Virus empeche install antivirus + log HijacktFermé

Question

Bonjour, 
je suis sur un pc portable VAIO, j'ai surement chopé un virus car je ne peut plus installé d'antivirus. 
 
Historique: j'avais KAV 7, il s'est mis a déconner, donc j'ai voulu le désinstaller, puis le réinstaller mais une fois désinstallé, impossible de le réinstaller. Ni lui, ni aucun autre antivirus, soit il font une erreur d'installation ("vérifié que vous etes autoriser ..." ), soit une fois installé les .exe disparaisse tout seule... 
De plus impossible d'acceder a windows update. 
 
Voila , si vous pouviez m'aidez je vous en serais reconnaissant, d'autant plus que c le pc de la boite dans laquel je travaille :S 
 
Merci d'avance. 
 
 
J'ai fais un scan avec Hijackthis: 
 
Logfile of HijackThis v1.99.1 
Scan saved at 11:36:42, on 12/09/2007 
Platform: Windows XP SP2 (WinNT 5.01.2600) 
MSIE: Internet Explorer v7.00 (7.00.6000.16512) 
 
Running processes: 
C:\WINDOWS\System32\smss.exe 
C:\WINDOWS\system32\winlogon.exe 
C:\WINDOWS\system32\services.exe 
C:\WINDOWS\system32\lsass.exe 
C:\WINDOWS\system32\svchost.exe 
C:\WINDOWS\System32\svchost.exe 
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe 
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe 
C:\WINDOWS\system32\spoolsv.exe 
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe 
C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe 
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe 
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe 
C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe 
C:\WINDOWS\system32\svchost.exe 
C:\Program Files\Sony\VAIO Event Service\VESMgr.exe 
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe 
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe 
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe 
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment\VzRs\VzRs.exe 
C:\WINDOWS\Explorer.EXE 
C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe 
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe 
C:\Program Files\Sony\VAIO Power Management\SPMgr.exe 
C:\Program Files\QuickTime\qttask.exe 
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe 
C:\WINDOWS\system32\ICO.EXE 
C:\Program Files\iTunes\iTunesHelper.exe 
C:\Program Files\Sony\ISB Utility\ISBMgr.exe 
C:\Program Files\Realtek\InstallShield\AzMixerSel.exe 
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe 
C:\Program Files\Apoint\Apoint.exe 
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe 
C:\Program Files\Apoint\Apntex.exe 
C:\Program Files\MSN Messenger\MsnMsgr.Exe 
C:\Program Files\iPod\bin\iPodService.exe 
C:\PROGRA~1\MI3AA1~1\wcescomm.exe 
C:\Garmin\gStart.exe 
C:\WINDOWS\system32\ctfmon.exe 
C:\PROGRA~1\MI3AA1~1\rapimgr.exe 
C:\Program Files\Sony\SonicStage Mastering Studio\Audio Filter\SSMSFilter.exe 
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe 
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe 
C:\Program Files\KONICA MINOLTA\FTP Utility\KMFtp.exe 
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe 
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe 
C:\Program Files\Internet Explorer\iexplore.exe 
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe 
 
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl 
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp 
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF 
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens 
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll 
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll 
O4 - HKLM\..\Run: [VAIO Update 2] "C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe" /Stationary 
O4 - HKLM\..\Run: [Switcher.exe] C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe 
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" 
O4 - HKLM\..\Run: [SonyPowerCfg] C:\Program Files\Sony\VAIO Power Management\SPMgr.exe 
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe" 
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime 
O4 - HKLM\..\Run: [PSBO Clean] C:\Program Files\KONICA MINOLTA\PageScope Box Operator\PSBO.exe /clean 
O4 - HKLM\..\Run: [PrepareYourVAIO] C:\Program Files\Sony\Prepare your VAIO\PYVAlert.exe 
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup 
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe 
O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE 
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" 
O4 - HKLM\..\Run: [ISBMgr.exe] C:\Program Files\Sony\ISB Utility\ISBMgr.exe 
O4 - HKLM\..\Run: [Hcontrol] C:\WINDOWS\ATK0100\Hcontrol.exe 
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe 
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe 
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" 
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe 
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE 
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe" 
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1 
O4 - HKCU\..\Run: [Rainlendar2] C:\Program Files\Rainlendar2\Rainlendar2.exe 
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background 
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\PROGRA~1\MI3AA1~1\wcescomm.exe" 
O4 - HKCU\..\Run: [gStart] C:\Garmin\gStart.exe 
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe 
O4 - HKCU\..\Run: [Cld2000.exe] C:\Program Files\Calendrier\Cld2000.exe 
O4 - Global Startup: Audio Filter.lnk = C:\Program Files\Sony\SonicStage Mastering Studio\Audio Filter\SSMSFilter.exe 
O4 - Global Startup: Bluetooth Manager.lnk = ? 
O4 - Global Startup: FTP Utility.lnk = C:\Program Files\KONICA MINOLTA\FTP Utility\KMFtp.exe 
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe 
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000 
O8 - Extra context menu item: Transfert par Image Converter 2 - C:\Program Files\Sony\Image Converter 2\menu.htm 
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll 
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll 
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll 
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll 
O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll 
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing) 
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing) 
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL 
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) 
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) 
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe 
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe 
O11 - Options group: [INTERNATIONAL] International* 
O14 - IERESET.INF: START_PAGE_URL=http://www.club-vaio.com/fr/ 
O15 - Trusted Zone: *.sony-europe.com 
O15 - Trusted Zone: *.sonystyle-europe.com 
O15 - Trusted Zone: *.vaio-link.com 
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab 
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - https://security.symantec.com/sscv6 [...] vSniff.cab 
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/re [...] oscan8.cab 
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - https://security.symantec.com/sscv6 [...] /cabsa.cab 
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab 
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game04.zylom.com/activex/zylomgamesplayer.cab 
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL 
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL 
O20 - Winlogon Notify: VESWinlogon - C:\WINDOWS\SYSTEM32\VESWinlogon.dll 
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll 
O23 - Service: Adobe Active File Monitor (AdobeActiveFileMonitor) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe 
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe (file missing) 
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe (file missing) 
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) 
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) 
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe 
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe 
O23 - Service: Image Converter video recording monitor for VAIO Entertainment - Sony Corporation - C:\Program Files\Sony\Image Converter 2\IcVzMon.exe 
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe 
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe 
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe 
O23 - Service: Photoshop Elements Device Connect (PhotoshopElementsDeviceConnect) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe 
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe 
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation  - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe 
O23 - Service: Sentinel Protection Server (SentinelProtectionServer) - SafeNet, Inc - C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe 
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe 
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe 
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe 
O23 - Service: VAIO Entertainment Aggregation and Control Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment\VzRs\VzRs.exe 
O23 - Service: VAIO Entertainment Task Scheduler - Sony Corporation - C:\Program Files\Sony\VAIO Entertainment\VzTaskScheduler.exe 
O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe 
O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files\Sony\VAIO Event Service\VESMgr.exe 
O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe 
O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-IntegratedServer-HTTP /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="Applications\IntegratedServer\HTTP (file missing) 
O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe 
O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe" /Service=VAIOMediaPlatform-Mobile-Gateway /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Addons\Packages\Mobile\Gateway" /DisplayName="VAIO Media Gateway Server (file missing) 
O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe 
O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe 
O23 - Service: VAIO Entertainment File Import Service (VzFw) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe 
 
