PC infecté par antivirus software

J'ai essayé tout ce qui est indiqué sur le site en mode en échec et dès que je reviens dans le mode normal, rien à faire... Le virus ne part pas !

17 réponses

  • Votes
  • Date
  • Date décroissante
  1. S'il vous plait... J'ai un concours lundi et je ne peux pas réviser à cause de ce virus...!
    1. bonjour,
      on va regarder tout ceci :-)

      * Télécharge ZHPDiag

      https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

      * Laisse toi guider lors de l'installation, il se lancera automatiquement à la fin.
      * Clique sur l'icône représentant une loupe (« Lancer le diagnostic »)
      * Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette
      * Héberge le rapport ZHPDiag.txt sur ce site, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum.
      http://www.cijoint.fr/
      1. Rapport de ZHPDiag v1.25.1421 par Nicolas Coolman, Update du 06/05/2010
        Run by Sophie Chantrel at 2010/05/08 14:38:48
        Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
        Contact : nicolascoolman@yahoo.fr

        ---\\ Web Browser
        MSIE: Internet Explorer v8.0.6001.18702
        MFIE: Mozilla Firefox (3.0.10)

        ---\\ System Information
        Platform : Microsoft Windows XP (5.1.2600) Service Pack 3
        Processor: x86 Family 6 Model 15 Stepping 6, GenuineIntel
        Operating System: 32 Bits
        Boot mode:
        Total RAM: 1014.1 MB (75% free)
        System drive C: has 2 GB (4%) free of 47 GB

        ---\\ Logged in mode
        Computer Name: SOPHIE
        User Name: Sophie Chantrel
        Unselected Option: O1,O45,O61,O65
        Logged in as Administrator

        ---\\ DOS/Devices
        C:\ Hard drive, Flash drive, Thumb drive (Free 2 Go of 47 Go)
        D:\ Hard drive, Flash drive, Thumb drive (Free 37 Go of 39 Go)
        F:\ CD-ROM drive (Not Inserted)
        G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
        H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

        ---\\ Security Center & Tools Informations
        [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
        [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
        [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
        [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
        [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
        [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
        [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
        [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
        [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
        [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
        [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
        [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK

        ---\\ Processus lancés
        [MD5.4B5F60169F872E6033F09A52BCA791EA] - (.Sony Corporation - Pas de description.) -- C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe [151552]
        [MD5.53DD7F282907634C269F54810ED0740C] - (.Sony Corporation - Wireless Switch Setting Utility.) -- C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe [176128]
        [MD5.8C57857A286A24E5CE40FB863FBDD172] - (.Roxio - Drag To Disc Application.) -- C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe [1470464]
        [MD5.77F7595C557D70CADA31F595C7746018] - (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32\NvCpl.dll [7561216]
        [MD5.93EEFBC237ADFC406F52EE56D97F784B] - (.Sony Corporation - Pas de description.) -- C:\Program Files\Sony\ISB Utility\ISBMgr.exe [32768]
        [MD5.54F1F98C4AD8F99BBBE8FBB62B38733F] - (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe [94208]
        [MD5.32FB9368F485A7FE944EB6678B61734B] - (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe [118784]
        [MD5.D9F3DB62D1B361D82CD82A347EA6218D] - (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe [77824]
        [MD5.9C69E6A25F5500501B14AF43311F8D8B] - (.Microsoft Corporation - Media Center Tray Applet.) -- C:\WINDOWS\ehome\ehtray.exe [64512]
        [MD5.08C33341BED2E3EAA2C77A0B68EF9553] - (.Realtek Semiconductor Corp. - Azalia Mixer Selector.) -- C:\Program Files\Realtek\InstallShield\AzMixerSel.exe [53248]
        [MD5.29680A793F690EEF4AAA68479D2A6DF8] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [209153]
        [MD5.26187C6CE31B7730521936DE2B6F293D] - (.Alps Electric Co., Ltd. - Alps Pointing-device Driver.) -- C:\Program Files\Apoint\Apoint.exe [118784]
        [MD5.102B0DC83D1038C7D249FD09C8DD7185] - (.Adobe Systems Inc. - AcroTray.) -- C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe [483328]
        [MD5.ED7A6D40B20DC34BE06F4AE196AE7D50] - (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\qttask.exe [421888]
        [MD5.59C0BDCFE273334D3133C7F2B57A2A13] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [142120]
        [MD5.A4434521F85606C7CBC6CE975D5686A7] - (.Pas de propriétaire - Pas de description.) -- C:\Documents and Settings\Sophie Chantrel\Local Settings\Application Data\bougnvkrg\ejoiematssd.exe [268544]
        [MD5.59DC5BB82E4C8E0B3EADCFDBC44BA6E4] - (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe [15360]
        [MD5.18B4B12358EFCF68D76812058A26181F] - (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe [3883856]
        [MD5.594231994FF61F3F07411C95A43798B5] - (.Pas de propriétaire - Pas de description.) -- C:\DOCUME~1\SOPHIE~1\LOCALS~1\Temp\Mph.exe [171008]
        [MD5.2486C8E3F14496341E90CF2AB8BC82ED] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe [102400]
        [MD5.9015BC03F62940527EC92D45EE89E46F] - (.Avira GmbH - Antivirus Scheduler.) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe [108289]
        [MD5.B8720A787C1223492E6F319465E996CE] - (.Avira GmbH - Antivirus On-Access Service.) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe [185089]
        [MD5.ACB095E7E1663F1B83A41C22C5D75F90] - (.Apple Inc. - Apple Mobile Device Service.) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe [144672]
        [MD5.E4BDF223CD75478BF44567B4D5C2634D] - (.Microsoft Corporation - Generic Host Process for Win32 Services.) -- C:\WINDOWS\System32\svchost.exe [14336]
        [MD5.A065F048E9E23E6C026A7BB548D126A7] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [345376]
        [MD5.5D1347AA5AE6E2F77D7F4F8372D95AC9] - (.Microsoft Corporation - Media Center Receiver Service.) -- C:\WINDOWS\eHome\ehRecvr.exe [237568]
        [MD5.980EEEA91776357518892C5544768E2B] - (.Microsoft Corporation - Service de planification Media Center.) -- C:\WINDOWS\eHome\ehSched.exe [103424]
        [MD5.C3FB1D70CB88722267949694BA51759E] - (.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\WINDOWS\system32\services.exe [111104]
        [MD5.2B1284C4EC97CC204F8430F5CCC2992F] - (.Intel Corporation - Intel(R) PROSet/Wireless Event Log.) -- C:\Program Files\Intel\Wireless\Bin\EvtEng.exe [434176]
        [MD5.B6E01969246FCB67470E87E6957EE147] - (.GEAR Software - gearsec.) -- C:\WINDOWS\System32\GEARSec.exe [53248]
        [MD5.8F0DE4FEF8201E306F9938B0905AC96A] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files\Google\Update\GoogleUpdate.exe [135664]
        [MD5.112325F53AB720CA77825726D427FBDC] - (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe [153376]
        [MD5.52404CC76E9D53843BDF97564BB16BED] - (.Microsoft Corporation - MCRD Device Service.) -- C:\WINDOWS\ehome\mcrdsvc.exe [99328]
        [MD5.F2206624CEDCAC5581D6F9F0F95A31FB] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 86.06.) -- C:\WINDOWS\system32\nvsvc32.exe [143428]
        [MD5.91E6024D6D4DCDECDB36C43ECF9BBECB] - (.Microsoft Corporation - LSA Shell (Export Version).) -- C:\WINDOWS\system32\lsass.exe [13312]
        [MD5.C35EC743558ED20FBC99C47616F9415E] - (.Intel Corporation - Intel(R) PROSet/Wireless Registry Service.) -- C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe [327680]
        [MD5.D72566C2E6A9EE9BA5B0D1F855AF74CF] - (.Intel Corporation - Wireless Management Service.) -- C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe [937984]
        [MD5.460E4CE148BD07218DA0B6A3D31885A9] - (.Microsoft Corporation - Spooler SubSystem App.) -- C:\WINDOWS\system32\spoolsv.exe [57856]
        [MD5.1D5425783D92F34C63075FA0C4E2C3D5] - (.Sony Corporation - VAIO Event Service (Service Module).) -- C:\Program Files\Sony\VAIO Event Service\VESMgr.exe [176128]
        [MD5.55A47A048E5FD13977CA47DF39CBA5FF] - (.Sony Corporation - VAIO Task Scheduler Service.) -- C:\Program Files\Sony\VAIO Cooperated Initialisation\VCI_SVC.exe [398336]
        [MD5.AF9EBC7CF22A18E2369346067F555953] - (.Sony Corporation - VAIO Entertainment Database Service.) -- C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe [131072]
        [MD5.37D04941A5B52027EE32D2685F0F72BA] - (.Sony Corporation - VAIO Entertainment File Import Service.) -- C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe [118784]
        1. ---\\ Pages de recherche d'Internet Explorer (R1)
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
          R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
          R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <local>
          R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:5555

