Installation Anti-Virus bloquée par virus
Résolu/Fermé
pioubzh
Messages postés
14
Date d'inscription
lundi 11 février 2002
Statut
Membre
Dernière intervention
15 septembre 2007
-
11 sept. 2007 à 22:31
jerdarius Messages postés 1 Date d'inscription samedi 4 avril 2009 Statut Membre Dernière intervention 4 avril 2009 - 4 avril 2009 à 23:52
jerdarius Messages postés 1 Date d'inscription samedi 4 avril 2009 Statut Membre Dernière intervention 4 avril 2009 - 4 avril 2009 à 23:52
A voir également:
- Installation Anti-Virus bloquée par virus
- Installation chromecast - Guide
- Operagxsetup virus ✓ - Forum Virus
- Vérificateur de lien virus - Guide
- Lien virus à envoyer - Forum Virus
- L'ordinateur d'arthur a été infecté par un virus répertorié récemment. son anti-virus ne l'a pas détecté. qu'a-t-il pu se passer ? - Forum Virus
11 réponses
jlpjlp
Messages postés
51580
Date d'inscription
vendredi 18 mai 2007
Statut
Contributeur sécurité
Dernière intervention
3 mai 2022
5 040
11 sept. 2007 à 22:33
11 sept. 2007 à 22:33
stinger
http://download.nai.com/products/mcafee-avert/stinger.exe
____________
AVG antispyxare
https://www.01net.com/telecharger/
Tuto :
http://www.kachouri.com/tuto/tuto-161-avg-anti-spyware-75-pour-votre-securite.html
->Relance AVG AS -> "Analyse" ->"Paramètres"
Sous la question "Comment réagir ?" :
-> clique sur "Actions recommandées" et choisis "Quarantaines"
-> Re-clique sur l'onglet "Analyse" puis réalise une "Analyse complète du système"
Si un fichier est infecté en fin d'analyse
->Clique sur "Appliquer toutes les actions "
->Clique sur "Enregistrer le rapport" puis sur "Enregistrer le rapport sous".
->Enregistre ce fichier texte sur ton bureau ensuite colle le rapport ici
__________
colle le rapport d'un scan en ligne
avec un des suivants:
bitdefender en ligne :
http://www.bitdefender.fr/scan_fr/scan8/ie.html
scan en ligne firefox
https://www.trendmicro.com/fr_fr/business.html
Panda en ligne :
http://pandasoftware.fr
__________
si tout c'est bien passé désactive la restauration système pour purger les virus qui seraient dedans puis réactive là (dans DEMARRER puis TOUS LES PROGRAMMES puis ACCESSOIRE puis OUTILS SYSTEME puis RESTAURATION SYSTEME puis paramètre)
__________
essaye de reinstaller un antivirus
____________
si ca persiste
colle un rapport hijackthis
https://www.01net.com/telecharger/windows/Securite/anti-spyware/fiches/29061.html
manuel :
https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html
http://download.nai.com/products/mcafee-avert/stinger.exe
____________
AVG antispyxare
https://www.01net.com/telecharger/
Tuto :
http://www.kachouri.com/tuto/tuto-161-avg-anti-spyware-75-pour-votre-securite.html
->Relance AVG AS -> "Analyse" ->"Paramètres"
Sous la question "Comment réagir ?" :
-> clique sur "Actions recommandées" et choisis "Quarantaines"
-> Re-clique sur l'onglet "Analyse" puis réalise une "Analyse complète du système"
Si un fichier est infecté en fin d'analyse
->Clique sur "Appliquer toutes les actions "
->Clique sur "Enregistrer le rapport" puis sur "Enregistrer le rapport sous".
->Enregistre ce fichier texte sur ton bureau ensuite colle le rapport ici
__________
colle le rapport d'un scan en ligne
avec un des suivants:
bitdefender en ligne :
http://www.bitdefender.fr/scan_fr/scan8/ie.html
scan en ligne firefox
https://www.trendmicro.com/fr_fr/business.html
Panda en ligne :
http://pandasoftware.fr
__________
si tout c'est bien passé désactive la restauration système pour purger les virus qui seraient dedans puis réactive là (dans DEMARRER puis TOUS LES PROGRAMMES puis ACCESSOIRE puis OUTILS SYSTEME puis RESTAURATION SYSTEME puis paramètre)
__________
essaye de reinstaller un antivirus
____________
si ca persiste
colle un rapport hijackthis
https://www.01net.com/telecharger/windows/Securite/anti-spyware/fiches/29061.html
manuel :
https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html
O VertigO
Messages postés
862
Date d'inscription
mercredi 8 août 2007
Statut
Membre
Dernière intervention
10 février 2008
32
13 sept. 2007 à 22:19
13 sept. 2007 à 22:19
Arf y'a bien moyen de résoudre, tracasse pas ;o)
Fais ceci, on va les avoir ces saletés... :
- Télécharge Diaghelp.zip de Malekal_Morte http://www.malekal.com/download/DiagHelp.zip
- Cliques droit dessus et choisis extraire tout.
- Un nouveau dossier va être créé: DiagHelp
- Ouvre le et double cliques sur Go.cmd
- Choisis l'option 1
- Suis les instructions qui apparaissent, et appuies bien sur une touche quand demandé, après le rapport CatchMe.
- Peut-etre que tu devras redémarrer ton ordinateur.
- Copie colle le rapport se trouve dans C:Resultat.txt ici.
Fais ceci, on va les avoir ces saletés... :
- Télécharge Diaghelp.zip de Malekal_Morte http://www.malekal.com/download/DiagHelp.zip
- Cliques droit dessus et choisis extraire tout.
- Un nouveau dossier va être créé: DiagHelp
- Ouvre le et double cliques sur Go.cmd
- Choisis l'option 1
- Suis les instructions qui apparaissent, et appuies bien sur une touche quand demandé, après le rapport CatchMe.
- Peut-etre que tu devras redémarrer ton ordinateur.
- Copie colle le rapport se trouve dans C:Resultat.txt ici.
jerdarius
Messages postés
1
Date d'inscription
samedi 4 avril 2009
Statut
Membre
Dernière intervention
4 avril 2009
4 avril 2009 à 23:52
4 avril 2009 à 23:52
bonjour j'ai un problème également d'installation d'anti-virus. je ne m'y connais pas trop alors merci de m'aider !!
DiagHelp version v1.4 - http://www.malekal.com
excute le 04/04/2009 à 23:36:13,75
System information for \\SN400815000002:
Uptime: Error reading uptime
Kernel version: Microsoft Windows XP, Uniprocessor Free
Product type: Professional
Product version: 5.1
Service pack: 2
Kernel build number: 2600
Registered organization:
Registered owner: jerome
Install date: 21/08/2005, 10:55:59
Activation status: Error reading status
IE version: 7.0000
System root: C:\WINDOWS
Processors: 1
Processor speed: 2.1 GHz
Processor type: AMD Athlon(tm) XP 3000+
Physical memory: 512 MB
Video driver: RADEON 9200 SERIES - Secondary
Volume Type Format Label Size Free Free
A: Removable 0.0%
C: Fixed NTFS HDD 114.48 GB 46.29 GB 40.4%
D: CD-ROM 0.0%
E: CD-ROM 0.0%
F: CD-ROM 0.0%
C:\WINDOWS\prefetch\CMD.EXE-087B4001.pf -->04/04/2009 23:36:17
C:\WINDOWS\prefetch\WINRAR.EXE-39C6DAD9.pf -->04/04/2009 23:33:36
C:\WINDOWS\prefetch\FIREFOX.EXE-28641590.pf -->04/04/2009 23:27:41
C:\WINDOWS\prefetch\VERCLSID.EXE-3667BD89.pf -->04/04/2009 23:25:32
C:\WINDOWS\prefetch\WMIPRVSE.EXE-28F301A9.pf -->04/04/2009 23:23:46
C:\WINDOWS\prefetch\MSIEXEC.EXE-2F8A8CAE.pf -->04/04/2009 23:23:03
C:\WINDOWS\prefetch\WINTEMS.EXE-2A563F9B.pf -->04/04/2009 23:17:52
C:\WINDOWS\prefetch\MDELK.EXE-1D176F91.pf -->04/04/2009 23:17:44
C:\WINDOWS\prefetch\465828.EXE-32259D42.pf -->04/04/2009 23:12:19
C:\WINDOWS\prefetch\449921.EXE-042C2E2E.pf -->04/04/2009 23:12:03
C:\WINDOWS\System32\drivers\avgfwdx.sys -->04/04/2009 23:21:01
C:\WINDOWS\System32\drivers\mbamswissarmy.sys -->14/01/2009 16:11:32
C:\WINDOWS\System32\drivers\mbam.sys -->14/01/2009 16:11:28
C:\WINDOWS\System32\drivers\DefragFS.sys -->05/01/2009 15:16:36
C:\WINDOWS\System32\drivers\srv.sys -->11/12/2008 13:57:21
C:\WINDOWS\System32\drivers\sptd.sys -->03/11/2008 20:18:11
C:\WINDOWS\System32\drivers\mrxsmb.sys -->24/10/2008 13:10:42
C:\WINDOWS\System32\avgfwdx.dll -->04/04/2009 23:21:00
C:\WINDOWS\System32\ban_list.txt -->04/04/2009 23:18:25
C:\WINDOWS\System32\wpa.dbl -->04/04/2009 23:06:00
C:\WINDOWS\System32\PerfStringBackup.INI -->29/03/2009 11:26:37
C:\WINDOWS\System32\perfh00C.dat -->29/03/2009 11:26:37
C:\WINDOWS\System32\perfh009.dat -->29/03/2009 11:26:37
C:\WINDOWS\System32\perfc00C.dat -->29/03/2009 11:26:37
C:\WINDOWS\System32\perfc009.dat -->29/03/2009 11:26:37
C:\WINDOWS\System32\FNTCACHE.DAT -->24/03/2009 17:40:01
C:\WINDOWS\System32\PDBootState -->24/03/2009 13:53:44
C:\WINDOWS\System32\ezsidmv.dat -->21/02/2009 11:39:31
C:\WINDOWS\System32\sirenacm.dll -->06/02/2009 19:52:40
C:\WINDOWS\System32\bdod.bin -->22/01/2009 19:43:04
C:\WINDOWS\System32\nscompat.tlb -->19/01/2009 19:24:33
C:\WINDOWS\System32\amcompat.tlb -->19/01/2009 19:24:33
C:\WINDOWS\System32\MRT.exe -->10/01/2009 03:35:28
C:\WINDOWS\System32\PDBoot.exe -->31/12/2008 14:12:50
C:\WINDOWS\System32\mshtml.dll -->13/12/2008 08:37:56
C:\WINDOWS\System32\TZLog.log -->10/12/2008 12:49:05
C:\WINDOWS\System32\history.aaw -->29/11/2008 16:19:02
C:\WINDOWS\System32\gdi32.dll -->23/10/2008 15:00:15
C:\WINDOWS\System32\tzchange.exe -->22/10/2008 11:47:07
C:\WINDOWS\System32\wininet.dll -->16/10/2008 22:18:43
C:\WINDOWS\System32\webcheck.dll -->16/10/2008 22:18:42
C:\WINDOWS\System32\urlmon.dll -->16/10/2008 22:18:42
C:\WINDOWS\WindowsUpdate.log -->04/04/2009 23:33:41
C:\WINDOWS\setupapi.log -->04/04/2009 23:26:47
C:\WINDOWS\0.log -->04/04/2009 23:05:44
C:\WINDOWS\wiadebug.log -->04/04/2009 23:04:59
C:\WINDOWS\wiaservc.log -->04/04/2009 23:04:58
C:\WINDOWS\bootstat.dat -->04/04/2009 23:04:44
C:\WINDOWS\SchedLgU.Txt -->04/04/2009 23:03:56
C:\WINDOWS\win.ini -->02/04/2009 23:52:56
C:\WINDOWS\DelMR.bat -->24/03/2009 13:51:54
C:\WINDOWS\DEBUGSM.INI -->04/03/2009 16:55:22
C:\WINDOWS\imsins.BAK -->19/01/2009 19:18:52
C:\WINDOWS\system.ini -->12/01/2009 13:10:45
C:\WINDOWS\CTREBOOT.INI -->10/01/2009 22:53:45
C:\WINDOWS\NeroDigital.ini -->14/11/2008 01:00:29
C:\WINDOWS\Irremote.ini -->13/11/2008 23:55:31
Le volume dans le lecteur C s'appelle HDD
Le numéro de série du volume est A056-AE0E
Répertoire de C:\WINDOWS
15/01/2009 12:33 <REP> $hf_mig$
15/11/2008 13:32 <REP> $NtUninstallKB925720$
29/05/2008 09:21 <REP> $NtUninstallKB932823-v3$
10/09/2008 15:04 <REP> $NtUninstallKB938464$
06/05/2008 14:14 <REP> $NtUninstallKB941693$
06/05/2008 14:11 <REP> $NtUninstallKB943055$
06/05/2008 14:11 <REP> $NtUninstallKB945553$
06/05/2008 14:14 <REP> $NtUninstallKB946026$
03/09/2008 14:01 <REP> $NtUninstallKB946648$
06/05/2008 14:13 <REP> $NtUninstallKB948590$
06/05/2008 14:14 <REP> $NtUninstallKB948881$
11/05/2008 12:05 <REP> $NtUninstallKB950749$
03/09/2008 14:01 <REP> $NtUninstallKB950762$
03/09/2008 14:01 <REP> $NtUninstallKB950974$
03/09/2008 13:57 <REP> $NtUninstallKB951066$
03/09/2008 14:01 <REP> $NtUninstallKB951072-v2$
03/09/2008 14:02 <REP> $NtUninstallKB951376-v2$
03/09/2008 14:01 <REP> $NtUninstallKB951698$
03/09/2008 13:57 <REP> $NtUninstallKB951748$
10/12/2008 12:49 <REP> $NtUninstallKB952069_WM9$
03/09/2008 14:00 <REP> $NtUninstallKB952287$
03/09/2008 14:01 <REP> $NtUninstallKB952954$
03/09/2008 14:01 <REP> $NtUninstallKB953839$
21/01/2009 11:44 <REP> $NtUninstallKB954154_WM11$
17/10/2008 09:11 <REP> $NtUninstallKB954211$
10/12/2008 12:48 <REP> $NtUninstallKB954600$
13/11/2008 09:24 <REP> $NtUninstallKB955069$
10/12/2008 12:49 <REP> $NtUninstallKB955839$
17/10/2008 09:12 <REP> $NtUninstallKB956391$
10/12/2008 12:48 <REP> $NtUninstallKB956802$
17/10/2008 09:12 <REP> $NtUninstallKB956803$
17/10/2008 09:11 <REP> $NtUninstallKB956841$
17/10/2008 09:12 <REP> $NtUninstallKB957095$
13/11/2008 09:25 <REP> $NtUninstallKB957097$
25/10/2008 15:07 <REP> $NtUninstallKB958644$
15/01/2009 12:33 <REP> $NtUninstallKB958687$
13/11/2008 23:09 <REP> $NtUninstallWIC$
19/01/2009 19:16 <REP> $NtUninstallwmp11$
30/09/2002 12:34 <REP> I386
14/11/2006 00:26 <REP> ie7
04/04/2009 23:21 <REP> inf
04/04/2009 23:23 <REP> Installer
14/11/2006 00:28 <REP> msdownld.tmp
15/11/2006 00:25 <REP> PIF
04/04/2009 23:26 <REP> system32
30/08/2002 13:00 49 102 winnt.bmp
30/08/2002 13:00 49 102 winnt256.bmp
3 fichier(s) 98 953 octets
45 Rép(s) 49 705 250 816 octets libres
Le volume dans le lecteur C s'appelle HDD
Le numéro de série du volume est A056-AE0E
Répertoire de C:\WINDOWS\system32
04/04/2009 23:26 <REP> .
