0):
"MSPaper.Document"=hex(0):
"OmniPage.tifImage"=hex(0):
.
[HKEY_USERS\S-1-5-21-2831647132-4134117731-276175365-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tiff\OpenWithProgids]
@DACL=(02 0000)
@SACL=
"TIFImage.Document"=hex(0):
"MSPaper.Document"=hex(0):
"OmniPage.tiffImage"=hex(0):
.
[HKEY_USERS\S-1-5-21-2831647132-4134117731-276175365-1006\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{670E64DA-152B-386A-A5E2-B39F5DD4E19D}*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
.
[HKEY_LOCAL_MACHINE\software\Adobe\CommonFiles]
@DACL=(02 0000)
@SACL=
"UsageCount"=dword:00000001
@=""
"AdobeHome"="C:"
.
[HKEY_LOCAL_MACHINE\software\AVAST Software\Avast]
@DACL=(02 0000)
"DataFolder"="c:\\Documents and Settings\\All Users\\Application Data\\AVAST Software\\Avast"
"Version"="7.0"
"VersionShort"="7.0"
"SetupVersion"=dword:000005c2
"ProgramFolder"="c:\\Program Files\\AVAST Software\\Avast"
"Product"="ais"
"OSPlatform"=dword:00000002
"OSVersion"=dword:00050001
"RegData"=hex:a3,8e,9c,54,c9,8e,9c,54,c9,8e,9c,54,c9,8e,9c,54,a4,8e,9c,54,c9,
8e,95,54,c1,8e,e4,54,c1,8e,94,54,c0,8e,93,54,dd,8e,f0,54,c1,8e,eb,54,c7,8e,\
"Registration"=hex:ba,ff,c6,ff,ce,ff,cd,ff,ba,ff,bd,ff,cf,ff,c9,ff,d2,ff,c8,ff,
ba,ff,cd,ff,ca,ff,d2,ff,cb,ff,bb,ff,c9,ff,cd,ff,d2,ff,c7,ff,b9,ff,c9,ff,ba,\
"UpdateReady"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\.m2t]
@DACL=(02 0000)
@SACL=
@="VLC.m2t"
"VLC.backup"="SonyMPEG2TS"
.
[HKEY_LOCAL_MACHINE\software\Classes\.mmv]
@DACL=(02 0000)
@SACL=
@="SonyMicroMV"
.
[HKEY_LOCAL_MACHINE\software\Classes\.mp4]
@DACL=(02 0000)
@SACL=
@="VLC.mp4"
"PerceivedType"="video"
"VLC.backup"="Mpeg4Files"
.
[HKEY_LOCAL_MACHINE\software\Classes\AMOVIE.ActiveMovie Control]
@DACL=(02 0000)
@SACL=
@="ActiveMovie Control Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\AMOVIE.ActiveMovie Control.2]
@DACL=(02 0000)
@SACL=
@="ActiveMovie Control Object"
"EditFlags"=dword:00010000
.
[HKEY_LOCAL_MACHINE\software\Classes\AMOVIE.ActiveMovieControl]
@DACL=(02 0000)
@SACL=
@="ActiveMovie Control Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\AMOVIE.ActiveMovieControl.2]
@DACL=(02 0000)
@SACL=
@="ActiveMovie Control Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\AMtoolbar.AMtoolbar]
@DACL=(02 0000)
@SACL=
@="AMtoolbar Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\AMtoolbar.AMtoolbar.1]
@DACL=(02 0000)
@SACL=
@="AMtoolbar Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\1XConfig.EXE]
@DACL=(02 0000)
@SACL=
"AppID"="{6AE5E02E-2DCA-4EAF-9D58-02D883362973}"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\EvtEng.EXE]
@DACL=(02 0000)
@SACL=
"AppID"="{E7DCA9D7-1577-45DA-BF99-8BD6184ACF99}"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\RegSrvc.EXE]
@DACL=(02 0000)
@SACL=
"AppID"="{6EF8E539-12E9-4595-A7C6-3DDA8A4069B2}"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\VESAutoDimmer.DLL]
@DACL=(02 0000)
@SACL=
"AppID"="{C27DECC7-D15F-41E4-8CDE-A76D503768CB}"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\VESFnLock.DLL]
@DACL=(02 0000)
@SACL=
"AppID"="{B6EC9B2D-462F-4819-B772-D43E90549D66}"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\VESHardwareMixer.DLL]
@DACL=(02 0000)
@SACL=
"AppID"="{15DA320D-1DDD-46E0-9390-EA9AF8295DF1}"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\VESHKWndCommon.DLL]
@DACL=(02 0000)
@SACL=
"AppID"="{B2E5C5AD-1EAF-4A7E-BCFF-F0FF3A910CE3}"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\VESKBDCoverPoll.DLL]
@DACL=(02 0000)
@SACL=
"AppID"="{4325C26E-8640-4886-99C4-1FAC365F6304}"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\VESPerform.DLL]
@DACL=(02 0000)
@SACL=
"AppID"="{A038D2EA-13D1-416C-9DDE-BBCA1EB8F3D5}"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\VESSemiPnP.DLL]
@DACL=(02 0000)
@SACL=
"AppID"="{2A24449C-E587-4C6E-802C-EC67C02AFABF}"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\VESService.exe]
@DACL=(02 0000)
@SACL=
"AppID"="{BC52BC95-F40A-47AA-8EBC-B5B3A5AD579F}"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\VESSuEvent.DLL]
@DACL=(02 0000)
@SACL=
"AppID"="{B2E78F5A-2B15-44C0-93C2-684E9A4A0907}"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\VESSuPerform.DLL]
@DACL=(02 0000)
@SACL=
"AppID"="{91F505D6-8E7F-4F2D-9EA7-4DD60CF014B2}"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\VESTransform.DLL]
@DACL=(02 0000)
@SACL=
"AppID"="{AB9B31F4-1D0E-4B23-A9FF-18E402266DCB}"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\VESUSBKeyboard.DLL]
@DACL=(02 0000)
@SACL=
"AppID"="{3E404DAD-05A9-4B2E-8B79-122DD99C2FFE}"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\VESVideo.DLL]
@DACL=(02 0000)
@SACL=
"AppID"="{EDE8839D-6600-4F91-91B6-50A6E2529E53}"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\VESWndMsg.DLL]
@DACL=(02 0000)
@SACL=
"AppID"="{BECDEC11-00A3-495E-876F-C92D71ABB8E1}"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\VzCdbCtrl.DLL]
@DACL=(02 0000)
@SACL=
"AppID"="{80E5EAFA-51C4-4756-A6D1-253BB72EC6C5}"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\VzCdbLocalDB.DLL]
@DACL=(02 0000)
@SACL=
"AppID"="{8428429C-C2BC-4EF6-8228-8CF800B3BEB2}"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\VzCdbSsDB.DLL]
@DACL=(02 0000)
@SACL=
"AppID"="{EE390213-FDF7-4D40-81C3-FAF62293F0B1}"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\VzCdbSvc.EXE]
@DACL=(02 0000)
