Infection Desktop security 2010

bonjour,

voici le rapport :


Rapport de ZHPDiag v1.26.611 par Nicolas Coolman, Update du 10/09/2010
Run by KCHARETT at 11/09/2010 11:38:19
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Contact : nicolascoolman@yahoo.fr

---\\ Web Browser
MSIE: Internet Explorer v6.0.2900.5512

---\\ System Information
Platform : Microsoft Windows XP (5.1.2600) Service Pack 3
Processor: x86 Family 6 Model 23 Stepping 6, GenuineIntel
Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 1992 MB (46% free)
System drive C: has 117 GB (78%) free of 149 GB

---\\ Logged in mode
Computer Name: WJNJFRL3ABW1L
User Name: KCHARETT
All Users Names: SUPPORT_388945a0, jjitsadmin5, itsdeploy6, Hhanson99, HelpAssistant,
Unselected Option: O1,O45,O61,O65,O82
Logged in as Administrator

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 117 Go of 149 Go)


---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK


---\\ Processus lancés
[MD5.BAF38FD0CD7A3F0DED23EACA3EEC4751] - (.Lenovo - ThinkPad Power Management Service.) -- C:\WINDOWS\system32\ibmpmsvc.exe [36640]
[MD5.7D2758E553292C258F0B2485C94187FF] - (.Microsoft Corporation - Service Executable.) -- C:\Program Files\Microsoft Forefront\Client Security\Client\Antimalware\MsMpEng.exe [16880]
[MD5.D7F1F8D85F31CBB74442EC30177885CC] - (.Intel(R) Corporation - Intel(R) Wireless Management Service.) -- C:\Program Files\Intel\WiFi\bin\S24EvMon.exe [901120]
[MD5.9E667858C341104692B52CB5951E05C6] - (.Symantec Corporation - Symantec Network Access Control.) -- C:\Program Files\Symantec\SPA\snac.exe [226640]
[MD5.5294A850CC2CA452D3EB56D6D0E2C425] - (.Symantec Corporation - Symantec Agent Firewall.) -- C:\Program Files\Symantec\SPA\smc.exe [1968976]
[MD5.86D007E7A654B9A71D1D7D856B104353] - (.Microsoft Corporation - Smart Card Resource Management Server.) -- C:\WINDOWS\System32\SCardSvr.exe [95744]
[MD5.8122B40C05689A03A1F0F326FC591785] - (.Lenovo - Access Connections Profile Manager Service.) -- C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe [90112]
[MD5.21FA3E51618FF8E2F4B29964ABC5884F] - (.Threat Expert Ltd. - Browser Defender Update Service.) -- C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe [112592]
[MD5.07890A5176317A785D410D0C3F85E727] - (.SafeNet, Inc. - SafeNet's Logging Service for NT.) -- C:\WINDOWS\system32\dklog.exe [106496]
[MD5.E7F81BD77E9C32FE06F8EC41C8455CB0] - (.SafeNet, Inc. - SafeNet's Virtual Channel Monitor.) -- C:\WINDOWS\system32\dkvcm.exe [122880]
[MD5.2D41D7250F73272946DE04FF7A19761E] - (.Intel(R) Corporation - Intel(R) PROSet/Wireless Event Log Service.) -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe [819200]
[MD5.D33C07955AA3972853117151A4A861FB] - (.Microsoft Corporation - Microsoft Forefront Client Security State A.) -- c:\Program Files\Microsoft Forefront\Client Security\Client\SSA\FcsSas.exe [69512]
[MD5.4844837FA0F980B9A988AAFD63E00C57] - (.iPass, Inc. - iPass Periodic Update Service.) -- C:\Program Files\iPass\iPassConnect\iPassPeriodicUpdateService.exe [98304]
[MD5.4BF412069075CFD5C42F15FDF10B81C3] - (.Juniper Networks - Juniper Access Service.) -- C:\Program Files\Common Files\Juniper Networks\JUNS\dsAccessService.exe [87416]
[MD5.6185EDA97BC01EB913ED6FBB1E4748AF] - (.Pas de propriétaire - Printer Communication System.) -- C:\WINDOWS\system32\lxbkcoms.exe [537256]
[MD5.7CF1B716372B89568AE4C0FE769F5869] - (.Microsoft Corporation - Machine Debug Manager.) -- C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872]
[MD5.5D167B4D0F3F329893C9391F9464685F] - (.Microsoft Corporation - MOMService Module.) -- C:\Program Files\Microsoft Forefront\Client Security\Client\Microsoft Operations Manager 2005\MOMService.exe [139656]
[MD5.ED8C9F16E10C1E4C4C5D16CD04966E24] - (.Intel(R) Corporation - Intel(R) PROSet/Wireless Registry Service.) -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [466944]
[MD5.A1089AC7683826E6C7C9FAB9723DD80F] - (.PC Tools - PC Tools Auxiliary Service.) -- C:\Program Files\Spyware Doctor\pctsAuxs.exe [366840]
[MD5.06F95756353653C7D505361117186713] - (.PC Tools - PC Tools Security Service.) -- C:\Program Files\Spyware Doctor\pctsSvc.exe [1142224]