04/04/2009 23:26 <REP> ..
20/02/2009 15:48 <REP> dllcache
04/04/2009 23:26 <REP> drivers
21/02/2009 11:39 56 ezsidmv.dat
17/04/2002 14:29 58 Favorites.ini
9 fichier(s) 4 835 octets
4 Rép(s) 49 705 250 816 octets libres
winlogon.exe
Verified: Signed
svchost.exe
Verified: Signed
ws2_32.dll
Verified: Signed
user32.dll
Verified: Signed
tcpip.sys
Verified: Signed
ndis.sys
Verified: Signed
null.sys
Verified: Signed
userinit.exe
kernel32.dll
ListDLLs v2.25 - DLL lister for Win9x/NT
Copyright (C) 1997-2004 Mark Russinovich
Sysinternals - www.sysinternals.com
------------------------------------------------------------------------------
explorer.exe pid: 992
Command line: C:\WINDOWS\Explorer.EXE
Base Size Version Path
0x44080000 0xd0000 7.00.6000.16762 C:\WINDOWS\system32\WININET.dll
0x00400000 0x9000 6.00.5441.0000 C:\WINDOWS\system32\Normaliz.dll
0x43e00000 0x45000 7.00.6000.16762 C:\WINDOWS\system32\iertutil.dll
0x58b50000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll
0x76f80000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL
0x77000000 0xd4000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll
0x44160000 0x127000 7.00.6000.16762 C:\WINDOWS\system32\urlmon.dll
0x44360000 0x5cd000 7.00.6000.16762 C:\WINDOWS\system32\ieframe.dll
0x76ac0000 0x11000 3.05.2284.0000 C:\WINDOWS\system32\ATL.DLL
0x7d200000 0x2be000 3.01.4000.4039 C:\WINDOWS\system32\msi.dll
0x442b0000 0x3c000 7.00.6000.16762 C:\WINDOWS\system32\webcheck.dll
0x164a0000 0x23000 5.02.5721.5145 C:\WINDOWS\system32\WPDShServiceObj.dll
0x109c0000 0x2c000 5.02.5721.5145 C:\WINDOWS\system32\PortableDeviceTypes.dll
0x10930000 0x49000 5.02.5721.5145 C:\WINDOWS\system32\PortableDeviceApi.dll
0x10000000 0x10000 8.00.0000.0456 C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
0x78130000 0x9b000 8.00.50727.1433 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\MSVCR80.dll
0x021b0000 0x5b000 1.01.0000.0000 C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
0x4eb80000 0x1a6000 5.01.3102.3352 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.3352_x-ww_81af8e88\gdiplus.dll
0x022e0000 0x5b000 8.01.0000.0000 C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\PDFShell.dll
0x15110000 0x25c000 11.00.5721.5251 C:\WINDOWS\system32\wmvcore.dll
0x11c70000 0x3a000 11.00.5721.5238 C:\WINDOWS\system32\WMASF.DLL
0x14070000 0x1b000 11.00.5721.5145 C:\WINDOWS\system32\wmpshell.dll
0x03110000 0x12000 1.01.0000.0000 C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll
0x03140000 0x2c000 C:\Program Files\WinRAR\rarext.dll
0x02a60000 0x2a000 4.02.0000.0000 C:\Program Files\PowerISO\PWRISOSH.DLL
0x02a00000 0x13000 1.02.0000.0000 C:\Program Files\EPSON\Creativity Suite\Easy Photo Print\EPPShell.dll
0x73d20000 0xfe000 6.02.4131.0000 C:\WINDOWS\system32\MFC42.DLL
0x61d70000 0xe000 6.00.8665.0000 C:\WINDOWS\system32\MFC42LOC.DLL
0x02900000 0x13000 1.00.0000.0001 C:\Program Files\ATI Technologies\ATI.ACE\atiacmxx.dll
0x16210000 0x27e000 5.02.5721.5145 C:\WINDOWS\system32\wpdshext.dll
0x74730000 0x3d000 3.525.1117.0000 C:\WINDOWS\system32\ODBC32.dll
0x029c0000 0x18000 3.525.1117.0000 C:\WINDOWS\system32\odbcint.dll
0x07160000 0x46000 5.02.5721.5145 C:\WINDOWS\system32\Audiodev.dll
0x58640000 0x8a000 1.09.0000.0305 C:\WINDOWS\System32\l3codeca.acm
0x6c330000 0x1f000 8.00.0000.0223 C:\Program Files\AVG\AVG8\avgse.dll
0x7c420000 0x87000 8.00.50727.1433 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\MSVCP80.dll
ListDLLs v2.25 - DLL lister for Win9x/NT
Copyright (C) 1997-2004 Mark Russinovich
Sysinternals - www.sysinternals.com
------------------------------------------------------------------------------
winlogon.exe pid: 764
Command line: winlogon.exe
Base Size Version Path
0x01000000 0x81000 \??\C:\WINDOWS\SYSTEM32\winlogon.exe
0x58b50000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\COMCTL32.dll
0x74730000 0x3d000 3.525.1117.0000 C:\WINDOWS\SYSTEM32\ODBC32.dll
0x20000000 0x18000 3.525.1117.0000 C:\WINDOWS\SYSTEM32\odbcint.dll
0x10000000 0x11000 6.14.0010.4132 C:\WINDOWS\SYSTEM32\Ati2evxx.dll
0x01280000 0x3b000 1.07.0018.0005 C:\WINDOWS\SYSTEM32\WgaLogon.dll
0x76f80000 0x7f000 2001.12.4414.0308 C:\WINDOWS\SYSTEM32\CLBCATQ.DLL
0x77000000 0xd4000 2001.12.4414.0258 C:\WINDOWS\SYSTEM32\COMRes.dll
Contenu de Downloaded Program Files
Le volume dans le lecteur C s'appelle HDD
Le numéro de série du volume est A056-AE0E
Répertoire de C:\WINDOWS\Downloaded Program Files
03/04/2009 14:30 <REP> .
03/04/2009 14:30 <REP> ..
24/08/2006 09:28 141 424 asinst.dll
22/08/2006 10:06 537 asinst.inf
07/12/2004 17:07 32 bdcore.dll
25/05/2006 01:21 118 784 bdupd.dll
30/09/2002 13:03 65 desktop.ini
14/10/1997 18:52 697 DirectAnimation Java Classes.osd
25/07/2002 18:13 24 576 dwusplay.dll
25/07/2002 18:13 196 608 dwusplay.exe
15/06/2006 18:33 1 132 192 EPUWALcontrol.dll
23/03/2007 13:17 1 292 erma.inf
30/12/2007 13:02 378 ImageUploader5.inf
30/12/2007 13:02 3 008 016 ImageUploader5.ocx
25/05/2006 01:21 53 248 ipsupd.dll
25/07/2002 18:05 172 032 isusweb.dll
16/03/2005 12:34 7 407 lang.ini
15/05/2006 18:48 367 LegitCheckControl.inf
07/12/2004 17:07 32 libfn.dll
13/02/2008 17:55 130 live.ini
20/04/2005 16:21 10 534 mainstrings.txt
16/03/2005 17:29 176 128 Mannequin.Dll
06/09/2005 21:47 872 960 MannequinPlayer.dll
20/01/2000 15:25 1 162 Microsoft XML Parser for Java.osd
26/05/2005 04:19 293 muweb.inf
29/10/2007 16:45 1 244 oscan8.inf
25/10/2007 16:54 471 040 oscan8.ocx
27/08/2005 15:08 551 OSD25.OSD
30/06/2005 10:33 244 pestscan.ini
13/09/2005 13:44 479 pestscanx.inf
13/09/2005 13:42 676 864 pestscanx.ocx
31/01/2005 15:11 685 120 ppctl.dll
07/09/2007 23:24 0 ppv5exc.dat
03/06/2002 17:53 144 QTPlugin.inf
07/09/2007 23:24 <REP> Quarantine
14/03/2005 14:58 7 073 scanoptions.tsi
09/11/2006 15:36 5 019 swflash.inf
07/09/2007 23:25 4 128 768 vet._at
13/07/2007 06:11 1 353 016 vete.dll
20/11/2006 12:02 180 282 webscan.dll
21/07/2006 12:55 477 webscan.inf
18/04/2006 00:39 22 775 wficat.inf
01/06/2004 15:41 853 yinst.inf
14/04/2006 14:09 188 968 yinsthelper.dll
41 fichier(s) 13 641 811 octets
Répertoire de C:\WINDOWS\Downloaded Program Files\Quarantine
07/09/2007 23:24 <REP> .
07/09/2007 23:24 <REP> ..
07/09/2007 23:24 32 ppqdb.dat
07/09/2007 23:24 32 ppqsdb.dat
2 fichier(s) 64 octets
Total des fichiers listés :
43 fichier(s) 13 641 875 octets
5 Rép(s) 49 705 242 624 octets libres
Recherche de rootkit! (Merci S!Ri)
Recherche d'infections connues
Export des clefs sensibles..
