Forum Clubic

Lenteur internet

bonjour,
je voudrais savoir si quelqu’un pourrai m’aider a resoudre mon probleme svp
mes pages internet s’ouvrent tres lentement j’ai fais un teste de debit qui est bon 8mega
ensuite j’ai fais une restor a un point anterieur est la c’estait revenu normal ca marchais bien et kelke heur apres en rentrant du boulot j’allume le pc et c pareil internet rame
pouvez vous me donner un coup de main svp
merci de votre gentillesse

antonymaute,

Avez vous essayer un autre serveur de DNS (genre OpenDNS) que votre FAI.
.
Edité le 10/09/2008 à 11:10

Bonjour
Fais ceci
www.clubic.com…
:hello:

oui je l’ai fait sur xdnet ou un truc comme cela et j’avais 8mega enfin rien d’anormal
merci d’autre solution?

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:23:02, on 11/09/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Alwil Software\Avast4\ashSimpl.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Documents and Settings\Maute Anthony\Bureau\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.orange.fr…
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = go.microsoft.com…
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = go.microsoft.com…
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = go.microsoft.com…
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = go.microsoft.com…
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d’aide de l’Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM…\Run: [JMB36X IDE Setup] C:\WINDOWS\RaidTool\xInsIDE.exe
O4 - HKLM…\Run: [36X Raid Configurer] C:\WINDOWS\system32\xRaidSetup.exe boot
O4 - HKLM…\Run: [nwiz] nwiz.exe /install
O4 - HKLM…\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM…\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM…\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU…\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU…\Run: [msnmsgr] “C:\Program Files\Windows Live\Messenger\msnmsgr.exe” /background
O4 - HKUS\S-1-5-19…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘SERVICE LOCAL’)
O4 - HKUS\S-1-5-20…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘SERVICE RÉSEAU’)
O4 - HKUS\S-1-5-18…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘SYSTEM’)
O4 - HKUS.DEFAULT…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘Default user’)
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE…
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra ‘Tools’ menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra ‘Tools’ menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - messenger.zone.msn.com…
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - messenger.zone.msn.com…
O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmb Class) - chamrousse.dyndns.org…
O17 - HKLM\System\CCS\Services\Tcpip…{7BBFBBDD-C0A0-4281-9A3D-D841BDA6D5F4}: NameServer = 212.27.54.252,212.27.53.252
O20 - Winlogon Notify: iwrps32 - C:\WINDOWS\SYSTEM32\iwrps32.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Cycling Manager 2007 Drivers Auto Removal (pr2akt6c) (pr2akt6c) - Unknown owner - C:\WINDOWS\system32\pr2akt6c.exe (file missing)


End of file - 7566 bytes

le resulat de OTMovetlt.exe

File/Folder C:\Program Files\Search Settings\kb127\SearchSettings.dll not found.
File/Folder C:\Program Files\Search Settings\kb127 not found.

OTMoveIt2 by OldTimer - Version 1.0.4.3 log created on 09122008_003922

le rapport de L2Mfix

L2MFIX find log 051206
These are the registry keys present


Winlogon/notify:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
“Asynchronous”=dword:00000000
“Impersonate”=dword:00000000
“DllName”=hex(2):63,00,72,00,79,00,70,00,74,00,33,00,32,00,2e,00,64,00,6c,00,
6c,00,00,00
“Logoff”=“ChainWlxLogoffEvent”

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
“Asynchronous”=dword:00000000
“Impersonate”=dword:00000000
“DllName”=hex(2):63,00,72,00,79,00,70,00,74,00,6e,00,65,00,74,00,2e,00,64,00,
6c,00,6c,00,00,00
“Logoff”=“CryptnetWlxLogoffEvent”

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
“DLLName”=“cscdll.dll”
“Logon”=“WinlogonLogonEvent”
“Logoff”=“WinlogonLogoffEvent”
“ScreenSaver”=“WinlogonScreenSaverEvent”
“Startup”=“WinlogonStartupEvent”
“Shutdown”=“WinlogonShutdownEvent”
“StartShell”=“WinlogonStartShellEvent”
“Impersonate”=dword:00000000
“Asynchronous”=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\iwrps32]
“Asynchronous”=dword:00000001
“Impersonate”=dword:00000000
“DLLName”=“iwrps32.dll”
“Startup”=“S”

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
“DLLName”=“wlnotify.dll”
“Logon”=“SCardStartCertProp”
“Logoff”=“SCardStopCertProp”
“Lock”=“SCardSuspendCertProp”
“Unlock”=“SCardResumeCertProp”
“Enabled”=dword:00000001
“Impersonate”=dword:00000001
“Asynchronous”=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
“Asynchronous”=dword:00000000
“DllName”=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,
6c,00,6c,00,00,00
“Impersonate”=dword:00000000
“StartShell”=“SchedStartShell”
“Logoff”=“SchedEventLogOff”

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
“Logoff”=“WLEventLogoff”
“Impersonate”=dword:00000000
“Asynchronous”=dword:00000001
“DllName”=hex(2):73,00,63,00,6c,00,67,00,6e,00,74,00,66,00,79,00,2e,00,64,00,
6c,00,6c,00,00,00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
“DLLName”=“WlNotify.dll”
“Lock”=“SensLockEvent”
“Logon”=“SensLogonEvent”
“Logoff”=“SensLogoffEvent”
“Safe”=dword:00000001
“MaxWait”=dword:00000258
“StartScreenSaver”=“SensStartScreenSaverEvent”
“StopScreenSaver”=“SensStopScreenSaverEvent”
“Startup”=“SensStartupEvent”
“Shutdown”=“SensShutdownEvent”
“StartShell”=“SensStartShellEvent”
“PostShell”=“SensPostShellEvent”
“Disconnect”=“SensDisconnectEvent”
“Reconnect”=“SensReconnectEvent”
“Unlock”=“SensUnlockEvent”
“Impersonate”=dword:00000001
“Asynchronous”=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
“Asynchronous”=dword:00000000
“DllName”=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,
6c,00,6c,00,00,00
“Impersonate”=dword:00000000
“Logoff”=“TSEventLogoff”
“Logon”=“TSEventLogon”
“PostShell”=“TSEventPostShell”
“Shutdown”=“TSEventShutdown”
“StartShell”=“TSEventStartShell”
“Startup”=“TSEventStartup”
“MaxWait”=dword:00000258
“Reconnect”=“TSEventReconnect”
“Disconnect”=“TSEventDisconnect”

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
“DLLName”=“wlnotify.dll”
“Logon”=“RegisterTicketExpiredNotificationEvent”
“Logoff”=“UnregisterTicketExpiredNotificationEvent”
“Impersonate”=dword:00000001
“Asynchronous”=dword:00000001


useragent:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform]