@SACL=
"AppID"="{65CBF74E-9F75-4E2E-BBA7-BB14BE9EE689}"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\VzCdbVcds.DLL]
@DACL=(02 0000)
@SACL=
"AppID"="{33196F51-1808-4830-AAA6-E0CE1408D637}"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\VzCsIp.DLL]
@DACL=(02 0000)
@SACL=
"AppID"="{F72A3A26-8981-4E63-A0E5-2B09EA4B9819}"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\VzFw.EXE]
@DACL=(02 0000)
@SACL=
"AppID"="{0686B8F3-3FA7-4048-B22D-E6DF61BE3B4D}"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\VzHardwareResourceManager.EXE]
@DACL=(02 0000)
@SACL=
"AppID"="{34A6B42D-C904-49BB-A3D0-625002CDF938}"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\WPDSp.DLL]
@DACL=(02 0000)
@SACL=
"AppID"="{D455FA37-74F9-4A75-BD79-48659B12A1D6}"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\{0686B8F3-3FA7-4048-B22D-E6DF61BE3B4D}]
@DACL=(02 0000)
@SACL=
@="VzFw"
"LocalService"="VzFw"
"ServiceParameters"="-Service"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\{15DA320D-1DDD-46E0-9390-EA9AF8295DF1}]
@DACL=(02 0000)
@SACL=
@="VESHardwareMixer"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\{2A24449C-E587-4C6E-802C-EC67C02AFABF}]
@DACL=(02 0000)
@SACL=
@="VESSemiPnP"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\{33196F51-1808-4830-AAA6-E0CE1408D637}]
@DACL=(02 0000)
@SACL=
@="VzCdbVcds"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\{34A6B42D-C904-49BB-A3D0-625002CDF938}]
@DACL=(02 0000)
@SACL=
@="VzHardwareResourceManager"
"LocalService"="VAIO Entertainment TV Device Arbitration Service"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\{3E404DAD-05A9-4B2E-8B79-122DD99C2FFE}]
@DACL=(02 0000)
@SACL=
@="VESUSBKeyboard"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\{4325C26E-8640-4886-99C4-1FAC365F6304}]
@DACL=(02 0000)
@SACL=
@="VESKBDCoverPoll"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\{4A4F8AC6-CC99-4e12-8922-5B918BF0C269}]
@DACL=(02 0000)
@SACL=
@="DeviceManagerClass"
"LocalService"="Vcsw"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\{65CBF74E-9F75-4E2E-BBA7-BB14BE9EE689}]
@DACL=(02 0000)
@SACL=
@="VzCdbSvc"
"LocalService"="VzCdbSvc"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\{6AE5E02E-2DCA-4EAF-9D58-02D883362973}]
@DACL=(02 0000)
@SACL=
@="8021XConfig"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\{6EF8E539-12E9-4595-A7C6-3DDA8A4069B2}]
@DACL=(02 0000)
@SACL=
@="RegSrvc"
"LocalService"="RegSrvc"
"ServiceParameters"="-Service"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\{80E5EAFA-51C4-4756-A6D1-253BB72EC6C5}]
@DACL=(02 0000)
@SACL=
@="VzCdbCtrl"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\{8428429C-C2BC-4EF6-8228-8CF800B3BEB2}]
@DACL=(02 0000)
@SACL=
@="VzCdbLocalDB"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\{91F505D6-8E7F-4F2D-9EA7-4DD60CF014B2}]
@DACL=(02 0000)
@SACL=
@="VESSuPerform"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\{A038D2EA-13D1-416C-9DDE-BBCA1EB8F3D5}]
@DACL=(02 0000)
@SACL=
@="VESPerform"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\{AB9B31F4-1D0E-4B23-A9FF-18E402266DCB}]
@DACL=(02 0000)
@SACL=
@="VESTransform"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\{B2E5C5AD-1EAF-4A7E-BCFF-F0FF3A910CE3}]
@DACL=(02 0000)
@SACL=
@="VESHKWndCommon"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\{B2E78F5A-2B15-44C0-93C2-684E9A4A0907}]
@DACL=(02 0000)
@SACL=
@="VESSuEvent"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\{B6EC9B2D-462F-4819-B772-D43E90549D66}]
@DACL=(02 0000)
@SACL=
@="VESFnLock"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\{BC52BC95-F40A-47AA-8EBC-B5B3A5AD579F}]
@DACL=(02 0000)
@SACL=
@="VESService"
"LocalService"="VAIO Event Service"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\{BECDEC11-00A3-495E-876F-C92D71ABB8E1}]
@DACL=(02 0000)
@SACL=
@="VESWndMsg"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\{C27DECC7-D15F-41E4-8CDE-A76D503768CB}]
@DACL=(02 0000)
@SACL=
@="VESAutoDimmer"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\{D455FA37-74F9-4A75-BD79-48659B12A1D6}]
@DACL=(02 0000)
@SACL=
@="WPDSp"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\{E7DCA9D7-1577-45DA-BF99-8BD6184ACF99}]
@DACL=(02 0000)
@SACL=
@="EvtEng"
"LocalService"="EvtEng"
"ServiceParameters"="-Service"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\{ED6BB178-B06A-47ad-98B3-6066E0CF0147}]
@DACL=(02 0000)
@SACL=
@="Windows Media Player Launch"
"RunAs"="Interactive User"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\{EDE8839D-6600-4F91-91B6-50A6E2529E53}]
@DACL=(02 0000)
@SACL=
@="VESVideo"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\{EE390213-FDF7-4D40-81C3-FAF62293F0B1}]
@DACL=(02 0000)
@SACL=
@="VzCdbSsDB"
.
[HKEY_LOCAL_MACHINE\software\Classes\AppID\{F72A3A26-8981-4E63-A0E5-2B09EA4B9819}]
@DACL=(02 0000)
@SACL=
@="VzCsIp"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.Attribute]
@DACL=(02 0000)
@SACL=
@="Attribute Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.Attribute.1]
@DACL=(02 0000)
@SACL=
@="Attribute Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.Certificate]
@DACL=(02 0000)
@SACL=
@="Certificate Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.Certificate.1]
@DACL=(02 0000)
@SACL=
@="Certificate Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.Certificate.2]
@DACL=(02 0000)