Liste des fichiers en exception sur le pare-feu XP SP2
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\Internet Explorer\\iexplore.exe"="C:\\Program Files\\Internet Explorer\\iexplore.exe:*:Enabled:Internet Explorer"
"C:\\Program Files\\Windows Media Player\\wmplayer.exe"="C:\\Program Files\\Windows Media Player\\wmplayer.exe:*:Enabled:Windows Media Player"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\QuickTime\\QuickTimePlayer.exe"="C:\\Program Files\\QuickTime\\QuickTimePlayer.exe:*:Enabled:Fichier de ressources QuickTime"
"C:\\Program Files\\eMule\\emule.exe"="C:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule"
"C:\\Program Files\\Sony Ericsson\\Update Service\\Update Service.exe"="C:\\Program Files\\Sony Ericsson\\Update Service\\Update Service.exe:*:Enabled:Update Service"
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"="C:\\Program Files\\Bonjour\\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe"="C:\\Program Files\\VideoLAN\\VLC\\vlc.exe:*:Enabled:VLC media player"
"C:\\Program Files\\Orange\\Connectivity\\ConnectivityManager.exe"="C:\\Program Files\\Orange\\Connectivity\\ConnectivityManager.exe:*:enabled:CSS"
"C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"="C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"="C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
Export de la clef SharedTaskScheduler
[SharedTaskScheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant"
exports des policies
REGEDIT4
[system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001
"EnableLUA"=dword:00000000
Export des clefs sensibles..
Rechercher adresses sensibles dans le fichier HOSTS...
127.0.0.1 update.bitdefender.comcatchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-04-04 23:37:59
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden services & system hive ...
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:0f,fe,fd,57,f2,34,26,c6,63,da,19,c2,2e,8b,f4,65,89,7f,b9,ee,af,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:0f,fe,fd,57,f2,34,26,c6,63,da,19,c2,2e,8b,f4,65,89,7f,b9,ee,af,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\SW_BDFNDISFMP]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:9b01536f
"s2"=dword:2a65d6a1
"h0"=dword:00000002
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:0f,fe,fd,57,f2,34,26,c6,63,da,19,c2,2e,8b,f4,65,89,7f,b9,ee,af,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000001
"khjeh"=hex:7a,26,98,44,0b,cf,dc,1f,87,aa,70,12,ff,2e,1b,af,8b,06,fa,5f,5e,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,0b,6f,b7,d3,e1,c5,08,65,cf,ca,8a,cc,4d,3a,d0,34,1d,..
"khjeh"=hex:26,e0,8c,8f,95,a0,b2,fe,36,bb,07,dd,bb,e6,84,dc,5a,e0,a6,2d,90,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:37,aa,67,e1,e6,a6,ef,3d,a6,af,6f,33,7d,51,c7,60,67,02,28,3f,fd,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srosa]
"Type"=dword:00000001
"Start"=dword:00000001
"ErrorControl"=dword:00000000
"ImagePath"=str(2):"\??\C:\Documents and Settings\jerome\Application Data\drivers\wfsintwq.sys"
"DisplayName"="srosa"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:0f,fe,fd,57,f2,34,26,c6,63,da,19,c2,2e,8b,f4,65,89,7f,b9,ee,af,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet005\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:0f,fe,fd,57,f2,34,26,c6,63,da,19,c2,2e,8b,f4,65,89,7f,b9,ee,af,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet006\Enum\Root\SW_BDFNDISFMP]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet006\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:0f,fe,fd,57,f2,34,26,c6,63,da,19,c2,2e,8b,f4,65,89,7f,b9,ee,af,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet006\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000001
"khjeh"=hex:7a,26,98,44,0b,cf,dc,1f,87,aa,70,12,ff,2e,1b,af,8b,06,fa,5f,5e,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet006\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,0b,6f,b7,d3,e1,c5,08,65,cf,ca,8a,cc,4d,3a,d0,34,1d,..
"khjeh"=hex:26,e0,8c,8f,95,a0,b2,fe,36,bb,07,dd,bb,e6,84,dc,5a,e0,a6,2d,90,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet006\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:37,aa,67,e1,e6,a6,ef,3d,a6,af,6f,33,7d,51,c7,60,67,02,28,3f,fd,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet006\Services\srosa]
"Type"=dword:00000001
"Start"=dword:00000001
"ErrorControl"=dword:00000000
"ImagePath"=str(2):"\??\C:\Documents and Settings\jerome\Application Data\drivers\wfsintwq.sys"
"DisplayName"="srosa"
scanning hidden registry entries ...
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\"=""
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\"=""
"C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_Data\"=""
"C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\"=""
"C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Roles\"=""
"C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Roles\App_LocalResources\"=""
"C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MSBuild\"=""
"C:\WINDOWS\system32\MUI\0409\"=""
"C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\App_LocalResources\"=""
"C:\WINDOWS\winsxs\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\"=""
"C:\Documents and Settings\All Users\Application Data\Symantec\Norton Internet Security\Log\"="1"
"C:\Documents and Settings\All Users\Application Data\Symantec\Norton Internet Security\"="1"
"C:\Program Files\Microsoft CAPICOM 2.1.0.2\"=""
"C:\Program Files\Microsoft CAPICOM 2.1.0.2\Lib\X86\"=""
"C:\Program Files\Microsoft CAPICOM 2.1.0.2\Lib\"=""
"C:\Program Files\Microsoft CAPICOM 2.1.0.2\License\"=""
"C:\WINDOWS\Installer\{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}\"=""
"C:\Program Files\Fichiers communs\Java\Update\Base Images\jre1.6.0.b105\"=""
"C:\Program Files\Fichiers communs\Java\Update\Base Images\"=""
"C:\Program Files\Fichiers communs\Java\Update\"=""
"C:\Program Files\Fichiers communs\Java\"=""
"C:\Documents and Settings\All Users\Application Data\BitDefender\Desktop\"="1"
"C:\Documents and Settings\All Users\Application Data\BitDefender\"="1"
"C:\Program Files\Fichiers communs\Adobe\Updater5\"=""
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\win\"=""
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\"=""
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\"=""
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\Mac\"=""
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\Adobe\"=""
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\1033\"=""
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ASP.NETClientFiles\"=""
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CONFIG\"=""
"C:\WINDOWS\system32\URTTEMP\"=""
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MUI\0409\"=""
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MUI\"=""
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\"=""
"C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\"="1"
"C:\Program Files\Fichiers communs\InstallShield\Driver\1150\"="1"
"C:\Program Files\Sony Ericsson\"="1"
"C:\Program Files\Fichiers communs\Teleca Shared\"=""
"C:\Program Files\Fichiers communs\Teleca Shared\DCU-11\"=""
"C:\Program Files\Fichiers communs\Teleca Shared\DSS-20\"=""
"C:\Program Files\Fichiers communs\Teleca Shared\DSS-25\"=""
"C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9818.0_x-ww_8ff50c5d\"=""
"C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.0.0_x-ww_29c3ad6a\"=""
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\"=""
"c:\WINDOWS\winsxs\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9848.0_x-ww_1b897e9a\"=""
"c:\WINDOWS\Installer\{C04E32E0-0416-434D-AFB9-6969D703A9EF}\"=""
"C:\Program Files\Sony Ericsson\Mobile4\"="1"
"C:\Program Files\Fichiers communs\Microsoft Shared\SFPCA Cache\"=""
"C:\Program Files\Sony Ericsson\Mobile4\InstSupport\"=""
"C:\Program Files\Sony Ericsson\Mobile4\Sync Manager\"=""
"C:\Program Files\Lavasoft\Ad-Aware 2007\"=""
"C:\Program Files\Lavasoft\"=""
"C:\WINDOWS\Installer\{E31C348B-63A9-4CBF-8D7F-D932ABB63244}\"=""
"C:\Program Files\Fichiers communs\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0_02.b06\"=""
"C:\Program Files\Java\jre1.6.0_02\"=""
"C:\Program Files\Java\jre1.6.0_02\bin\"=""
"C:\WINDOWS\Installer\{3248F0A8-6813-11D6-A77B-00B0D0160020}\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\"=""
"C:\Program Files\Microsoft Office\Office12\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\VS Runtime\"=""
"C:\Program Files\Microsoft Office\Office12\STARTUP\"="1"
"C:\WINDOWS\winsxs\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\"=""
"C:\WINDOWS\winsxs\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\"=""
"C:\WINDOWS\winsxs\Policies\x86_policy.8.0.Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_x-ww_5f0bbcff\"=""
"C:\WINDOWS\winsxs\Policies\x86_policy.8.0.Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_x-ww_caeee150\"=""
"C:\WINDOWS\winsxs\Policies\x86_policy.8.0.Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_x-ww_0f75c32e\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\DW\1036\"=""
"C:\WINDOWS\winsxs\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_6e805841\"=""
"C:\WINDOWS\winsxs\Policies\x86_policy.8.0.Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_x-ww_7d81c9f9\"=""
"C:\Program Files\Microsoft Office\Office10\1033\"="1"
"C:\Documents and Settings\All Users\Application Data\Microsoft\MSDAIPP\Offline\"="1"
"C:\Documents and Settings\All Users\Application Data\Microsoft\MSDAIPP\"="1"
"C:\Program Files\Fichiers communs\Microsoft Shared\MODI\12.0\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\MODI\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\PROOF\1033\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\TRANSLAT\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\Proof.fr\"=""
"C:\Program Files\Microsoft Office\OFFICE12\1036\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\PROOF\1036\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\TRANSLAT\ENFR\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\TRANSLAT\FREN\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\Proof.en\"=""
"C:\Program Files\Microsoft Office\OFFICE12\1033\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Help\"="1"
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\Office.fr-fr\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Help\1031\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Help\1033\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Help\2052\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Help\1028\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Help\3082\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Help\1041\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Help\1042\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Help\1036\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Help\1040\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\1036\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\VS Runtime\1036\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\HTML\XMLLINKS\1036\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\HTML\XMLLINKS\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\HTML\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\MODI\12.0\1036\"=""
"C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\1036\"=""
"C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\"=""
"C:\Program Files\Microsoft Office\MEDIA\"=""
"C:\Program Files\Microsoft Office\MEDIA\OFFICE12\1036\"=""
"C:\Program Files\Microsoft Office\MEDIA\OFFICE12\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\EQUATION\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\EQUATION\1036\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Smart Tag\1036\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Smart Tag\LISTS\1036\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Smart Tag\LISTS\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Web Server Extensions\12\BIN\1036\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Web Server Extensions\12\BIN\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Web Server Extensions\12\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\"=""
"C:\WINDOWS\Installer\{30120000-006E-040C-0000-0000000FF1CE}\"=""
"C:\Program Files\Microsoft Office\Templates\1036\"=""
"C:\Program Files\Microsoft Office\Templates\"=""
"C:\Program Files\Microsoft.NET\Primary Interop Assemblies\"="1"
"C:\Program Files\Microsoft.NET\"="1"
"C:\Program Files\Fichiers communs\Microsoft Shared\Ink\"=""
"C:\Program Files\Microsoft Works\1033\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Information Retrieval\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Filters\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\MODI\12.0\DRIVERS\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\EURO\"=""
"C:\Program Files\Microsoft Office\MEDIA\OFFICE12\AUTOSHAP\"=""
"C:\Program Files\Microsoft Office\MEDIA\OFFICE12\BULLETS\"=""
"C:\Program Files\Microsoft Office\MEDIA\OFFICE12\LINES\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\MSORUN\"=""
"C:\Program Files\Fichiers communs\DESIGNER\"=""
"C:\Program Files\Microsoft Office\Document Themes 12\Theme Colors\"=""
"C:\Program Files\Microsoft Office\Document Themes 12\"=""
"C:\Program Files\Microsoft Office\Document Themes 12\Theme Effects\"=""
"C:\Program Files\Microsoft Office\Document Themes 12\Theme Fonts\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Cultures\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Portal\"=""
"C:\Documents and Settings\All Users\Menu D\xe9marrer\Programmes\Microsoft Office\"=""
"C:\Documents and Settings\All Users\Menu D\xe9marrer\Programmes\Microsoft Office\Outils Microsoft Office\"=""
"C:\WINDOWS\Installer\{30120000-00A1-0000-0000-0000000FF1CE}\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\Access.fr-fr\"=""
"C:\Program Files\Microsoft Office\Templates\1036\Access\"=""
"C:\Program Files\Microsoft Office\Templates\1036\Access\WSS\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\Excel.fr-fr\"=""
"C:\WINDOWS\SHELLNEW\"=""
