Rem 15072006
%homedrive%
cd\
(
echo *** Répertoires ***
echo.
dir "%PROGRAMFILES%\Fichiers communs" /on
dir "%PROGRAMFILES%" /on
echo.
echo *** Fichiers ***
echo.
dir *_nav??.dat /s
dir *ms?lock32*.dll /s
dir eg*.dll /s
dir p2e*.dll /s
dir sys*svc32*.dll /s
dir *procia* /s
dir *mseg*pid*.dll /s
dir *WMCRRS* /s
echo.
echo *** Registre ***
echo.
reg query "HKLM\SOFTWARE" | find /i "egdhtml"
echo.
reg query "HKCU\Software" | find /i "epk_extr"
echo.
reg query "HKU" /s | find "MailSkinner"
echo.
echo [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs]
echo.
reg query "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs" | find /i "EGDACCESS"
reg query "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs" | find /i "eg_auth"
reg query "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs" | find /i "eglivecam"
reg query "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs" | find /i "EGACCESS"
reg query "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs" | find /i "p2esocks"
reg query "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs" | find /i "egdhtml"
reg query "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs" | find /i "EGCOMSERVICE"
echo.
echo [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage]
echo.
reg query "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage" | find /i "EGDACCESS"
reg query "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage" | find /i "eg_auth"
reg query "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage" | find /i "eglivecam"
reg query "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage" | find /i "EGACCESS"
reg query "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage" | find /i "p2esocks"
reg query "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage" | find /i "egdhtml"
reg query "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage" | find /i "EGCOMSERVICE"
echo.
echo Magic Control
echo.
reg query "HKU" /s | find "LanConfig"
reg query "HKU" /s | find "mc\SA"
echo.
echo *** Terminé ***
) > IA.txt
notepad IA.txt
del IA.txt