Merci

O VertigO · Answer

Salut, 

- Télécharge ELIBAGLA ici: http://www.zonavirus.com/datos/descargas/95/elibagla.asp en cliquant sur "Descargar Elibagla" SUR TON BUREAU. 
- Doubles cliques dessus.
- Vérifie que tu as dans le menu déroulant "Unidad" ton disque dur C:/
- Si ce n'est fait, coches bien l'option "Eliminar Ficheros Automaticamente" 
- Cliques sur "Explorar"
- Copie colle le rapport c:\infosat.txt ici.

ENSUITE

Tu possèdes Avast!, tu n'es donc pas, pour moi et beaucoup d'autres helpers, protégé au mieux. Je te recommande d'en changer pour Avira Antivir, qui est beaucoup plus performant et réactif. Le petit défaut est qu'il est en anglais, c'est pourquoi voici quelques liens qui t'aideront à en changer sans problème: 

- Tutoriel: http://forum.malekal.com/ftopic4192.php
- Comparatif de Malekal: http://forum.malekal.com/ftopic3528.php
- Comparatif de PC INpact: http://www.pcinpact.com/actu/news/31149-Antivirus-resultats-dun-test-de-performances.htm

Saches que ce petit défaut de langage n'est rien comparé aux grands apports d'Antivir. Si tu décides d'en changer, désinstalle Avast!

Cordialement,

Riri · Answer

Voici le rapport: ( je crois qu'il n'a rien trouvé)



	  Wed Sep 12 12:19:19 2007
EliBagle v10.52  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Acción Directa):
Eliminada Carpeta "%WinDir%\exefld"

	  Wed Sep 12 12:21:16 2007
EliBagle v10.52  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\

J'ai désinstallé Avast mais
Impossible d'installer Antivir, l'extraction des .exe échou, j'ai essayé d'installer KAV 7 mais au moment de la copie des fichiers il échou, et me demande de verifié si j'ai accès à cette procédure.

Que faire ??

O VertigO · Answer

Ok, 

- Télécharge Diaghelp.zip de Malekal_Morte http://www.malekal.com/download/DiagHelp.zip
- Cliques droit dessus et choisis extraire tout.
- Un nouveau dossier va être créé: DiagHelp
- Ouvre le et double cliques sur Go.cmd
- Choisis l'option 1
- Suis les instructions qui apparaissent, et appuies bien sur une touche quand demandé, après le rapport CatchMe. 
- Peut-etre que tu devras redémarrer ton ordinateur.
- Copie colle le rapport se trouve dans C:Resultat.txt ici.