@SACL=
@="Certificate Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.Certificates]
@DACL=(02 0000)
@SACL=
@="Certificates Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.Certificates.1]
@DACL=(02 0000)
@SACL=
@="Certificates Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.Certificates.2]
@DACL=(02 0000)
@SACL=
@="Certificates Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.Chain]
@DACL=(02 0000)
@SACL=
@="Chain Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.Chain.1]
@DACL=(02 0000)
@SACL=
@="Chain Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.Chain.2]
@DACL=(02 0000)
@SACL=
@="Chain Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.EncryptedData]
@DACL=(02 0000)
@SACL=
@="EncryptedData Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.EncryptedData.1]
@DACL=(02 0000)
@SACL=
@="EncryptedData Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.EnvelopedData]
@DACL=(02 0000)
@SACL=
@="EnvelopedData Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.EnvelopedData.1]
@DACL=(02 0000)
@SACL=
@="EnvelopedData Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.ExtendedProperty]
@DACL=(02 0000)
@SACL=
@="ExtendedProperty Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.ExtendedProperty.1]
@DACL=(02 0000)
@SACL=
@="ExtendedProperty Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.HashedData]
@DACL=(02 0000)
@SACL=
@="HashedData Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.HashedData.1]
@DACL=(02 0000)
@SACL=
@="HashedData Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.OID]
@DACL=(02 0000)
@SACL=
@="OID Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.OID.1]
@DACL=(02 0000)
@SACL=
@="OID Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.PrivateKey]
@DACL=(02 0000)
@SACL=
@="PrivateKey Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.PrivateKey.1]
@DACL=(02 0000)
@SACL=
@="PrivateKey Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.Settings]
@DACL=(02 0000)
@SACL=
@="Settings Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.Settings.1]
@DACL=(02 0000)
@SACL=
@="Settings Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.SignedCode]
@DACL=(02 0000)
@SACL=
@="SignedCode Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.SignedCode.1]
@DACL=(02 0000)
@SACL=
@="SignedCode Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.SignedData]
@DACL=(02 0000)
@SACL=
@="SignedData Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.SignedData.1]
@DACL=(02 0000)
@SACL=
@="SignedData Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.Signer]
@DACL=(02 0000)
@SACL=
@="Signer Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.Signer.1]
@DACL=(02 0000)
@SACL=
@="Signer Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.Signer.2]
@DACL=(02 0000)
@SACL=
@="Signer Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.Store]
@DACL=(02 0000)
@SACL=
@="Store Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.Store.1]
@DACL=(02 0000)
@SACL=
@="Store Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.Store.2]
@DACL=(02 0000)
@SACL=
@="Store Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.Utilities]
@DACL=(02 0000)
@SACL=
@="Utilities Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CAPICOM.Utilities.1]
@DACL=(02 0000)
@SACL=
@="Utilities Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{00ACDE00-082B-11D1-8E21-444553540000}]
@DACL=(02 0000)
@SACL=
@="SONY DV Video Decoder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{00B7E0AB-817A-44AD-A04B-D1148D524136}]
@DACL=(02 0000)
@SACL=
@="MX XML Reader 4.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{01BF1507-948F-4DF6-9A83-FDC43ACB81EC}]
@Class="REG_SZ"
@DACL=(02 0000)
@SACL=
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{02442C40-813F-11D1-BFA2-00A024EC9DA6}]
@DACL=(02 0000)
@SACL=
@="MPEG Audio Properties"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{0368BFF0-9870-11D0-94AB-0080C74C7E95}]
@DACL=(02 0000)
@SACL=
@="AMtoolbar Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{03be3ac4-84b7-4e0e-a78d-d3524e60395a}]
@DACL=(02 0000)
@SACL=
@="WMVideo Advanced Decoder DMO"
"Merit"=dword:00800001
"WMSDKMerit"=dword:00000100
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{04DA8599-8F8C-458D-AB2A-A571F87204A3}]
@DACL=(02 0000)
@SACL=
@="SONY MPEG Video Decoder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\{00ACDE00-082B-11D1-8E21-444553540000}]
@DACL=(02 0000)
@SACL=
"FriendlyName"="SONY DV Video Decoder"
"CLSID"="{00ACDE00-082B-11D1-8E21-444553540000}"
"FilterData"=hex:02,00,00,00,00,00,40,00,02,00,00,00,00,00,00,00,30,70,69,33,
00,00,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00,30,74,79,33,00,\
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\{04DA8599-8F8C-458D-AB2A-A571F87204A3}]
@DACL=(02 0000)
@SACL=
"FriendlyName"="Sony MPEG4 Video Decoder"
"CLSID"="{04DA8599-8F8C-458D-AB2A-A571F87204A3}"
"FilterData"=hex:02,00,00,00,00,00,40,00,02,00,00,00,00,00,00,00,30,70,69,33,
00,00,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00,30,74,79,33,00,\
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\{1A56451B-1315-4012-861E-8587333DD631}]
@DACL=(02 0000)
@SACL=
"FriendlyName"="Screen Capture filter"
"CLSID"="{1A56451B-1315-4012-861E-8587333DD631}"
"FilterData"=hex:02,00,00,00,00,00,20,00,01,00,00,00,00,00,00,00,30,70,69,33,