"C:\Program Files\Microsoft Office\Office12\QUERIES\"=""
"C:\Program Files\Microsoft Office\Office12\SAMPLES\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\Outlook.fr-fr\"=""
"C:\Program Files\Microsoft Office\Office12\FORMS\1036\"=""
"C:\Program Files\Microsoft Office\Office12\FORMS\"=""
"C:\Program Files\Fichiers communs\SYSTEM\MSMAPI\1036\"=""
"C:\Program Files\Fichiers communs\SYSTEM\MSMAPI\"=""
"C:\Program Files\Microsoft Office\Office12\CONVERT\1036\"=""
"C:\Program Files\Microsoft Office\Office12\CONVERT\"=""
"C:\Program Files\Microsoft Office\Office12\ADDINS\"=""
"C:\Program Files\Microsoft Office\Stationery\1036\"=""
"C:\Program Files\Microsoft Office\Stationery\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\PowerPoint.fr-fr\"=""
"C:\Program Files\Microsoft Visual Studio 8\SDK\"="1"
"C:\Program Files\Microsoft Visual Studio 8\"="1"
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\InfoPath.fr-fr\"=""
"C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1036\"=""
"C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\"=""
"C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\"=""
"C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\VSTA\"=""
"C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\"=""
"C:\Program Files\Microsoft Visual Studio 8\Common7\"=""
"C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1036\"=""
"C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\"=""
"C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\PrivateAssemblies\fr\"=""
"C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\PrivateAssemblies\"=""
"C:\Program Files\Microsoft Visual Studio 8\VSTA\Bin\1036\"=""
"C:\Program Files\Microsoft Visual Studio 8\VSTA\Bin\"=""
"C:\Program Files\Microsoft Visual Studio 8\VSTA\"=""
"C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\PublicAssemblies\fr\"=""
"C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\PublicAssemblies\"=""
"C:\Program Files\Microsoft Office\Office12\INFFORMS\1036\"=""
"C:\Program Files\Microsoft Office\Office12\INFFORMS\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\Publisher.fr-fr\"=""
"C:\Program Files\Microsoft Office\Office12\1036\PUBFTSCM\"=""
"C:\Program Files\Microsoft Office\Office12\1036\PUBSPAPR\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\Word.fr-fr\"=""
"C:\Program Files\Microsoft Office\Office12\1036\Bibliography\"=""
"C:\Program Files\Microsoft Office\Office12\Document Parts\1036\"=""
"C:\Program Files\Microsoft Office\Office12\Document Parts\"=""
"C:\Program Files\Microsoft Office\Office12\1036\QuickStyles\"=""
"C:\Program Files\Microsoft Office\Office12\AccessWeb\"="1"
"C:\Program Files\Microsoft Office\Office12\XLSTART\"="1"
"C:\Program Files\Microsoft Office\Office12\Library\"="1"
"C:\Program Files\Microsoft Visual Studio 8\Common7\Packages\"="1"
"C:\Program Files\Microsoft Office\Templates\Presentation Designs\"="1"
"C:\Program Files\Microsoft Visual Studio 8\Common7\Packages\Debugger\"="1"
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\PRO\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\VSTA\8.0\x86\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\VSTA\8.0\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\VSTA\"=""
"C:\Program Files\Microsoft Office\Office12\ACCWIZ\"=""
"C:\Program Files\Microsoft Office\Office12\BITMAPS\DBWIZ\"=""
"C:\Program Files\Microsoft Office\Office12\BITMAPS\"=""
"C:\Program Files\Microsoft Office\Office12\BITMAPS\STYLES\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\MSClientDataMgr\"=""
"C:\Program Files\Microsoft Office\CLIPART\PUB60COR\"=""
"C:\Program Files\Microsoft Office\CLIPART\"=""
"C:\Program Files\Microsoft Office\Office12\XLATORS\"=""
"C:\Program Files\Microsoft Office\Office12\MEDIA\"=""
"C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\"=""
"C:\Program Files\Microsoft Office\CLIPART\Publisher\"=""
"C:\Program Files\Microsoft Office\Office12\PUBBA\"=""
"C:\Program Files\Microsoft Office\Office12\PUBWIZ\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\AFTRNOON\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\ARCTIC\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\AXIS\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\BLENDS\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\BLUECALM\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\BLUEPRNT\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\BOLDSTRI\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\BREEZE\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\CANYON\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\CAPSULES\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\CASCADE\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\COMPASS\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\CONCRETE\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\DEEPBLUE\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\ECHO\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\ECLIPSE\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\EDGE\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\EVRGREEN\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\EXPEDITN\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\ICE\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\INDUST\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\IRIS\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\JOURNAL\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\LAYERS\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\LEVEL\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\NETWORK\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\PAPYRUS\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\PIXEL\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\PROFILE\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\QUAD\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\RADIAL\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\REFINED\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\RICEPAPR\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\RIPPLE\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\RMNSQUE\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\SATIN\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\SKY\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\SLATE\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\SONORA\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\SPRING\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\STRTEDGE\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\STUDIO\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\SUMIPNTG\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\WATER\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\WATERMAR\"=""
"C:\Program Files\Microsoft Office\Templates\12\MseNewFileItems\"=""
"C:\Program Files\Microsoft Office\Templates\12\"=""
"C:\Program Files\Microsoft Office\Office12\BORDERS\"=""
"C:\Program Files\Microsoft Office\Office12\PAGESIZE\"=""
"C:\Program Files\Microsoft Office\Office12\Bibliography\"=""
"C:\Program Files\Microsoft Office\Office12\Bibliography\Sort\"=""
"C:\Program Files\Microsoft Office\Office12\Bibliography\Style\"=""
"C:\Program Files\Microsoft Office\Office12\InfoPathOM\"=""
"C:\Program Files\MSBuild\"=""
"C:\Program Files\Fichiers communs\System\ole db\Cartridges\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\VS Runtime\SCHEMAS\XML\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\VS Runtime\SCHEMAS\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\VS Runtime\SCHEMAS\HTML\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\MSEnv\PublicAssemblies\"=""
"C:\WINDOWS\Installer\{30120000-0011-0000-0000-0000000FF1CE}\"=""
"C:\Documents and Settings\All Users\Application Data\Apple\Installer Cache\"="1"
"C:\Documents and Settings\All Users\Application Data\Apple\"="1"
"C:\Program Files\Fichiers communs\InstallShield\Driver\9\Intel 32\"="1"
"C:\Program Files\Fichiers communs\InstallShield\Driver\9\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\help\wwhdata\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\help\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\help\wwhelp\wwhimpl\common\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\help\wwhelp\wwhimpl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\help\wwhelp\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\help\wwhelp\wwhimpl\java\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\help\wwhelp\wwhimpl\js\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\tr\Help\wwhdata\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\tr\Help\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\tr\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\tr\Help\wwhelp\wwhimpl\common\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\tr\Help\wwhelp\wwhimpl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\tr\Help\wwhelp\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\tr\Help\wwhelp\wwhimpl\java\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\tr\Help\wwhelp\wwhimpl\js\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\cs\Help\wwhdata\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\cs\Help\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\cs\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\cs\Help\wwhelp\wwhimpl\common\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\cs\Help\wwhelp\wwhimpl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\cs\Help\wwhelp\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\cs\Help\wwhelp\wwhimpl\java\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\cs\Help\wwhelp\wwhimpl\js\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\da\Help\wwhdata\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\da\Help\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\da\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\da\Help\wwhelp\wwhimpl\common\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\da\Help\wwhelp\wwhimpl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\da\Help\wwhelp\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\da\Help\wwhelp\wwhimpl\java\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\da\Help\wwhelp\wwhimpl\js\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\de\Help\wwhdata\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\de\Help\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\de\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\de\Help\wwhelp\wwhimpl\common\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\de\Help\wwhelp\wwhimpl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\de\Help\wwhelp\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\de\Help\wwhelp\wwhimpl\java\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\de\Help\wwhelp\wwhimpl\js\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\el\Help\wwhdata\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\el\Help\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\el\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\el\Help\wwhelp\wwhimpl\common\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\el\Help\wwhelp\wwhimpl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\el\Help\wwhelp\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\el\Help\wwhelp\wwhimpl\java\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\el\Help\wwhelp\wwhimpl\js\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\es\Help\wwhdata\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\es\Help\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\es\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\es\Help\wwhelp\wwhimpl\common\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\es\Help\wwhelp\wwhimpl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\es\Help\wwhelp\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\es\Help\wwhelp\wwhimpl\java\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\es\Help\wwhelp\wwhimpl\js\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\fi\Help\wwhdata\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\fi\Help\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\fi\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\fi\Help\wwhelp\wwhimpl\common\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\fi\Help\wwhelp\wwhimpl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\fi\Help\wwhelp\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\fi\Help\wwhelp\wwhimpl\java\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\fi\Help\wwhelp\wwhimpl\js\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\fr\Help\wwhdata\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\fr\Help\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\fr\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\fr\Help\wwhelp\wwhimpl\common\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\fr\Help\wwhelp\wwhimpl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\fr\Help\wwhelp\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\fr\Help\wwhelp\wwhimpl\java\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\fr\Help\wwhelp\wwhimpl\js\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\hu\Help\wwhdata\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\hu\Help\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\hu\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\hu\Help\wwhelp\wwhimpl\common\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\hu\Help\wwhelp\wwhimpl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\hu\Help\wwhelp\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\hu\Help\wwhelp\wwhimpl\java\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\hu\Help\wwhelp\wwhimpl\js\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\it\Help\wwhdata\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\it\Help\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\it\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\it\Help\wwhelp\wwhimpl\common\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\it\Help\wwhelp\wwhimpl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\it\Help\wwhelp\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\it\Help\wwhelp\wwhimpl\java\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\it\Help\wwhelp\wwhimpl\js\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\ja\Help\wwhdata\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\ja\Help\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\ja\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\ja\Help\wwhelp\wwhimpl\common\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\ja\Help\wwhelp\wwhimpl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\ja\Help\wwhelp\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\ja\Help\wwhelp\wwhimpl\java\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\ja\Help\wwhelp\wwhimpl\js\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\ko\Help\wwhdata\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\ko\Help\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\ko\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\ko\Help\wwhelp\wwhimpl\common\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\ko\Help\wwhelp\wwhimpl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\ko\Help\wwhelp\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\ko\Help\wwhelp\wwhimpl\java\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\ko\Help\wwhelp\wwhimpl\js\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\nl\Help\wwhdata\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\nl\Help\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\nl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\nl\Help\wwhelp\wwhimpl\common\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\nl\Help\wwhelp\wwhimpl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\nl\Help\wwhelp\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\nl\Help\wwhelp\wwhimpl\java\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\nl\Help\wwhelp\wwhimpl\js\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\no\Help\wwhdata\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\no\Help\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\no\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\no\Help\wwhelp\wwhimpl\common\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\no\Help\wwhelp\wwhimpl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\no\Help\wwhelp\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\no\Help\wwhelp\wwhimpl\java\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\no\Help\wwhelp\wwhimpl\js\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\pl\Help\wwhdata\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\pl\Help\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\pl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\pl\Help\wwhelp\wwhimpl\common\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\pl\Help\wwhelp\wwhimpl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\pl\Help\wwhelp\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\pl\Help\wwhelp\wwhimpl\java\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\pl\Help\wwhelp\wwhimpl\js\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\pt-BR\Help\wwhdata\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\pt-BR\Help\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\pt-BR\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\pt-BR\Help\wwhelp\wwhimpl\common\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\pt-BR\Help\wwhelp\wwhimpl\"="1"
DiagHelp version v1.4 - http://www.malekal.com
excute le 04/04/2009 à 23:36:13,75
System information for \\SN400815000002:
Uptime: Error reading uptime
Kernel version: Microsoft Windows XP, Uniprocessor Free
Product type: Professional
Product version: 5.1
Service pack: 2
Kernel build number: 2600
Registered organization:
Registered owner: jerome
Install date: 21/08/2005, 10:55:59
Activation status: Error reading status
IE version: 7.0000
System root: C:\WINDOWS
Processors: 1
Processor speed: 2.1 GHz
Processor type: AMD Athlon(tm) XP 3000+
Physical memory: 512 MB
Video driver: RADEON 9200 SERIES - Secondary
Volume Type Format Label Size Free Free
A: Removable 0.0%
C: Fixed NTFS HDD 114.48 GB 46.29 GB 40.4%
D: CD-ROM 0.0%
E: CD-ROM 0.0%
F: CD-ROM 0.0%
C:\WINDOWS\prefetch\CMD.EXE-087B4001.pf -->04/04/2009 23:36:17
C:\WINDOWS\prefetch\WINRAR.EXE-39C6DAD9.pf -->04/04/2009 23:33:36
C:\WINDOWS\prefetch\FIREFOX.EXE-28641590.pf -->04/04/2009 23:27:41
C:\WINDOWS\prefetch\VERCLSID.EXE-3667BD89.pf -->04/04/2009 23:25:32
C:\WINDOWS\prefetch\WMIPRVSE.EXE-28F301A9.pf -->04/04/2009 23:23:46
C:\WINDOWS\prefetch\MSIEXEC.EXE-2F8A8CAE.pf -->04/04/2009 23:23:03
C:\WINDOWS\prefetch\WINTEMS.EXE-2A563F9B.pf -->04/04/2009 23:17:52
C:\WINDOWS\prefetch\MDELK.EXE-1D176F91.pf -->04/04/2009 23:17:44
C:\WINDOWS\prefetch\465828.EXE-32259D42.pf -->04/04/2009 23:12:19
C:\WINDOWS\prefetch\449921.EXE-042C2E2E.pf -->04/04/2009 23:12:03
C:\WINDOWS\System32\drivers\avgfwdx.sys -->04/04/2009 23:21:01
C:\WINDOWS\System32\drivers\mbamswissarmy.sys -->14/01/2009 16:11:32
C:\WINDOWS\System32\drivers\mbam.sys -->14/01/2009 16:11:28
C:\WINDOWS\System32\drivers\DefragFS.sys -->05/01/2009 15:16:36
C:\WINDOWS\System32\drivers\srv.sys -->11/12/2008 13:57:21
C:\WINDOWS\System32\drivers\sptd.sys -->03/11/2008 20:18:11
C:\WINDOWS\System32\drivers\mrxsmb.sys -->24/10/2008 13:10:42
C:\WINDOWS\System32\avgfwdx.dll -->04/04/2009 23:21:00
C:\WINDOWS\System32\ban_list.txt -->04/04/2009 23:18:25
C:\WINDOWS\System32\wpa.dbl -->04/04/2009 23:06:00
C:\WINDOWS\System32\PerfStringBackup.INI -->29/03/2009 11:26:37
C:\WINDOWS\System32\perfh00C.dat -->29/03/2009 11:26:37
C:\WINDOWS\System32\perfh009.dat -->29/03/2009 11:26:37
C:\WINDOWS\System32\perfc00C.dat -->29/03/2009 11:26:37
C:\WINDOWS\System32\perfc009.dat -->29/03/2009 11:26:37
C:\WINDOWS\System32\FNTCACHE.DAT -->24/03/2009 17:40:01
C:\WINDOWS\System32\PDBootState -->24/03/2009 13:53:44
C:\WINDOWS\System32\ezsidmv.dat -->21/02/2009 11:39:31
C:\WINDOWS\System32\sirenacm.dll -->06/02/2009 19:52:40
C:\WINDOWS\System32\bdod.bin -->22/01/2009 19:43:04
C:\WINDOWS\System32\nscompat.tlb -->19/01/2009 19:24:33
C:\WINDOWS\System32\amcompat.tlb -->19/01/2009 19:24:33
C:\WINDOWS\System32\MRT.exe -->10/01/2009 03:35:28
C:\WINDOWS\System32\PDBoot.exe -->31/12/2008 14:12:50
C:\WINDOWS\System32\mshtml.dll -->13/12/2008 08:37:56
C:\WINDOWS\System32\TZLog.log -->10/12/2008 12:49:05
C:\WINDOWS\System32\history.aaw -->29/11/2008 16:19:02
C:\WINDOWS\System32\gdi32.dll -->23/10/2008 15:00:15
C:\WINDOWS\System32\tzchange.exe -->22/10/2008 11:47:07
C:\WINDOWS\System32\wininet.dll -->16/10/2008 22:18:43
C:\WINDOWS\System32\webcheck.dll -->16/10/2008 22:18:42
C:\WINDOWS\System32\urlmon.dll -->16/10/2008 22:18:42
C:\WINDOWS\WindowsUpdate.log -->04/04/2009 23:33:41
C:\WINDOWS\setupapi.log -->04/04/2009 23:26:47
C:\WINDOWS\0.log -->04/04/2009 23:05:44
C:\WINDOWS\wiadebug.log -->04/04/2009 23:04:59
C:\WINDOWS\wiaservc.log -->04/04/2009 23:04:58
C:\WINDOWS\bootstat.dat -->04/04/2009 23:04:44
C:\WINDOWS\SchedLgU.Txt -->04/04/2009 23:03:56
C:\WINDOWS\win.ini -->02/04/2009 23:52:56
C:\WINDOWS\DelMR.bat -->24/03/2009 13:51:54
C:\WINDOWS\DEBUGSM.INI -->04/03/2009 16:55:22
C:\WINDOWS\imsins.BAK -->19/01/2009 19:18:52
C:\WINDOWS\system.ini -->12/01/2009 13:10:45
C:\WINDOWS\CTREBOOT.INI -->10/01/2009 22:53:45
C:\WINDOWS\NeroDigital.ini -->14/11/2008 01:00:29
C:\WINDOWS\Irremote.ini -->13/11/2008 23:55:31
Le volume dans le lecteur C s'appelle HDD
Le numéro de série du volume est A056-AE0E
Répertoire de C:\WINDOWS
15/01/2009 12:33 <REP> $hf_mig$
15/11/2008 13:32 <REP> $NtUninstallKB925720$
29/05/2008 09:21 <REP> $NtUninstallKB932823-v3$
10/09/2008 15:04 <REP> $NtUninstallKB938464$
06/05/2008 14:14 <REP> $NtUninstallKB941693$
06/05/2008 14:11 <REP> $NtUninstallKB943055$
06/05/2008 14:11 <REP> $NtUninstallKB945553$
06/05/2008 14:14 <REP> $NtUninstallKB946026$
03/09/2008 14:01 <REP> $NtUninstallKB946648$
06/05/2008 14:13 <REP> $NtUninstallKB948590$
06/05/2008 14:14 <REP> $NtUninstallKB948881$
11/05/2008 12:05 <REP> $NtUninstallKB950749$
03/09/2008 14:01 <REP> $NtUninstallKB950762$
03/09/2008 14:01 <REP> $NtUninstallKB950974$
03/09/2008 13:57 <REP> $NtUninstallKB951066$
03/09/2008 14:01 <REP> $NtUninstallKB951072-v2$
03/09/2008 14:02 <REP> $NtUninstallKB951376-v2$
03/09/2008 14:01 <REP> $NtUninstallKB951698$
03/09/2008 13:57 <REP> $NtUninstallKB951748$
10/12/2008 12:49 <REP> $NtUninstallKB952069_WM9$
03/09/2008 14:00 <REP> $NtUninstallKB952287$
03/09/2008 14:01 <REP> $NtUninstallKB952954$
03/09/2008 14:01 <REP> $NtUninstallKB953839$
21/01/2009 11:44 <REP> $NtUninstallKB954154_WM11$
17/10/2008 09:11 <REP> $NtUninstallKB954211$
10/12/2008 12:48 <REP> $NtUninstallKB954600$
13/11/2008 09:24 <REP> $NtUninstallKB955069$
10/12/2008 12:49 <REP> $NtUninstallKB955839$
17/10/2008 09:12 <REP> $NtUninstallKB956391$
10/12/2008 12:48 <REP> $NtUninstallKB956802$
17/10/2008 09:12 <REP> $NtUninstallKB956803$
17/10/2008 09:11 <REP> $NtUninstallKB956841$
17/10/2008 09:12 <REP> $NtUninstallKB957095$
13/11/2008 09:25 <REP> $NtUninstallKB957097$
25/10/2008 15:07 <REP> $NtUninstallKB958644$
15/01/2009 12:33 <REP> $NtUninstallKB958687$
13/11/2008 23:09 <REP> $NtUninstallWIC$
19/01/2009 19:16 <REP> $NtUninstallwmp11$
30/09/2002 12:34 <REP> I386
14/11/2006 00:26 <REP> ie7
04/04/2009 23:21 <REP> inf
04/04/2009 23:23 <REP> Installer
14/11/2006 00:28 <REP> msdownld.tmp
15/11/2006 00:25 <REP> PIF
04/04/2009 23:26 <REP> system32
30/08/2002 13:00 49 102 winnt.bmp
30/08/2002 13:00 49 102 winnt256.bmp
3 fichier(s) 98 953 octets
45 Rép(s) 49 705 250 816 octets libres
Le volume dans le lecteur C s'appelle HDD
Le numéro de série du volume est A056-AE0E
Répertoire de C:\WINDOWS\system32
04/04/2009 23:26 <REP> .
04/04/2009 23:26 <REP> ..
20/02/2009 15:48 <REP> dllcache
04/04/2009 23:26 <REP> drivers
21/02/2009 11:39 56 ezsidmv.dat
17/04/2002 14:29 58 Favorites.ini
9 fichier(s) 4 835 octets
4 Rép(s) 49 705 250 816 octets libres
winlogon.exe
Verified: Signed
svchost.exe
Verified: Signed
ws2_32.dll
Verified: Signed
user32.dll
Verified: Signed
tcpip.sys
Verified: Signed
ndis.sys
Verified: Signed
null.sys
Verified: Signed
userinit.exe
kernel32.dll
ListDLLs v2.25 - DLL lister for Win9x/NT
Copyright (C) 1997-2004 Mark Russinovich
Sysinternals - www.sysinternals.com
------------------------------------------------------------------------------
explorer.exe pid: 992
Command line: C:\WINDOWS\Explorer.EXE
Base Size Version Path
0x44080000 0xd0000 7.00.6000.16762 C:\WINDOWS\system32\WININET.dll
0x00400000 0x9000 6.00.5441.0000 C:\WINDOWS\system32\Normaliz.dll
0x43e00000 0x45000 7.00.6000.16762 C:\WINDOWS\system32\iertutil.dll
0x58b50000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll
0x76f80000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL
0x77000000 0xd4000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll
0x44160000 0x127000 7.00.6000.16762 C:\WINDOWS\system32\urlmon.dll
0x44360000 0x5cd000 7.00.6000.16762 C:\WINDOWS\system32\ieframe.dll
0x76ac0000 0x11000 3.05.2284.0000 C:\WINDOWS\system32\ATL.DLL
0x7d200000 0x2be000 3.01.4000.4039 C:\WINDOWS\system32\msi.dll
0x442b0000 0x3c000 7.00.6000.16762 C:\WINDOWS\system32\webcheck.dll
0x164a0000 0x23000 5.02.5721.5145 C:\WINDOWS\system32\WPDShServiceObj.dll
0x109c0000 0x2c000 5.02.5721.5145 C:\WINDOWS\system32\PortableDeviceTypes.dll
0x10930000 0x49000 5.02.5721.5145 C:\WINDOWS\system32\PortableDeviceApi.dll
0x10000000 0x10000 8.00.0000.0456 C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
0x78130000 0x9b000 8.00.50727.1433 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\MSVCR80.dll
0x021b0000 0x5b000 1.01.0000.0000 C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
0x4eb80000 0x1a6000 5.01.3102.3352 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.3352_x-ww_81af8e88\gdiplus.dll
0x022e0000 0x5b000 8.01.0000.0000 C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\PDFShell.dll
0x15110000 0x25c000 11.00.5721.5251 C:\WINDOWS\system32\wmvcore.dll
0x11c70000 0x3a000 11.00.5721.5238 C:\WINDOWS\system32\WMASF.DLL
0x14070000 0x1b000 11.00.5721.5145 C:\WINDOWS\system32\wmpshell.dll
0x03110000 0x12000 1.01.0000.0000 C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll
0x03140000 0x2c000 C:\Program Files\WinRAR\rarext.dll
0x02a60000 0x2a000 4.02.0000.0000 C:\Program Files\PowerISO\PWRISOSH.DLL
0x02a00000 0x13000 1.02.0000.0000 C:\Program Files\EPSON\Creativity Suite\Easy Photo Print\EPPShell.dll
0x73d20000 0xfe000 6.02.4131.0000 C:\WINDOWS\system32\MFC42.DLL
0x61d70000 0xe000 6.00.8665.0000 C:\WINDOWS\system32\MFC42LOC.DLL
0x02900000 0x13000 1.00.0000.0001 C:\Program Files\ATI Technologies\ATI.ACE\atiacmxx.dll
0x16210000 0x27e000 5.02.5721.5145 C:\WINDOWS\system32\wpdshext.dll
0x74730000 0x3d000 3.525.1117.0000 C:\WINDOWS\system32\ODBC32.dll
0x029c0000 0x18000 3.525.1117.0000 C:\WINDOWS\system32\odbcint.dll
0x07160000 0x46000 5.02.5721.5145 C:\WINDOWS\system32\Audiodev.dll
0x58640000 0x8a000 1.09.0000.0305 C:\WINDOWS\System32\l3codeca.acm
0x6c330000 0x1f000 8.00.0000.0223 C:\Program Files\AVG\AVG8\avgse.dll
0x7c420000 0x87000 8.00.50727.1433 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\MSVCP80.dll
ListDLLs v2.25 - DLL lister for Win9x/NT
Copyright (C) 1997-2004 Mark Russinovich
Sysinternals - www.sysinternals.com
------------------------------------------------------------------------------
winlogon.exe pid: 764
Command line: winlogon.exe
Base Size Version Path
0x01000000 0x81000 \??\C:\WINDOWS\SYSTEM32\winlogon.exe
0x58b50000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\COMCTL32.dll
0x74730000 0x3d000 3.525.1117.0000 C:\WINDOWS\SYSTEM32\ODBC32.dll
0x20000000 0x18000 3.525.1117.0000 C:\WINDOWS\SYSTEM32\odbcint.dll
0x10000000 0x11000 6.14.0010.4132 C:\WINDOWS\SYSTEM32\Ati2evxx.dll
0x01280000 0x3b000 1.07.0018.0005 C:\WINDOWS\SYSTEM32\WgaLogon.dll
0x76f80000 0x7f000 2001.12.4414.0308 C:\WINDOWS\SYSTEM32\CLBCATQ.DLL
0x77000000 0xd4000 2001.12.4414.0258 C:\WINDOWS\SYSTEM32\COMRes.dll
Contenu de Downloaded Program Files
Le volume dans le lecteur C s'appelle HDD
Le numéro de série du volume est A056-AE0E
Répertoire de C:\WINDOWS\Downloaded Program Files
03/04/2009 14:30 <REP> .