          ---\\ Internet Explorer URLSearchHook (R3)
          R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.18904 (longhorn_ie8_gdr.100222-1700)) -- C:\WINDOWS\system32\ieframe.dll

          ---\\ Browser Helper Objects de navigateur (O2)
          O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealPlayer - RealPlayer Download and Record Plugin.) -- c:\program files\real\realplayer\rpbrowserrecordplugin.dll
          O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} . (.Safer Networking Limited - SBSD IE Protection.) -- C:\PROGRA~1\SPYBOT~1\SDHelper.dll
          O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} . (.Pas de propriétaire - Pas de description.) -- (.not file.)
          O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
          O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} . (.Pas de propriétaire - Pas de description.) -- C:\PROGRA~1\GOOGLE~1\BAE.dll
          O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
          O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java(TM) Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

          ---\\ Internet Explorer Toolbars (O3)
          O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} . (.Veoh Networks Inc - Veoh Browser Plug-in.) -- C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
          O3 - Toolbar: Veoh Web Player Video Finder - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} . (.Veoh Networks Inc - Veoh Video Finder.) -- C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll

          ---\\ Applications démarrées automatiquement par le registre (O4)
          O4 - HKLM\..\Run: [VAIO Update 2] . (.Sony Corporation - Pas de description.) -- C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe
          O4 - HKLM\..\Run: [Switcher.exe] . (.Sony Corporation - Wireless Switch Setting Utility.) -- C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe
          O4 - HKLM\..\Run: [RoxioDragToDisc] . (.Roxio - Drag To Disc Application.) -- C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe
          O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32\NvCpl.dll
          O4 - HKLM\..\Run: [ISBMgr.exe] . (.Sony Corporation - Pas de description.) -- C:\Program Files\Sony\ISB Utility\ISBMgr.exe
          O4 - HKLM\..\Run: [igfxtray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe
          O4 - HKLM\..\Run: [igfxpers] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe
          O4 - HKLM\..\Run: [igfxhkcmd] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe
          O4 - HKLM\..\Run: [ehTray] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\WINDOWS\ehome\ehtray.exe
          O4 - HKLM\..\Run: [AzMixerSel] . (.Realtek Semiconductor Corp. - Azalia Mixer Selector.) -- C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
          O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
          O4 - HKLM\..\Run: [Apoint] . (.Alps Electric Co., Ltd. - Alps Pointing-device Driver.) -- C:\Program Files\Apoint\Apoint.exe
          O4 - HKLM\..\Run: [Acrobat Assistant 7.0] . (.Adobe Systems Inc. - AcroTray.) -- C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
          O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\qttask.exe
          O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe
          O4 - HKLM\..\Run: [fqeecvpe] . (.Pas de propriétaire - Pas de description.) -- C:\Documents and Settings\Sophie Chantrel\Local Settings\Application Data\bougnvkrg\ejoiematssd.exe
          O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
          O4 - HKCU\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
          O4 - HKCU\..\Run: [M5T8QL3YW3] . (.Pas de propriétaire - Pas de description.) -- C:\DOCUME~1\SOPHIE~1\LOCALS~1\Temp\Mph.exe
          O4 - HKCU\..\Run: [fqeecvpe] . (.Pas de propriétaire - Pas de description.) -- C:\Documents and Settings\Sophie Chantrel\Local Settings\Application Data\bougnvkrg\ejoiematssd.exe
          O4 - Global Startup: EasyAgenda.lnk . (.Neogie Software - http://www.neogie.com.) -- C:\Program Files\EasyAgenda\EasyAgenda.exe
          O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
          O4 - Global Startup: Microsoft Office.lnk . (.Microsoft Corporation - Microsoft Office XP component.) -- C:\Program Files\Microsoft Office\Office10\OSA.EXE

          ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
          O8 - Extra context menu item: Ajouter un site de support RSS à VAIO Information FLOW . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Sony\VAIO Information FLOW\aiesc.html
          O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Excel.) -- C:\PROGRA~1\MICROS~3\Office10\EXCEL.exe
          O8 - Extra context menu item: Google Sidewiki... - (.not file.) - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll
          O8 - Extra context menu item: Transfert par Image Converter 2 Plus . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Sony\Image Converter 2\menu.htm

          ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
          O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
          O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (.Pas de propriétaire - Pas de description.) -- C:\PROGRA~1\MICROS~3\OFFICE11\REFBARH.ICO
          O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} . (.not file.) - (.not file.)
          O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (.not file.) - (.not file.)
          O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe

          ---\\ Winsock hijacker (Layered Service Provider) (O10)
          O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
          O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
          O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
          O10 - WLSP:\000000000004\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll

          ---\\ Piratage de l'Option 'Rétablir les paramètres Web' (O14)
          O14 - IERESET.INF: START_PAGE_URL=START_PAGE_URL=http://www.club-vaio.com/fr/

          ---\\ Site dans la Zone de confiance d'Internet Explorer (O15)
          O15 - Trusted Zone: [HKCU\...\Domains] *.sony-europe.com
          O15 - Trusted Zone: [HKCU\...\Domains\www] *.sony-europe.com
          O15 - Trusted Zone: [HKCU\...\Domains] *.sonystyle-europe.com
          O15 - Trusted Zone: [HKCU\...\Domains\www] *.sonystyle-europe.com
          O15 - Trusted Zone: [HKCU\...\Domains] *.vaio-link.com
          O15 - Trusted Zone: [HKCU\...\Domains\www] *.vaio-link.com

          ---\\ Objets ActiveX (Downloaded Program Files)(O16)
          O16 - DPF: CabBuilder (CabBuilder) - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
          O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
          O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
          O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
          O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab

          ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
          O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll
          O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\WINDOWS\System32\igfxdev.dll
          O20 - Winlogon Notify: VESWinlogon . (.Sony Corporation - VAIO Event Service (Winlogon Notification M.) -- C:\WINDOWS\System32\VESWinlogon.dll
          O20 - Winlogon Notify: WgaLogon . (.Microsoft Corporation - Notifications Windows Genuine Advantage.) -- C:\WINDOWS\System32\WgaLogon.dll

          ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSODL) (O21)
          O21 - SSODL: 0aMCPClient - {F5DF91F9-15E9-416B-A7C3-7519B11ECBFC} - CLSID or File not found.
          O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
          O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
          O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
          O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
          O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll

          ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
          O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll

          ---\\ Liste des services NT non Microsoft et non désactivés (O23)
          O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) . (.Pas de propriétaire - Pas de description.) - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
          O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe
          O23 - Service: Avira AntiVir Guard (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
          O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - Apple Mobile Device Service.) - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe
          O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
          O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) . (.Intel Corporation - Intel(R) PROSet/Wireless Event Log.) - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
          O23 - Service: (GEARSecurity) . (.GEAR Software - gearsec.) - C:\WINDOWS\System32\GEARSec.exe
          O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
          O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe
          O23 - Service: NVIDIA Display Driver Service (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 86.06.) - C:\WINDOWS\system32\nvsvc32.exe
          O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) . (.Intel Corporation - Intel(R) PROSet/Wireless Registry Service.) - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
          O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) . (.Intel Corporation - Wireless Management Service.) - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
          O23 - Service: VAIO Event Service (VAIO Event Service) . (.Sony Corporation - VAIO Event Service (Service Module).) - C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
          O23 - Service: VAIO Cooporated Initialisation (VCI) . (.Sony Corporation - VAIO Task Scheduler Service.) - C:\Program Files\Sony\VAIO Cooperated Initialisation\VCI_SVC.exe
          O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) . (.Sony Corporation - VAIO Entertainment Database Service.) - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
          O23 - Service: VAIO Entertainment File Import Service (VzFw) . (.Sony Corporation - VAIO Entertainment File Import Service.) - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
          1. ---\\ Tâches planifiées en automatique (O39)
            O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
            O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
            O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
            O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\User_Feed_Synchronization-{138DE675-5BA2-479F-80E0-0A8BD59232B4}.job
            O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\User_Feed_Synchronization-{1731C1AE-900E-4084-99E7-04D4EC9F499B}.job
            O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\{8C3FDD81-7AE0-4605-A46A-2488B179F2A3}.job