Riri · Answer

Le texte est hyper long: DiagHelp version v1.2 - http://www.malekal.com excute le 12/09/2007 à 14:37:02,76 Liste des derniers fichies modifies/crees dans windir\system32 et prefetch C:\WINDOWS\prefetch\CHCP.COM-17EDBDC9.pf -->12/09/2007 14:37:00 C:\WINDOWS\prefetch\CATCHME.EXE-1B81AE2E.pf -->12/09/2007 14:34:20 C:\WINDOWS\prefetch\GREP.EXE-2ACDB9BB.pf -->12/09/2007 14:34:14 C:\WINDOWS\prefetch\DUMPHIVE.EXE-243FDEC3.pf -->12/09/2007 14:34:14 C:\WINDOWS\prefetch\FIND.EXE-0EEAD1A7.pf -->12/09/2007 14:34:13 C:\WINDOWS\prefetch\SWREG.EXE-386E5568.pf -->12/09/2007 14:34:06 C:\WINDOWS\prefetch\MD5SUMS.EXE-2D41FFD7.pf -->12/09/2007 14:34:05 C:\WINDOWS\prefetch\LFILES.EXE-1D18AAA2.pf -->12/09/2007 14:34:05 C:\WINDOWS\prefetch\CMD.EXE-034B0549.pf -->12/09/2007 14:33:56 C:\WINDOWS\prefetch\WINRAR.EXE-0AA31BB9.pf -->12/09/2007 14:32:16 C:\WINDOWS\System32\drivers\CO_Mon.sys -->11/09/2007 18:01:35 C:\WINDOWS\System32\drivers\fidbox2.idx -->11/09/2007 11:44:42 C:\WINDOWS\System32\drivers\fidbox2.dat -->11/09/2007 11:44:42 C:\WINDOWS\System32\drivers\fidbox.idx -->11/09/2007 11:44:42 C:\WINDOWS\System32\drivers\fidbox.dat -->11/09/2007 11:44:42 C:\WINDOWS\System32\drivers\aswRdr.sys -->06/09/2007 12:03:02 C:\WINDOWS\System32\drivers\kcom.sys -->14/08/2007 17:02:06 C:\WINDOWS\System32\wpa.dbl -->12/09/2007 14:01:47 C:\WINDOWS\System32\CONFIG.NT -->12/09/2007 12:28:44 C:\WINDOWS\System32\PerfStringBackup.INI -->11/09/2007 15:53:30 C:\WINDOWS\System32\perfh00C.dat -->11/09/2007 15:53:30 C:\WINDOWS\System32\perfh009.dat -->11/09/2007 15:53:30 C:\WINDOWS\System32\perfc00C.dat -->11/09/2007 15:53:30 C:\WINDOWS\System32\perfc009.dat -->11/09/2007 15:53:30 C:\WINDOWS\System32\aswBoot.exe -->06/09/2007 12:09:49 C:\WINDOWS\System32\MRT.exe -->06/09/2007 04:50:42 C:\WINDOWS\System32\TZLog.log -->29/08/2007 10:59:37 C:\WINDOWS\System32\coh.cache -->13/08/2007 20:00:12 C:\WINDOWS\System32\jupdate-1.6.0_02-b06.log -->02/08/2007 12:36:03 C:\WINDOWS\System32\wuaucpl.cpl.mui -->30/07/2007 19:20:06 C:\WINDOWS\System32\wuapi.dll.mui -->30/07/2007 19:19:52 C:\WINDOWS\System32\wuaueng.dll -->30/07/2007 19:19:42 C:\WINDOWS\System32\wuapi.dll -->30/07/2007 19:19:36 C:\WINDOWS\System32\wucltui.dll -->30/07/2007 19:19:32 C:\WINDOWS\System32\wuweb.dll -->30/07/2007 19:19:28 C:\WINDOWS\System32\wuaucpl.cpl -->30/07/2007 19:19:28 C:\WINDOWS\System32\cdm.dll -->30/07/2007 19:19:20 C:\WINDOWS\System32\wuauclt.exe -->30/07/2007 19:19:16 C:\WINDOWS\System32\wups2.dll -->30/07/2007 19:19:12 C:\WINDOWS\System32\wucltui.dll.mui -->30/07/2007 19:19:04 C:\WINDOWS\System32\wuaueng.dll.mui -->30/07/2007 19:18:48 C:\WINDOWS\System32\wups.dll -->30/07/2007 19:18:40 C:\WINDOWS\WindowsUpdate.log -->12/09/2007 14:02:28 C:\WINDOWS\0.log -->12/09/2007 14:01:37 C:\WINDOWS\wiadebug.log -->12/09/2007 14:00:55 C:\WINDOWS\wiaservc.log -->12/09/2007 14:00:53 C:\WINDOWS\bootstat.dat -->12/09/2007 14:00:30 C:\WINDOWS\SchedLgU.Txt -->12/09/2007 12:40:35 C:\WINDOWS\win.ini -->11/09/2007 18:19:20 C:\WINDOWS\system.ini -->11/09/2007 18:19:20 C:\WINDOWS\LUINSTALL.LOG -->11/09/2007 18:18:27 C:\WINDOWS\setupapi.log -->11/09/2007 18:01:22 C:\WINDOWS\SpywareDoctor505Installation.log -->11/09/2007 17:08:04 C:\WINDOWS\wmsetup.log -->10/09/2007 14:58:25 C:\WINDOWS\NeroDigital.ini -->05/09/2007 09:19:30 C:\WINDOWS\WirelessFTP.INI -->03/09/2007 11:56:35 C:\WINDOWS soc.log -->29/08/2007 10:59:43 MD5 des fichiers sensibles tcpip.sys 1dbf125862891817f374f407626967f4 ndis.sys 558635d3af1c7546d26067d5d9b6959e null.sys 73c1e1f395918bc2c6dd67af7591a3ad svchost.exe 1bd6c2f707a275cb7c16fd99fe0f31ca Le volume dans le lecteur C s'appelle VAIO Le numéro de série du volume est 54A5-8EF0 Répertoire de C:\WINDOWS\system32 05/08/2004 14:00 6 144 csrss.exe 1 fichier(s) 6 144 octets 0 Rép(s) 16 284 504 064 octets libres Contenu de Downloaded Program Files Le volume dans le lecteur C s'appelle VAIO Le numéro de série du volume est 54A5-8EF0 Répertoire de C:\WINDOWS\Downloaded Program Files 11/09/2007 18:01 . 11/09/2007 18:01 .. 17/05/2006 14:32 231 072 avsniff.dll 17/05/2006 14:29 878 avsniff.inf 17/05/2006 14:32 198 304 avsniffdlgs.dll 17/05/2006 14:26 537 704 AXXPEE.dll 07/12/2004 16:07 32 bdcore.dll 01/03/2005 14:08 118 784 bdupd.dll 17/05/2006 14:29 241 CabSA.inf 29/08/2007 01:00 2 504 catalog.dat 04/08/2005 16:58 65 desktop.ini 29/08/2007 01:00 6 899 ecbootil.vxd 17/05/2006 14:26 42 112 ecmldr32.dll 29/08/2007 01:00 284 016 ecmsvr32.dll 25/06/2006 12:50 1 793 erma.inf 11/07/2006 09:41 345 656 ewidoOnlineScan.dll 01/03/2005 14:08 53 248 ipsupd.dll 09/03/2005 15:42 6 742 lang.ini 07/12/2004 16:07 32 libfn.dll 18/02/2005 16:22 126 live.ini 17/05/2006 14:28 6 850 navapi.vxd 17/05/2006 14:28 201 896 navapi32.dll 29/08/2007 01:00 124 272 naveng32.dll 29/08/2007 01:00 914 800 navex32a.dll 28/02/2007 21:24 361 OGAControl.inf 01/06/2006 02:57 1 331 oscan8.inf 01/06/2006 02:54 471 040 oscan8.ocx 31/05/2006 04:15 10 oscan81.ocx_x 17/05/2006 14:32 161 480 rufsi.dll 09/03/2005 15:43 6 828 scanoptions.tsi 29/08/2007 01:00 97 744 scrauth.dat 14/02/2007 16:30 144 setup.inf 22/06/2006 11:41 5 032 swflash.inf 29/08/2007 01:00 11 875 symaveng.cat 29/08/2007 01:00 1 061 symaveng.inf 06/12/2006 09:11 224 768 symdlmgr.dll 06/12/2006 09:10 350 symdlmgr.inf 29/08/2007 01:00 396 845 tcdefs.dat 29/08/2007 01:00 1 773 316 tcscan7.dat 29/08/2007 01:00 386 194 tcscan8.dat 29/08/2007 01:00 899 759 tcscan9.dat 29/08/2007 01:00 453 tinf.dat 29/08/2007 01:00 148 tinfidx.dat 29/08/2007 01:00 1 957 tinfl.dat 29/08/2007 01:00 67 619 tscan1.dat 29/08/2007 01:00 3 240 tscan1hd.dat 29/08/2007 01:00 4 778 v.grd 29/08/2007 01:00 2 267 v.sig 29/08/2007 01:00 106 244 virscan.inf 29/08/2007 01:00 992 973 virscan1.dat 29/08/2007 01:00 570 702 virscan2.dat 29/08/2007 01:00 149 996 virscan3.dat 29/08/2007 01:00 320 253 virscan4.dat 29/08/2007 01:00 4 403 699 virscan5.dat 29/08/2007 01:00 391 763 virscan6.dat 29/08/2007 01:00 11 763 158 virscan7.dat 29/08/2007 01:00 1 798 654 virscan8.dat 29/08/2007 01:00 4 906 582 virscan9.dat 29/08/2007 01:00 32 virscant.dat 29/08/2007 01:00 224 zdone.dat 29/08/2006 15:17 161 976 zylomgamesplayer.dll 15/09/2006 11:53 244 ZylomGamesPlayer.inf 60 fichier(s) 33 163 126 octets Total des fichiers listés : 60 fichier(s) 33 163 126 octets 2 Rép(s) 16 284 499 968 octets libres Recherche de rootkit! (Merci S!Ri) Recherche d'infections connues Export des clefs sensibles.. Liste des fichiers en exception sur le pare-feu XP SP2 Export de la clef SharedTaskScheduler [SharedTaskScheduler] "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui" "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant" exports des policies REGEDIT4 [system] "dontdisplaylastusername"=dword:00000000 "legalnoticecaption"="" "legalnoticetext"="" "shutdownwithoutlogon"=dword:00000001 "undockwithoutlogon"=dword:00000001 Export des clefs sensibles.. Rechercher adresses sensibles dans le fichier HOSTS... catchme 0.3.1066 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-09-12 14:37:12 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden services & system hive ... [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA] "NextInstance"=dword:00000001 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srosa] "Type"=dword:00000001 "Start"=dword:00000001 "ErrorControl"=dword:00000000 "ImagePath"=str(2):"\??