03/04/2009 14:30 <REP> ..
24/08/2006 09:28 141 424 asinst.dll
22/08/2006 10:06 537 asinst.inf
07/12/2004 17:07 32 bdcore.dll
25/05/2006 01:21 118 784 bdupd.dll
30/09/2002 13:03 65 desktop.ini
14/10/1997 18:52 697 DirectAnimation Java Classes.osd
25/07/2002 18:13 24 576 dwusplay.dll
25/07/2002 18:13 196 608 dwusplay.exe
15/06/2006 18:33 1 132 192 EPUWALcontrol.dll
23/03/2007 13:17 1 292 erma.inf
30/12/2007 13:02 378 ImageUploader5.inf
30/12/2007 13:02 3 008 016 ImageUploader5.ocx
25/05/2006 01:21 53 248 ipsupd.dll
25/07/2002 18:05 172 032 isusweb.dll
16/03/2005 12:34 7 407 lang.ini
15/05/2006 18:48 367 LegitCheckControl.inf
07/12/2004 17:07 32 libfn.dll
13/02/2008 17:55 130 live.ini
20/04/2005 16:21 10 534 mainstrings.txt
16/03/2005 17:29 176 128 Mannequin.Dll
06/09/2005 21:47 872 960 MannequinPlayer.dll
20/01/2000 15:25 1 162 Microsoft XML Parser for Java.osd
26/05/2005 04:19 293 muweb.inf
29/10/2007 16:45 1 244 oscan8.inf
25/10/2007 16:54 471 040 oscan8.ocx
27/08/2005 15:08 551 OSD25.OSD
30/06/2005 10:33 244 pestscan.ini
13/09/2005 13:44 479 pestscanx.inf
13/09/2005 13:42 676 864 pestscanx.ocx
31/01/2005 15:11 685 120 ppctl.dll
07/09/2007 23:24 0 ppv5exc.dat
03/06/2002 17:53 144 QTPlugin.inf
07/09/2007 23:24 <REP> Quarantine
14/03/2005 14:58 7 073 scanoptions.tsi
09/11/2006 15:36 5 019 swflash.inf
07/09/2007 23:25 4 128 768 vet._at
13/07/2007 06:11 1 353 016 vete.dll
20/11/2006 12:02 180 282 webscan.dll
21/07/2006 12:55 477 webscan.inf
18/04/2006 00:39 22 775 wficat.inf
01/06/2004 15:41 853 yinst.inf
14/04/2006 14:09 188 968 yinsthelper.dll
41 fichier(s) 13 641 811 octets
Répertoire de C:\WINDOWS\Downloaded Program Files\Quarantine
07/09/2007 23:24 <REP> .
07/09/2007 23:24 <REP> ..
07/09/2007 23:24 32 ppqdb.dat
07/09/2007 23:24 32 ppqsdb.dat
2 fichier(s) 64 octets
Total des fichiers listés :
43 fichier(s) 13 641 875 octets
5 Rép(s) 49 705 242 624 octets libres
Recherche de rootkit! (Merci S!Ri)
Recherche d'infections connues
Export des clefs sensibles..
Liste des fichiers en exception sur le pare-feu XP SP2
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\Internet Explorer\\iexplore.exe"="C:\\Program Files\\Internet Explorer\\iexplore.exe:*:Enabled:Internet Explorer"
"C:\\Program Files\\Windows Media Player\\wmplayer.exe"="C:\\Program Files\\Windows Media Player\\wmplayer.exe:*:Enabled:Windows Media Player"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\QuickTime\\QuickTimePlayer.exe"="C:\\Program Files\\QuickTime\\QuickTimePlayer.exe:*:Enabled:Fichier de ressources QuickTime"
"C:\\Program Files\\eMule\\emule.exe"="C:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule"
"C:\\Program Files\\Sony Ericsson\\Update Service\\Update Service.exe"="C:\\Program Files\\Sony Ericsson\\Update Service\\Update Service.exe:*:Enabled:Update Service"
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"="C:\\Program Files\\Bonjour\\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe"="C:\\Program Files\\VideoLAN\\VLC\\vlc.exe:*:Enabled:VLC media player"
"C:\\Program Files\\Orange\\Connectivity\\ConnectivityManager.exe"="C:\\Program Files\\Orange\\Connectivity\\ConnectivityManager.exe:*:enabled:CSS"
"C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"="C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"="C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
Export de la clef SharedTaskScheduler
[SharedTaskScheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant"
exports des policies
REGEDIT4
[system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001
"EnableLUA"=dword:00000000
Export des clefs sensibles..
Rechercher adresses sensibles dans le fichier HOSTS...
127.0.0.1 update.bitdefender.comcatchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-04-04 23:37:59
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden services & system hive ...
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:0f,fe,fd,57,f2,34,26,c6,63,da,19,c2,2e,8b,f4,65,89,7f,b9,ee,af,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:0f,fe,fd,57,f2,34,26,c6,63,da,19,c2,2e,8b,f4,65,89,7f,b9,ee,af,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\SW_BDFNDISFMP]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:9b01536f
"s2"=dword:2a65d6a1
"h0"=dword:00000002
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:0f,fe,fd,57,f2,34,26,c6,63,da,19,c2,2e,8b,f4,65,89,7f,b9,ee,af,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000001
"khjeh"=hex:7a,26,98,44,0b,cf,dc,1f,87,aa,70,12,ff,2e,1b,af,8b,06,fa,5f,5e,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,0b,6f,b7,d3,e1,c5,08,65,cf,ca,8a,cc,4d,3a,d0,34,1d,..
"khjeh"=hex:26,e0,8c,8f,95,a0,b2,fe,36,bb,07,dd,bb,e6,84,dc,5a,e0,a6,2d,90,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:37,aa,67,e1,e6,a6,ef,3d,a6,af,6f,33,7d,51,c7,60,67,02,28,3f,fd,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srosa]
"Type"=dword:00000001
"Start"=dword:00000001
"ErrorControl"=dword:00000000
"ImagePath"=str(2):"\??\C:\Documents and Settings\jerome\Application Data\drivers\wfsintwq.sys"
"DisplayName"="srosa"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:0f,fe,fd,57,f2,34,26,c6,63,da,19,c2,2e,8b,f4,65,89,7f,b9,ee,af,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet005\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:0f,fe,fd,57,f2,34,26,c6,63,da,19,c2,2e,8b,f4,65,89,7f,b9,ee,af,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet006\Enum\Root\SW_BDFNDISFMP]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet006\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:0f,fe,fd,57,f2,34,26,c6,63,da,19,c2,2e,8b,f4,65,89,7f,b9,ee,af,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet006\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000001
"khjeh"=hex:7a,26,98,44,0b,cf,dc,1f,87,aa,70,12,ff,2e,1b,af,8b,06,fa,5f,5e,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet006\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,0b,6f,b7,d3,e1,c5,08,65,cf,ca,8a,cc,4d,3a,d0,34,1d,..
"khjeh"=hex:26,e0,8c,8f,95,a0,b2,fe,36,bb,07,dd,bb,e6,84,dc,5a,e0,a6,2d,90,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet006\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:37,aa,67,e1,e6,a6,ef,3d,a6,af,6f,33,7d,51,c7,60,67,02,28,3f,fd,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet006\Services\srosa]
"Type"=dword:00000001
"Start"=dword:00000001
"ErrorControl"=dword:00000000
"ImagePath"=str(2):"\??\C:\Documents and Settings\jerome\Application Data\drivers\wfsintwq.sys"
"DisplayName"="srosa"
scanning hidden registry entries ...