08,00,00,00,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00,30,74,79,33,00,\
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\{30146000-87BF-11D1-BE74-C94E44925F69}]
@DACL=(02 0000)
@SACL=
"FriendlyName"="Sony MPEG Video Decoder"
"CLSID"="{30146000-87BF-11D1-BE74-C94E44925F69}"
"FilterData"=hex:02,00,00,00,00,00,10,00,03,00,00,00,00,00,00,00,30,70,69,33,
00,00,00,00,00,00,00,00,02,00,00,00,00,00,00,00,00,00,00,00,30,74,79,33,00,\
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\{6CEB7408-B7F6-4983-888A-DAFA3E816A72}]
@DACL=(02 0000)
@SACL=
"FriendlyName"="Sony MPEG4 AAC Decoder"
"CLSID"="{6CEB7408-B7F6-4983-888A-DAFA3E816A72}"
"FilterData"=hex:02,00,00,00,00,00,60,00,02,00,00,00,00,00,00,00,30,70,69,33,
00,00,00,00,00,00,00,00,02,00,00,00,00,00,00,00,00,00,00,00,30,74,79,33,00,\
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\{D30638B7-2CC2-4D05-A39F-7EE99E015604}]
@DACL=(02 0000)
@SACL=
"FriendlyName"="Sony MP4 File Source"
"CLSID"="{D30638B7-2CC2-4D05-A39F-7EE99E015604}"
"FilterData"=hex:02,00,00,00,00,00,80,00,01,00,00,00,00,00,00,00,30,70,69,33,
0c,00,00,00,00,00,00,00,06,00,00,00,00,00,00,00,00,00,00,00,30,74,79,33,00,\
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\{E1F79440-812F-11D1-BFA2-00A024EC9DA6}]
@DACL=(02 0000)
@SACL=
"FriendlyName"="Sony MPEG Audio Decoder"
"CLSID"="{E1F79440-812F-11D1-BFA2-00A024EC9DA6}"
"FilterData"=hex:02,00,00,00,00,00,10,00,02,00,00,00,00,00,00,00,30,70,69,33,
00,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,00,00,00,00,30,74,79,33,00,\
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}]
@DACL=(02 0000)
@SACL=
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{0AA02E8D-F851-4CB0-9F64-BBA9BE7A983D}]
@DACL=(02 0000)
@SACL=
@="AlchemyVis Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{0AE89F03-C538-4471-9B12-A8E8EF246A0D}]
@Class="REG_SZ"
@DACL=(02 0000)
@SACL=
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{0C23C74A-4BDB-4067-AAF5-4842979B969F}]
@DACL=(02 0000)
@SACL=
@="Dot1XPEAPCredentials Class"
"AppID"="{6AE5E02E-2DCA-4EAF-9D58-02D883362973}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{0D458BE8-D99D-11D3-A92B-00105A088FAC}]
@DACL=(02 0000)
@SACL=
@=""
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{14918656-7B3C-4528-933B-47CB4EDEE8CA}]
@DACL=(02 0000)
@SACL=
@="VzCdbSvcCore Class"
"AppID"="{65CBF74E-9F75-4E2E-BBA7-BB14BE9EE689}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{16FB0402-07F0-4FE5-A61F-B183A44B7EE6}]
@Class="REG_SZ"
@DACL=(02 0000)
@SACL=
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{17CCA71B-ECD7-11D0-B908-00A0C9223196}]
@DACL=(02 0000)
@SACL=
@="Proxy de filtre générique WDM"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{1A56451B-1315-4012-861E-8587333DD631}]
@DACL=(02 0000)
@SACL=
@="WMEnc Screen Capture Filter"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{1A8766A0-62CE-11CF-A5D6-28DB04C10000}]
@DACL=(02 0000)
@SACL=
@="Gestionnaire de répartition WDM pour interface standard"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{1BF18D30-223C-4E0F-9074-C78C1256FD43}]
@DACL=(02 0000)
@SACL=
@="Windows Media Player WMEncAdvancedStreamEdit Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{1D1237A0-6CD6-11d2-96BA-00104B242E64}]
@DACL=(02 0000)
@SACL=
@="ppDSFile Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{21E7C720-3A33-11D7-A4E5-00E02921EA26}]
@DACL=(02 0000)
@SACL=
@="Sony MPEG2 TS Splitter Ex"
"Merit"=dword:0060000f
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{21E7C721-3A33-11D7-A4E5-00E02921EA26}]
@DACL=(02 0000)
@SACL=
@="TsSplt Property Page"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{21E7C722-3A33-11D7-A4E5-00E02921EA26}]
@DACL=(02 0000)
@SACL=
@="Video Property Page"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{21E7C723-3A33-11D7-A4E5-00E02921EA26}]
@DACL=(02 0000)
@SACL=
@="Audio Property Page"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{22D84EC7-E201-4432-B3ED-A9DCA3604594}]
@DACL=(02 0000)
@SACL=
@="SetupLogServices Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{2559a1f6-21d7-11d4-bdaf-00c04f60b9f0}\DefaultIcon]
@DACL=(02 0000)
@SACL=
@=expand:"c:\\Program Files\\sony\\Prepare your VAIO\\FrontFlow.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{2A2699C5-775A-42e9-BF4A-A36FE41BA4CB}]
@DACL=(02 0000)
@SACL=
@="TCPIProp Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{2AFA62E2-5548-11D1-A6E1-006097C4E476}]
@DACL=(02 0000)
@SACL=
@="ppDSApp Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{2C676B7B-796E-4C59-8209-4D0473E32A17}]
@DACL=(02 0000)
@SACL=
@="WMEncSourceSink"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{2eeb4adf-4578-4d10-bca7-bb955f56320a}]
@DACL=(02 0000)
@SACL=
@="WMAudio Decoder DMO"
"Merit"=dword:00800800
"WMSDKMerit"=dword:00000100
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{2FEB9591-50CF-11D1-A6DF-006097C4E476}]
@DACL=(02 0000)
@SACL=
@="ppDSMeta Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{30146000-87BF-11D1-BE74-C94E44925F69}]
@DACL=(02 0000)
@SACL=
@="SONY MPEG Video Decoder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{31C48C31-70B0-11d1-A708-006097C4E476}]
@DACL=(02 0000)
@SACL=
@="ppDSClip Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{31C48C32-70B0-11d1-A708-006097C4E476}]
@DACL=(02 0000)
@SACL=