Shell Extension key:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
“{00022613-0000-0000-C000-000000000046}”=“Feuille de propri?t?s du fichier multim?dia”
“{176d6597-26d3-11d1-b350-080036a75b03}”=“Gestion de scanneur ICM”
“{1F2E5C40-9550-11CE-99D2-00AA006E086C}”=“Page de s?curit? NTFS”
“{3EA48300-8CF6-101B-84FB-666CCB9BCD32}”=“Page des propri?t?s de OLE DocFile”
“{40dd6e20-7c17-11ce-a804-00aa003ca9f6}”=“Extensions de l’environnement pour le partage”
“{41E300E0-78B6-11ce-849B-444553540000}”=“PlusPack CPL Extension”
“{42071712-76d4-11d1-8b24-00a0c9068ff3}”=“Extension Affichage Carte du Panneau de configuration”
“{42071713-76d4-11d1-8b24-00a0c9068ff3}”=“Extension Affichage cran du Panneau de configuration”
“{42071714-76d4-11d1-8b24-00a0c9068ff3}”=“Extension Affichage Panorama du Panneau de configuration”
“{4E40F770-369C-11d0-8922-00A024AB2DBB}”=“Page de s?curit? DS”
“{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}”=“Page de compatibilit?”
“{56117100-C0CD-101B-81E2-00AA004AE837}”=“Gestionnaire de donn?es endommag?es de l’environnement”
“{59099400-57FF-11CE-BD94-0020AF85B590}”=“Extension copie de disquette”
“{59be4990-f85c-11ce-aff7-00aa003ca9f6}”=“Extensions de l’environnement pour les objets r?seau de Microsoft Windows”
“{5DB2625A-54DF-11D0-B6C4-0800091AA605}”=“Gestion d’?cran ICM”
“{675F097E-4C4D-11D0-B6C1-0800091AA605}”=“Gestion d’imprimante ICM”
“{764BF0E1-F219-11ce-972D-00AA00A14F56}”=“Extensions de l’environnement de compression de fichiers”
“{77597368-7b15-11d0-a0c2-080036af3f03}”=“Extension de l’environnement d’imprimante Web”
“{7988B573-EC89-11cf-9C00-00AA00A14F56}”=“Disk Quota UI”
“{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA}”=“Menu contextuel de cryptage”
“{85BBD920-42A0-1069-A2E4-08002B30309D}”=“Porte-documents”
“{88895560-9AA2-1069-930E-00AA0030EBC8}”=“Extension ic“ne HyperTerminal”
“{BD84B380-8CA2-1069-AB1D-08000948F534}”=“Fonts”
“{DBCE2480-C732-101B-BE72-BA78E9AD5B27}”=“Profil ICC”
“{F37C5810-4D3F-11d0-B4BF-00AA00BBB723}”=“Page de s?curit? des imprimantes”
“{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}”=“Extensions de l’environnement pour le partage”
“{f92e8c40-3d33-11d2-b1aa-080036a75b03}”=“Display TroubleShoot CPL Extension”
“{7444C717-39BF-11D1-8CD9-00C04FC29D45}”=“Extension de cryptographie PKO”
“{7444C719-39BF-11D1-8CD9-00C04FC29D45}”=“Extension de cryptographie Sign”
“{7007ACC7-3202-11D1-AAD2-00805FC1270E}”=“Connexions r?seau”
“{992CFFA0-F557-101A-88EC-00DD010CCC48}”=“Connexions r?seau”
“{E211B736-43FD-11D1-9EFB-0000F8757FCD}”="&Scanneurs et appareils photo"
“{FB0C9C8A-6C50-11D1-9F1D-0000F8757FCD}”="&Scanneurs et appareils photo"
“{905667aa-acd6-11d2-8080-00805f6596d2}”="&Scanneurs et appareils photo"
“{3F953603-1008-4f6e-A73A-04AAC7A992F1}”="&Scanneurs et appareils photo"
“{83bbcbf3-b28a-4919-a5aa-73027445d672}”="&Scanneurs et appareils photo"
“{F0152790-D56E-4445-850E-4F3117DB740C}”=“Remote Sessions CPL Extension”
“{60254CA5-953B-11CF-8C96-00AA00B8708C}”=“Extensions de l’interpr?teur de commandes pour l’environnement d’ex?cution de scripts Windows”
“{2206CDB2-19C1-11D1-89E0-00C04FD7A829}”=“Liaison de donn?es Microsoft”
“{DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF}”=“Tasks Folder Icon Handler”
“{797F1E90-9EDD-11cf-8D8E-00AA0060F5BF}”=“Tasks Folder Shell Extension”
“{D6277990-4C6A-11CF-8D87-00AA0060F5BF}”=“T?ches planifi?es”
“{2559a1f7-21d7-11d4-bdaf-00c04f60b9f0}”=“Set Program Access and Defaults”
“{5F327514-6C5E-4d60-8F16-D07FA08A78ED}”=“Auto Update Property Sheet Extension”
“{0DF44EAA-FF21-4412-828E-260A8728E7F1}”=“Barre des t?ches et menu D?marrer”
“{2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}”=“Rechercher”
“{2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}”=“Aide et support”
“{2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}”=“Aide et support”
“{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}”=“Ex?cuter…”
“{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}”=“Internet”
“{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}”=“Courrier ?lectronique”
“{D20EA4E1-3957-11d2-A40B-0C5020524152}”=“Polices”
“{D20EA4E1-3957-11d2-A40B-0C5020524153}”=“Outils d’administration”
“{596AB062-B4D2-4215-9F74-E9109B0A8153}”=“Page de propri?t?s des versions pr?c?dentes”
“{9DB7A13C-F208-4981-8353-73CC61AE2783}”=“Versions pr?c?dentes”
“{875CB1A1-0F29-45de-A1AE-CFB4950D0B78}”=“Audio Media Properties Handler”
“{40C3D757-D6E4-4b49-BB41-0E5BBEA28817}”=“Video Media Properties Handler”
“{E4B29F9D-D390-480b-92FD-7DDB47101D71}”=“Wav Properties Handler”
“{87D62D94-71B3-4b9a-9489-5FE6850DC73E}”=“Avi Properties Handler”
“{A6FD9E45-6E44-43f9-8644-08598F5A74D9}”=“Midi Properties Handler”
“{c5a40261-cd64-4ccf-84cb-c394da41d590}”=“Video Thumbnail Extractor”
“{5E6AB780-7743-11CF-A12B-00AA004AE837}”=“Barre d’outils Internet Microsoft”
“{22BF0C20-6DA7-11D0-B373-00A0C9034938}”=“tat du t?l?chargement”
“{91EA3F8B-C99B-11d0-9815-00C04FD91972}”=“Dossier Bureau ?tendu”
“{6413BA2C-B461-11d1-A18A-080036B11A03}”=“Dossier du shell augment?”
“{F61FFEC1-754F-11d0-80CA-00AA005B4383}”=“BandProxy”
“{7BA4C742-9E81-11CF-99D3-00AA004AE837}”=“Bande du navigateur Microsoft”
“{21569614-B795-46b1-85F4-E737A8DC09AD}”=“Shell Search Band”
“{169A0691-8DF9-11d1-A1C4-00C04FD75D13}”=“Volet int?gr? de recherche”
“{AF4F6510-F982-11d0-8595-00AA004CD6D8}”=“Utilitaire des options de l’arborescence du Registre”
“{01E04581-4EEE-11d0-BFE9-00AA005B4383}”="&Adresse"
“{A08C11D2-A228-11d0-825B-00AA005B4383}”=“BoŒte d’entr?e de l’adresse”
“{00BB2763-6A77-11D0-A535-00C04FD7D062}”=“Shell Microsoft AutoComplete”
“{6756A641-DE71-11d0-831B-00AA005B4383}”=“Liste de saisie semi-automatique MRU”
“{6935DB93-21E8-4ccc-BEB9-9FE3C77A297A}”=“Liste de saisie semi-automatique personnalis?e MRU”
“{7e653215-fa25-46bd-a339-34a2790f3cb7}”=“Accessible”
“{acf35015-526e-4230-9596-becbe19f0ac9}”=“Barre de progr?s auto-ouvrante”
“{00BB2764-6A77-11D0-A535-00C04FD7D062}”=“Liste de saisie semi-automatique de l’historique Microsoft”
“{03C036F1-A186-11D0-824A-00AA005B4383}”=“Liste de saisie semi-automatique du dossier Shell Microsoft”
“{00BB2765-6A77-11D0-A535-00C04FD7D062}”=“Conteneur de la liste de saisie semi-automatique multiple Microsoft”
“{ECD4FC4E-521C-11D0-B792-00A0C90312E1}”=“Menu Site de bandes”
“{3CCF8A41-5C85-11d0-9796-00AA00B90ADF}”=“Shell DeskBarApp”
“{ECD4FC4C-521C-11D0-B792-00A0C90312E1}”=“Barre du Bureau”
“{ECD4FC4D-521C-11D0-B792-00A0C90312E1}”=“Shell Rebar BandSite”
“{DD313E04-FEFF-11d1-8ECD-0000F87A470C}”=“Assistance utilisateur”
“{EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}”=“Param?tres du dossier global”
“{30D02401-6A81-11d0-8274-00C04FD5AE38}”=“IE Search Band”
“{3028902F-6374-48b2-8DC6-9725E775B926}”=“IE AutoComplete”
“{07798131-AF23-11d1-9111-00A0C98BA67D}”=“Recherche Web”
“{7376D660-C583-11d0-A3A5-00C04FD706EC}”=“TridentImageExtractor”
“{EFA24E61-B078-11d0-89E4-00C04FC9E26E}”=“Favorites Band”
“{EFA24E62-B078-11d0-89E4-00C04FC9E26E}”=“History Band”
“{0A89A860-D7B1-11CE-8350-444553540000}”=“Shell Automation Inproc Service”
“{A5E46E3A-8849-11D1-9D8C-00C04FC99D61}”=“Microsoft Browser Architecture”
“{131A6951-7F78-11D0-A979-00C04FD705A2}”=“ISFBand OC”
“{9461b922-3c5a-11d2-bf8b-00c04fb93661}”=“Search Assistant OC”
“{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}”=“Shell DocObject Viewer”
“{FBF23B40-E3F0-101B-8488-00AA003E56F8}”=“InternetShortcut”
“{3C374A40-BAE4-11CF-BF7D-00AA006946EE}”=“Microsoft Url History Service”
“{FF393560-C2A7-11CF-BFF4-444553540000}”=“History”
“{7BD29E00-76C1-11CF-9DD0-00A0C9034933}”=“Temporary Internet Files”
“{7BD29E01-76C1-11CF-9DD0-00A0C9034933}”=“Temporary Internet Files”
“{CFBFAE00-17A6-11D0-99CB-00C04FD64497}”=“Microsoft Url Search Hook”
“{A2B0DD40-CC59-11d0-A3A5-00C04FD706EC}”=“Image de d?marrage de la Suite IE4”
“{67EA19A0-CCEF-11d0-8024-00C04FD75D13}”=“CDF Extension Copy Hook”
“{3DC7A020-0ACD-11CF-A9BB-00AA004AE837}”=“The Internet”
“{EFA24E64-B078-11d0-89E4-00C04FC9E26E}”=“Explorer Band”
“{871C5380-42A0-1069-A2EA-08002B30309D}”=“Internet Name Space”
“{9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}”=“Sendmail service”
“{9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}”=“Sendmail service”
“{88C6C381-2E85-11D0-94DE-444553540000}”=“ActiveX Cache Folder”