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\"=""
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\"=""
"C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_Data\"=""
"C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\"=""
"C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Roles\"=""
"C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Roles\App_LocalResources\"=""
"C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MSBuild\"=""
"C:\WINDOWS\system32\MUI\0409\"=""
"C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\App_LocalResources\"=""
"C:\WINDOWS\winsxs\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\"=""
"C:\Documents and Settings\All Users\Application Data\Symantec\Norton Internet Security\Log\"="1"
"C:\Documents and Settings\All Users\Application Data\Symantec\Norton Internet Security\"="1"
"C:\Program Files\Microsoft CAPICOM 2.1.0.2\"=""
"C:\Program Files\Microsoft CAPICOM 2.1.0.2\Lib\X86\"=""
"C:\Program Files\Microsoft CAPICOM 2.1.0.2\Lib\"=""
"C:\Program Files\Microsoft CAPICOM 2.1.0.2\License\"=""
"C:\WINDOWS\Installer\{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}\"=""
"C:\Program Files\Fichiers communs\Java\Update\Base Images\jre1.6.0.b105\"=""
"C:\Program Files\Fichiers communs\Java\Update\Base Images\"=""
"C:\Program Files\Fichiers communs\Java\Update\"=""
"C:\Program Files\Fichiers communs\Java\"=""
"C:\Documents and Settings\All Users\Application Data\BitDefender\Desktop\"="1"
"C:\Documents and Settings\All Users\Application Data\BitDefender\"="1"
"C:\Program Files\Fichiers communs\Adobe\Updater5\"=""
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\win\"=""
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\"=""
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\"=""
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\Mac\"=""
"C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\Adobe\"=""
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\1033\"=""
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ASP.NETClientFiles\"=""
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CONFIG\"=""
"C:\WINDOWS\system32\URTTEMP\"=""
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MUI\0409\"=""
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MUI\"=""
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\"=""
"C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\"="1"
"C:\Program Files\Fichiers communs\InstallShield\Driver\1150\"="1"
"C:\Program Files\Sony Ericsson\"="1"
"C:\Program Files\Fichiers communs\Teleca Shared\"=""
"C:\Program Files\Fichiers communs\Teleca Shared\DCU-11\"=""
"C:\Program Files\Fichiers communs\Teleca Shared\DSS-20\"=""
"C:\Program Files\Fichiers communs\Teleca Shared\DSS-25\"=""
"C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9818.0_x-ww_8ff50c5d\"=""
"C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.0.0_x-ww_29c3ad6a\"=""
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\"=""
"c:\WINDOWS\winsxs\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9848.0_x-ww_1b897e9a\"=""
"c:\WINDOWS\Installer\{C04E32E0-0416-434D-AFB9-6969D703A9EF}\"=""
"C:\Program Files\Sony Ericsson\Mobile4\"="1"
"C:\Program Files\Fichiers communs\Microsoft Shared\SFPCA Cache\"=""
"C:\Program Files\Sony Ericsson\Mobile4\InstSupport\"=""
"C:\Program Files\Sony Ericsson\Mobile4\Sync Manager\"=""
"C:\Program Files\Lavasoft\Ad-Aware 2007\"=""
"C:\Program Files\Lavasoft\"=""
"C:\WINDOWS\Installer\{E31C348B-63A9-4CBF-8D7F-D932ABB63244}\"=""
"C:\Program Files\Fichiers communs\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0_02.b06\"=""
"C:\Program Files\Java\jre1.6.0_02\"=""
"C:\Program Files\Java\jre1.6.0_02\bin\"=""
"C:\WINDOWS\Installer\{3248F0A8-6813-11D6-A77B-00B0D0160020}\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\"=""
"C:\Program Files\Microsoft Office\Office12\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\VS Runtime\"=""
"C:\Program Files\Microsoft Office\Office12\STARTUP\"="1"
"C:\WINDOWS\winsxs\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\"=""
"C:\WINDOWS\winsxs\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\"=""
"C:\WINDOWS\winsxs\Policies\x86_policy.8.0.Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_x-ww_5f0bbcff\"=""
"C:\WINDOWS\winsxs\Policies\x86_policy.8.0.Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_x-ww_caeee150\"=""
"C:\WINDOWS\winsxs\Policies\x86_policy.8.0.Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_x-ww_0f75c32e\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\DW\1036\"=""
"C:\WINDOWS\winsxs\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_6e805841\"=""
"C:\WINDOWS\winsxs\Policies\x86_policy.8.0.Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_x-ww_7d81c9f9\"=""
"C:\Program Files\Microsoft Office\Office10\1033\"="1"
"C:\Documents and Settings\All Users\Application Data\Microsoft\MSDAIPP\Offline\"="1"
"C:\Documents and Settings\All Users\Application Data\Microsoft\MSDAIPP\"="1"
"C:\Program Files\Fichiers communs\Microsoft Shared\MODI\12.0\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\MODI\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\PROOF\1033\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\TRANSLAT\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\Proof.fr\"=""
"C:\Program Files\Microsoft Office\OFFICE12\1036\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\PROOF\1036\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\TRANSLAT\ENFR\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\TRANSLAT\FREN\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\Proof.en\"=""
"C:\Program Files\Microsoft Office\OFFICE12\1033\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Help\"="1"
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\Office.fr-fr\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Help\1031\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Help\1033\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Help\2052\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Help\1028\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Help\3082\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Help\1041\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Help\1042\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Help\1036\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Help\1040\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\1036\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\VS Runtime\1036\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\HTML\XMLLINKS\1036\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\HTML\XMLLINKS\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\HTML\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\MODI\12.0\1036\"=""
"C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\1036\"=""
"C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\"=""
"C:\Program Files\Microsoft Office\MEDIA\"=""
"C:\Program Files\Microsoft Office\MEDIA\OFFICE12\1036\"=""
"C:\Program Files\Microsoft Office\MEDIA\OFFICE12\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\EQUATION\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\EQUATION\1036\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Smart Tag\1036\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Smart Tag\LISTS\1036\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Smart Tag\LISTS\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Web Server Extensions\12\BIN\1036\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Web Server Extensions\12\BIN\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Web Server Extensions\12\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\"=""
"C:\WINDOWS\Installer\{30120000-006E-040C-0000-0000000FF1CE}\"=""
"C:\Program Files\Microsoft Office\Templates\1036\"=""
"C:\Program Files\Microsoft Office\Templates\"=""
"C:\Program Files\Microsoft.NET\Primary Interop Assemblies\"="1"
"C:\Program Files\Microsoft.NET\"="1"
"C:\Program Files\Fichiers communs\Microsoft Shared\Ink\"=""
"C:\Program Files\Microsoft Works\1033\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Information Retrieval\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Filters\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\MODI\12.0\DRIVERS\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\EURO\"=""
"C:\Program Files\Microsoft Office\MEDIA\OFFICE12\AUTOSHAP\"=""
"C:\Program Files\Microsoft Office\MEDIA\OFFICE12\BULLETS\"=""
"C:\Program Files\Microsoft Office\MEDIA\OFFICE12\LINES\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\MSORUN\"=""
"C:\Program Files\Fichiers communs\DESIGNER\"=""
"C:\Program Files\Microsoft Office\Document Themes 12\Theme Colors\"=""
"C:\Program Files\Microsoft Office\Document Themes 12\"=""
"C:\Program Files\Microsoft Office\Document Themes 12\Theme Effects\"=""
"C:\Program Files\Microsoft Office\Document Themes 12\Theme Fonts\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Cultures\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\Portal\"=""
"C:\Documents and Settings\All Users\Menu D\xe9marrer\Programmes\Microsoft Office\"=""
"C:\Documents and Settings\All Users\Menu D\xe9marrer\Programmes\Microsoft Office\Outils Microsoft Office\"=""
"C:\WINDOWS\Installer\{30120000-00A1-0000-0000-0000000FF1CE}\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\Access.fr-fr\"=""
"C:\Program Files\Microsoft Office\Templates\1036\Access\"=""
"C:\Program Files\Microsoft Office\Templates\1036\Access\WSS\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\Excel.fr-fr\"=""
"C:\WINDOWS\SHELLNEW\"=""
"C:\Program Files\Microsoft Office\Office12\QUERIES\"=""
"C:\Program Files\Microsoft Office\Office12\SAMPLES\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\Outlook.fr-fr\"=""
"C:\Program Files\Microsoft Office\Office12\FORMS\1036\"=""
"C:\Program Files\Microsoft Office\Office12\FORMS\"=""
"C:\Program Files\Fichiers communs\SYSTEM\MSMAPI\1036\"=""
"C:\Program Files\Fichiers communs\SYSTEM\MSMAPI\"=""
"C:\Program Files\Microsoft Office\Office12\CONVERT\1036\"=""
"C:\Program Files\Microsoft Office\Office12\CONVERT\"=""
"C:\Program Files\Microsoft Office\Office12\ADDINS\"=""
"C:\Program Files\Microsoft Office\Stationery\1036\"=""
"C:\Program Files\Microsoft Office\Stationery\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\PowerPoint.fr-fr\"=""
"C:\Program Files\Microsoft Visual Studio 8\SDK\"="1"
"C:\Program Files\Microsoft Visual Studio 8\"="1"
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\InfoPath.fr-fr\"=""
"C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1036\"=""
"C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\"=""
"C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\"=""
"C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\VSTA\"=""
"C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\"=""
"C:\Program Files\Microsoft Visual Studio 8\Common7\"=""
"C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1036\"=""
"C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\"=""
"C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\PrivateAssemblies\fr\"=""
"C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\PrivateAssemblies\"=""
"C:\Program Files\Microsoft Visual Studio 8\VSTA\Bin\1036\"=""
"C:\Program Files\Microsoft Visual Studio 8\VSTA\Bin\"=""
"C:\Program Files\Microsoft Visual Studio 8\VSTA\"=""
"C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\PublicAssemblies\fr\"=""
"C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\PublicAssemblies\"=""
"C:\Program Files\Microsoft Office\Office12\INFFORMS\1036\"=""
"C:\Program Files\Microsoft Office\Office12\INFFORMS\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\Publisher.fr-fr\"=""
"C:\Program Files\Microsoft Office\Office12\1036\PUBFTSCM\"=""
"C:\Program Files\Microsoft Office\Office12\1036\PUBSPAPR\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\Word.fr-fr\"=""
"C:\Program Files\Microsoft Office\Office12\1036\Bibliography\"=""
"C:\Program Files\Microsoft Office\Office12\Document Parts\1036\"=""
"C:\Program Files\Microsoft Office\Office12\Document Parts\"=""
"C:\Program Files\Microsoft Office\Office12\1036\QuickStyles\"=""
"C:\Program Files\Microsoft Office\Office12\AccessWeb\"="1"
"C:\Program Files\Microsoft Office\Office12\XLSTART\"="1"
"C:\Program Files\Microsoft Office\Office12\Library\"="1"
"C:\Program Files\Microsoft Visual Studio 8\Common7\Packages\"="1"
"C:\Program Files\Microsoft Office\Templates\Presentation Designs\"="1"
"C:\Program Files\Microsoft Visual Studio 8\Common7\Packages\Debugger\"="1"
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\PRO\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\VSTA\8.0\x86\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\VSTA\8.0\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\VSTA\"=""
"C:\Program Files\Microsoft Office\Office12\ACCWIZ\"=""
"C:\Program Files\Microsoft Office\Office12\BITMAPS\DBWIZ\"=""
"C:\Program Files\Microsoft Office\Office12\BITMAPS\"=""
"C:\Program Files\Microsoft Office\Office12\BITMAPS\STYLES\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\MSClientDataMgr\"=""
"C:\Program Files\Microsoft Office\CLIPART\PUB60COR\"=""
"C:\Program Files\Microsoft Office\CLIPART\"=""
"C:\Program Files\Microsoft Office\Office12\XLATORS\"=""
"C:\Program Files\Microsoft Office\Office12\MEDIA\"=""
"C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds\"=""
"C:\Program Files\Microsoft Office\CLIPART\Publisher\"=""
"C:\Program Files\Microsoft Office\Office12\PUBBA\"=""
"C:\Program Files\Microsoft Office\Office12\PUBWIZ\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\AFTRNOON\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\ARCTIC\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\AXIS\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\BLENDS\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\BLUECALM\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\BLUEPRNT\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\BOLDSTRI\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\BREEZE\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\CANYON\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\CAPSULES\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\CASCADE\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\COMPASS\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\CONCRETE\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\DEEPBLUE\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\ECHO\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\ECLIPSE\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\EDGE\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\EVRGREEN\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\EXPEDITN\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\ICE\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\INDUST\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\IRIS\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\JOURNAL\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\LAYERS\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\LEVEL\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\NETWORK\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\PAPYRUS\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\PIXEL\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\PROFILE\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\QUAD\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\RADIAL\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\REFINED\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\RICEPAPR\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\RIPPLE\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\RMNSQUE\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\SATIN\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\SKY\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\SLATE\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\SONORA\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\SPRING\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\STRTEDGE\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\STUDIO\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\SUMIPNTG\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\WATER\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\THEMES12\WATERMAR\"=""
"C:\Program Files\Microsoft Office\Templates\12\MseNewFileItems\"=""
"C:\Program Files\Microsoft Office\Templates\12\"=""
"C:\Program Files\Microsoft Office\Office12\BORDERS\"=""
"C:\Program Files\Microsoft Office\Office12\PAGESIZE\"=""
"C:\Program Files\Microsoft Office\Office12\Bibliography\"=""
"C:\Program Files\Microsoft Office\Office12\Bibliography\Sort\"=""
"C:\Program Files\Microsoft Office\Office12\Bibliography\Style\"=""
"C:\Program Files\Microsoft Office\Office12\InfoPathOM\"=""
"C:\Program Files\MSBuild\"=""
"C:\Program Files\Fichiers communs\System\ole db\Cartridges\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\VS Runtime\SCHEMAS\XML\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\VS Runtime\SCHEMAS\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\VS Runtime\SCHEMAS\HTML\"=""
"C:\Program Files\Fichiers communs\Microsoft Shared\MSEnv\PublicAssemblies\"=""
"C:\WINDOWS\Installer\{30120000-0011-0000-0000-0000000FF1CE}\"=""
"C:\Documents and Settings\All Users\Application Data\Apple\Installer Cache\"="1"