[MD5.1D45F329E13DD26E9FADDD3A2F02077B] - (.SafeNet, Inc. - SafeNet's Token Service.) -- C:\WINDOWS\system32\dkcktkn.exe [749568]
[MD5.2CAE2205B8265EA3E06ED80D4A6E8649] - (.Pas de propriétaire - PWMDBSVC Module.) -- C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE [94208]
[MD5.9C21C108C1719BE3CFA231AACA420273] - (.Lenovo - Access Connections Main Service.) -- C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe [212992]
[MD5.92E1C6AA2BAA06E255A52B64DD057B31] - (.Microsoft Corporation - CCM Executive.) -- C:\WINDOWS\system32\CCM\CcmExec.exe [757792]
[MD5.798A9E6828997EEF4517ADA8A2259831] - (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\wmiprvse.exe [227840]
[MD5.5C24BE9AC13682F3EAA6A72871A14F64] - (.Lenovo - Access Connections SvcGuiHlpr Application.) -- C:\Program Files\ThinkPad\ConnectUtilities\SvcGuiHlpr.exe [131072]
[MD5.234F3B0576D2A4354250203C0376795D] - (.Microsoft Corporation - MOMHost Module.) -- C:\Program Files\Microsoft Forefront\Client Security\Client\Microsoft Operations Manager 2005\MOMHost.exe [54272]
[MD5.8FF70A4D0F107EF66B995E1A15006607] - (.iPass, Inc. - Periodic Update Console.) -- C:\Program Files\iPass\iPassConnect\iPassPeriodicUpdateApp.exe [155648]
[MD5.3DAC0B24C22A58E1C144FECE2C5C0760] - (.PC Tools - PC Tools Tray Application.) -- C:\Program Files\Spyware Doctor\pctsTray.exe [1287120]
[MD5.33A792E3F8CEC34BCD21DE2978F49CF0] - (.Symantec Corporation - SmcRC.) -- C:\Program Files\Symantec\SPA\SmcGui.exe [1554768]
[MD5.27A58543A21B66C89C45B3B4684D52E4] - (.Lenovo Group Limited - PS/2 TrackPoint Daemon.) -- C:\Program Files\Lenovo\TrackPoint\tp4serv.exe [92960]
[MD5.E1E58E92C09EDA83E2A10ABAF086407D] - (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe [150040]
[MD5.26122B1AEE881B8D4608F52AF6CABF80] - (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe [170520]
[MD5.DBBD743646D83933C266A37FBCCE7A62] - (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe [141848]
[MD5.38E70C93279A08A33FF2DD7F6083A0C9] - (.SafeNet, Inc. - SafeNet's Auto Register Cert Application.) -- C:\Program Files\SafeNet\BSecClient\DkAutoReg.exe [253952]
[MD5.7ABA025292B3F201C75976CBBD2B3232] - (.Intel Corporation - igfxsrvc Module.) -- C:\WINDOWS\system32\igfxsrvc.exe [256536]
[MD5.D6F3E561F40056C4516CF5624FC0182C] - (.Lenovo - Access Connections Tray Application.) -- C:\Program Files\ThinkPad\ConnectUtilities\ACTray.exe [425984]
[MD5.25C0ACC7E241B6E9687F1F9F933BA7C6] - (.Lenovo Group Limited - On screen display message generator for Thi.) -- C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe [68464]
[MD5.75B5BACD8A18A4B49D57D2740C7C8371] - (.Lenovo Group Ltd. - ThinkPad EasyEject Support Application.) -- C:\PROGRA~1\ThinkPad\UTILIT~1\EZEJMNAP.EXE [242976]
[MD5.30EF15AFE2D5DF5ED18BB54995440572] - (.Lenovo Group Limited - On screen display drawer.) -- C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe [67432]
[MD5.D30C5E95EC578F1B18C22EBBA6701D11] - (.Lenovo Group Limited - ThinkPad UltraZoom.) -- C:\Program Files\Lenovo\Zoom\TpScrex.exe [128368]
[MD5.AA320CFB39463ED0A1A9AB6A109BE2D1] - (.Lenovo Group Ltd. - ThinkPad EasyEject Tray Utility.) -- C:\PROGRA~1\ThinkPad\UTILIT~1\EZEJTRAY.EXE [218400]
[MD5.9ACACC2C53D471425F10DC572605FE1A] - (.Microsoft Corporation - Microsoft Forefront Client Security User In.) -- C:\Program Files\Microsoft Forefront\Client Security\Client\Antimalware\MSASCui.exe [1033584]
[MD5.4C4CF9220E628D1378F9807EC5175488] - (.Microsoft Corporation - ActiveSync Connection Manager.) -- C:\Program Files\Microsoft ActiveSync\wcescomm.exe [1289000]
[MD5.DCFC84480C76D862D9BFD386EA6E8DE7] - (.Microsoft Corporation - ActiveSync RAPI Manager.) -- C:\PROGRA~1\MI3AA1~1\rapimgr.exe [199464]
[MD5.A7340FB7ABE245F0AFAD94943D7BE248] - (.EMC - eRoom File Watcher.) -- C:\Program Files\eRoom 7\ERClient7.exe [153352]
[MD5.0FD80CC370CCD039113F8E36EFD2F4E0] - (.Lenovo - Access Connections Main GUI.) -- C:\Program Files\ThinkPad\ConnectUtilities\ACMainGUI.exe [1724416]
[MD5.1E9CFFAAE81930845D2564D2CE33CB60] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [975928]
[MD5.652917E46875E3AF8189AFA3FAAA98AC] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [549376]