            ---\\ Composants installés (ActiveSetup Installed Components) (O40)
            O40 - ASIC: Personnalisation du navigateur - >{CB58DED6-4AF3-4080-9DF1-DEE72075169F} . (.Pas de propriétaire - Pas de description.) -- RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
            O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\regutils.dll
            O40 - ASIC: Media Center - {407408d4-94ed-4d86-ab69-a7f649d112ee} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\inf\mcdftreg.inf
            O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\msnetmtg.inf
            O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\msmsgs.inf
            O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\wmp11.inf
            O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 10.0 r42.) -- C:\WINDOWS\system32\Macromed\Flash\Flash10d.ocx

            ---\\ Pilotes lancés au démarrage (O41)
            O41 - Driver: avgio (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys
            O41 - Driver: avipbb (avipbb) . (.Avira GmbH - Avira Driver for RootKit Detection.) - C:\Windows\system32\DRIVERS\avipbb.sys
            O41 - Driver: Sony DMI Call service (DMICall) . (.Sony Corporation - Windows 2000 DMI Call Kernel Driver.) - C:\Windows\system32\DRIVERS\DMICall.sys
            O41 - Driver: SASDIFSV (SASDIFSV) . (.SUPERAdBlocker.com and SUPERAntiSpyware.com - SASDIFSV.SYS.) - C:\Program Files\SUPERAntiSpyware\SASDIFSV.sys
            O41 - Driver: SASKUTIL (SASKUTIL) . (.SUPERAdBlocker.com and SUPERAntiSpyware.com - SASKUTIL.SYS.) - C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys
            O41 - Driver: ssmdrv (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\Windows\system32\DRIVERS\ssmdrv.sys
            O41 - Driver: Bluetooth RFCOMM from TOSHIBA (Tosrfcom) . (.TOSHIBA Corporation - Bluetooth RFCOMM Driver.) - C:\Windows\system32\Drivers\tosrfcom.sys
            O41 - Driver: Symantec Eraser Control driver (eeCtrl) . (.Pas de propriétaire - Pas de description.) - C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\eeCtrl.sys