“{E6FB5E20-DE35-11CF-9C87-00AA005127ED}”=“WebCheck”
“{ABBE31D0-6DAE-11D0-BECA-00C04FD940BE}”=“Subscription Mgr”
“{F5175861-2688-11d0-9C5E-00AA00A45957}”=“Subscription Folder”
“{08165EA0-E946-11CF-9C87-00AA005127ED}”=“WebCheckWebCrawler”
“{E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB}”=“WebCheckChannelAgent”
“{E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7}”=“TrayAgent”
“{7D559C10-9FE9-11d0-93F7-00AA0059CE02}”=“Code Download Agent”
“{E6CC6978-6B6E-11D0-BECA-00C04FD940BE}”=“ConnectionAgent”
“{D8BD2030-6FC9-11D0-864F-00AA006809D9}”=“PostAgent”
“{7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB}”=“WebCheck SyncMgr Handler”
“{352EC2B7-8B9A-11D1-B8AE-006008059382}”=“Gestionnaire d’applications d’environnement”
“{0B124F8F-91F0-11D1-B8B5-006008059382}”=“num?rateur d’applications install?es”
“{CFCCC7A0-A282-11D1-9082-006008059382}”=“Publication d’application Darwin”
“{e84fda7c-1d6a-45f6-b725-cb260c236066}”=“Shell Image Verbs”
“{66e4e4fb-f385-4dd0-8d74-a2efd1bc6178}”=“Shell Image Data Factory”
“{00E7B358-F65B-4dcf-83DF-CD026B94BFD4}”=“Autoplay for SlideShow”
“{3F30C968-480A-4C6C-862D-EFC0897BB84B}”=“Extracteur de miniatures de fichier + GDI”
“{9DBD2C50-62AD-11d0-B806-00C04FD706EC}”=“Gestionnaire de miniatures - Informations de r?sum? (DOCFILES)”
“{EAB841A0-9550-11cf-8C16-00805F1408F3}”=“Extracteur de miniatures HTML”
“{eb9b1153-3b57-4e68-959a-a3266bc3d7fe}”=“Shell Image Property Handler”
“{CC6EEFFB-43F6-46c5-9619-51D571967F7D}”=“Assistant Publication de sites Web”
“{add36aa8-751a-4579-a266-d66f5202ccbb}”=“Commande d’impressions via le Web”
“{6b33163c-76a5-4b6c-bf21-45de9cd503a1}”=“Objet Assistant de publication Shell”
“{58f1f272-9240-4f51-b6d4-fd63d1618591}”=“Assistant Obtenir une identit? Passport”
“{7A9D77BD-5403-11d2-8785-2E0420524153}”=“Comptes d’utilisateurs”
“{BD472F60-27FA-11cf-B8B4-444553540000}”=“Compressed (zipped) Folder Right Drag Handler”
“{888DCA60-FC0A-11CF-8F0F-00C04FD7D062}”=“Compressed (zipped) Folder SendTo Target”
“{692F0339-CBAA-47e6-B5B5-3B84DB604E87}”=“Extensions Manager Folder”
“{63da6ec0-2e98-11cf-8d82-444553540000}”=“FTP Folders Webview”
“{883373C3-BF89-11D1-BE35-080036B11A03}”=“Microsoft DocProp Shell Ext”
“{A9CF0EAE-901A-4739-A481-E35B73E47F6D}”=“Microsoft DocProp Inplace Edit Box Control”
“{8EE97210-FD1F-4B19-91DA-67914005F020}”=“Microsoft DocProp Inplace ML Edit Box Control”
“{0EEA25CC-4362-4A12-850B-86EE61B0D3EB}”=“Microsoft DocProp Inplace Droplist Combo Control”
“{6A205B57-2567-4A2C-B881-F787FAB579A3}”=“Microsoft DocProp Inplace Calendar Control”
“{28F8A4AC-BBB3-4D9B-B177-82BFC914FA33}”=“Microsoft DocProp Inplace Time Control”
“{8A23E65E-31C2-11d0-891C-00A024AB2DBB}”=“Directory Query UI”
“{9E51E0D0-6E0F-11d2-9601-00C04FA31A86}”=“Shell properties for a DS object”
“{163FDC20-2ABC-11d0-88F0-00A024AB2DBB}”=“Directory Object Find”
“{F020E586-5264-11d1-A532-0000F8757D7E}”=“Directory Start/Search Find”
“{0D45D530-764B-11d0-A1CA-00AA00C16E65}”=“Directory Property UI”
“{62AE1F9A-126A-11D0-A14B-0800361B1103}”=“Directory Context Menu Verbs”
“{ECF03A33-103D-11d2-854D-006008059367}”=“MyDocs Copy Hook”
“{ECF03A32-103D-11d2-854D-006008059367}”=“MyDocs Drop Target”
“{4a7ded0a-ad25-11d0-98a8-0800361b1103}”=“MyDocs Properties”
“{750fdf0e-2a26-11d1-a3ea-080036587f03}”=“Offline Files Menu”
“{10CFC467-4392-11d2-8DB4-00C04FA31A66}”=“Offline Files Folder Options”
“{AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E}”=“Dossier Fichiers hors connexion”
“{143A62C8-C33B-11D1-84FE-00C04FA34A14}”=“Microsoft Agent Character Property Sheet Handler”
“{ECCDF543-45CC-11CE-B9BF-0080C87CDBA6}”=“DfsShell”
“{60fd46de-f830-4894-a628-6fa81bc0190d}”="%DESC_PublishDropTarget%"
“{7A80E4A8-8005-11D2-BCF8-00C04F72C717}”=“MMC Icon Handler”
“{0CD7A5C0-9F37-11CE-AE65-08002B2E1262}”=".CAB file viewer"
“{32714800-2E5F-11d0-8B85-00AA0044F941}”=“Des &personnes…”
“{8DD448E6-C188-4aed-AF92-44956194EB1F}”=“Windows Media Player Burn Audio CD Context Menu Handler”
“{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}”=“Windows Media Player Play as Playlist Context Menu Handler”
“{F1B9284F-E9DC-4e68-9D7E-42362A59F0FD}”=“Windows Media Player Add to Playlist Context Menu Handler”
“{A70C977A-BF00-412C-90B7-034C51DA2439}”=“NvCpl DesktopContext Class”
“{FFB699E0-306A-11d3-8BD1-00104B6F7516}”=“Play on my TV helper”
“{1CDB2949-8F65-4355-8456-263E7C208A5D}”=“Desktop Explorer”
“{1E9B04FB-F9E5-4718-997B-B8DA88302A47}”=“Desktop Explorer Menu”
“{1E9B04FB-F9E5-4718-997B-B8DA88302A48}”=“nView Desktop Context Menu”
“{e82a2d71-5b2f-43a0-97b8-81be15854de8}”=“ShellLink for Application References”
“{E37E2028-CE1A-4f42-AF05-6CEABC4E5D75}”=“Shell Icon Handler for Application References”
“{640167b4-59b0-47a6-b335-a6b3c0695aea}”=“Portable Media Devices”
“{35786D3C-B075-49b9-88DD-029876E11C01}”=“Portable Devices”
“{D6791A63-E7E2-4fee-BF52-5DED8E86E9B8}”=“Portable Devices Menu”
“{07C45BB1-4A8C-4642-A1F5-237E7215FF66}”=“IE Microsoft BrowserBand”
“{1C1EDB47-CE22-4bbb-B608-77B48F83C823}”=“IE Fade Task”
“{205D7A97-F16D-4691-86EF-F3075DCCA57D}”=“IE Menu Desk Bar”
“{43886CD5-6529-41c4-A707-7B3C92C05E68}”=“IE Navigation Bar”
“{44C76ECD-F7FA-411c-9929-1B77BA77F524}”=“IE Menu Site”
“{4B78D326-D922-44f9-AF2A-07805C2A3560}”=“IE Menu Band”
“{6038EF75-ABFC-4e59-AB6F-12D397F6568D}”=“IE Microsoft History AutoComplete List”
“{6B4ECC4F-16D1-4474-94AB-5A763F2A54AE}”=“IE Tracking Shell Menu”
“{6CF48EF8-44CD-45d2-8832-A16EA016311B}”=“IE IShellFolderBand”
“{73CFD649-CD48-4fd8-A272-2070EA56526B}”=“IE BandProxy”
“{98FF6D4B-6387-4b0a-8FBD-C5C4BB17B4F8}”=“IE MRU AutoComplete List”
“{9A096BB5-9DC3-4D1C-8526-C3CBF991EA4E}”=“IE RSS Feeder Folder”
“{9D958C62-3954-4b44-8FAB-C4670C1DB4C2}”=“IE Microsoft Shell Folder AutoComplete List”
“{B31C5FAE-961F-415b-BAF0-E697A5178B94}”=“IE Microsoft Multiple AutoComplete List Container”
“{BC476F4C-D9D7-4100-8D4E-E043F6DEC409}”=“Microsoft Browser Architecture”
“{BFAD62EE-9D54-4b2a-BF3B-76F90697BD2A}”=“IE Shell Rebar BandSite”
“{E6EE9AAC-F76B-4947-8260-A9F136138E11}”=“IE Shell Band Site Menu”
“{F2CF5485-4E02-4f68-819C-B92DE9277049}”="&Links"
“{F83DAC1C-9BB9-4f2b-B619-09819DA81B0E}”=“IE Registry Tree Options Utility”
“{FAC3CBF6-8697-43d0-BAB9-DCD1FCE19D75}”=“IE User Assist”
“{FDE7673D-2E19-4145-8376-BBD58C4BC7BA}”=“IE Custom MRU AutoCompleted List”
“{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}”=“OpenOffice.org Column Handler”
“{087B3AE3-E237-4467-B8DB-5A38AB959AC9}”=“OpenOffice.org Infotip Handler”
“{63542C48-9552-494A-84F7-73AA6A7C99C1}”=“OpenOffice.org Property Sheet Handler”
“{3B092F0C-7696-40E3-A80F-68D74DA84210}”=“OpenOffice.org Thumbnail Viewer”
“{B41DB860-8EE4-11D2-9906-E49FADC173CA}”=“WinRAR shell extension”
“{FC9FB64A-1EB2-4CCF-AF5E-1A497A9B5C2D}”=“Messenger Sharing Folders”
“{400CFEE2-39D0-46DC-96DF-E0BB5A4324B3}”=“Mes photos Logitech”
“{97F68CE3-7146-45FF-BE24-D9A7DD7CB8A2}”=“NeroCoverEd Live Icons”
“{B327765E-D724-4347-8B16-78AE18552FC3}”=“NeroDigitalIconHandler”
“{7F1CF152-04F8-453A-B34C-E609530A9DC8}”=“NeroDigitalPropSheetHandler”
“{FDBA76B3-0FF0-489e-9D51-F336AAD816FA}”=“Test directory background ctx menu extension”
“{0563DB41-F538-4B37-A92D-4659049B7766}”=“WLMD Message Handler”
“{06A2568A-CED6-4187-BB20-400B8C02BE5A}”=""
“{00F33137-EE26-412F-8D71-F84E4C2C6625}”=""
“{2BE99FD4-A181-4996-BFA9-58C5FFD11F6C}”=“Windows Live Photo Gallery Autoplay Drop Target”
“{00F30F64-AC33-42F5-8FD1-5DC2D3FDE06C}”=“Windows Live Photo Gallery Viewer Drop Target”
“{00F374B7-B390-4884-B372-2FC349F2172B}”=“Windows Live Photo Gallery Editor Drop Target”
“{00F346CB-35A4-465B-8B8F-65A29DBAB1F6}”=“Windows Live Photo Gallery Viewer Drop Target Shim”
“{00F3712A-CA79-45B4-9E4D-D7891E7F8B9D}”=“Windows Live Photo Gallery Editor Drop Target Shim”
“{00F30F90-3E96-453B-AFCD-D71989ECC2C7}”=“Windows Live Photo Gallery Autoplay Drop Target Shim”
“{BDEADF00-C265-11D0-BCED-00A0C90AB50F}”=“Dossiers Web”
“{00020D75-0000-0000-C000-000000000046}”=“Microsoft Office Outlook Desktop Icon Handler”
“{0006F045-0000-0000-C000-000000000046}”=“Microsoft Office Outlook Custom Icon Handler”
“{42042206-2D85-11D3-8CFF-005004838597}”=“Microsoft Office HTML Icon Handler”
“{472083B0-C522-11CF-8763-00608CC02F24}”=“avast”
“{2C49B5D0-ACE7-4D17-9DF0-A254A6C5A0C5}”=“dBpoweramp Music Converter”