---\\ Plugins de navigateurs Opera/Firefox(P1/P2)
P2 - FPN:Firefox Plugin Navigator . (.Citrix Systems, Inc. - Program Neighborhood CGPCFG dll.) -- C:\Program Files\Mozilla Firefox\Plugins\cgpcfg.dll
P2 - FPN:Firefox Plugin Navigator . (.Citrix Systems, Inc. - CGP Core.) -- C:\Program Files\Mozilla Firefox\Plugins\CgpCore.dll
P2 - FPN:Firefox Plugin Navigator . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Mozilla Firefox\Plugins\confmgr.dll
P2 - FPN:Firefox Plugin Navigator . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Mozilla Firefox\Plugins\ctxlogging.dll
P2 - FPN:Firefox Plugin Navigator . (.Citrix Systems, Inc. - Citrix ICA Client MUI DLL (Win32).) -- C:\Program Files\Mozilla Firefox\Plugins\ctxmui.dll
P2 - FPN:Firefox Plugin Navigator . (.Citrix Systems, Inc. - Citrix Configuration Manager.) -- C:\Program Files\Mozilla Firefox\Plugins\icafile.dll
P2 - FPN:Firefox Plugin Navigator . (.Citrix Systems, Inc. - Citrix ICA Client Logon (Win32).) -- C:\Program Files\Mozilla Firefox\Plugins\icalogon.dll
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - Microsoft® C Runtime Library.) -- C:\Program Files\Mozilla Firefox\Plugins\msvcm80.dll
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - Microsoft® C++ Runtime Library.) -- C:\Program Files\Mozilla Firefox\Plugins\msvcp80.dll
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - Microsoft® C Runtime Library.) -- C:\Program Files\Mozilla Firefox\Plugins\msvcr80.dll
P2 - FPN:Firefox Plugin Navigator . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Mozilla Firefox\Plugins\npicaN.dll
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape.) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin2.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin3.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin4.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin5.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin6.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin7.dll
P2 - FPN:Firefox Plugin Navigator . (.Citrix Systems, Inc. - Citrix SSL SDK (OpenSSL).) -- C:\Program Files\Mozilla Firefox\Plugins\sslsdk_b.dll
P2 - FPN:Firefox Plugin Navigator . (.Citrix Systems, Inc. - TCP Proxy Service.) -- C:\Program Files\Mozilla Firefox\Plugins\TcpPServ.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.5.) -- C:\WINDOWS\system32\Adobe\Director\np32dsw.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 3.0.50611.0.) -- c:\Program Files\Microsoft Silverlight\3.0.50611.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=8] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.2.183.23\npGoogleOneClick8.dll