            ---\\ Logiciels installés (O42)
            O42 - Logiciel: Adobe Acrobat 7.0 Elements - Français - (.Adobe Systems.) [HKLM]
            O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM]
            O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM]
            O42 - Logiciel: Adobe Help Center 2.0 - (.Adobe Systems.) [HKLM]
            O42 - Logiciel: Adobe Photoshop Elements 4.0 - (.Adobe Systems, Inc..) [HKLM]
            O42 - Logiciel: Adobe Reader 7.1.0 - Français - (.Adobe Systems Incorporated.) [HKLM]
            O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM]
            O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM]
            O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM]
            O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM]
            O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM]
            O42 - Logiciel: Browser Address Error Redirector - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: CEP - Color Enable Package - (.Numenor, for ModTheSims2.) [HKLM]
            O42 - Logiciel: Calendrier Xtra v11.020 - (.XTRALOG.) [HKLM]
            O42 - Logiciel: Click to DVD 2.0.03 Menu Data - (.Sony Corporation.) [HKLM]
            O42 - Logiciel: Click to DVD 2.5.30 - (.Sony Corporation.) [HKLM]
            O42 - Logiciel: Convertor 1.0 - (.Grégory HARGOUS.) [HKLM]
            O42 - Logiciel: DVgate Plus - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: Disque de souvenirs HP - (.Hewlett-Packard Company.) [HKLM]
            O42 - Logiciel: DivX Codec - (.DivX, Inc..) [HKLM]
            O42 - Logiciel: DivX Converter - (.DivX, Inc..) [HKLM]
            O42 - Logiciel: DivX Player - (.DivX, Inc..) [HKLM]
            O42 - Logiciel: DivX Plus DirectShow Filters - (.DivX, Inc..) [HKLM]
            O42 - Logiciel: DivX Web Player - (.DivX,Inc..) [HKLM]
            O42 - Logiciel: EasyAgenda - (.Neogie Software.) [HKLM]
            O42 - Logiciel: EssentialPIM - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM]
            O42 - Logiciel: High Definition Audio Driver Package - KB835221 - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Hotfix for Windows Media Player 10 (KB903157) - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Image Converter 2 Plus - (.Sony Corporation.) [HKLM]
            O42 - Logiciel: Inscription en ligne VAIO (Français) - (.Sony Corporation.) [HKLM]
            O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: InterVideo WinDVD for VAIO - (.InterVideo Inc..) [HKLM]
            O42 - Logiciel: J2SE Runtime Environment 5.0 Update 6 - (.Sun Microsystems, Inc..) [HKLM]
            O42 - Logiciel: JA-Tennis 1.11.0.0 - (.EC+JCR.) [HKLM]
            O42 - Logiciel: Java(TM) 6 Update 15 - (.Sun Microsystems, Inc..) [HKLM]
            O42 - Logiciel: Java(TM) 6 Update 7 - (.Sun Microsystems, Inc..) [HKLM]
            O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: LAN Setting Utility - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: LAN-Express AS IEEE 802.11 Wireless LAN - (.LAN-Express.) [HKLM]
            O42 - Logiciel: Lecteur Windows Media 11 - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: Les Sims(TM) 2 Double Deluxe - (.Electronic Arts.) [HKLM]
            O42 - Logiciel: Logiciel Intel(R) PROSet/Wireless - (.Intel Corporation.) [HKLM]
            O42 - Logiciel: MSN - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM]
            O42 - Logiciel: MSXML 4.0 SP2 (KB927978) - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: MSXML 4.0 SP2 (KB936181) - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM]
            O42 - Logiciel: Memory Stick Formatter - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: Messenger Plus! 3 - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: Messenger Plus! Live - (.Yuna Software.) [HKLM]
            O42 - Logiciel: Microsoft .NET Framework 1.0 Hotfix (KB953295) - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Microsoft.) [HKLM]
            O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: Microsoft .NET Framework 1.1 French Language Pack - (.Microsoft.) [HKLM]
            O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB953297) - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Microsoft Carioca - (.Microsoft.) [HKLM]
            O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Microsoft Internationalized Domain Names Mitigation APIs - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Microsoft National Language Support Downlevel APIs - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Microsoft Office PowerPoint Viewer 2003 - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Microsoft Office Standard Edition 2003 - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Microsoft Office XP Standard - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Mozilla Firefox (3.0.10) - (.Mozilla.) [HKLM]
            O42 - Logiciel: My Club VAIO MCE (French) 1.0.1 - (.Club VAIO.) [HKLM]
            O42 - Logiciel: NVIDIA Drivers - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: Office 2003 Trial Assistant - (.Microsoft.) [HKLM]
            O42 - Logiciel: OpenMG AAC Add-on Module 1.0.00 - (.Sony Corporation.) [HKLM]
            O42 - Logiciel: OpenMG Limited Patch 4.5-06-05-12-01 - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: OpenMG Secure Module 4.5.01 - (.Sony Corporation.) [HKLM]
            O42 - Logiciel: OpenOffice.org 3.0 - (.OpenOffice.org.) [HKLM]
            O42 - Logiciel: Outil VAIO Media Registration 5.0 - (.Sony Corporation.) [HKLM]
            O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Photo et imagerie HP 2.0 - All-in-One - (.Hewlett-Packard Company.) [HKLM]
            O42 - Logiciel: Photo et imagerie HP 2.0 - All-in-One Pilote - (.Hewlett-Packard Company.) [HKLM]
            O42 - Logiciel: Photo et imagerie HP 2.0 - hp psc 1200 series - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: Picasa 2 - (.Google, Inc..) [HKLM]
            O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM]
            O42 - Logiciel: RealPlayer - (.RealNetworks.) [HKLM]
            O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM]
            O42 - Logiciel: Roxio DigitalMedia Audio - (.Roxio.) [HKLM]
            O42 - Logiciel: Roxio DigitalMedia Copy - (.Roxio.) [HKLM]
            O42 - Logiciel: Roxio DigitalMedia Data - (.Roxio.) [HKLM]
            O42 - Logiciel: Roxio Easy Media Creator 7 - (.Roxio, Inc..) [HKLM]
            O42 - Logiciel: SUPERAntiSpyware Free Edition - (.SUPERAntiSpyware.com.) [HKLM]
            O42 - Logiciel: Safari - (.Apple Inc..) [HKLM]
            O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM]
            O42 - Logiciel: Setting Utility Series - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: SimpleOCR 3.1 - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: Soft Data Fax Modem with SmartCP - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: SonicStage 4.0 - (.Sony Corporation.) [HKLM]
            O42 - Logiciel: Sony MP4 Shared Library - (.Sony Corporation.) [HKLM]
            O42 - Logiciel: Sony USB Mouse - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: Sony Utilities DLL - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: Sony Video Shared Library - (.Sony Corporation.) [HKLM]
            O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM]
            O42 - Logiciel: Text-To-Speech-Runtime - (.Magix Development GmbH.) [HKLM]
            O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: UsbFix - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: VAIO Control Center - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: VAIO Entertainment Platform - (.Sony Corporation.) [HKLM]
            O42 - Logiciel: VAIO Event Service - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: VAIO Hardware Diagnostics - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: VAIO Information FLOW - (.Sony Corporation.) [HKLM]
            O42 - Logiciel: VAIO Long Battery Life Wallpaper - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: VAIO Media 5.0 - (.Sony Corporation.) [HKLM]
            O42 - Logiciel: VAIO Media AC3 Decoder 1.0 - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: VAIO Media Integrated Server 5.0 - (.Sony Corporation.) [HKLM]
            O42 - Logiciel: VAIO Media Redistribution 5.0 - (.Sony Corporation.) [HKLM]
            O42 - Logiciel: VAIO Original Screen Saver - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: VAIO Original Screen Saver VAIO Cozy Screen SD Wide Contents - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: VAIO Power Management - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: VAIO Sea Wallpaper - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: VAIO Starfish Wallpaper - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: VAIO Update 2 - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: VC80CRTRedist - 8.0.50727.762 - (.DivX, Inc.) [HKLM]
            O42 - Logiciel: Veoh Web Player Beta - (.Veoh Networks, Inc..) [HKLM]
            O42 - Logiciel: VeohTV BETA - (.Veoh Networks, Inc..) [HKLM]
            O42 - Logiciel: VideoLAN VLC media player 0.8.6d - (.VideoLAN Team.) [HKLM]
            O42 - Logiciel: VirginMega.Fr Premium - (.VirginMega.Fr.) [HKLM]
            O42 - Logiciel: Winamp Toolbar for Firefox - (.AOL LLC.) [HKLM]
            O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474) - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130) - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Windows Imaging Component - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Windows Internet Explorer 7 - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Windows Live OneCare safety scanner - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM]
            O42 - Logiciel: Windows XP Media Center Edition 2005 KB925766 - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Windows XP Media Center Edition 2005 KB973768 - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM]
            O42 - Logiciel: Winkaa 1.0 1.0 - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: Wireless LAN Starter - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: Wireless Switch Setting Utility - (.Pas de propriétaire.) [HKLM]
            O42 - Logiciel: XnView 1.92.1 - (.Gougelet Pierre-e.) [HKLM]
            O42 - Logiciel: hp psc 1200 series - (.Hewlett-Packard Company.) [HKLM]
            O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM]
            O42 - Logiciel: mCore - (.Intel Corporation.) [HKLM]
            O42 - Logiciel: mDriver - (.Intel.) [HKLM]
            O42 - Logiciel: mMHouse - (.Intel Corporation.) [HKLM]
            O42 - Logiciel: mPfMgr - (.Intel Corporation.) [HKLM]
            O42 - Logiciel: mProSafe - (.Intel.) [HKLM]
            O42 - Logiciel: mWlsSafe - (.Intel.) [HKLM]
            O42 - Logiciel: mXML - (.Intel Corporation.) [HKLM]
            1. ---\\ HKCU & HKLM Software Keys
              [HKCU\Software\ALWIL Software]
              [HKCU\Software\AVG]
              [HKCU\Software\AVS4YOU]
              [HKCU\Software\Adobe]
              [HKCU\Software\Alps]
              [HKCU\Software\Apple Computer, Inc.]
              [HKCU\Software\Avira]
              [HKCU\Software\BAE]
              [HKCU\Software\Binary Noise]
              [HKCU\Software\Bugsplat]
              [HKCU\Software\CDDB]
              [HKCU\Software\Classes]
              [HKCU\Software\Clients]
              [HKCU\Software\Debugmode]
              [HKCU\Software\DivXNetworks]
              [HKCU\Software\EA GAMES]
              [HKCU\Software\Folder Manager]
              [HKCU\Software\Genesis Digital Innovations]
              [HKCU\Software\Google]
              [HKCU\Software\Hewlett-Packard]
              [HKCU\Software\Hofmann]
              [HKCU\Software\HookNetwork]
              [HKCU\Software\IGA]
              [HKCU\Software\IM Providers]
              [HKCU\Software\InnoShock]
              [HKCU\Software\Intel]
              [HKCU\Software\InterVideo]
              [HKCU\Software\JavaSoft]
              [HKCU\Software\Lake]
              [HKCU\Software\Leadertech]
              [HKCU\Software\Licenses]
              [HKCU\Software\Local AppWizard-Generated Applications]
              [HKCU\Software\M.Dev Software]
              [HKCU\Software\M5T8QL3YW3]
              [HKCU\Software\MP3 Remix]
              [HKCU\Software\Macromedia]
              [HKCU\Software\Magix Development]
              [HKCU\Software\Magix]
              [HKCU\Software\Malwarebytes' Anti-Malware]
              [HKCU\Software\Media Art]
              [HKCU\Software\Mozilla]
              [HKCU\Software\NVIDIA Corporation]
              [HKCU\Software\NVIDIA nvCpl Container]
              [HKCU\Software\Nadeo]
              [HKCU\Software\Neogie Software]
              [HKCU\Software\Netscape]
              [HKCU\Software\Northcode Inc]
              [HKCU\Software\ODBC]
              [HKCU\Software\Oak Technology]
              [HKCU\Software\OpenOffice.org]
              [HKCU\Software\Opendisc]
              [HKCU\Software\PC SOFT]
              [HKCU\Software\Patchou]
              [HKCU\Software\Pense-bete]
              [HKCU\Software\Piriform]
              [HKCU\Software\Policies]
              [HKCU\Software\QZAIB7KITK]
              [HKCU\Software\RealNetworks]
              [HKCU\Software\Realtek]
              [HKCU\Software\Roxio]
              [HKCU\Software\SADE]
              [HKCU\Software\SUPERAntiSpyware.com]
              [HKCU\Software\Safer Networking Limited]
              [HKCU\Software\Samsung]
              [HKCU\Software\SecuROM]
              [HKCU\Software\Skype]
              [HKCU\Software\Softonic]
              [HKCU\Software\Sonic]
              [HKCU\Software\Sony Corporation]
              [HKCU\Software\Stardock]
              [HKCU\Software\Symantec]
              [HKCU\Software\Trolltech]
              [HKCU\Software\VB and VBA Program Settings]
              [HKCU\Software\Veoh]
              [HKCU\Software\VirginMega]
              [HKCU\Software\WinRAR SFX]
              [HKCU\Software\Windows Live]
              [HKCU\Software\XML]
              [HKCU\Software\Xtralog]
              [HKCU\Software\YahooPartnerToolbar]
              [HKCU\Software\avsoft]
              [HKCU\Software\avsuite]
              [HKLM\Software\54c]
              [HKLM\Software\781]
              [HKLM\Software\ALWIL Software]
              [HKLM\Software\AVS4YOU]
              [HKLM\Software\Adobe]
              [HKLM\Software\Alps]
              [HKLM\Software\America Online]
              [HKLM\Software\Apple Computer, Inc.]
              [HKLM\Software\Apple Inc.]
              [HKLM\Software\Avira]
              [HKLM\Software\BrowserChoice]
              [HKLM\Software\C07ft5Y]
              [HKLM\Software\CDDB]
              [HKLM\Software\CXT]
              [HKLM\Software\Classes]
              [HKLM\Software\Clients]
              [HKLM\Software\DebugMode]
              [HKLM\Software\Debug]
              [HKLM\Software\DivXNetworks]
              [HKLM\Software\EA GAMES]
              [HKLM\Software\Electronic Arts]
              [HKLM\Software\FullCircle]
              [HKLM\Software\GEAR Software]
              [HKLM\Software\Gemplus]
              [HKLM\Software\Google]
              [HKLM\Software\Hewlett-Packard]
              [HKLM\Software\Hofmann]
              [HKLM\Software\InnoShock]
              [HKLM\Software\InstallShield]
              [HKLM\Software\Intel]
              [HKLM\Software\InterVideo]
              [HKLM\Software\JavaSoft]
              [HKLM\Software\JreMetrics]
              [HKLM\Software\LAN-Express]
              [HKLM\Software\Lake]
              [HKLM\Software\M.Dev Software]
              [HKLM\Software\MCCI]
              [HKLM\Software\MDC]
              [HKLM\Software\MP3 Remix]
              [HKLM\Software\Macromedia]
              [HKLM\Software\Magix Development]
              [HKLM\Software\Magix]
              [HKLM\Software\MozillaPlugins]
              [HKLM\Software\Mozilla]
              [HKLM\Software\NVIDIA Corporation]
              [HKLM\Software\Nullsoft]
              [HKLM\Software\ODBC]
              [HKLM\Software\Oak Technology]
              [HKLM\Software\OpenOffice.org]
              [HKLM\Software\Opendisc]
              [HKLM\Software\Orb Networks]
              [HKLM\Software\Patchou]
              [HKLM\Software\Policies]
              [HKLM\Software\Primax]
              [HKLM\Software\Program Groups]
              [HKLM\Software\RealNetworks]
              [HKLM\Software\Realtek Semiconductor Corp.]
              [HKLM\Software\Realtek]
              [HKLM\Software\RegisteredApplications]
              [HKLM\Software\Reminder]
              [HKLM\Software\RichFX]
              [HKLM\Software\Roxio]
              [HKLM\Software\SUPERAntiSpyware.com]
              [HKLM\Software\Safer Networking Limited]
              [HKLM\Software\Sagem]
              [HKLM\Software\Samsung Electronics Co., Ltd.]
              [HKLM\Software\Samsung]
              [HKLM\Software\Schlumberger]
              [HKLM\Software\Secure]
              [HKLM\Software\SkyMessager]
              [HKLM\Software\Sonic]
              [HKLM\Software\Sony Corporation]
              [HKLM\Software\Sony]
              [HKLM\Software\Stardock]
              [HKLM\Software\Sun Microsystems]
              [HKLM\Software\SymNRT]
              [HKLM\Software\Symantec]
              [HKLM\Software\TOSHIBA]
              [HKLM\Software\TrendMicro]
              [HKLM\Software\Vid_0471]
              [HKLM\Software\VideoLAN]
              [HKLM\Software\VirginMega]
              [HKLM\Software\WinKrnl]
              [HKLM\Software\Windows 3.1 Migration Status]
              [HKLM\Software\Windows]
              [HKLM\Software\X-AVCSD]
              [HKLM\Software\Xing Technology Corp.]
              [HKLM\Software\avsoft]
              [HKLM\Software\avsuite]
              [HKLM\Software\knight]
              [HKLM\Software\mozilla.org]
              [HKLM\Software\swearware]