HKEY ROOT CLASSIDS:
Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{06A2568A-CED6-4187-BB20-400B8C02BE5A}]
“AppId”="{06A2568A-CED6-4187-BB20-400B8C02BE5A}"

[HKEY_CLASSES_ROOT\CLSID{06A2568A-CED6-4187-BB20-400B8C02BE5A}\LocalServer32]
@=“C:\Program Files\Windows Live\Photo Gallery\WLXPhotoAcquireWizard.exe”
“ServerExecutable”=“C:\Program Files\Windows Live\Photo Gallery\WLXPhotoAcquireWizard.exe”


Files Found are not all bad files:

C:\WINDOWS\SYSTEM32
advpack.dll Mon 23 Jun 2008 18:28:18 A… 124 928 122,00 K
dnsapi.dll Fri 20 Jun 2008 19:41:06 A… 148 992 145,50 K
dxtmsft.dll Mon 23 Jun 2008 18:28:18 A… 347 136 339,00 K
dxtrans.dll Mon 23 Jun 2008 18:28:18 A… 214 528 209,50 K
es.dll Mon 7 Jul 2008 22:31:48 A… 253 952 248,00 K
extmgr.dll Mon 23 Jun 2008 18:28:18 … 133 120 130,00 K
icardie.dll Mon 23 Jun 2008 18:28:18 A… 63 488 62,00 K
ieakeng.dll Mon 23 Jun 2008 18:28:18 … 153 088 149,50 K
ieaksie.dll Mon 23 Jun 2008 18:28:18 … 230 400 225,00 K
ieakui.dll Sat 21 Jun 2008 7:23:54 … 161 792 158,00 K
ieapfltr.dll Mon 23 Jun 2008 18:28:18 A… 383 488 374,50 K
iedkcs32.dll Mon 23 Jun 2008 18:28:18 … 384 512 375,50 K
ieframe.dll Mon 23 Jun 2008 18:28:20 A… 6 066 176 5,79 M
iernonce.dll Mon 23 Jun 2008 18:28:20 … 44 544 43,50 K
iertutil.dll Mon 23 Jun 2008 18:28:20 A… 267 776 261,50 K
jsproxy.dll Mon 23 Jun 2008 18:28:20 … 27 648 27,00 K
mscms.dll Tue 24 Jun 2008 18:23:56 A… 74 240 72,50 K
msfeeds.dll Mon 23 Jun 2008 18:28:20 A… 459 264 448,50 K
msfeed~1.dll Mon 23 Jun 2008 18:28:20 A… 52 224 51,00 K
mshtml.dll Tue 24 Jun 2008 10:28:24 A… 3 592 192 3,43 M
mshtmled.dll Mon 23 Jun 2008 18:28:22 A… 477 696 466,50 K
msrating.dll Mon 23 Jun 2008 18:28:22 … 193 024 188,50 K
mstime.dll Mon 23 Jun 2008 18:28:22 … 671 232 655,50 K
mswsock.dll Fri 20 Jun 2008 19:41:06 A… 247 808 242,00 K
occache.dll Mon 23 Jun 2008 18:28:22 … 102 912 100,50 K
pngfilt.dll Mon 23 Jun 2008 18:28:22 A… 44 544 43,50 K
url.dll Mon 23 Jun 2008 18:28:22 A… 105 984 103,50 K
urlmon.dll Mon 23 Jun 2008 18:28:24 A… 1 159 680 1,11 M
webcheck.dll Mon 23 Jun 2008 18:28:24 A… 233 472 228,00 K
wininet.dll Mon 23 Jun 2008 18:28:24 A… 826 368 807,00 K
wmpeff~1.dll Tue 24 Jun 2008 18:12:58 … 295 936 289,00 K

31 items found: 31 files, 0 directories.
Total of file sizes: 17 542 144 bytes 16,73 M
Locate .tmp files:

No matches found.