---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"


---\\ Pages de démarrage d'Internet Explorer (R0)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://dinootoo.jnjfr.jnj.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://troner.net/


---\\ Pages de recherche d'Internet Explorer (R1)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <local>


---\\ Internet Explorer URLSearchHook (R3)
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Shell Doc Object and Control Library.) (No version) -- %SystemRoot%\system32\shdocvw.dll


---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet E.) -- C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Browser Defender BHO - {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} . (.Threat Expert Ltd. - Browser Defender Toolbar.) -- C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet E.) -- C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll


---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: PC Tools Browser Guard - {472734EA-242A-422B-ADF8-83D1E48CC825} . (.Threat Expert Ltd. - Browser Defender Toolbar.) -- C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll


---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [TrackPointSrv] . (.Lenovo Group Limited - PS/2 TrackPoint Daemon.) -- C:\Program Files\Lenovo\TrackPoint\tp4serv.exe
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [DkStartup] . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\SafeNet\BSecClient\dkstartup.exe
O4 - HKLM\..\Run: [DkAutoReg] . (.SafeNet, Inc. - SafeNet's Auto Register Cert Application.) -- C:\Program Files\SafeNet\BSecClient\DkAutoReg.exe
O4 - HKLM\..\Run: [RunInstall] Clé orpheline
O4 - HKLM\..\Run: [PWRMGRTR] rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.dll (.not file.)
O4 - HKLM\..\Run: [BLOG] rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\BatLogEx.dll (.not file.)
O4 - HKLM\..\Run: [ACTray] . (.Lenovo - Access Connections Tray Application.) -- C:\Program Files\ThinkPad\ConnectUtilities\ACTray.exe
O4 - HKLM\..\Run: [TPHOTKEY] . (.Lenovo Group Limited - On screen display message generator for Thi.) -- C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
O4 - HKLM\..\Run: [EZEJMNAP] . (.Lenovo Group Ltd. - ThinkPad EasyEject Support Application.) -- C:\PROGRA~1\ThinkPad\UTILIT~1\EZEJMNAP.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
O4 - HKLM\..\Run: [EZEJTRAY] . (.Lenovo Group Ltd. - ThinkPad EasyEject Tray Utility.) -- C:\PROGRA~1\ThinkPad\UTILIT~1\EZEJTRAY.exe
O4 - HKLM\..\Run: [PhiBtn] . (.Philips - Snapshot and Launch button application.) -- C:\WINDOWS\System32\drivers\PhiBtn.exe
O4 - HKLM\..\Run: [Traymin900] . (.Philips - System Tray Application.) -- C:\WINDOWS\System32\drivers\Tray900.exe
O4 - HKLM\..\Run: [SLUpd] . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\JNJ\Microsoft Silverlight v3.0\update.vbs
O4 - HKLM\..\Run: [JNJ_MOTL] . (.Johnson & Johnson - Manage Office Trusted Locations.) -- C:\Program Files\JNJ\Office\Manage Trusted Locations\MOTL.exe
O4 - HKLM\..\Run: [Microsoft Forefront Client Security Antimalware Service] . (.Microsoft Corporation - Microsoft Forefront Client Security User In.) -- C:\Program Files\Microsoft Forefront\Client Security\Client\Antimalware\MSASCui.exe
O4 - HKLM\..\Run: [bbaka12] C:\Documents and Settings\kcharett\Application Data\MSA\bbaka12.exe (.not file.)
O4 - HKLM\..\Run: [MSConfig] . (.Microsoft Corporation - System Configuration Utility.) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe
O4 - HKLM\..\Run: [ISTray] . (.PC Tools - PC Tools Tray Application.) -- C:\Program Files\Spyware Doctor\pctsTray.exe
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
O4 - HKLM\..\RunServices: [MicrosoftVisual] c:\program files\microsoft visual studio 8\vc\vcpackages\visualvisual.exe (.not file.)
O4 - HKLM\..\RunServices: [QuickTimePictureViewer7.6.21324] c:\program files\quicktime\pictureviewer.resources\en.lproj\quicktimequicktime.exe (.not file.)
O4 - HKLM\..\RunServices: [QuickTimeQuickTime] c:\program files\quicktime\qtsystem\quicktime.resources\pt_pt.lproj\quicktimequicktime.exe (.not file.)
O4 - HKLM\..\RunServices: [QuickTimeResourcesQuickTime] c:\program files\quicktime\qtsystem\quicktimeeffects.resources\ko.lproj\quicktimequicktimeresources.exe (.not file.)
O4 - HKLM\..\RunServices: [MeetingMeeting207.] C:\program files\microsoft office\live meeting interop\addins\ko\meetingpack.exe (.not file.)
O4 - HKLM\..\RunServices: [browsercompsbrowsercomps] C:\program files\mozilla firefox\components\browsercompsfirefox.exe (.not file.)
O4 - HKCU\..\Run: [H/PC Connection Agent] . (.Microsoft Corporation - ActiveSync Connection Manager.) -- C:\Program Files\Microsoft ActiveSync\wcescomm.exe
O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] . (.Microsoft Corporation - Watson Subscriber for SENS Network Notifica.) -- C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe
O4 - HKUS\S-1-5-18\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] . (.Microsoft Corporation - Watson Subscriber for SENS Network Notifica.) -- C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe
O4 - HKUS\S-1-5-21-2335664087-1377083882-2996952026-487523\..\Run: [H/PC Connection Agent] . (.Microsoft Corporation - ActiveSync Connection Manager.) -- C:\Program Files\Microsoft ActiveSync\wcescomm.exe
O4 - HKUS\S-1-5-21-2335664087-1377083882-2996952026-487523\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\RunOnce: [SSAWrapper] . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\TEMP\sg_rd.bat
O4 - HKUS\S-1-5-18\..\RunOnce: [SSAWrapper] . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\TEMP\sg_rd.bat