\C:\WINDOWS\system32\drivers\srosa.sys" "DisplayName"="Megadrv3" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SROSA] "NextInstance"=dword:00000001 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\srosa] "Type"=dword:00000001 "Start"=dword:00000001 "ErrorControl"=dword:00000000 "ImagePath"=str(2):"\??\C:\WINDOWS\system32\drivers\srosa.sys" "DisplayName"="Megadrv3" scanning hidden registry entries ... [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Documents and Settings\All Users\Application Data\Adobe\PhotoshopElementsHelp\fr_fr\Cache\57\3.0\en_US\binary\"="1" "C:\Documents and Settings\All Users\Application Data\Adobe\PhotoshopElementsHelp\fr_fr\Cache\57\3.0\en_US\binary\page\"="1" "C:\Documents and Settings\All Users\Application Data\Adobe\PhotoshopElementsHelp\fr_fr\Cache\57\3.0\en_US\binary ecipe\"="1" "C:\Documents and Settings\All Users\Application Data\Adobe\PhotoshopElementsHelp\fr_fr\Cache\57\3.0\en_US\html\"="1" "C:\Documents and Settings\All Users\Application Data\Adobe\PhotoshopElementsHelp\fr_fr\Cache\57\3.0\en_US\html\page\"="1" "C:\Documents and Settings\All Users\Application Data\Adobe\PhotoshopElementsHelp\fr_fr\Cache\57\3.0\en_US\html ecipe\"="1" "C:\Documents and Settings\All Users\Application Data\Adobe\PhotoshopElementsHelp\fr_fr\Cache\57\3.0\ja_JP\"="1" "C:\Documents and Settings\All Users\Application Data\Adobe\PhotoshopElementsHelp\fr_fr\Cache\57\3.0\fr_FR\html\"="1" "C:\Documents and Settings\All Users\Application Data\Adobe\PhotoshopElementsHelp\fr_fr\Cache\57\3.0\fr_FR\"="1" "C:\Documents and Settings\All Users\Application Data\Adobe\PhotoshopElementsHelp\fr_fr\Cache\57\3.0\fr_FR\html\page\"="1" "C:\Documents and Settings\All Users\Application Data\Adobe\PhotoshopElementsHelp\fr_fr\Cache\57\3.0\fr_FR\binary\"="1" "C:\Program Files\Adobe\Photoshop Elements 3.0\Required\NewPNGResources\"="" "C:\Program Files\Adobe\Photoshop Elements 3.0\Presets\brushes\"="" "C:\Program Files\Adobe\Photoshop Elements 3.0\Presets\color swatches\"="" "C:\Program Files\Adobe\Photoshop Elements 3.0\Presets\contours\"="" "C:\Program Files\Adobe\Photoshop Elements 3.0\Presets\custom shapes\"="" "C:\Program Files\Adobe\Photoshop Elements 3.0\Presets\gradients\"="" "C:\Program Files\Adobe\Photoshop Elements 3.0\Presets\styles\"="" "C:\Program Files\Adobe\Photoshop Elements 3.0\shared_assets\layouts\"="" "C:\Program Files\Adobe\Photoshop Elements 3.0\shared_assets\locales\fr_fr\"="" "C:\Program Files\Adobe\Photoshop Elements 3.0\shared_assets\locales\fr_fr\admplugin\"="" "C:\Program Files\Adobe\Photoshop Elements 3.0\shared_assets\locales\fr_fr\bitmaps\"="" "C:\Program Files\Adobe\Photoshop Elements 3.0\shared_assets\locales\fr_fr\email\banners\"="" "C:\Program Files\Adobe\Photoshop Elements 3.0\shared_assets\locales\fr_fr\email\"="" "C:\Program Files\Adobe\Photoshop Elements 3.0\shared_assets\locales\fr_fr\email\signatures\"="" "C:\Program Files\Adobe\Photoshop Elements 3.0\shared_assets\locales\fr_fr\email emplates\"="" "C:\Program Files\Adobe\Photoshop Elements 3.0\shared_assets\locales\fr_fr\launcher\"="" "C:\Program Files\Adobe\Photoshop Elements 3.0\shared_assets\locales\fr_fr\launcher\images\"="" "C:\Program Files\Adobe\Photoshop Elements 3.0\shared_assets\locales\fr_fr\autorun\"="" "C:\Program Files\Adobe\Photoshop Elements 3.0\shared_assets\label_layouts\"="" "C:\Program Files\Adobe\Photoshop Elements 3.0\shared_assets\profiles\"="" "C:\Program Files\Adobe\Photoshop Elements 3.0\shared_assets\slideshow\"="" "C:\Program Files\Adobe\Photoshop Elements 3.0\shared_assets\layouts_readmes\"="" "C:\Documents and Settings\All Users\Application Data\Adobe\PhotoshopElementsHelp\fr_fr\Processed Packages\"="" "C:\Documents and Settings\All Users\Application Data\Adobe\PhotoshopElementsHelp\fr_fr\Cache\57\3.0\fr_FR\html ecipe\"="" "C:\Documents and Settings\All Users\Application Data\Adobe\PhotoshopElementsHelp\fr_fr\Cache\57\3.0\fr_FR\html\glossary\"="" "C:\Documents and Settings\All Users\Application Data\Adobe\PhotoshopElementsHelp\fr_fr\Cache\57\3.0\fr_FR\binary ecipe\"="" "C:\Documents and Settings\All Users\Application Data\Adobe\PhotoshopElementsHelp\fr_fr\Cache\57\3.0\fr_FR\binary\page\"="" "C:\Documents and Settings\All Users\Application Data\Adobe\PhotoshopElementsHelp\fr_fr\Database\"="" "C:\Documents and Settings\All Users\Application Data\Adobe\PhotoshopElementsHelp\fr_fr\Database\adobeassistance\"="" "C:\WINDOWS\Installer\{5B782FFA-6A95-480D-8E0A-0954A14693D6}\"="" "C:\Documents and Settings\All Users\Application Data\Symantec\"="1" "C:\Program Files\Norton Internet Security\"="" "C:\WINDOWS\Installer\{A93C9E60-29B6-49da-BA21-F70AC6AADE20}\"="" "C:\Program Files\Norton Internet Security\Norton AntiVirus\"="" "C:\Program Files\Toshiba\Bluetooth Toshiba Stack\"="" "C:\Program Files\Toshiba\"="" "C:\Documents and Settings\All Users\Menu D\xe9marrer\Programmes\Bluetooth\"="" "C:\WINDOWS\Installer\{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}\"="" "C:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\Audio\"="" "C:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\"="" "C:\Program Files\Fichiers communs\Sonic Shared\"="" "C:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\Audio\Skins\"="" "C:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\Main\"="" "C:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\Engine\"="" "C:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\Main\Skins\"="" "C:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\Home\"="" "C:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\Main\Skins\Images\"="" "C:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\Main\Tutorial\"="" "C:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\Main\Tutorial\Graphics\"="" "C:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\Main\Help\"="" "C:\Documents and Settings\All Users\Menu D\xe9marrer\Programmes\Roxio\"="" "C:\Documents and Settings\All Users\Menu D\xe9marrer\Programmes\Roxio\DigitalMedia Projects\"="" "C:\WINDOWS\Installer\{AB708C9B-97C8-4AC9-899B-DBF226AC9382}\"="" "C:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\Data\"="" "C:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\LaunchBackup\"="" "C:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\Data\Skins\"="" "C:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\LaunchBackup\Skins\"="" "C:\WINDOWS\Installer\{075473F5-846A-448B-BCB3-104AA1760205}\"="" "C:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\Copy\"="" "C:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\Copy\Skins\"="" "C:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\Home\Skins\"="" "C:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\Main\HTML\FRA\"="" "C:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\Main\HTML\"="" "C:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\Main\RDC\"="" "C:\WINDOWS\Installer\{B12665F4-4E93-4AB4-B7FC-37053B524629}\"="" "C:\Program Files\Fichiers communs\InstallShield\Driver\9\Intel 32\"="1" "C:\Program Files\Fichiers communs\InstallShield\Driver\9\"="1" "C:\Program Files\InstallShield Installation Information\{849ABF1A-6AE3-45E1-B260-D5447B2F29F5}\"="1" "C:\Program Files\Fichiers communs\Sony Shared\OpenMG\"="" "C:\Program Files\Fichiers communs\Sony Shared\OpenMG\EMDKEY\001\"="" "C:\Program Files\Fichiers communs\Sony Shared\OpenMG\EMDKEY\"="" "C:\Program Files\Fichiers communs\Sony Shared\OpenMG\EMDKEY\002\"="" "C:\Program Files\Fichiers communs\Sony Shared\OpenMG\EMDKEY\003\"="" "C:\Program Files\Fichiers communs\Sony Shared\OpenMG\EMDKEY\004\"="" "C:\Program Files\Fichiers communs\Sony