Directory Listing of system files:
Le volume dans le lecteur C n’a pas de nom.
Le num?ro de s?rie du volume est 24A7-1095

R?pertoire de C:\WINDOWS\System32

11/09/2008 23:00 dllcache
13/12/2007 20:38 Microsoft
0 fichier(s) 0 octets
2 R?p(s) 95ÿ118ÿ786ÿ560 octets libres

merci apres je fais koi?


j'ai refais voila le rapport

C:\Program Files\Search Settings\kb127\SearchSettings.dll unregistered successfully.
C:\Program Files\Search Settings\kb127\SearchSettings.dll moved successfully.
C:\Program Files\Search Settings\kb127\temp moved successfully.
C:\Program Files\Search Settings\kb127\res moved successfully.
C:\Program Files\Search Settings\kb127 moved successfully.

OTMoveIt2 by OldTimer - Version 1.0.4.3 log created on 09122008_003508


voici l'autre rapport

L2MFIX find log 051206
These are the registry keys present


Winlogon/notify:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
“Asynchronous”=dword:00000000
“Impersonate”=dword:00000000
“DllName”=hex(2):63,00,72,00,79,00,70,00,74,00,33,00,32,00,2e,00,64,00,6c,00,
6c,00,00,00
“Logoff”=“ChainWlxLogoffEvent”

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
“Asynchronous”=dword:00000000
“Impersonate”=dword:00000000
“DllName”=hex(2):63,00,72,00,79,00,70,00,74,00,6e,00,65,00,74,00,2e,00,64,00,
6c,00,6c,00,00,00
“Logoff”=“CryptnetWlxLogoffEvent”

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
“DLLName”=“cscdll.dll”
“Logon”=“WinlogonLogonEvent”
“Logoff”=“WinlogonLogoffEvent”
“ScreenSaver”=“WinlogonScreenSaverEvent”
“Startup”=“WinlogonStartupEvent”
“Shutdown”=“WinlogonShutdownEvent”
“StartShell”=“WinlogonStartShellEvent”
“Impersonate”=dword:00000000
“Asynchronous”=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
“DLLName”=“wlnotify.dll”
“Logon”=“SCardStartCertProp”
“Logoff”=“SCardStopCertProp”
“Lock”=“SCardSuspendCertProp”
“Unlock”=“SCardResumeCertProp”
“Enabled”=dword:00000001
“Impersonate”=dword:00000001
“Asynchronous”=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
“Asynchronous”=dword:00000000
“DllName”=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,
6c,00,6c,00,00,00
“Impersonate”=dword:00000000
“StartShell”=“SchedStartShell”
“Logoff”=“SchedEventLogOff”

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
“Logoff”=“WLEventLogoff”
“Impersonate”=dword:00000000
“Asynchronous”=dword:00000001
“DllName”=hex(2):73,00,63,00,6c,00,67,00,6e,00,74,00,66,00,79,00,2e,00,64,00,
6c,00,6c,00,00,00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
“DLLName”=“WlNotify.dll”
“Lock”=“SensLockEvent”
“Logon”=“SensLogonEvent”
“Logoff”=“SensLogoffEvent”
“Safe”=dword:00000001
“MaxWait”=dword:00000258
“StartScreenSaver”=“SensStartScreenSaverEvent”
“StopScreenSaver”=“SensStopScreenSaverEvent”
“Startup”=“SensStartupEvent”
“Shutdown”=“SensShutdownEvent”
“StartShell”=“SensStartShellEvent”
“PostShell”=“SensPostShellEvent”
“Disconnect”=“SensDisconnectEvent”
“Reconnect”=“SensReconnectEvent”
“Unlock”=“SensUnlockEvent”
“Impersonate”=dword:00000001
“Asynchronous”=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
“Asynchronous”=dword:00000000
“DllName”=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,
6c,00,6c,00,00,00
“Impersonate”=dword:00000000
“Logoff”=“TSEventLogoff”
“Logon”=“TSEventLogon”
“PostShell”=“TSEventPostShell”
“Shutdown”=“TSEventShutdown”
“StartShell”=“TSEventStartShell”
“Startup”=“TSEventStartup”
“MaxWait”=dword:00000258
“Reconnect”=“TSEventReconnect”
“Disconnect”=“TSEventDisconnect”

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
“DLLName”=“wlnotify.dll”
“Logon”=“RegisterTicketExpiredNotificationEvent”
“Logoff”=“UnregisterTicketExpiredNotificationEvent”
“Impersonate”=dword:00000001
“Asynchronous”=dword:00000001


useragent:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform]