              ---\\ Contenu des dossiers Fichiers Communs (O43)
              O43 - CFD:Common File Directory ----D- C:\Program Files\Adobe
              O43 - CFD:Common File Directory ----D- C:\Program Files\adslTV
              O43 - CFD:Common File Directory ----D- C:\Program Files\Alwil Software
              O43 - CFD:Common File Directory ----D- C:\Program Files\Apoint
              O43 - CFD:Common File Directory ----D- C:\Program Files\Apple Software Update
              O43 - CFD:Common File Directory ----D- C:\Program Files\Avira
              O43 - CFD:Common File Directory ----D- C:\Program Files\AVS4YOU
              O43 - CFD:Common File Directory ----D- C:\Program Files\Bonjour
              O43 - CFD:Common File Directory ----D- C:\Program Files\Calendrier
              O43 - CFD:Common File Directory ----D- C:\Program Files\ComPlus Applications
              O43 - CFD:Common File Directory ----D- C:\Program Files\CONEXANT
              O43 - CFD:Common File Directory ----D- C:\Program Files\Convertor
              O43 - CFD:Common File Directory ----D- C:\Program Files\DebugMode
              O43 - CFD:Common File Directory ----D- C:\Program Files\DivX
              O43 - CFD:Common File Directory ----D- C:\Program Files\EA GAMES
              O43 - CFD:Common File Directory ----D- C:\Program Files\EasyAgenda
              O43 - CFD:Common File Directory ----D- C:\Program Files\Emoticons-plus.com
              O43 - CFD:Common File Directory ----D- C:\Program Files\EssentialPIM
              O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers communs
              O43 - CFD:Common File Directory ----D- C:\Program Files\Firaxis Games
              O43 - CFD:Common File Directory ----D- C:\Program Files\Free Music Zilla
              O43 - CFD:Common File Directory ----D- C:\Program Files\GDS
              O43 - CFD:Common File Directory ----D- C:\Program Files\Google
              O43 - CFD:Common File Directory ----D- C:\Program Files\Google BAE
              O43 - CFD:Common File Directory ----D- C:\Program Files\Hewlett-Packard
              O43 - CFD:Common File Directory ----D- C:\Program Files\Hofmann
              O43 - CFD:Common File Directory --H-D- C:\Program Files\InstallShield Installation Information
              O43 - CFD:Common File Directory ----D- C:\Program Files\Intel
              O43 - CFD:Common File Directory ----D- C:\Program Files\Internet Explorer
              O43 - CFD:Common File Directory ----D- C:\Program Files\InterVideo
              O43 - CFD:Common File Directory ----D- C:\Program Files\iPod
              O43 - CFD:Common File Directory ----D- C:\Program Files\ISP
              O43 - CFD:Common File Directory ----D- C:\Program Files\iTunes
              O43 - CFD:Common File Directory ----D- C:\Program Files\JA-Tennis
              O43 - CFD:Common File Directory ----D- C:\Program Files\Java
              O43 - CFD:Common File Directory ----D- C:\Program Files\JRE
              O43 - CFD:Common File Directory ----D- C:\Program Files\LanExpress
              O43 - CFD:Common File Directory ----D- C:\Program Files\Lavasoft
              O43 - CFD:Common File Directory ----D- C:\Program Files\List_Kill'em
              O43 - CFD:Common File Directory ----D- C:\Program Files\LiveCAD
              O43 - CFD:Common File Directory ----D- C:\Program Files\Malwarebytes' Anti-Malware
              O43 - CFD:Common File Directory ----D- C:\Program Files\Messenger
              O43 - CFD:Common File Directory ----D- C:\Program Files\Messenger Plus! Live
              O43 - CFD:Common File Directory ----D- C:\Program Files\MessengerPlus! 3
              O43 - CFD:Common File Directory ----D- C:\Program Files\Micro Application
              O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft
              O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft CAPICOM 2.1.0.2
              O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Carioca
              O43 - CFD:Common File Directory ----D- C:\Program Files\microsoft frontpage
              O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Office
              O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Silverlight
              O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft SQL Server Compact Edition
              O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Works
              O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft.NET
              O43 - CFD:Common File Directory ----D- C:\Program Files\Movie Maker
              O43 - CFD:Common File Directory ----D- C:\Program Files\Mozilla Firefox
              O43 - CFD:Common File Directory ----D- C:\Program Files\MP3 Remix
              O43 - CFD:Common File Directory ----D- C:\Program Files\MSBuild
              O43 - CFD:Common File Directory ----D- C:\Program Files\MSECache
              O43 - CFD:Common File Directory ----D- C:\Program Files\MSN
              O43 - CFD:Common File Directory ----D- C:\Program Files\MSN Gaming Zone
              O43 - CFD:Common File Directory ----D- C:\Program Files\MSN Messenger
              O43 - CFD:Common File Directory ----D- C:\Program Files\MSXML 4.0
              O43 - CFD:Common File Directory ----D- C:\Program Files\NetMeeting
              O43 - CFD:Common File Directory ----D- C:\Program Files\Online Services
              O43 - CFD:Common File Directory ----D- C:\Program Files\OpenOffice.org 3
              O43 - CFD:Common File Directory ----D- C:\Program Files\Outlook Express
              O43 - CFD:Common File Directory ----D- C:\Program Files\Picasa2
              O43 - CFD:Common File Directory ----D- C:\Program Files\QuickTime
              O43 - CFD:Common File Directory ----D- C:\Program Files\Raccourcis de programmes
              O43 - CFD:Common File Directory ----D- C:\Program Files\Rainlendar
              O43 - CFD:Common File Directory ----D- C:\Program Files\Real
              O43 - CFD:Common File Directory ----D- C:\Program Files\Realtek
              O43 - CFD:Common File Directory ----D- C:\Program Files\Reference Assemblies
              O43 - CFD:Common File Directory ----D- C:\Program Files\Roxio
              O43 - CFD:Common File Directory ----D- C:\Program Files\Safari
              O43 - CFD:Common File Directory ----D- C:\Program Files\Samsung
              O43 - CFD:Common File Directory ----D- C:\Program Files\Securitoo
              O43 - CFD:Common File Directory ----D- C:\Program Files\Services en ligne
              O43 - CFD:Common File Directory ----D- C:\Program Files\SimpleOCR
              O43 - CFD:Common File Directory ----D- C:\Program Files\SM
              O43 - CFD:Common File Directory ----D- C:\Program Files\Sony
              O43 - CFD:Common File Directory ----D- C:\Program Files\Spybot - Search & Destroy
              O43 - CFD:Common File Directory ----D- C:\Program Files\Stardock
              O43 - CFD:Common File Directory ----D- C:\Program Files\StofWare
              O43 - CFD:Common File Directory ----D- C:\Program Files\SUPERAntiSpyware
              O43 - CFD:Common File Directory ----D- C:\Program Files\TF1Vision
              O43 - CFD:Common File Directory ----D- C:\Program Files\trend micro
              O43 - CFD:Common File Directory --H-D- C:\Program Files\Uninstall Information
              O43 - CFD:Common File Directory ----D- C:\Program Files\Veoh Networks
              O43 - CFD:Common File Directory ----D- C:\Program Files\VirginMega
              O43 - CFD:Common File Directory ----D- C:\Program Files\VLC
              O43 - CFD:Common File Directory ----D- C:\Program Files\WinAgenda
              O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live
              O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live Safety Center
              O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live SkyDrive
              O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live Toolbar
              O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Media Connect 2
              O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Media Player
              O43 - CFD:Common File Directory ----D- C:\Program Files\Windows NT
              O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Plus
              O43 - CFD:Common File Directory --H-D- C:\Program Files\WindowsUpdate
              O43 - CFD:Common File Directory ----D- C:\Program Files\xerox
              O43 - CFD:Common File Directory ----D- C:\Program Files\XnView
              O43 - CFD:Common File Directory ----D- C:\Program Files\ZHPDiag
              O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Adobe
              O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Apple
              O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\AVSMedia
              O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\DESIGNER
              O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\DivX Shared
              O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Hewlett-Packard
              O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\InstallShield
              O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\InterVideo
              O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Java
              O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\MAGIX Shared
              O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Microsoft Shared
              O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\MSSoap
              O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\ODBC
              O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Real
              O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Roxio Shared
              O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Services
              O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Sonic Shared
              O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Sony Shared
              O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\SpeechEngines
              O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\stardock
              O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\SWF Studio
              O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Symantec Shared
              O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\System
              O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Windows Live
              O43 - CFD:Common File Directory -SH-D- C:\Program Files\Fichiers Communs\WindowsLiveInstaller
              O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Wise Installation Wizard
              O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\xing shared
              1. ce pc est sous xp, mais sur ta configuration d'u poste initial, tu as indiqué vista !