Shared\OpenMG\swmg\CRL\"="" "C:\Program Files\Fichiers communs\Sony Shared\OpenMG\swmg\"="" "C:\Program Files\Fichiers communs\Sony Shared\AVLib\"="" "C:\Program Files\Fichiers communs\Sony Shared\OpenMG\ekb\"="" "C:\Program Files\Fichiers communs\Sony Shared\OpenMG\updater\"="" "C:\Program Files\Sony\OpenMG Jukebox\"="" "C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Install\"="1" "C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\"="1" "C:\Program Files\Microsoft SQL Server\"="1" "C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\LOG\"="1" "C:\Program Files\Microsoft SQL Server\80\Tools\Binn\"="" "C:\Program Files\Microsoft SQL Server\80\Tools\"="" "C:\Program Files\Microsoft SQL Server\80\"="" "C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\SqlSetup\Temp\"="" "C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\SqlSetup\"="" "C:\Program Files\Microsoft SQL Server\80\COM\"="" "C:\Program Files\Microsoft SQL Server\80\Tools\DevTools\Include\"="" "C:\Program Files\Microsoft SQL Server\80\Tools\DevTools\"="" "C:\Program Files\Microsoft SQL Server\80\Tools\DevTools\Lib\"="" "C:\Program Files\Microsoft SQL Server\80\Tools\Binn\Resources\1036\"="" "C:\Program Files\Microsoft SQL Server\80\Tools\Binn\Resources\"="" "C:\Program Files\Microsoft SQL Server\80\Tools\Binn\Resources\1033\"="" "C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\"="" "C:\Program Files\Microsoft SQL Server\80\COM\Resources\1036\"="" "C:\Program Files\Microsoft SQL Server\80\COM\Resources\"="" "C:\Program Files\Microsoft SQL Server\80\COM\Resources\1033\"="" "C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\Resources\1036\"="" "C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\Resources\"="" "C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\Resources\1033\"="" "C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Data\"="" "C:\WINDOWS\Installer\{E09B48B5-E141-427A-AB0C-D3605127224A}\"="" "C:\Program Files\Adobe\Acrobat 7.0\Setup Files\Elements\FRA\"="1" "C:\Program Files\Adobe\Acrobat 7.0\Setup Files\Elements\"="1" "C:\Program Files\Adobe\Acrobat 7.0\PDFMaker\"="1" "C:\Program Files\Adobe\Acrobat 7.0\PDFMaker\Common\"="" "C:\Program Files\Adobe\Acrobat 7.0\PDFMaker\Office\"="" "C:\Program Files\Adobe\Acrobat 7.0\Distillr\"="" "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Xtras\"="" "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Settings\"="" "C:\Documents and Settings\All Users\Documents\Adobe PDF\Startup\"="" "C:\Documents and Settings\All Users\Documents\Adobe PDF\"="" "C:\Documents and Settings\All Users\Documents\Adobe PDF\Example Files\"="" "C:\Documents and Settings\All Users\Documents\Adobe PDF\Data\"="" "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Data\Fonts\"="" "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Data\"="" "C:\Documents and Settings\All Users\Documents\Adobe PDF\Settings\"="" "C:\Program Files\Adobe\Acrobat 7.0\Acrobat Elements\"="" "C:\Program Files\Adobe\Acrobat 7.0\TempIccProfiles\"="" "C:\Program Files\Adobe\Acrobat 7.0\TempIccProfiles\Non-Recommended\"="" "C:\Program Files\Adobe\Acrobat 7.0\PDFMaker\Office\Readers\"="" "C:\Program Files\Adobe\Acrobat 7.0\PDFMaker\Mail\Outlook\"="" "C:\Program Files\Adobe\Acrobat 7.0\PDFMaker\Mail\"="" "C:\Program Files\Fichiers communs\Adobe\Acrobat 7.0\Uninstall\"="" "C:\Program Files\Fichiers communs\Adobe\Acrobat 7.0\"="" "C:\Program Files\Adobe\Acrobat 7.0\Esl\Legal\Acrobat Elements\7.0.0\zh_TW\"="" "C:\Program Files\Adobe\Acrobat 7.0\Esl\Legal\Acrobat Elements\7.0.0\"="" "C:\Program Files\Adobe\Acrobat 7.0\Esl\Legal\Acrobat Elements\"="" "C:\Program Files\Adobe\Acrobat 7.0\Esl\Legal\"="" "C:\Program Files\Adobe\Acrobat 7.0\Esl\Legal\Acrobat Elements\7.0.0\zh_CN\"="" "C:\Program Files\Adobe\Acrobat 7.0\Esl\Legal\Acrobat Elements\7.0.0\sv_SE\"="" "C:\Program Files\Adobe\Acrobat 7.0\Esl\Legal\Acrobat Elements\7.0.0\pt_BR\"="" "C:\Program Files\Adobe\Acrobat 7.0\Esl\Legal\Acrobat Elements\7.0.0 o_NO\"="" "C:\Program Files\Adobe\Acrobat 7.0\Esl\Legal\Acrobat Elements\7.0.0 l_NL\"="" "C:\Program Files\Adobe\Acrobat 7.0\Esl\Legal\Acrobat Elements\7.0.0\ko_KR\"="" "C:\Program Files\Adobe\Acrobat 7.0\Esl\Legal\Acrobat Elements\7.0.0\ja_JP\"="" "C:\Program Files\Adobe\Acrobat 7.0\Esl\Legal\Acrobat Elements\7.0.0\it_IT\"="" "C:\Program Files\Adobe\Acrobat 7.0\Esl\Legal\Acrobat Elements\7.0.0\fr_FR\"="" "C:\Program Files\Adobe\Acrobat 7.0\Esl\Legal\Acrobat Elements\7.0.0\fi_FI\"="" "C:\Program Files\Adobe\Acrobat 7.0\Esl\Legal\Acrobat Elements\7.0.0\en_US\"="" "C:\Program Files\Adobe\Acrobat 7.0\Esl\Legal\Acrobat Elements\7.0.0\de_DE\"="" "C:\Program Files\Adobe\Acrobat 7.0\Esl\Legal\Acrobat Elements\7.0.0\es_ES\"="" "C:\WINDOWS\Installer\{E5E6E687-1036-0000-0000-000000000002}\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\"="1" "C:\Program Files\Microsoft Works\1036\"="1" "C:\Program Files\Fichiers communs\Microsoft Shared\MSDraw\"="1" "C:\Program Files\Fichiers communs\Microsoft Shared\Information Retrieval\"="1" "C:\Program Files\Fichiers communs\Microsoft Shared\Shoebox\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\Sound\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\1036\"="" "C:\Documents and Settings\All Users\Application Data\Microsoft\Works\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\Grphflt\"="" "C:\Program Files\Microsoft Works\1036\Tasks\"="" "C:\Program Files\Microsoft Works\Images\"="" "C:\Program Files\Microsoft Works\1036\Wizards\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\Equation\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\Equation\1036\"="" "C:\Program Files\Microsoft Office\PowerPoint Viewer\"="" "C:\Program Files\Microsoft Office\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\WordArt\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\Proof\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\1033\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\1043\"="" "C:\Documents and Settings\All Users\Menu D\xe9marrer\Programmes\Microsoft Works\"="" "C:\WINDOWS\Installer\{A059DE09-1B49-4450-B340-7AE097EC3F04}\"="" "C:\Documents and Settings\Propri\xe9taire\Local Settings\Application Data\Microsoft\OFFICE\"="1" "C:\Documents and Settings\All Users\Application Data\Microsoft\MSDAIPP\OFFLINE\"="1" "C:\Documents and Settings\All Users\Application Data\Microsoft\MSDAIPP\"="1" "C:\Program Files\Fichiers communs\Microsoft Shared\Smart Tag\"="1" "C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\1036\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\1033\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\Web Server Extensions\60\BIN\1036\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\Web Server Extensions\60\BIN\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\Web Server Extensions\60\"="" "C:\Program Files\Fichiers communs\SYSTEM\OLE DB esources\1033\"="" "C:\Program Files\Fichiers communs\SYSTEM\OLE DB esources\"="" "C:\Program Files\Fichiers communs\SYSTEM\OLE DB esources\1036\"="" "C:\Program Files\Microsoft Office\OFFICE11\"="1" "C:\Program Files\Microsoft Office\OFFICE11\Biblioth\xe8que\"="1" "C:\Program Files\Microsoft Office\OFFICE11\QUERIES\"="1" "C:\Program Files\Microsoft Office\OFFICE11\XLSTART\"="1" "C:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\DATA\"="1" "C:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\"="1" "C:\Program Files\Microsoft Office\OFFICE11\1036\113\"="1" "C:\Program Files\Microsoft Office\OFFICE11\1036\"="1" "C:\Documents