"C:\Documents and Settings\All Users\Application Data\Apple\"="1"
"C:\Program Files\Fichiers communs\InstallShield\Driver\9\Intel 32\"="1"
"C:\Program Files\Fichiers communs\InstallShield\Driver\9\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\help\wwhdata\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\help\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\help\wwhelp\wwhimpl\common\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\help\wwhelp\wwhimpl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\help\wwhelp\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\help\wwhelp\wwhimpl\java\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\help\wwhelp\wwhimpl\js\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\tr\Help\wwhdata\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\tr\Help\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\tr\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\tr\Help\wwhelp\wwhimpl\common\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\tr\Help\wwhelp\wwhimpl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\tr\Help\wwhelp\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\tr\Help\wwhelp\wwhimpl\java\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\tr\Help\wwhelp\wwhimpl\js\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\cs\Help\wwhdata\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\cs\Help\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\cs\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\cs\Help\wwhelp\wwhimpl\common\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\cs\Help\wwhelp\wwhimpl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\cs\Help\wwhelp\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\cs\Help\wwhelp\wwhimpl\java\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\cs\Help\wwhelp\wwhimpl\js\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\da\Help\wwhdata\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\da\Help\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\da\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\da\Help\wwhelp\wwhimpl\common\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\da\Help\wwhelp\wwhimpl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\da\Help\wwhelp\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\da\Help\wwhelp\wwhimpl\java\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\da\Help\wwhelp\wwhimpl\js\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\de\Help\wwhdata\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\de\Help\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\de\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\de\Help\wwhelp\wwhimpl\common\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\de\Help\wwhelp\wwhimpl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\de\Help\wwhelp\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\de\Help\wwhelp\wwhimpl\java\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\de\Help\wwhelp\wwhimpl\js\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\el\Help\wwhdata\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\el\Help\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\el\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\el\Help\wwhelp\wwhimpl\common\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\el\Help\wwhelp\wwhimpl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\el\Help\wwhelp\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\el\Help\wwhelp\wwhimpl\java\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\el\Help\wwhelp\wwhimpl\js\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\es\Help\wwhdata\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\es\Help\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\es\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\es\Help\wwhelp\wwhimpl\common\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\es\Help\wwhelp\wwhimpl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\es\Help\wwhelp\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\es\Help\wwhelp\wwhimpl\java\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\es\Help\wwhelp\wwhimpl\js\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\fi\Help\wwhdata\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\fi\Help\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\fi\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\fi\Help\wwhelp\wwhimpl\common\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\fi\Help\wwhelp\wwhimpl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\fi\Help\wwhelp\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\fi\Help\wwhelp\wwhimpl\java\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\fi\Help\wwhelp\wwhimpl\js\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\fr\Help\wwhdata\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\fr\Help\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\fr\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\fr\Help\wwhelp\wwhimpl\common\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\fr\Help\wwhelp\wwhimpl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\fr\Help\wwhelp\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\fr\Help\wwhelp\wwhimpl\java\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\fr\Help\wwhelp\wwhimpl\js\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\hu\Help\wwhdata\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\hu\Help\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\hu\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\hu\Help\wwhelp\wwhimpl\common\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\hu\Help\wwhelp\wwhimpl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\hu\Help\wwhelp\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\hu\Help\wwhelp\wwhimpl\java\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\hu\Help\wwhelp\wwhimpl\js\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\it\Help\wwhdata\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\it\Help\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\it\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\it\Help\wwhelp\wwhimpl\common\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\it\Help\wwhelp\wwhimpl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\it\Help\wwhelp\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\it\Help\wwhelp\wwhimpl\java\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\it\Help\wwhelp\wwhimpl\js\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\ja\Help\wwhdata\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\ja\Help\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\ja\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\ja\Help\wwhelp\wwhimpl\common\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\ja\Help\wwhelp\wwhimpl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\ja\Help\wwhelp\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\ja\Help\wwhelp\wwhimpl\java\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\ja\Help\wwhelp\wwhimpl\js\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\ko\Help\wwhdata\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\ko\Help\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\ko\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\ko\Help\wwhelp\wwhimpl\common\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\ko\Help\wwhelp\wwhimpl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\ko\Help\wwhelp\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\ko\Help\wwhelp\wwhimpl\java\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\ko\Help\wwhelp\wwhimpl\js\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\nl\Help\wwhdata\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\nl\Help\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\nl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\nl\Help\wwhelp\wwhimpl\common\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\nl\Help\wwhelp\wwhimpl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\nl\Help\wwhelp\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\nl\Help\wwhelp\wwhimpl\java\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\nl\Help\wwhelp\wwhimpl\js\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\no\Help\wwhdata\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\no\Help\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\no\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\no\Help\wwhelp\wwhimpl\common\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\no\Help\wwhelp\wwhimpl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\no\Help\wwhelp\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\no\Help\wwhelp\wwhimpl\java\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\no\Help\wwhelp\wwhimpl\js\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\pl\Help\wwhdata\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\pl\Help\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\pl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\pl\Help\wwhelp\wwhimpl\common\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\pl\Help\wwhelp\wwhimpl\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\pl\Help\wwhelp\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\pl\Help\wwhelp\wwhimpl\java\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\pl\Help\wwhelp\wwhimpl\js\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\pt-BR\Help\wwhdata\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\pt-BR\Help\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\pt-BR\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\pt-BR\Help\wwhelp\wwhimpl\common\"="1"
"C:\Program Files\ATI Technologies\ATI.ACE\pt-BR\Help\wwhelp\wwhimpl\"="1"
O VertigO
Messages postés
862
Date d'inscription
mercredi 8 août 2007
Statut
Membre
Dernière intervention
10 février 2008
32
11 sept. 2007 à 22:32
11 sept. 2007 à 22:32
Salut,
Qu'entends tu par "La procédure échoue systématiquement" ?
Qu'entends tu par "La procédure échoue systématiquement" ?
pioubzh
Messages postés
14
Date d'inscription
lundi 11 février 2002
Statut
Membre
Dernière intervention
15 septembre 2007
11 sept. 2007 à 22:42
11 sept. 2007 à 22:42
Salut,
"Procédure échoue", c'est à dire "erreur" lors de la précédure d'installation (ex: fichier EXE qui disparait juste après avoir été copier sur le disque ou droit sur le disque qui ne permette pas l'écriture) - Des choses pas très catholiques - Cela fait penser à des VIRUS.
Je vais suivre les conseils du 2nd message - Merci pour ton intérêt.
"Procédure échoue", c'est à dire "erreur" lors de la précédure d'installation (ex: fichier EXE qui disparait juste après avoir été copier sur le disque ou droit sur le disque qui ne permette pas l'écriture) - Des choses pas très catholiques - Cela fait penser à des VIRUS.
Je vais suivre les conseils du 2nd message - Merci pour ton intérêt.
jlpjlp
Messages postés
51580
Date d'inscription
vendredi 18 mai 2007
Statut
Contributeur sécurité
Dernière intervention
3 mai 2022
5 040
11 sept. 2007 à 22:48
11 sept. 2007 à 22:48
oui je suis d'accord pour bagle...
fais apres stinger elibaga: avant le reste
* Téléchargez ELIBAGLA en bas de cette page
http://www.zonavirus.com/datos/descargas/95/elibagla.asp
* Clique sur le bouton Descargar Elibagla cela va télécharger le fichier, placez le sur votre bureau.
* Double-cliquez dessus pour l'ouvrir
* Assurez-vous que dans le menu déroulant Unidad, vous avez bien C:\
* Vérifiquez aussi que l'option en bas de la fenêtre Eliminar Ficheros Automaticamente est bien cochée
* Cliquez sur le bouton Explorar pour lancer l'analyse
fais apres stinger elibaga: avant le reste
* Téléchargez ELIBAGLA en bas de cette page
http://www.zonavirus.com/datos/descargas/95/elibagla.asp
* Clique sur le bouton Descargar Elibagla cela va télécharger le fichier, placez le sur votre bureau.
* Double-cliquez dessus pour l'ouvrir
* Assurez-vous que dans le menu déroulant Unidad, vous avez bien C:\
* Vérifiquez aussi que l'option en bas de la fenêtre Eliminar Ficheros Automaticamente est bien cochée
* Cliquez sur le bouton Explorar pour lancer l'analyse
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
pioubzh
Messages postés
14
Date d'inscription
lundi 11 février 2002
Statut
Membre
Dernière intervention
15 septembre 2007
11 sept. 2007 à 23:43
11 sept. 2007 à 23:43
Ok, j'ai fais les opérations suivantes : STRINGER + ELIBAGLA et voici le compte rendu de ce dernier
Tue Sep 11 23:35:19 2007
EliBagle v10.51 (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Acción Directa):
C:\WINDOWS\SYSTEM32\DRIVERS\HIDR.EXE --> Eliminado Bagle
Tue Sep 11 23:35:55 2007
EliBagle v10.51 (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\
C:\System Volume Information\_restore{B89CEA26-ECB5-40D8-BB54-F267A162670D}\RP282\A0043063.EXE --> Eliminado Bagle.dldr
C:\System Volume Information\_restore{B89CEA26-ECB5-40D8-BB54-F267A162670D}\RP282\A0043064.EXE --> Eliminado Bagle.dldr
C:\System Volume Information\_restore{B89CEA26-ECB5-40D8-BB54-F267A162670D}\RP282\A0043081.EXE --> Eliminado Bagle
Bon, je comprend que le logiciel a suprimer 3 fichier infectés. OK
Maintenant, y-t-il autre chose à faire.
Merci
Tue Sep 11 23:35:19 2007
EliBagle v10.51 (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Acción Directa):
C:\WINDOWS\SYSTEM32\DRIVERS\HIDR.EXE --> Eliminado Bagle
Tue Sep 11 23:35:55 2007
EliBagle v10.51 (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\
C:\System Volume Information\_restore{B89CEA26-ECB5-40D8-BB54-F267A162670D}\RP282\A0043063.EXE --> Eliminado Bagle.dldr
C:\System Volume Information\_restore{B89CEA26-ECB5-40D8-BB54-F267A162670D}\RP282\A0043064.EXE --> Eliminado Bagle.dldr
C:\System Volume Information\_restore{B89CEA26-ECB5-40D8-BB54-F267A162670D}\RP282\A0043081.EXE --> Eliminado Bagle
Bon, je comprend que le logiciel a suprimer 3 fichier infectés. OK
Maintenant, y-t-il autre chose à faire.
Merci
jlpjlp
Messages postés
51580
Date d'inscription
vendredi 18 mai 2007
Statut
Contributeur sécurité
Dernière intervention
3 mai 2022
5 040
12 sept. 2007 à 13:03
12 sept. 2007 à 13:03
fait la suite car bagle est coriace; donc avg et scan en ligne
puis desactive la restauration systeme car bagle peut se mettre dedans , ensuite reinstalle un antivirus
puis desactive la restauration systeme car bagle peut se mettre dedans , ensuite reinstalle un antivirus
pioubzh
Messages postés
14
Date d'inscription
lundi 11 février 2002
Statut
Membre
Dernière intervention
15 septembre 2007
12 sept. 2007 à 20:20
12 sept. 2007 à 20:20
Salut,
J'ai essayer d'installer AVG, mais hélas une erreur intervient lors de la procédure d'install :
"Erreur lors de l'ouverture du fichier en écriture : c:\Program files\grisoft\AVG anti-spyware 7.5\guard.exe"
et les solutions sont : Abandonner - Recommencer - Ignorer
Donc celà devient compliqué.
????????
J'ai essayer d'installer AVG, mais hélas une erreur intervient lors de la procédure d'install :
"Erreur lors de l'ouverture du fichier en écriture : c:\Program files\grisoft\AVG anti-spyware 7.5\guard.exe"
et les solutions sont : Abandonner - Recommencer - Ignorer
Donc celà devient compliqué.
????????
O VertigO
Messages postés
862
Date d'inscription
mercredi 8 août 2007
Statut
Membre
Dernière intervention
10 février 2008
32
12 sept. 2007 à 21:28
12 sept. 2007 à 21:28
Peux tu réinstallé un antivirus sANS problème maintenant ?
jlpjlp
Messages postés
51580
Date d'inscription
vendredi 18 mai 2007
Statut
Contributeur sécurité
Dernière intervention
3 mai 2022
5 040
12 sept. 2007 à 21:49
12 sept. 2007 à 21:49
oui tu as reussi ? tu as fais le scan en ligne?
si ca persiste
colle un rapport hijackthis
https://www.01net.com/telecharger/windows/Securite/anti-spyware/fiches/29061.html
manuel :
https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html
si ca persiste
colle un rapport hijackthis
https://www.01net.com/telecharger/windows/Securite/anti-spyware/fiches/29061.html
manuel :
https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html
pioubzh
Messages postés
14
Date d'inscription
lundi 11 février 2002
Statut
Membre
Dernière intervention
15 septembre 2007
13 sept. 2007 à 22:17
13 sept. 2007 à 22:17
Salut,
Cela persiste grave .....
De plus d'autres nouveaux problèmes apparaissent..... Donc je vais tendre vers une réinstallation complète du système.
De plus je n'ai pas fais le nettoyage de printemps cette année. Donc!!!!
MERCI encore pour votre aide à tout les deux. En espérant pourvoir un jour vous apporter mon aide. ;-)
Cela persiste grave .....
De plus d'autres nouveaux problèmes apparaissent..... Donc je vais tendre vers une réinstallation complète du système.
De plus je n'ai pas fais le nettoyage de printemps cette année. Donc!!!!
MERCI encore pour votre aide à tout les deux. En espérant pourvoir un jour vous apporter mon aide. ;-)
pioubzh
Messages postés
14
Date d'inscription
lundi 11 février 2002
Statut
Membre
Dernière intervention
15 septembre 2007
15 sept. 2007 à 09:38
15 sept. 2007 à 09:38
Merci encore, ré-installation du système terminée et tout devient plus fluide lorsque c'est propre.
11 sept. 2007 à 22:44
Je te laisse faire mais cela sent Bagle à plein nez..
11 sept. 2007 à 22:44
je suis en cours de traitement de ta procédure. Il faudra un peu de temps avant de voir le résultat.
A+
11 sept. 2007 à 22:48