@="ppDSDetl Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{31DCBC0C-20D8-40b0-A409-F4474A942358}]
@DACL=(02 0000)
@SACL=
@="TcpiObj Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{34A09F03-DFC0-470E-A8B9-F2255883327C}]
@Class="REG_SZ"
@DACL=(02 0000)
@SACL=
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{35BA6629-73F8-49C8-B2C1-FACE5241FCEC}]
@Class="REG_SZ"
@DACL=(02 0000)
@SACL=
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{39A2C2A6-4778-11D2-9BDB-204C4F4F5020}]
@DACL=(02 0000)
@SACL=
@="DirectControl Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{39A2C2A9-4778-11D2-9BDB-204C4F4F5020}]
@DACL=(02 0000)
@SACL=
@="DirectContainer Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{3D96ED94-5D75-4165-9E1F-1A642C7BA316}]
@DACL=(02 0000)
@SACL=
@="Windows Media Player WMEncTextInputSource Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{3DA2AA3E-3D96-11D2-9BD2-204C4F4F5020}]
@DACL=(02 0000)
@SACL=
@="AsyncMHandler Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{42F65E5C-D380-428e-ADF7-EA07C822D6D2}]
@DACL=(02 0000)
@SACL=
@="IviMovieEffectDMO Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{44234020-7F7A-4419-A3AE-1BE1A87A935C}]
@DACL=(02 0000)
@SACL=
@="OpeningPerformer Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{45C6AFA5-2C13-402f-BC5D-45CC8172EF6B}]
@DACL=(02 0000)
@SACL=
@="Bluetooth Information Exchanger"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{48512A59-C8A5-4805-9048-23C9E4194BFA}]
@DACL=(02 0000)
@SACL=
@="VzCdbVcdsCore Class"
"AppID"="{33196F51-1808-4830-AAA6-E0CE1408D637}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{49FC0185-4B32-11d1-A40E-00600831F336}]
@DACL=(02 0000)
@SACL=
@="DSDisplayPanel Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{4AA09B81-933A-4ECF-A034-5C6CD5D48AB8}]
@DACL=(02 0000)
@SACL=
@="Dot1XTTLSCredentials Class"
"AppID"="{6AE5E02E-2DCA-4EAF-9D58-02D883362973}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{4BEE36D7-DF28-49C1-8B85-1F3AED830E66}]
@DACL=(02 0000)
@SACL=
@="Dot1XConfig Class"
"AppID"="{6AE5E02E-2DCA-4EAF-9D58-02D883362973}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{4F695794-BFCF-48B0-A323-F874F9BD45F2}]
@DACL=(02 0000)
@SACL=
@="Windows Media Player WMEncFileTransferSource Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{51014E27-3976-4E76-A7EF-9F37E39915ED}]
@Class="REG_SZ"
@DACL=(02 0000)
@SACL=
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{5210f8e4-b0bb-47c3-a8d9-7b2282cc79ed}]
@DACL=(02 0000)
@SACL=
@="WMAPro over S/PDIF DMO"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{52a2aaae-085d-4187-97ea-8c30db990436}]
@DACL=(02 0000)
@SACL=
@="HHCtrl Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{52e4e90a-f4af-460a-9e60-fdfb86c9dd5d}]
@DACL=(02 0000)
@SACL=
@="Windows Media Player WMEncoder Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{569095B8-57D5-4EA4-84F3-37BCDC81D72F}]
@DACL=(02 0000)
@SACL=
@="VzCsIpMedia Class"
"AppID"="{F72A3A26-8981-4E63-A0E5-2B09EA4B9819}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{56F9312C-C989-4E04-8C23-299DEE3A36F5}]
@DACL=(02 0000)
@SACL=
@="VzCdbSsCore Class"
"AppID"="{EE390213-FDF7-4D40-81C3-FAF62293F0B1}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{5A41EFA3-6C01-43DC-8C49-110151B36C70}]
@DACL=(02 0000)
@SACL=
@="Line 21 Decoder Text Output"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{5B0FADCD-FD70-490F-A262-11605AC9C2BC}]
@DACL=(02 0000)
@SACL=
@="FileImporter Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{5C85DCB0-F967-11D0-81ED-00C04FC99D4C}]
@DACL=(02 0000)
@SACL=
@="ppDShowNet Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{67841b03-c689-4188-ad3f-4c9ebeec710b}]
@DACL=(02 0000)
@SACL=
@="WM Speech Encoder DMO"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{67B65B9A-B102-4E99-8545-B578330B3B4F}]
@DACL=(02 0000)
@SACL=
@="VzCsIpMediaList Class"
"AppID"="{F72A3A26-8981-4E63-A0E5-2B09EA4B9819}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{6BEF3D0B-53F0-4b0d-B91C-C19ED3D4C9D1}]
@DACL=(02 0000)
@SACL=
@="Bluetooth File Extenstion"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{6CEB7408-B7F6-4983-888A-DAFA3E816A72}]
@DACL=(02 0000)
@SACL=
@="VaioAacDecFilter"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{6efeae9e-014c-436a-8aac-35da9535adc0}]
@DACL=(02 0000)
@SACL=
@="Windows Media Player InputCollection Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{6F8DAE82-43A2-47AA-B0E7-47B7E82F705F}]
@DACL=(02 0000)
@SACL=
@="WMEncSourcePluginWrapper"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{70f598e9-f4ab-495a-99e2-a7c4d3d89abf}]
@DACL=(02 0000)
@SACL=
@="WMAudio Encoder DMO"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{7122A82D-E722-4AFC-AA87-EAA77D8CFCE1}]
@DACL=(02 0000)
@SACL=
@="Windows Media Player WMEnc5PointWavSource Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73647561-0000-0010-8000-00aa00389b71}]
@DACL=(02 0000)
@SACL=
@="Gestionnaire de répartition WDM pour types de données standard"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{7bafb3b1-d8f4-4279-9253-27da423108de}]
@DACL=(02 0000)
@SACL=
@="WMV Screen decoder DMO"
"Merit"=dword:00800001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{7C6E29BC-8B8B-4C3D-859E-AF6CD158BE0F}]
@DACL=(02 0000)
@SACL=
@="SAX XML Reader 4.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{82d353df-90bd-4382-8bc2-3f6192b76e34}]