and Settings\SONY VAIO\Local Settings\Application Data\Microsoft\OFFICE\"="1" "C:\Program Files\Microsoft Office\OFFICE11\STARTUP\"="1" "C:\Program Files\Fichiers communs\Microsoft Shared\Smart Tag\LISTS\"="1" "C:\WINDOWS\PCHEALTH\ERRORREP\QHEADLES\"="1" "C:\WINDOWS\PCHEALTH\ERRORREP\"="1" "C:\WINDOWS\PCHEALTH\ERRORREP\QSIGNOFF\"="1" "C:\WINDOWS\SHELLNEW\"="" "C:\Program Files\Microsoft Office\OFFICE11\SAMPLES\"="" "C:\Program Files\Fichiers communs\SYSTEM\MSMAPI\1036\"="" "C:\Program Files\Fichiers communs\SYSTEM\MSMAPI\"="" "C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1036\"="" "C:\Program Files\Microsoft Office\OFFICE11\CONVERT\"="" "C:\Program Files\Microsoft Office\OFFICE11\ADDINS\"="" "C:\Program Files\Microsoft Office\OFFICE11\FORMS\1036\"="" "C:\Program Files\Microsoft Office\OFFICE11\FORMS\"="" "C:\Program Files\Microsoft Office\OFFICE11\1033\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\1036\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\MODI\11.0\DRIVERS\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\MODI\11.0\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\MODI\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\Smart Tag\1036\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\Smart Tag\LISTS\1036\"="" "C:\Program Files\Microsoft Office\MEDIA\OFFICE11\1036\"="" "C:\Program Files\Microsoft Office\MEDIA\OFFICE11\"="" "C:\Program Files\Microsoft Office\MEDIA\"="" "C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\1036\"="" "C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\"="" "C:\Program Files\Microsoft Office\MEDIA\OFFICE11\AUTOSHAP\"="" "C:\Program Files\Microsoft Office\MEDIA\OFFICE11\LINES\"="" "C:\Program Files\Microsoft Office\MEDIA\OFFICE11\BULLETS\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\SONORA\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\ARCTIC\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\REFINED\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\ICE\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\CASCADE\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\EDGE\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\PROFILE\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\RIPPLE\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\SLATE\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\CONCRETE\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\DEEPBLUE\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\BREEZE\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\SPRING\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\SUMIPNTG\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\WATERMAR\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\NETWORK\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\JOURNAL\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\PIXEL\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\BLUECALM\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\EVRGREEN\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\SATIN\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\EXPEDITN\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\AFTRNOON\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\CANYON\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\WATER\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\BLENDS\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\CAPSULES\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\IRIS\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\AXIS\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\COMPASS\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\PAPYRUS\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\SKY\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\MODI\11.0\1036\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\VBA\VBA6\1036\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\VBA\VBA6\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\VBA\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\DW\1036\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\DW\"="" "C:\Program Files\Microsoft Office\OFFICE11\1036\DataServices\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\Portal\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\MSORUN\"="" "C:\Program Files\Microsoft Office\OFFICE11\Migration\"="" "C:\Program Files\Fichiers communs\DESIGNER\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\EURO\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\PROOF\1033\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\PROOF\1036\"="" "C:\Program Files\Microsoft Office\OFFICE11\HTML\"="" "C:\Program Files\Microsoft Office\Templates\1036\FAX\"="" "C:\Program Files\Microsoft Office\Templates\1036\"="" "C:\Program Files\Microsoft Office\Templates\"="" "C:\Program Files\Microsoft Office\Templates\3084\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\11\1036\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\11\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\"="" "C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\"="" "C:\Program Files\Microsoft Office\OFFICE11\1036\BOTSTYLE\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\MSClientDataMgr\"="" "C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\"="" "C:\Documents and Settings\All Users\Menu D\xe9marrer\Programmes\Microsoft Office\Outils Microsoft Office\"="" "C:\Documents and Settings\All Users\Menu D\xe9marrer\Programmes\Microsoft Office\"="" "C:\WINDOWS\Installer\{9113040C-6000-11D3-8CFE-0150048383C9}\"="" "C:\Program Files\Fichiers communs\Symantec Shared\Security Center\"="" "C:\Program Files\Fichiers communs\Symantec Shared\VirusDefs\"="1" "C:\WINDOWS\Installer\{F325CF11-27CE-4872-8022-6E9EB27DF24F}\"="" "C:\Program Files\SafeNet Sentinel\Sentinel Protection Installer\7.1.1\"="1" "C:\Program Files\SafeNet Sentinel\Sentinel Protection Installer\"="1" "C:\Program Files\SafeNet Sentinel\"="1" "C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel System Driver\"="" "C:\Program Files\Fichiers communs\SafeNet Sentinel\"="" "C:\Program Files\SafeNet Sentinel\Sentinel Protection Installer\7.1.1\English\"="" "C:\Program Files\SafeNet Sentinel\Sentinel Protection Installer\7.1.1\English\Help\"="" "C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Protection Server\WinNT oot\"="" "C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Protection Server\WinNT\"="" "C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Protection Server\"="" "C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Protection Server\WinNT oot esources\"="" "C:\WINDOWS\Installer\{D2E7A6EA-5853-426A-920D-12F4F250927E}\"="" "C:\Program Files\MSN Messenger\"="" "C:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\production\"="" "C:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\"="" "C:\WINDOWS\winsxs\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\"="" "C:\WINDOWS\winsxs\Policies\x86_policy.8.0.Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_x-ww_77c24773\"="" "C:\Program Files\MSN Messenger\Device Manager\Loc\29\"="" "C:\Program Files\MSN Messenger\Device Manager\Loc\"="" "C:\Program Files\MSN Messenger\Device Manager\"="" "C:\Program Files\MSN Messenger\Device Manager\Loc\6\"="" "C:\Program Files\MSN Messenger\Device Manager\Loc\19\"="" "C:\Program Files\MSN Messenger\Device Manager\Loc\16\"="" "C:\Program Files\MSN Messenger\Device Manager\Loc\1046\"="" "C:\Program Files\MSN Messenger\Device Manager\Loc\10\"="" "C:\Program Files\MSN Messenger\Device Manager\Loc\7\"="" "C:\Program Files\MSN Messenger\Device Manager\Loc\9\"="" "C:\Program Files\MSN Messenger\Device Manager\Loc\12\"="" "C:\Program Files\MSN Messenger\Device Manager\Loc\31\"="" "C:\Program Files\MSN Messenger\Device Manager\Loc\22\"="" "C:\Program Files\MSN Messenger\Device Manager\Loc\11\"="" "C:\Program Files\MSN Messenger\Device Manager\Loc\20\"="" "C:\WINDOWS\Installer\{E22885AB-B503-46E2-8437-73BBC6BC5487}\"="" "c:\Program Files\Fichiers communs\InstallShield\Driver\7\Intel 32\"="" "c:\Program Files\Fichiers communs\InstallShield\Driver\7\"="" "c:\Program Files\HP\Scanners\Corporate1.0\"="1" "c:\Program Files\HP\Scanners\"="1" "c:\Program Files\HP\"="1" "c:\WINDOWS wain_32\hp Scanjet Scanner\"="" "c:\Program Files\HP\Scanners\Corporate1.0\Migrate\"="" "c:\Program Files\Fichiers communs\Hewlett-Packard\Scanjet\"="" "c:\Program Files\Fichiers communs\Hewlett-Packard\"="" "c:\WINDOWS\Installer\{7E0C9B44-8587-4F90-8588-F7DAC5E1A5D1}\"="" "C:\Documents and Settings\All Users\Menu D\xe9marrer\Programmes\QuickTime\"="1" "C:\Program Files\QuickTime\QTComponents\"="1" "C:\Program Files\QuickTime\"="1" "C:\Program Files\QuickTime\QTSystem\"="1" "C:\Program Files\QuickTime\PropertyPanels\"="" "C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\"="" "C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\da.lproj\"="" "C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\de.lproj\"="" "C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\en.lproj\"="" "C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\es.lproj\"="" "C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\fi.lproj\"="" "C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\fr.lproj\"="" "C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\it.lproj\"="" "C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\ja.lproj\"="" "C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\ko.lproj\"="" "C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources b.lproj\"="" "C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources l.lproj\"="" "C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\sv.lproj\"="" "C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\zh_CN.lproj\"="" "C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\zh_TW.lproj\"="" "C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\"="" "C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\da.lproj\"="" "C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\de.lproj\"="" "C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\en.lproj\"="" "C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\es.lproj\"="" "C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\fi.lproj\"="" "C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\fr.lproj\"="" "C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\it.lproj\"="" "C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\ja.lproj\"="" "C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\ko.lproj\"="" "C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources b.lproj\"="" "C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources l.lproj\"="" "C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\sv.lproj\"="" "C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\zh_CN.lproj\"="" "C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\zh_TW.lproj\"="" "C:\Program Files\QuickTime\PictureViewer.Resources\"="" "C:\Program Files\QuickTime\PictureViewer.Resources\da.lproj\"="" "C:\Program Files\QuickTime\PictureViewer.Resources\de.lproj\"="" "C:\Program Files\QuickTime\PictureViewer.Resources\en.lproj\"="" "C:\Program Files\QuickTime\PictureViewer.Resources\es.lproj\"="" "C:\Program Files\QuickTime\PictureViewer.Resources\fi.lproj\"="" "C:\Program Files\QuickTime\PictureViewer.Resources\fr.lproj\"="" "C:\Program Files\QuickTime\PictureViewer.Resources\it.lproj\"="" "C:\Program Files\QuickTime\PictureViewer.Resources\ja.lproj\"="" "C:\Program Files\QuickTime\PictureViewer.Resources\ko.lproj\"="" "C:\Program Files\QuickTime\PictureViewer.Resources b.lproj\"="" "C:\Program Files\QuickTime\PictureViewer.Resources l.lproj\"="" "C:\Program Files\QuickTime\PictureViewer.Resources\sv.lproj\"="" "C:\Program Files\QuickTime\PictureViewer.Resources\zh_CN.lproj\"="" "C:\Program Files\QuickTime\PictureViewer.Resources\zh_TW.lproj\"="" "C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\"="" "C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\da.lproj\"="" "C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\de.lproj\"="" "C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\en.lproj\"="" "C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\es.lproj\"="" "C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\fi.lproj\"="" "C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\fr.lproj\"="" "C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\it.lproj\"="" "C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\ja.lproj\"="" "C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\ko.lproj\"="" "C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources b.lproj\"="" "C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources l.lproj\"="" "C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\sv.lproj\"="" "C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\zh_CN.lproj\"="" "C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\zh_TW.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\da.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\de.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\en.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\es.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\fi.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\fr.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\it.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\ja.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\ko.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime.Resources b.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime.Resources l.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\sv.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\zh_CN.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\zh_TW.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\da.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\de.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\en.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\es.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\fi.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\fr.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\it.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\ja.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\ko.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources b.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources l.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\sv.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\zh_CN.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\zh_TW.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\da.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\de.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\en.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\es.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\fi.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\fr.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\it.