Shell Extension key:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
“{00022613-0000-0000-C000-000000000046}”=“Feuille de propri?t?s du fichier multim?dia”
“{176d6597-26d3-11d1-b350-080036a75b03}”=“Gestion de scanneur ICM”
“{1F2E5C40-9550-11CE-99D2-00AA006E086C}”=“Page de s?curit? NTFS”
“{3EA48300-8CF6-101B-84FB-666CCB9BCD32}”=“Page des propri?t?s de OLE DocFile”
“{40dd6e20-7c17-11ce-a804-00aa003ca9f6}”=“Extensions de l’environnement pour le partage”
“{41E300E0-78B6-11ce-849B-444553540000}”=“PlusPack CPL Extension”
“{42071712-76d4-11d1-8b24-00a0c9068ff3}”=“Extension Affichage Carte du Panneau de configuration”
“{42071713-76d4-11d1-8b24-00a0c9068ff3}”=“Extension Affichage cran du Panneau de configuration”
“{42071714-76d4-11d1-8b24-00a0c9068ff3}”=“Extension Affichage Panorama du Panneau de configuration”
“{4E40F770-369C-11d0-8922-00A024AB2DBB}”=“Page de s?curit? DS”
“{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}”=“Page de compatibilit?”
“{56117100-C0CD-101B-81E2-00AA004AE837}”=“Gestionnaire de donn?es endommag?es de l’environnement”
“{59099400-57FF-11CE-BD94-0020AF85B590}”=“Extension copie de disquette”
“{59be4990-f85c-11ce-aff7-00aa003ca9f6}”=“Extensions de l’environnement pour les objets r?seau de Microsoft Windows”
“{5DB2625A-54DF-11D0-B6C4-0800091AA605}”=“Gestion d’?cran ICM”
“{675F097E-4C4D-11D0-B6C1-0800091AA605}”=“Gestion d’imprimante ICM”
“{764BF0E1-F219-11ce-972D-00AA00A14F56}”=“Extensions de l’environnement de compression de fichiers”
“{77597368-7b15-11d0-a0c2-080036af3f03}”=“Extension de l’environnement d’imprimante Web”
“{7988B573-EC89-11cf-9C00-00AA00A14F56}”=“Disk Quota UI”
“{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA}”=“Menu contextuel de cryptage”
“{85BBD920-42A0-1069-A2E4-08002B30309D}”=“Porte-documents”
“{88895560-9AA2-1069-930E-00AA0030EBC8}”=“Extension ic“ne HyperTerminal”
“{BD84B380-8CA2-1069-AB1D-08000948F534}”=“Fonts”
“{DBCE2480-C732-101B-BE72-BA78E9AD5B27}”=“Profil ICC”
“{F37C5810-4D3F-11d0-B4BF-00AA00BBB723}”=“Page de s?curit? des imprimantes”
“{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}”=“Extensions de l’environnement pour le partage”
“{f92e8c40-3d33-11d2-b1aa-080036a75b03}”=“Display TroubleShoot CPL Extension”
“{7444C717-39BF-11D1-8CD9-00C04FC29D45}”=“Extension de cryptographie PKO”
“{7444C719-39BF-11D1-8CD9-00C04FC29D45}”=“Extension de cryptographie Sign”
“{7007ACC7-3202-11D1-AAD2-00805FC1270E}”=“Connexions r?seau”
“{992CFFA0-F557-101A-88EC-00DD010CCC48}”=“Connexions r?seau”
“{E211B736-43FD-11D1-9EFB-0000F8757FCD}”="&Scanneurs et appareils photo"
“{FB0C9C8A-6C50-11D1-9F1D-0000F8757FCD}”="&Scanneurs et appareils photo"
“{905667aa-acd6-11d2-8080-00805f6596d2}”="&Scanneurs et appareils photo"
“{3F953603-1008-4f6e-A73A-04AAC7A992F1}”="&Scanneurs et appareils photo"
“{83bbcbf3-b28a-4919-a5aa-73027445d672}”="&Scanneurs et appareils photo"
“{F0152790-D56E-4445-850E-4F3117DB740C}”=“Remote Sessions CPL Extension”
“{60254CA5-953B-11CF-8C96-00AA00B8708C}”=“Extensions de l’interpr?teur de commandes pour l’environnement d’ex?cution de scripts Windows”
“{2206CDB2-19C1-11D1-89E0-00C04FD7A829}”=“Liaison de donn?es Microsoft”
“{DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF}”=“Tasks Folder Icon Handler”
“{797F1E90-9EDD-11cf-8D8E-00AA0060F5BF}”=“Tasks Folder Shell Extension”
“{D6277990-4C6A-11CF-8D87-00AA0060F5BF}”=“T?ches planifi?es”
“{2559a1f7-21d7-11d4-bdaf-00c04f60b9f0}”=“Set Program Access and Defaults”
“{5F327514-6C5E-4d60-8F16-D07FA08A78ED}”=“Auto Update Property Sheet Extension”
“{0DF44EAA-FF21-4412-828E-260A8728E7F1}”=“Barre des t?ches et menu D?marrer”
“{2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}”=“Rechercher”
“{2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}”=“Aide et support”
“{2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}”=“Aide et support”
“{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}”=“Ex?cuter…”
“{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}”=“Internet”
“{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}”=“Courrier ?lectronique”
“{D20EA4E1-3957-11d2-A40B-0C5020524152}”=“Polices”
“{D20EA4E1-3957-11d2-A40B-0C5020524153}”=“Outils d’administration”
“{596AB062-B4D2-4215-9F74-E9109B0A8153}”=“Page de propri?t?s des versions pr?c?dentes”
“{9DB7A13C-F208-4981-8353-73CC61AE2783}”=“Versions pr?c?dentes”
“{875CB1A1-0F29-45de-A1AE-CFB4950D0B78}”=“Audio Media Properties Handler”
“{40C3D757-D6E4-4b49-BB41-0E5BBEA28817}”=“Video Media Properties Handler”
“{E4B29F9D-D390-480b-92FD-7DDB47101D71}”=“Wav Properties Handler”
“{87D62D94-71B3-4b9a-9489-5FE6850DC73E}”=“Avi Properties Handler”
“{A6FD9E45-6E44-43f9-8644-08598F5A74D9}”=“Midi Properties Handler”
“{c5a40261-cd64-4ccf-84cb-c394da41d590}”=“Video Thumbnail Extractor”
“{5E6AB780-7743-11CF-A12B-00AA004AE837}”=“Barre d’outils Internet Microsoft”
“{22BF0C20-6DA7-11D0-B373-00A0C9034938}”=“tat du t?l?chargement”
“{91EA3F8B-C99B-11d0-9815-00C04FD91972}”=“Dossier Bureau ?tendu”
“{6413BA2C-B461-11d1-A18A-080036B11A03}”=“Dossier du shell augment?”
“{F61FFEC1-754F-11d0-80CA-00AA005B4383}”=“BandProxy”
“{7BA4C742-9E81-11CF-99D3-00AA004AE837}”=“Bande du navigateur Microsoft”
“{21569614-B795-46b1-85F4-E737A8DC09AD}”=“Shell Search Band”
“{169A0691-8DF9-11d1-A1C4-00C04FD75D13}”=“Volet int?gr? de recherche”
“{AF4F6510-F982-11d0-8595-00AA004CD6D8}”=“Utilitaire des options de l’arborescence du Registre”
“{01E04581-4EEE-11d0-BFE9-00AA005B4383}”="&Adresse"
“{A08C11D2-A228-11d0-825B-00AA005B4383}”=“BoŒte d’entr?e de l’adresse”
“{00BB2763-6A77-11D0-A535-00C04FD7D062}”=“Shell Microsoft AutoComplete”
“{6756A641-DE71-11d0-831B-00AA005B4383}”=“Liste de saisie semi-automatique MRU”
“{6935DB93-21E8-4ccc-BEB9-9FE3C77A297A}”=“Liste de saisie semi-automatique personnalis?e MRU”
“{7e653215-fa25-46bd-a339-34a2790f3cb7}”=“Accessible”
“{acf35015-526e-4230-9596-becbe19f0ac9}”=“Barre de progr?s auto-ouvrante”
“{00BB2764-6A77-11D0-A535-00C04FD7D062}”=“Liste de saisie semi-automatique de l’historique Microsoft”
“{03C036F1-A186-11D0-824A-00AA005B4383}”=“Liste de saisie semi-automatique du dossier Shell Microsoft”
“{00BB2765-6A77-11D0-A535-00C04FD7D062}”=“Conteneur de la liste de saisie semi-automatique multiple Microsoft”
“{ECD4FC4E-521C-11D0-B792-00A0C90312E1}”=“Menu Site de bandes”
“{3CCF8A41-5C85-11d0-9796-00AA00B90ADF}”=“Shell DeskBarApp”
“{ECD4FC4C-521C-11D0-B792-00A0C90312E1}”=“Barre du Bureau”
“{ECD4FC4D-521C-11D0-B792-00A0C90312E1}”=“Shell Rebar BandSite”
“{DD313E04-FEFF-11d1-8ECD-0000F87A470C}”=“Assistance utilisateur”
“{EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}”=“Param?tres du dossier global”
“{30D02401-6A81-11d0-8274-00C04FD5AE38}”=“IE Search Band”
“{3028902F-6374-48b2-8DC6-9725E775B926}”=“IE AutoComplete”
“{07798131-AF23-11d1-9111-00A0C98BA67D}”=“Recherche Web”
“{7376D660-C583-11d0-A3A5-00C04FD706EC}”=“TridentImageExtractor”
“{EFA24E61-B078-11d0-89E4-00C04FC9E26E}”=“Favorites Band”
“{EFA24E62-B078-11d0-89E4-00C04FC9E26E}”=“History Band”
“{0A89A860-D7B1-11CE-8350-444553540000}”=“Shell Automation Inproc Service”
“{A5E46E3A-8849-11D1-9D8C-00C04FC99D61}”=“Microsoft Browser Architecture”
“{131A6951-7F78-11D0-A979-00C04FD705A2}”=“ISFBand OC”
“{9461b922-3c5a-11d2-bf8b-00c04fb93661}”=“Search Assistant OC”
“{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}”=“Shell DocObject Viewer”
“{FBF23B40-E3F0-101B-8488-00AA003E56F8}”=“InternetShortcut”
“{3C374A40-BAE4-11CF-BF7D-00AA006946EE}”=“Microsoft Url History Service”
“{FF393560-C2A7-11CF-BFF4-444553540000}”=“History”
“{7BD29E00-76C1-11CF-9DD0-00A0C9034933}”=“Temporary Internet Files”
“{7BD29E01-76C1-11CF-9DD0-00A0C9034933}”=“Temporary Internet Files”
“{CFBFAE00-17A6-11D0-99CB-00C04FD64497}”=“Microsoft Url Search Hook”
“{A2B0DD40-CC59-11d0-A3A5-00C04FD706EC}”=“Image de d?marrage de la Suite IE4”
“{67EA19A0-CCEF-11d0-8024-00C04FD75D13}”=“CDF Extension Copy Hook”
“{3DC7A020-0ACD-11CF-A9BB-00AA004AE837}”=“The Internet”
“{EFA24E64-B078-11d0-89E4-00C04FC9E26E}”=“Explorer Band”
“{871C5380-42A0-1069-A2EA-08002B30309D}”=“Internet Name Space”
“{9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}”=“Sendmail service”
“{9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}”=“Sendmail service”
“{88C6C381-2E85-11D0-94DE-444553540000}”=“ActiveX Cache Folder”