                est ce que tu arrives à te connecter avec le pc infecté à internet ?
                1. tu vois, tu y arrives :-)

                  * Télécharger Rkill de Grinler sur le bureau,
                  fait double clic pour le lancer.
                  Une fenêtre (très rapide) indiquera que tout s'est bien déroulé.
                  Pour Vista, faire un clic droit sur le fichier rkill téléchargé puis choisir "Exécuter en tant qu'Administrateur" pour lancer l'outil.

                  tu commence par le premier Rkill EXE,si cela ne fonctionne tu passe au second Rkill COM ,ETC...

                  Rkill EXE: Rkill EXE:
                  https://download.bleepingcomputer.com/grinler/rkill.exe

                  Rkill COM: Rkill COM:
                  https://download.bleepingcomputer.com/grinler/rkill.com

                  Rkill SCR: Rkill RCS:
                  https://download.bleepingcomputer.com/grinler/rkill.scr

                  /!\ pas de rapport pour ce tool

                  ► Télécharges ComboFix à partir de ce lien et enregistres le sur ton bureau :

                  https://forum.pcastuces.com/combofix_renomme_au_telechargement-f31s22.htm
                  ou ici :
                  http://download.bleepingcomputer.com/sUBs/ComboFix.exe
                  A lire
                  https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

                  Avant d'utiliser ComboFix :
                  ► Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours.
                  ► Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.
                  Une fois fait, sur ton bureau double-clic sur Combofix.exe.

                  - Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.

                  /!\INSTALLES LA CONSOLE DE RECUPERATION

                  /!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes.

                  - En fin de scan il est possible que ComboFix ait besoin de redémarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.
                  - Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt)
                  ► Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.
                  ► Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.
                  1. Je n'arrive pas à ouvrir l'application ComboFix, un message de Security Warning s'affiche "Application cannot be executate."
                    1. J'ai tout enlevé et ça ne marche toujours pas.
                      Ce même message s'affiche à tout fichier que j'essaie d'ouvrir.
                      1. redemarre ton pc en mode sans echec avec la prise en charge de réseau, lance combofix et poste son rapport
                        1. ComboFix 10-05-07.07 - Sophie Chantrel 2010/05/08 17:03:19.1.2 - x86
                          Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.1014.532 [GMT 2:00]
                          Lancé depuis: G:\ComboFix.exe
                          AV: AntiVir Desktop *On-access scanning enabled* (Outdated) {AD166499-45F9-482A-A743-FDD3350758C7}

                          AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!
                          .

                          (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
                          .

                          c:\documents and settings\Sophie Chantrel\Local Settings\Application Data\bougnvkrg
                          c:\documents and settings\Sophie Chantrel\Local Settings\Application Data\bougnvkrg\ejoiematssd.exe
                          c:\documents and settings\Sophie Chantrel\Local Settings\Temporary Internet Files\Y6MM441b5.jpg
                          c:\documents and settings\Sophie Chantrel\Local Settings\Temporary Internet Files\yX514Y154.jpg
                          c:\program files\Internet Explorer\SET90E.tmp
                          c:\program files\Internet Explorer\SET90F.tmp
                          c:\program files\Internet Explorer\SET911.tmp
                          c:\program files\Internet Explorer\SET975.tmp
                          c:\program files\Internet Explorer\SET976.tmp
                          c:\program files\Internet Explorer\SET977.tmp
                          c:\windows\Mhizua.exe
                          c:\windows\system32\_000006_.tmp.dll
                          c:\windows\system32\_000007_.tmp.dll
                          c:\windows\system32\_000010_.tmp.dll
                          c:\windows\system32\_000011_.tmp.dll
                          c:\windows\system32\_000012_.tmp.dll
                          c:\windows\system32\dumphive.exe
                          c:\windows\system32\Ijl11.dll
                          c:\windows\system32\Process.exe
                          c:\windows\system32\SrchSTS.exe
                          c:\windows\system32\VCCLSID.exe
                          c:\windows\system32\WS2Fix.exe

                          Une copie infectée de c:\windows\system32\drivers\sfdrv01.sys a été trouvée et désinfectée
                          Copie restaurée à partir de - Kitty had a snack :p
                          .
                          original MBR restored successfully !
                          .
                          ((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
                          .

                          -------\Legacy_NPF
                          -------\Legacy_PERFORMANCE_MONITOR
                          -------\Legacy_SSHNAS
                          -------\Service_NPF

                          ((((((((((((((((((((((((((((( Fichiers créés du 2010-04-08 au 2010-05-08 ))))))))))))))))))))))))))))))))))))
                          .

                          2010-05-08 12:37 . 2010-05-08 12:48 -------- d-----w- c:\program files\ZHPDiag
                          2010-05-08 12:14 . 2010-05-08 12:14 -------- d-----w- c:\documents and settings\HelpAssistant\IETldCache
                          2010-05-08 12:14 . 2010-05-08 12:14 -------- d-----w- c:\documents and settings\HelpAssistant\IECompatCache
                          2010-05-08 12:09 . 2010-05-08 12:13 -------- d-----w- c:\documents and settings\HelpAssistant\Contacts
                          2010-05-08 11:47 . 2010-05-08 11:47 -------- d-sh--w- c:\documents and settings\LocalService\PrivacIE
                          2010-05-08 10:28 . 2010-05-08 10:28 -------- d-sh--w- c:\documents and settings\Administrateur\IECompatCache
                          2010-05-08 08:21 . 2010-05-08 08:21 -------- d-----w- c:\documents and settings\Administrateur\VAIO Information FLOW
                          2010-05-08 07:00 . 2010-05-08 15:23 823808 ----a-w- c:\windows\system32\drivers\ouloma.sys
                          2010-05-01 07:13 . 2010-05-01 07:13 -------- d-----w- c:\program files\StofWare
                          2010-04-23 20:13 . 2010-04-23 20:13 -------- d-----w- c:\program files\iPod
                          2010-04-23 20:12 . 2010-04-23 20:15 -------- d-----w- c:\program files\iTunes
                          2010-04-23 20:12 . 2010-04-23 20:15 -------- d-----w- c:\documents and settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
                          2010-04-23 20:05 . 2010-04-23 20:07 -------- d-----w- c:\program files\QuickTime
                          2010-04-16 20:34 . 2010-04-16 20:34 -------- d-----w- c:\program files\Bonjour
                          2010-04-16 12:01 . 2010-04-16 12:01 -------- d-----w- c:\program files\Securitoo
                          2010-04-10 20:37 . 2010-04-10 20:37 -------- d-----w- c:\documents and settings\Sophie Chantrel\Application Data\EssentialPIM
                          2010-04-10 20:37 . 2010-04-11 17:47 -------- d-----w- c:\program files\EssentialPIM