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\ja.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\ko.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources b.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources l.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\sv.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\zh_CN.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\zh_TW.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\da.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\de.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\en.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\es.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\fi.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\fr.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\it.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\ja.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\ko.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources b.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources l.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\sv.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\zh_CN.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\zh_TW.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\da.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\de.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\en.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\es.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\fi.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\fr.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\it.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\ja.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\ko.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources b.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources l.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\sv.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\zh_CN.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\zh_TW.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\da.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\de.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\en.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\es.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\fi.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\fr.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\it.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\ja.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\ko.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources b.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources l.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\sv.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\zh_CN.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\zh_TW.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\da.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\de.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\en.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\es.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\fi.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\fr.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\it.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\ja.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\ko.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources b.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources l.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\sv.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\zh_CN.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\zh_TW.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\da.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\de.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\en.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\es.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\fi.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\fr.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\it.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\ja.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\ko.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources b.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources l.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\sv.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\zh_CN.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\zh_TW.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\da.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\de.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\en.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\es.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\fi.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\fr.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\it.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\ja.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\ko.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources b.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources l.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\sv.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\zh_CN.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\zh_TW.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\da.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\de.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\en.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\es.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\fi.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\fr.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\it.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\ja.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\ko.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources b.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources l.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\sv.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\zh_CN.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\zh_TW.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\da.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\de.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\en.lproj\"="" "C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\es.lproj\"=""

O VertigO · Answer

- Copie colle le contenu du cadre dans un fichier texte, sur ton bureau, sous le nom Remove.txt
Drivers to unload:
srosa

registry keys to delete:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srosa
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SROSA
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\srosa

Files to delete:
C:\WINDOWS\system32\drivers\srosa.sys
C:\WINDOWS\system32\drivers\hidr.exe
C:\WINDOWS\system32\hidrrr.exe

Folders to delete:
C:\WINDOWS\exefld


- Fais bien attention à avoir tout le cadre !
- Télécharge The Avenger de Swandog46 ici: http://www.geekstogo.com/forum/files/file/393-the-avenger-by-swandog46/
- Décompresse l'archive et double cliques sur TheAvenger.exe
- Cliques sur OK
- Sélectionne "Load Script from File" et cliques sur l'icone en forme de dossier
- Sélectionne le fichier que tu as créé remove.txt
- Cliques sur le feu vert pour lancer le script
- Cliques sur OUI et redémarre le PC quand demandé.
- Poste le rapport ici.

Virus empeche install antivirus + log Hijackt

5 réponses

Discussions similaires

Newsletters