“{E6FB5E20-DE35-11CF-9C87-00AA005127ED}”=“WebCheck”
“{ABBE31D0-6DAE-11D0-BECA-00C04FD940BE}”=“Subscription Mgr”
“{F5175861-2688-11d0-9C5E-00AA00A45957}”=“Subscription Folder”
“{08165EA0-E946-11CF-9C87-00AA005127ED}”=“WebCheckWebCrawler”
“{E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB}”=“WebCheckChannelAgent”
“{E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7}”=“TrayAgent”
“{7D559C10-9FE9-11d0-93F7-00AA0059CE02}”=“Code Download Agent”
“{E6CC6978-6B6E-11D0-BECA-00C04FD940BE}”=“ConnectionAgent”
“{D8BD2030-6FC9-11D0-864F-00AA006809D9}”=“PostAgent”
“{7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB}”=“WebCheck SyncMgr Handler”
“{352EC2B7-8B9A-11D1-B8AE-006008059382}”=“Gestionnaire d’applications d’environnement”
“{0B124F8F-91F0-11D1-B8B5-006008059382}”=“num?rateur d’applications install?es”
“{CFCCC7A0-A282-11D1-9082-006008059382}”=“Publication d’application Darwin”
“{e84fda7c-1d6a-45f6-b725-cb260c236066}”=“Shell Image Verbs”
“{66e4e4fb-f385-4dd0-8d74-a2efd1bc6178}”=“Shell Image Data Factory”
“{00E7B358-F65B-4dcf-83DF-CD026B94BFD4}”=“Autoplay for SlideShow”
“{3F30C968-480A-4C6C-862D-EFC0897BB84B}”=“Extracteur de miniatures de fichier + GDI”
“{9DBD2C50-62AD-11d0-B806-00C04FD706EC}”=“Gestionnaire de miniatures - Informations de r?sum? (DOCFILES)”
“{EAB841A0-9550-11cf-8C16-00805F1408F3}”=“Extracteur de miniatures HTML”
“{eb9b1153-3b57-4e68-959a-a3266bc3d7fe}”=“Shell Image Property Handler”
“{CC6EEFFB-43F6-46c5-9619-51D571967F7D}”=“Assistant Publication de sites Web”
“{add36aa8-751a-4579-a266-d66f5202ccbb}”=“Commande d’impressions via le Web”
“{6b33163c-76a5-4b6c-bf21-45de9cd503a1}”=“Objet Assistant de publication Shell”
“{58f1f272-9240-4f51-b6d4-fd63d1618591}”=“Assistant Obtenir une identit? Passport”
“{7A9D77BD-5403-11d2-8785-2E0420524153}”=“Comptes d’utilisateurs”
“{BD472F60-27FA-11cf-B8B4-444553540000}”=“Compressed (zipped) Folder Right Drag Handler”
“{888DCA60-FC0A-11CF-8F0F-00C04FD7D062}”=“Compressed (zipped) Folder SendTo Target”
“{692F0339-CBAA-47e6-B5B5-3B84DB604E87}”=“Extensions Manager Folder”
“{63da6ec0-2e98-11cf-8d82-444553540000}”=“FTP Folders Webview”
“{883373C3-BF89-11D1-BE35-080036B11A03}”=“Microsoft DocProp Shell Ext”
“{A9CF0EAE-901A-4739-A481-E35B73E47F6D}”=“Microsoft DocProp Inplace Edit Box Control”
“{8EE97210-FD1F-4B19-91DA-67914005F020}”=“Microsoft DocProp Inplace ML Edit Box Control”
“{0EEA25CC-4362-4A12-850B-86EE61B0D3EB}”=“Microsoft DocProp Inplace Droplist Combo Control”
“{6A205B57-2567-4A2C-B881-F787FAB579A3}”=“Microsoft DocProp Inplace Calendar Control”
“{28F8A4AC-BBB3-4D9B-B177-82BFC914FA33}”=“Microsoft DocProp Inplace Time Control”
“{8A23E65E-31C2-11d0-891C-00A024AB2DBB}”=“Directory Query UI”
“{9E51E0D0-6E0F-11d2-9601-00C04FA31A86}”=“Shell properties for a DS object”
“{163FDC20-2ABC-11d0-88F0-00A024AB2DBB}”=“Directory Object Find”
“{F020E586-5264-11d1-A532-0000F8757D7E}”=“Directory Start/Search Find”
“{0D45D530-764B-11d0-A1CA-00AA00C16E65}”=“Directory Property UI”
“{62AE1F9A-126A-11D0-A14B-0800361B1103}”=“Directory Context Menu Verbs”
“{ECF03A33-103D-11d2-854D-006008059367}”=“MyDocs Copy Hook”
“{ECF03A32-103D-11d2-854D-006008059367}”=“MyDocs Drop Target”
“{4a7ded0a-ad25-11d0-98a8-0800361b1103}”=“MyDocs Properties”
“{750fdf0e-2a26-11d1-a3ea-080036587f03}”=“Offline Files Menu”
“{10CFC467-4392-11d2-8DB4-00C04FA31A66}”=“Offline Files Folder Options”
“{AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E}”=“Dossier Fichiers hors connexion”
“{143A62C8-C33B-11D1-84FE-00C04FA34A14}”=“Microsoft Agent Character Property Sheet Handler”
“{ECCDF543-45CC-11CE-B9BF-0080C87CDBA6}”=“DfsShell”
“{60fd46de-f830-4894-a628-6fa81bc0190d}”="%DESC_PublishDropTarget%"
“{7A80E4A8-8005-11D2-BCF8-00C04F72C717}”=“MMC Icon Handler”
“{0CD7A5C0-9F37-11CE-AE65-08002B2E1262}”=".CAB file viewer"
“{32714800-2E5F-11d0-8B85-00AA0044F941}”=“Des &personnes…”
“{8DD448E6-C188-4aed-AF92-44956194EB1F}”=“Windows Media Player Burn Audio CD Context Menu Handler”
“{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}”=“Windows Media Player Play as Playlist Context Menu Handler”
“{F1B9284F-E9DC-4e68-9D7E-42362A59F0FD}”=“Windows Media Player Add to Playlist Context Menu Handler”
“{A70C977A-BF00-412C-90B7-034C51DA2439}”=“NvCpl DesktopContext Class”
“{FFB699E0-306A-11d3-8BD1-00104B6F7516}”=“Play on my TV helper”
“{1CDB2949-8F65-4355-8456-263E7C208A5D}”=“Desktop Explorer”
“{1E9B04FB-F9E5-4718-997B-B8DA88302A47}”=“Desktop Explorer Menu”
“{1E9B04FB-F9E5-4718-997B-B8DA88302A48}”=“nView Desktop Context Menu”
“{e82a2d71-5b2f-43a0-97b8-81be15854de8}”=“ShellLink for Application References”
“{E37E2028-CE1A-4f42-AF05-6CEABC4E5D75}”=“Shell Icon Handler for Application References”
“{640167b4-59b0-47a6-b335-a6b3c0695aea}”=“Portable Media Devices”
“{35786D3C-B075-49b9-88DD-029876E11C01}”=“Portable Devices”
“{D6791A63-E7E2-4fee-BF52-5DED8E86E9B8}”=“Portable Devices Menu”
“{07C45BB1-4A8C-4642-A1F5-237E7215FF66}”=“IE Microsoft BrowserBand”
“{1C1EDB47-CE22-4bbb-B608-77B48F83C823}”=“IE Fade Task”
“{205D7A97-F16D-4691-86EF-F3075DCCA57D}”=“IE Menu Desk Bar”
“{43886CD5-6529-41c4-A707-7B3C92C05E68}”=“IE Navigation Bar”
“{44C76ECD-F7FA-411c-9929-1B77BA77F524}”=“IE Menu Site”
“{4B78D326-D922-44f9-AF2A-07805C2A3560}”=“IE Menu Band”
“{6038EF75-ABFC-4e59-AB6F-12D397F6568D}”=“IE Microsoft History AutoComplete List”
“{6B4ECC4F-16D1-4474-94AB-5A763F2A54AE}”=“IE Tracking Shell Menu”
“{6CF48EF8-44CD-45d2-8832-A16EA016311B}”=“IE IShellFolderBand”
“{73CFD649-CD48-4fd8-A272-2070EA56526B}”=“IE BandProxy”
“{98FF6D4B-6387-4b0a-8FBD-C5C4BB17B4F8}”=“IE MRU AutoComplete List”
“{9A096BB5-9DC3-4D1C-8526-C3CBF991EA4E}”=“IE RSS Feeder Folder”
“{9D958C62-3954-4b44-8FAB-C4670C1DB4C2}”=“IE Microsoft Shell Folder AutoComplete List”
“{B31C5FAE-961F-415b-BAF0-E697A5178B94}”=“IE Microsoft Multiple AutoComplete List Container”
“{BC476F4C-D9D7-4100-8D4E-E043F6DEC409}”=“Microsoft Browser Architecture”
“{BFAD62EE-9D54-4b2a-BF3B-76F90697BD2A}”=“IE Shell Rebar BandSite”
“{E6EE9AAC-F76B-4947-8260-A9F136138E11}”=“IE Shell Band Site Menu”
“{F2CF5485-4E02-4f68-819C-B92DE9277049}”="&Links"
“{F83DAC1C-9BB9-4f2b-B619-09819DA81B0E}”=“IE Registry Tree Options Utility”
“{FAC3CBF6-8697-43d0-BAB9-DCD1FCE19D75}”=“IE User Assist”
“{FDE7673D-2E19-4145-8376-BBD58C4BC7BA}”=“IE Custom MRU AutoCompleted List”
“{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}”=“OpenOffice.org Column Handler”
“{087B3AE3-E237-4467-B8DB-5A38AB959AC9}”=“OpenOffice.org Infotip Handler”
“{63542C48-9552-494A-84F7-73AA6A7C99C1}”=“OpenOffice.org Property Sheet Handler”
“{3B092F0C-7696-40E3-A80F-68D74DA84210}”=“OpenOffice.org Thumbnail Viewer”
“{B41DB860-8EE4-11D2-9906-E49FADC173CA}”=“WinRAR shell extension”
“{FC9FB64A-1EB2-4CCF-AF5E-1A497A9B5C2D}”=“Messenger Sharing Folders”
“{400CFEE2-39D0-46DC-96DF-E0BB5A4324B3}”=“Mes photos Logitech”
“{97F68CE3-7146-45FF-BE24-D9A7DD7CB8A2}”=“NeroCoverEd Live Icons”
“{B327765E-D724-4347-8B16-78AE18552FC3}”=“NeroDigitalIconHandler”
“{7F1CF152-04F8-453A-B34C-E609530A9DC8}”=“NeroDigitalPropSheetHandler”
“{FDBA76B3-0FF0-489e-9D51-F336AAD816FA}”=“Test directory background ctx menu extension”
“{0563DB41-F538-4B37-A92D-4659049B7766}”=“WLMD Message Handler”
“{06A2568A-CED6-4187-BB20-400B8C02BE5A}”=""
“{00F33137-EE26-412F-8D71-F84E4C2C6625}”=""
“{2BE99FD4-A181-4996-BFA9-58C5FFD11F6C}”=“Windows Live Photo Gallery Autoplay Drop Target”
“{00F30F64-AC33-42F5-8FD1-5DC2D3FDE06C}”=“Windows Live Photo Gallery Viewer Drop Target”
“{00F374B7-B390-4884-B372-2FC349F2172B}”=“Windows Live Photo Gallery Editor Drop Target”
“{00F346CB-35A4-465B-8B8F-65A29DBAB1F6}”=“Windows Live Photo Gallery Viewer Drop Target Shim”
“{00F3712A-CA79-45B4-9E4D-D7891E7F8B9D}”=“Windows Live Photo Gallery Editor Drop Target Shim”
“{00F30F90-3E96-453B-AFCD-D71989ECC2C7}”=“Windows Live Photo Gallery Autoplay Drop Target Shim”
“{BDEADF00-C265-11D0-BCED-00A0C90AB50F}”=“Dossiers Web”
“{00020D75-0000-0000-C000-000000000046}”=“Microsoft Office Outlook Desktop Icon Handler”
“{0006F045-0000-0000-C000-000000000046}”=“Microsoft Office Outlook Custom Icon Handler”
“{42042206-2D85-11D3-8CFF-005004838597}”=“Microsoft Office HTML Icon Handler”
“{472083B0-C522-11CF-8763-00608CC02F24}”=“avast”
“{2C49B5D0-ACE7-4D17-9DF0-A254A6C5A0C5}”=“dBpoweramp Music Converter”