@DACL=(02 0000)
@SACL=
@="WMVideo Decoder DMO"
"Merit"=dword:00800001
"WMSDKMerit"=dword:00000100
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{847B4DF5-4B61-11D2-9BDB-204C4F4F5020}]
@DACL=(02 0000)
@SACL=
@="RadioView Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{874131cb-4ecc-443b-8948-746b89595d20}]
@DACL=(02 0000)
@SACL=
@="WMA Voice Decoder DMO"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{877E4351-6FEA-11d0-B863-00AA00A216A1}]
@DACL=(02 0000)
@SACL=
@="Distributeur à brancher : IKsClock"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{88D969C0-F192-11D4-A65F-0040963251E5}]
@DACL=(02 0000)
@SACL=
@="XML DOM Document 4.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{88D969C1-F192-11D4-A65F-0040963251E5}]
@DACL=(02 0000)
@SACL=
@="Free Threaded XML DOM Document 4.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{88D969C2-F192-11D4-A65F-0040963251E5}]
@DACL=(02 0000)
@SACL=
@="XML Schema Cache 4.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{88D969C3-F192-11D4-A65F-0040963251E5}]
@DACL=(02 0000)
@SACL=
@="XSL Template 4.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{88D969C4-F192-11D4-A65F-0040963251E5}]
@DACL=(02 0000)
@SACL=
@="XML Data Source Object 4.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{88D969C5-F192-11D4-A65F-0040963251E5}]
@DACL=(02 0000)
@SACL=
@="XML HTTP 4.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{88D969C6-F192-11D4-A65F-0040963251E5}]
@DACL=(02 0000)
@SACL=
@="Server XML HTTP 4.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{88D969C8-F192-11D4-A65F-0040963251E5}]
@DACL=(02 0000)
@SACL=
@="MXXMLWriter 4.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{88D969C9-F192-11D4-A65F-0040963251E5}]
@DACL=(02 0000)
@SACL=
@="MXHTMLWriter 4.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{88D969CA-F192-11D4-A65F-0040963251E5}]
@DACL=(02 0000)
@SACL=
@="SAXAttributes 4.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{88D969D6-F192-11D4-A65F-0040963251E5}]
@DACL=(02 0000)
@SACL=
@="MXNamespaceManager 4.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{89643D21-7B2A-11d1-8271-00A0C91F9CA0}]
@DACL=(02 0000)
@SACL=
@="adbanner Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{8A3F59E1-4994-11D1-A40D-00600831F336}]
@DACL=(02 0000)
@SACL=
@="DSStatusBar Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{8c3c1b17-e59d-11d2-b40b-00a024b9dddd}]
@DACL=(02 0000)
@SACL=
@="SetupLogServices Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{8C4EB103-516F-11D1-A6DF-006097C4E476}]
@DACL=(02 0000)
@SACL=
@="ppDSPropAdv Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{8CBEED49-18A6-4D9C-8EF5-E4DD9AB04A83}]
@DACL=(02 0000)
@SACL=
@="Windows Media Player WMEncSourcePluginCommunicator Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{8E718888-423F-11D2-876E-00A0C9082467}]
@DACL=(02 0000)
@SACL=
@="Radio"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{8E71888A-423F-11D2-876E-00A0C9082467}]
@DACL=(02 0000)
@SACL=
@="RadioServer Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{91814EC0-B5F0-11D2-80B9-00104B1F6CEA}]
@DACL=(02 0000)
@SACL=
@="InstallShield setup kernel"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{93126582-5402-4DB1-A102-33D330BC9B69}]
@DACL=(02 0000)
@SACL=
@="Windows Media Player WMEnc5Point1WavSourcePropertyPage Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{94E03510-31B9-47a0-A44E-E932AC86BB17}]
@DACL=(02 0000)
@SACL=
@="Windows Media Player Device Autoplay"
"AppID"="{ED6BB178-B06A-47ad-98B3-6066E0CF0147}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{96E1A653-CBCA-435D-A162-D147106AE95C}]
@DACL=(02 0000)
@SACL=
@="VaioAacDecPropertyPage"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{97103AE5-6248-4E04-97B5-36663159967C}]
@DACL=(02 0000)
@SACL=
@="Windows Media Player WMEncTunerPropPage Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{97952D20-B180-11CF-8410-00A024EC9DA6}]
@DACL=(02 0000)
@SACL=
@="Post Properties"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{987BBF42-5500-46D6-BAF0-A825828BC4EF}]
@DACL=(02 0000)
@SACL=
@="Windows Media Player WMEncFileSource Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{997B7877-EB34-465B-BD05-E6A15EB69A96}]
@Class="REG_SZ"
@DACL=(02 0000)
@SACL=
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{9C2263B0-3E3C-11D2-9BD3-204C4F4F5020}]
@DACL=(02 0000)
@SACL=
@="RadioPlayer Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{9F4D2FA2-54A1-11d1-8267-00A0C91F9CA0}]
@DACL=(02 0000)
@SACL=
@="gotobar Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A0A8001E-8588-41C9-B392-14F099ADF718}]
@DACL=(02 0000)
@SACL=
@="Dot1XTLSCredentials Class"
"AppID"="{6AE5E02E-2DCA-4EAF-9D58-02D883362973}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A1060A0A-8F2B-4AAF-AC98-FEBFA2B88F22}]
@Class="REG_SZ"
@DACL=(02 0000)
@SACL=
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A4199E55-EBB9-49E5-AF1A-7A5408B2E206}]
@DACL=(02 0000)
@SACL=
@="Registry Class"
"AppID"="{6EF8E539-12E9-4595-A7C6-3DDA8A4069B2}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A51BE8E5-1A25-4802-A5B7-E9DB483A3DEB}]
@DACL=(02 0000)
@SACL=
@="Dot1XMD5Credentials Class"
"AppID"="{6AE5E02E-2DCA-4EAF-9D58-02D883362973}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A9C2CEBF-36DC-40A3-92E6-ED59FDD9D20D}]