                          .
                          (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
                          .
                          2010-04-23 20:12 . 2008-11-23 00:11 -------- d-----w- c:\program files\Fichiers communs\Apple
                          2010-04-23 20:01 . 2010-04-23 20:01 73000 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 9.1.0.79\SetupAdmin.exe
                          2010-04-17 07:32 . 2007-02-10 13:26 -------- d-----w- c:\documents and settings\Sophie Chantrel\Application Data\Apple Computer
                          2010-04-16 12:11 . 2006-09-04 12:42 -------- d--h--w- c:\program files\InstallShield Installation Information
                          2010-03-29 09:11 . 2006-09-04 03:52 85842 ----a-w- c:\windows\system32\perfc00C.dat
                          2010-03-29 09:11 . 2006-09-04 03:52 513736 ----a-w- c:\windows\system32\perfh00C.dat
                          2010-03-10 06:16 . 2006-09-04 03:52 420352 ----a-w- c:\windows\system32\vbscript.dll
                          2010-02-25 06:17 . 2006-09-04 03:52 916480 ----a-w- c:\windows\system32\wininet.dll
                          2010-02-24 13:11 . 2006-09-04 03:52 455680 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
                          2010-02-16 19:06 . 2006-09-04 03:52 2148352 ----a-w- c:\windows\system32\ntoskrnl.exe
                          2010-02-16 19:06 . 2004-08-04 00:48 2026496 ----a-w- c:\windows\system32\ntkrnlpa.exe
                          2010-02-15 21:51 . 2010-02-15 21:51 52224 ----a-w- c:\documents and settings\Sophie Chantrel\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
                          2010-02-15 21:51 . 2010-02-15 21:51 117760 ----a-w- c:\documents and settings\Sophie Chantrel\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
                          2010-02-15 21:49 . 2010-02-15 21:49 5120 ----a-r- c:\documents and settings\Sophie Chantrel\Application Data\Microsoft\Installer\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}\IconCDDCBBF16.exe
                          2010-02-15 21:49 . 2010-02-15 21:49 65024 ----a-r- c:\documents and settings\Sophie Chantrel\Application Data\Microsoft\Installer\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}\IconCDDCBBF15.exe
                          2010-02-15 21:49 . 2010-02-15 21:49 18944 ----a-r- c:\documents and settings\Sophie Chantrel\Application Data\Microsoft\Installer\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}\IconCDDCBBF13.exe
                          2010-02-15 18:38 . 2010-02-15 18:38 152576 ----a-w- c:\documents and settings\Sophie Chantrel\Application Data\Sun\Java\jre1.6.0_17\lzma.dll
                          2010-02-15 18:38 . 2010-02-15 18:38 79488 ----a-w- c:\documents and settings\Sophie Chantrel\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll
                          2010-02-12 10:03 . 2010-02-28 09:47 293376 ------w- c:\windows\system32\browserchoice.exe
                          2010-02-12 09:46 . 2010-02-12 09:46 91424 ----a-w- c:\windows\system32\dnssd.dll
                          2010-02-12 09:46 . 2010-02-12 09:46 107808 ----a-w- c:\windows\system32\dns-sd.exe
                          2010-02-12 04:34 . 2006-09-04 03:51 100864 ----a-w- c:\windows\system32\6to4svc.dll
                          2010-02-11 12:02 . 2006-12-29 11:34 226880 ----a-w- c:\windows\system32\drivers\tcpip6.sys
                          2010-02-08 13:26 . 2010-02-08 13:26 184 ----a-w- c:\documents and settings\Sophie Chantrel\Application Data\Capturino\ijl17.dll
                          2009-05-01 21:02 . 2009-05-01 21:02 1044480 -c--a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
                          2009-05-01 21:02 . 2009-05-01 21:02 200704 -c--a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
                          .

                          ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
                          .
                          .
                          *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
                          REGEDIT4

                          [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                          "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]

                          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                          "VAIO Update 2"="c:\program files\Sony\VAIO Update 2\VAIOUpdt.exe" [2005-10-11 151552]
                          "Switcher.exe"="c:\program files\Sony\Wireless Switch Setting Utility\Switcher.exe" [2006-02-14 176128]
                          "SkyTel"="SkyTel.EXE" [2006-05-16 2879488]
                          "RoxioDragToDisc"="c:\program files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe" [2004-04-13 1470464]
                          "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-08-31 7561216]
                          "Mouse Suite 98 Daemon"="ICO.EXE" [2002-03-14 45056]
                          "ISBMgr.exe"="c:\program files\Sony\ISB Utility\ISBMgr.exe" [2004-02-20 32768]
                          "igfxtray"="c:\windows\system32\igfxtray.exe" [2006-04-05 94208]
                          "igfxpers"="c:\windows\system32\igfxpers.exe" [2006-04-05 118784]
                          "igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2006-04-05 77824]
                          "ehTray"="c:\windows\ehome\ehtray.exe" [2005-08-05 64512]
                          "AzMixerSel"="c:\program files\Realtek\InstallShield\AzMixerSel.exe" [2005-08-25 53248]
                          "avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
                          "Apoint"="c:\program files\Apoint\Apoint.exe" [2004-11-17 118784]
                          "Acrobat Assistant 7.0"="c:\program files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe" [2005-03-03 483328]
                          "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2010-03-17 421888]
                          "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-03-25 142120]

                          c:\documents and settings\All Users\Menu D'marrer\Programmes\D'marrage\
                          EasyAgenda.lnk - c:\program files\EasyAgenda\EasyAgenda.exe [2004-1-11 406965]
                          Lancement rapide d'Adobe Reader.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2008-4-23 29696]
                          Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]

                          [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
                          "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

                          [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon]
                          2006-06-20 14:11 73728 ----a-w- c:\windows\system32\VESWinlogon.dll

                          [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]
                          @="Service"

                          [HKLM\~\startupfolder\C:^Documents and Settings^Sophie Chantrel^Menu Démarrer^Programmes^Démarrage^OpenOffice.org 3.0.lnk]
                          path=c:\documents and settings\Sophie Chantrel\Menu Démarrer\Programmes\Démarrage\OpenOffice.org 3.0.lnk
                          backup=c:\windows\pss\OpenOffice.org 3.0.lnkStartup

                          [HKLM\~\startupfolder\C:^Documents and Settings^Sophie Chantrel^Menu Démarrer^Programmes^Démarrage^Pense-Bête 79g.lnk]
                          path=c:\documents and settings\Sophie Chantrel\Menu Démarrer\Programmes\Démarrage\Pense-Bête 79g.lnk
                          backup=c:\windows\pss\Pense-Bête 79g.lnkStartup

                          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
                          2009-01-26 14:31 2144088 --sha-r- c:\program files\Spybot - Search & Destroy\TeaTimer.exe

                          [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
                          "DisableMonitoring"=dword:00000001

                          [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
                          "DisableNotifications"= 1 (0x1)

                          [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
                          "%windir%\\system32\\sessmgr.exe"=
                          "c:\\Program Files\\Adobe\\Photoshop Elements 4.0\\AdobePhotoshopElementsMediaServer.exe"=
                          "c:\\Program Files\\Messenger\\msmsgs.exe"=
                          "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
                          "c:\\WINDOWS\\system32\\[Emoticons-plus.com] Winkaa 2.0.exe"=
                          "c:\\Program Files\\Veoh Networks\\Veoh\\VeohClient.exe"=
                          "c:\\Program Files\\Sony\\Click to DVD 2\\CtoDvd.exe"=
                          "c:\\Program Files\\Veoh Networks\\VeohWebPlayer\\veohwebplayer.exe"=
                          "c:\\Program Files\\Microsoft Office\\Office10\\WINWORD.EXE"=
                          "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
                          "c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
                          "c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
                          "c:\\Program Files\\iTunes\\iTunes.exe"=