HKEY ROOT CLASSIDS:
Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{06A2568A-CED6-4187-BB20-400B8C02BE5A}]
“AppId”="{06A2568A-CED6-4187-BB20-400B8C02BE5A}"

[HKEY_CLASSES_ROOT\CLSID{06A2568A-CED6-4187-BB20-400B8C02BE5A}\LocalServer32]
@=“C:\Program Files\Windows Live\Photo Gallery\WLXPhotoAcquireWizard.exe”
“ServerExecutable”=“C:\Program Files\Windows Live\Photo Gallery\WLXPhotoAcquireWizard.exe”


Files Found are not all bad files:

C:\WINDOWS\SYSTEM32
advpack.dll Mon 23 Jun 2008 18:28:18 A… 124 928 122,00 K
dnsapi.dll Fri 20 Jun 2008 19:41:06 A… 148 992 145,50 K
dxtmsft.dll Mon 23 Jun 2008 18:28:18 A… 347 136 339,00 K
dxtrans.dll Mon 23 Jun 2008 18:28:18 A… 214 528 209,50 K
es.dll Mon 7 Jul 2008 22:31:48 A… 253 952 248,00 K
extmgr.dll Mon 23 Jun 2008 18:28:18 … 133 120 130,00 K
icardie.dll Mon 23 Jun 2008 18:28:18 A… 63 488 62,00 K
ieakeng.dll Mon 23 Jun 2008 18:28:18 … 153 088 149,50 K
ieaksie.dll Mon 23 Jun 2008 18:28:18 … 230 400 225,00 K
ieakui.dll Sat 21 Jun 2008 7:23:54 … 161 792 158,00 K
ieapfltr.dll Mon 23 Jun 2008 18:28:18 A… 383 488 374,50 K
iedkcs32.dll Mon 23 Jun 2008 18:28:18 … 384 512 375,50 K
ieframe.dll Mon 23 Jun 2008 18:28:20 A… 6 066 176 5,79 M
iernonce.dll Mon 23 Jun 2008 18:28:20 … 44 544 43,50 K
iertutil.dll Mon 23 Jun 2008 18:28:20 A… 267 776 261,50 K
jsproxy.dll Mon 23 Jun 2008 18:28:20 … 27 648 27,00 K
mscms.dll Tue 24 Jun 2008 18:23:56 A… 74 240 72,50 K
msfeeds.dll Mon 23 Jun 2008 18:28:20 A… 459 264 448,50 K
msfeed~1.dll Mon 23 Jun 2008 18:28:20 A… 52 224 51,00 K
mshtml.dll Tue 24 Jun 2008 10:28:24 A… 3 592 192 3,43 M
mshtmled.dll Mon 23 Jun 2008 18:28:22 A… 477 696 466,50 K
msrating.dll Mon 23 Jun 2008 18:28:22 … 193 024 188,50 K
mstime.dll Mon 23 Jun 2008 18:28:22 … 671 232 655,50 K
mswsock.dll Fri 20 Jun 2008 19:41:06 A… 247 808 242,00 K
occache.dll Mon 23 Jun 2008 18:28:22 … 102 912 100,50 K
pngfilt.dll Mon 23 Jun 2008 18:28:22 A… 44 544 43,50 K
url.dll Mon 23 Jun 2008 18:28:22 A… 105 984 103,50 K
urlmon.dll Mon 23 Jun 2008 18:28:24 A… 1 159 680 1,11 M
webcheck.dll Mon 23 Jun 2008 18:28:24 A… 233 472 228,00 K
wininet.dll Mon 23 Jun 2008 18:28:24 A… 826 368 807,00 K
wmpeff~1.dll Tue 24 Jun 2008 18:12:58 … 295 936 289,00 K

31 items found: 31 files, 0 directories.
Total of file sizes: 17 542 144 bytes 16,73 M
Locate .tmp files:

No matches found.


Directory Listing of system files:
Le volume dans le lecteur C n’a pas de nom.
Le num?ro de s?rie du volume est 24A7-1095

R?pertoire de C:\WINDOWS\System32

11/09/2008 23:00 dllcache
13/12/2007 20:38 Microsoft
0 fichier(s) 0 octets
2 R?p(s) 95ÿ118ÿ643ÿ200 octets libres
merci je fais quoi aprs svp

c tourjour pareil desolé par contre le 023 reste toujours le service pro cycling manager est ce normal il veut pas etre supprimé
en tt cas internet reste autant lent
merci de t’occuper de ce probleme c sympa mais je pense pas facile
merci

antonymaute,

Dans Démarrer --> Exécuter…, entrer services.msc et valider.
Chercher --> “Cycling Manager 2007 Drivers Auto Removal”
Lorsque trouvé, double-cliquer dessus et à Type de démarrage : sélectionner Désactiver,
Ensuite valider par [Arrêter], [Appliquer] et [OK].
Fermer la fenêtre des services.


Relancer HijackThis et [Fix Checked] les lignes :

O20 - Winlogon Notify: iwrps32 - C:\WINDOWS\SYSTEM32\iwrps32.dll
O23 - Service: Cycling Manager 2007 Drivers Auto Removal (pr2akt6c) (pr2akt6c) - Unknown owner - C:\WINDOWS\system32\pr2akt6c.exe (file missing)


Ré-ouvrer OTMoveIT2 et supprimer :
C:\WINDOWS\SYSTEM32\iwrps32.dll


Ouvrer le Bloc-note dans le Menu Démarrer --> Tout les programmes --> Accessoire.
Copier/ coller le contenu exact de la citation dans le Bloc-note.
Sauvegarder sous FixReg.Reg
Double-cliquer sur le fichier FixReg.Reg et valider


Faites les mise à jours proposés par :
Update Checker : www.filehippo.com…


>> Ré-afficher un autre rapport HijackThis.
.
.
Edité le 12/09/2008 à 04:07