@DACL=(02 0000)
@SACL=
@="SONY Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AA7E2086-CB55-11D2-8094-00104B1F9838}]
@DACL=(02 0000)
@SACL=
@="InstallShield setup object wrapper"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AA7E2087-CB55-11D2-8094-00104B1F9838}]
@DACL=(02 0000)
@SACL=
@="InstallShield setup object wrapper"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AD824619-9A64-4dff-9426-4111B582A967}]
@DACL=(02 0000)
@SACL=
@="DeviceManagerClass"
"AppID"="{4A4F8AC6-CC99-4e12-8922-5B918BF0C269}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AE1A5812-5230-11D1-A6E0-006097C4E476}]
@DACL=(02 0000)
@SACL=
@="ppDSView Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AE1A5813-5230-11D1-A6E0-006097C4E476}]
@DACL=(02 0000)
@SACL=
@="ppDSOAdv Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AEE10E69-7C97-4F4E-9A43-1FC68B36CF08}]
@DACL=(02 0000)
@SACL=
@="VzHardwareResource Class"
"AppID"="{34A6B42D-C904-49BB-A3D0-625002CDF938}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AEE3E4A8-EF01-4024-A0F1-809D9B096E14}]
@DACL=(02 0000)
@SACL=
@="Windows Media Player Encoder Helper Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B01FEB50-45ED-11D3-B444-00104B261643}]
@DACL=(02 0000)
@SACL=
@="InstallShield for Windows Installer ScriptWrapper"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B4D85BBD-C1E6-4F2B-BF43-75CB28500A08}]
@DACL=(02 0000)
@SACL=
@="Windows Media Player TunerHelper Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B9A7E591-6C9C-11D3-B452-00104B261643}]
@DACL=(02 0000)
@SACL=
@="InstallShield for Windows Installer String Table"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{b9f8ac3e-0f71-11d2-b72c-00c04fb6bd3d}]
@DACL=(02 0000)
@SACL=
@="%PlugIn_IBasicAudio%"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BAA94581-C092-425C-B4D3-7B5EE0BAC3C4}]
@DACL=(02 0000)
@SACL=
@="Windows Media Player WMEncProfile2 Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BB314F91-A010-11d1-A75A-006097C4E476}]
@DACL=(02 0000)
@SACL=
@="ppDSMeta Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BC29A660-30E3-11d0-9E69-00C04FD7C15B}]
@DACL=(02 0000)
@SACL=
@="Gestionnaire de répartition WDM pour interface de réglage de propriétés VPE"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BDF5355D-8A9A-439C-801E-31F240E2974D}]
@DACL=(02 0000)
@SACL=
@="Sony File Source Property Page"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BF27441E-CDCD-4659-AEBE-06F6E069714E}]
@DACL=(02 0000)
@SACL=
@="Screen Capture Filter Task Page"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C0CD59AE-020D-11d1-81F2-00C04FC99D4C}]
@DACL=(02 0000)
@SACL=
@="ppDShowPlay Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C27BB47A-8823-4613-8C32-ADEBB5959985}]
@Class="REG_SZ"
@DACL=(02 0000)
@SACL=
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C39E156D-F621-48CF-B0EE-9C47C430543B}]
@DACL=(02 0000)
@SACL=
@="Windows Media Player WMEncFileTransferSourcePropertyPage Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C447080C-D0C3-48AE-B31E-BB3E93591C69}]
@DACL=(02 0000)
@SACL=
@="WMEnc DV Timecode Reader"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C6606CA5-2108-4CAF-8E52-1953F2DBF716}]
@DACL=(02 0000)
@SACL=
@="PropSet Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C90D7607-0BE2-4C0E-963A-4FE65880E99B}]
@Class="REG_SZ"
@DACL=(02 0000)
@SACL=
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C9CD1A93-D7B4-11D2-80C5-00104B1F6CEA}]
@DACL=(02 0000)
@SACL=
@="InstallShield setup user interafce"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CA0A025B-D758-4964-9A08-E9A416EE1D2C}]
@DACL=(02 0000)
@SACL=
@="Dot1XLeapCredentials Class"
"AppID"="{6AE5E02E-2DCA-4EAF-9D58-02D883362973}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CA81B096-1D6F-4635-956E-F08C0B2EC342}]
@DACL=(02 0000)
@SACL=
@="Windows Media Player WMEncImageSource Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CC0CA09A-5B84-43F2-BE5C-9169C192565F}]
@DACL=(02 0000)
@SACL=
@="RTLCSSAPI Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d23b90d0-144f-46bd-841d-59e4eb19dc59}]
@DACL=(02 0000)
@SACL=
@="WMVideo9 Encoder DMO"
"WMSDKMerit"=dword:00000100
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D30638B7-2CC2-4D05-A39F-7EE99E015604}]
@DACL=(02 0000)
@SACL=
@="Sony MP4 File Source"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D3984C13-C3CB-48E2-8BE5-5168340B4F35}]
@Class="REG_SZ"
@DACL=(02 0000)
@SACL=
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D7347882-4BA4-48BC-93F0-B957413A50F6}]
@DACL=(02 0000)
@SACL=
@="FolderWatcher Class"
"AppID"="{0686B8F3-3FA7-4048-B22D-E6DF61BE3B4D}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA126297-0CB3-4CB8-AF32-F43BDBFF5BC8}]
@DACL=(02 0000)
@SACL=
@="VzCdbControler Class"
"AppID"="{80E5EAFA-51C4-4756-A6D1-253BB72EC6C5}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DC81A76D-4757-4985-9084-08D0EB0855EA}]
@DACL=(02 0000)
@SACL=
@="VzCdbIntegratedDB Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DE6E1660-1B08-11D1-BFA2-00A024EC9DA6}]
@DACL=(02 0000)
@SACL=
@="Display"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E05592E4-C0B5-11D0-A439-00A0C9223196}]
@DACL=(02 0000)
@SACL=
@="Distributeur à brancher : IKsQualityForwarder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLS
A voir également:

27 réponses

Utilisateur anonyme
27 déc. 2012 à 16:09
1/ en voulant désinstaller combo fix un message d'erreur du style:" impossible de trouver le fichier c:\combofixCF9273.3xe" est apparu

2/ j'ai lancé Préscan et un message d'erreur apparaît "AutoIt Error Allocating Memory"

3/ combofix a donné l'indic suivante:"un rootkit zero access se trouve dans la pile tcp/ip..."

4/ je ne sais pas booter avec le cd kaspersky à partir de mon lecteur

je sens que ce VAio va passer à la poubelle :)
0
aucune des procédures conseillées ne fonctionnent

impossible de formater à partir de cmd d:

comment formater et lancer cd installation vaio à partir du lecteur (erreur d'E/S)
0
Utilisateur anonyme
27 déc. 2012 à 16:19
je parlais de ca :

malgré plusieures tentatives pour charger les mise à jour XP normalement ou en mode sans échec,

0
Utilisateur anonyme
27 déc. 2012 à 16:36
impossible de faire les mise à jour
0
buckhulk Messages postés 13690 Date d'inscription dimanche 21 septembre 2008 Statut Contributeur Dernière intervention 14 novembre 2020 1 756
27 déc. 2012 à 16:41
à LUKYLUKE123 he oui c'est difficile de"réparer" un ordi quand on utilise des logiciels sans vraiment savoir ce qu'ils font !
c'est des coups à complètement bousiller son pc !
0
Utilisateur anonyme
27 déc. 2012 à 16:57
ce n'est pas le fait de ne pas savoir ce qu'ils font ou ne font pas
c'est uniquement à cause de cette saloperie de rootkit
jusque là tout fonctionnait bien
je conclus donc que vous êtes impuissants ?
0
buckhulk Messages postés 13690 Date d'inscription dimanche 21 septembre 2008 Statut Contributeur Dernière intervention 14 novembre 2020 1 756
27 déc. 2012 à 17:13
impuissants ? on a pas commencé !!!
toi qui sait tout :
Après avoir pu reprendre le contrôle de mon portable, comment ? j'ai effectué un scan avec ComboFix. Pourquoi ?

Celui-ci me signale qu'un rootkit (rootkit.zeroAccess!) est présent dans la pile tcp/ip. 
Qui , ou ?
toi qui sais tout as-tu regarder : cette page ?
on ne peut pas mettre tes logiciels à jour !
etc...
suis ce que te dis gen , tu en sera libéré !!
0
Utilisateur anonyme
27 déc. 2012 à 17:02
? le rootkit a été dégagé par combofix dès le premier scan....


c:\windows\$NtUninstallKB58345$
c:\windows\$NtUninstallKB58345$\1777109509\@
c:\windows\$NtUninstallKB58345$\1777109509\Desktop.ini
c:\windows\$NtUninstallKB58345$\1777109509\L\00000004.@
c:\windows\$NtUninstallKB58345$\1777109509\L\201d3dde
c:\windows\$NtUninstallKB58345$\1777109509\L\qeafzoax
c:\windows\$NtUninstallKB58345$\1777109509\U\00000004.@
c:\windows\$NtUninstallKB58345$\1777109509\U\00000008.@
c:\windows\$NtUninstallKB58345$\1777109509\U\000000cb.@
c:\windows\$NtUninstallKB58345$\1777109509\U\80000000.@
c:\windows\$NtUninstallKB58345$\1777109509\U\80000032.@
c:\windows\$NtUninstallKB58345$\4139392086
0
parfait :)

et pour le reste ?
2/ j'ai lancé Préscan et un message d'erreur apparaît "AutoIt Error Allocating Memory"
0
Utilisateur anonyme
27 déc. 2012 à 17:09
fais l'option "diag de pre_scan , heberge le rapport pre_diag et donne le lien
0
Utilisateur anonyme
27 déc. 2012 à 17:16
cette clé aussi me semble incorrecte :

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ \0
0
Utilisateur anonyme
28 déc. 2012 à 17:55
que dois-je faire avec cette clé ?
je la supprime ?
0
Utilisateur anonyme
28 déc. 2012 à 18:05
jamais de la vie !

j'attends mon diag
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Utilisateur anonyme
28 déc. 2012 à 18:30
ok ok
je ne supprime rien :)
je ne bouge plus :)


voici le rapport pé_diag
http://cjoint.com/data3/3LCshxXhrFG.htm

et le rapport pre_scan
https://www.cjoint.com/?BLCsBYDGP2d

dans l'attente de vos remarques et précieux conseils

merci
0
Utilisateur anonyme
28 déc. 2012 à 18:35
il date de quand tdsskiller ?
0
Utilisateur anonyme
28 déc. 2012 à 19:01
j'ai lancé tddskiller le 26/12 en mode sans échec
voici le rapport
https://www.cjoint.com/?3LCtahFIM93
cela peut-il vous aider ?
merci
0
Utilisateur anonyme
28 déc. 2012 à 19:42
ton rapport date du 31.10.2012

TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
0
Utilisateur anonyme
28 déc. 2012 à 20:00
je vous assure que je l'ai lancé le 26/12
dans la procédure de tdss, l'horloge du pc n'est pas modifiée pendant le processus ?
il me semble avoir lu cela qlq part
peu importe
je vais relancer le tout cette nuit
et posterai le log

pas de remarque sur les log pre_scan ?

bonne soirée
0
Utilisateur anonyme
28 déc. 2012 à 20:13
si on verra par la suite
0