                          [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
                          "65533:TCP"= 65533:TCP:Services
                          "52344:TCP"= 52344:TCP:Services
                          "3532:TCP"= 3532:TCP:Services
                          "5564:TCP"= 5564:TCP:Services

                          R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [2010/01/05 08:56 9968]
                          R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2010/01/05 08:56 74480]
                          R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [2010/01/03 19:26 108289]
                          R3 ti21sony;ti21sony;c:\windows\system32\drivers\ti21sony.sys [2006/09/04 05:53 226304]
                          S2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010/02/01 10:15 135664]
                          S3 camvid20;Philips ToUcam Camera; Video;c:\windows\system32\drivers\camdrv21.sys [2007/02/11 20:01 223232]
                          S3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [2010/01/05 08:56 7408]

                          --- Autres Services/Pilotes en mémoire ---

                          *Deregistered* - ouloma
                          .
                          Contenu du dossier 'Tâches planifiées'

                          2010-04-23 c:\windows\Tasks\AppleSoftwareUpdate.job
                          - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]

                          2010-05-08 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
                          - c:\program files\Google\Update\GoogleUpdate.exe [2010-02-01 08:15]

                          2010-05-08 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
                          - c:\program files\Google\Update\GoogleUpdate.exe [2010-02-01 08:15]

                          2010-05-08 c:\windows\Tasks\User_Feed_Synchronization-{138DE675-5BA2-479F-80E0-0A8BD59232B4}.job
                          - c:\windows\system32\msfeedssync.exe [2006-10-17 03:31]

                          2010-05-08 c:\windows\Tasks\User_Feed_Synchronization-{1731C1AE-900E-4084-99E7-04D4EC9F499B}.job
                          - c:\windows\system32\msfeedssync.exe [2006-10-17 03:31]
                          .
                          .
                          ------- Examen supplémentaire -------
                          .
                          uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
                          uStart Page = hxxp://www.netvibes.com/#General
                          uInternet Connection Wizard,ShellNext = iexplore
                          uInternet Settings,ProxyServer = http=127.0.0.1:5555
                          uInternet Settings,ProxyOverride = <local>
                          uSearchURL,(Default) = hxxp://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
                          IE: Ajouter un site de support RSS à VAIO Information FLOW - c:\program files\Sony\VAIO Information FLOW\aiesc.html
                          IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office10\EXCEL.EXE/3000
                          IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
                          IE: Transfert par Image Converter 2 Plus - c:\program files\Sony\Image Converter 2\menu.htm
                          Trusted Zone: sony-europe.com
                          Trusted Zone: sonystyle-europe.com
                          Trusted Zone: vaio-link.com
                          DPF: CabBuilder - hxxp://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
                          FF - ProfilePath - c:\documents and settings\Sophie Chantrel\Application Data\Mozilla\Firefox\Profiles\8qqazg3g.default\
                          FF - prefs.js: browser.search.defaulturl - hxxp://www.fastbrowsersearch.com/results/results.aspx?s=DEF&v=4&q=
                          FF - prefs.js: browser.search.selectedEngine - Fast Browser Search
                          FF - prefs.js: browser.startup.homepage - hxxp://facebook.fr/
                          FF - prefs.js: keyword.URL - hxxp://www.fastbrowsersearch.com/results/results.aspx?s=NAUS&v=4&tid={7624A58E-3EA9-2332-5794-89E33BC2BFD3}&q=
                          FF - component: c:\documents and settings\Sophie Chantrel\Application Data\Mozilla\Firefox\Profiles\8qqazg3g.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\components\WinampPlayer.dll
                          FF - component: c:\program files\real\realplayer\browserrecord\firefox\ext\components\nprpffbrowserrecordext.dll
                          FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
                          FF - plugin: c:\program files\Veoh Networks\Veoh\Plugins\noreg\NPVeohVersion.dll
                          FF - plugin: c:\program files\Veoh Networks\VeohWebPlayer\NPVeohTVPlugin.dll
                          FF - plugin: c:\program files\Veoh Networks\VeohWebPlayer\npWebPlayerVideoPluginATL.dll
                          FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
                          FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
                          .
                          .
                          ------- Associations de fichier -------
                          .
                          .reg=Regedit.Document
                          .
                          - - - - ORPHELINS SUPPRIMES - - - -

                          WebBrowser-{EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
                          HKCU-Run-fqeecvpe - c:\documents and settings\Sophie Chantrel\Local Settings\Application Data\bougnvkrg\ejoiematssd.exe
                          HKLM-Run-WinampAgent - c:\program files\Winamp\winampa.exe
                          HKLM-Run-fqeecvpe - c:\documents and settings\Sophie Chantrel\Local Settings\Application Data\bougnvkrg\ejoiematssd.exe
                          HKU-Default-Run-swg - c:\program files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
                          AddRemove-HijackThis - c:\documents and settings\Sophie Chantrel\Local Settings\Temporary Internet Files\Content.IE5\XSS3PRHX\HijackThis.exe
                          AddRemove-UsbFix - c:\program files\UsbFix\Uninstal.exe
                          AddRemove-Winamp Toolbar for Firefox - c:\documents and settings\Sophie Chantrel\Application Data\Mozilla\Firefox\Profiles\8qqazg3g.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\uninstall.exe

                          **************************************************************************

                          catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                          Rootkit scan 2010-05-08 17:21
                          Windows 5.1.2600 Service Pack 3 NTFS

                          Recherche de processus cachés ...

                          Recherche d'éléments en démarrage automatique cachés ...

                          Recherche de fichiers cachés ...

                          Scan terminé avec succès
                          Fichiers cachés: 0

                          **************************************************************************

                          [HKEY_LOCAL_MACHINE\System\ControlSet002\Services\ouloma]

                          .
                          --------------------- CLES DE REGISTRE BLOQUEES ---------------------

                          [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø*€|ÿÿÿÿ*€|ù*9~*]
                          "C040211900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
                          .
                          --------------------- DLLs chargées dans les processus actifs ---------------------

                          - - - - - - - > 'winlogon.exe'(1000)
                          c:\windows\system32\VESWinlogon.dll

                          - - - - - - - > 'explorer.exe'(1904)
                          c:\windows\system32\eappprxy.dll
                          c:\windows\system32\webcheck.dll
                          c:\windows\system32\WPDShServiceObj.dll
                          c:\program files\Roxio\Easy Media Creator 7\Drag to Disc\Shellex.dll
                          c:\program files\Roxio\Easy Media Creator 7\Drag to Disc\Shellex.LOC
                          c:\windows\system32\PortableDeviceTypes.dll
                          c:\windows\system32\PortableDeviceApi.dll
                          .
                          ------------------------ Autres processus actifs ------------------------
                          .
                          c:\program files\Intel\Wireless\Bin\EvtEng.exe
                          c:\program files\Intel\Wireless\Bin\S24EvMon.exe
                          c:\program files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
                          c:\program files\Avira\AntiVir Desktop\avguard.exe
                          c:\program files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe
                          c:\program files\Bonjour\mDNSResponder.exe
                          c:\windows\eHome\ehRecvr.exe
                          c:\windows\eHome\ehSched.exe
                          c:\windows\System32\GEARSec.exe
                          c:\program files\Java\jre6\bin\jqs.exe
                          c:\program files\Intel\Wireless\Bin\RegSrvc.exe
                          c:\program files\Sony\VAIO Event Service\VESMgr.exe
                          c:\windows\system32\igfxext.exe
                          c:\program files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
                          c:\windows\system32\igfxsrvc.exe
                          c:\windows\ehome\mcrdsvc.exe
                          c:\program files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
                          c:\program files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
                          c:\windows\system32\dllhost.exe
                          c:\windows\system32\wbem\wmiapsrv.exe
                          c:\windows\system32\ICO.EXE
                          c:\windows\eHome\ehmsas.exe
                          c:\program files\Apoint\Apntex.exe
                          c:\program files\iPod\bin\iPodService.exe
                          c:\program files\Windows Live\Contacts\wlcomm.exe
                          .
                          **************************************************************************
                          .
                          Heure de fin: 2010-05-08 17:33:02 - La machine a redémarré
                          ComboFix-quarantined-files.txt 2010-05-08 15:32

                          Avant-CF: 823,939,072 octets libres
                          Après-CF: 1,809,465,344 octets libres

                          - - End Of File - - F02D1AEAD6357E3005A3F0872322E3E8
                          1. redemarre ton pc en mode normal,

                            repasse un autre zhp, hébérge le sur cijoint et copie le lien sur ton prochain message