---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: E&xport to Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~3\Office12\EXCEL.exe


---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} . (.not file.) - (.not file.)
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.not file.) - (.not file.)
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} . (.Microsoft Corporation - ActiveSync Favorite Synchronization.) -- C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} . (.not file.) - (.not file.)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (.Pas de propriétaire - Pas de description.) -- C:\PROGRA~1\MICROS~3\Office12\REFBARH.ICO
O9 - Extra button: Sélection intelligente HP - {DDE87865-83C5-48c4-8357-2F5B1AA84522} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet Explorer.) -- C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (.not file.) - (.not file.)
O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe


---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Microsoft Windows Sockets 2.0 Service Provider.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Microsoft Windows Sockets 2.0 Service Provider.) -- C:\WINDOWS\system32\mswsock.dll


---\\ Site dans la Zone de confiance d'Internet Explorer (O15)
O15 - Trusted Zone: [HKCU\...\Domains] *.accessecr.com
O15 - Trusted Zone: [HKCU\...\Domains\www] http.accessecr.com
O15 - Trusted Zone: [HKCU\...\Domains] *.books24x7.com
O15 - Trusted Zone: [HKCU\...\Domains\www] *.books24x7.com
O15 - Trusted Zone: [HKCU\...\Domains\www] http.cardmate-web.com
O15 - Trusted Zone: [HKCU\...\Domains] http.cerebus
O15 - Trusted Zone: [HKCU\...\Domains\www] http.cerebus
O15 - Trusted Zone: [HKCU\...\Domains\www] *.cleanandclear.com.vn
O15 - Trusted Zone: [HKCU\...\Domains] http.compliancewire.com
O15 - Trusted Zone: [HKCU\...\Domains\www] http.compliancewire.com
O15 - Trusted Zone: [HKCU\...\Domains\www] *.cssdirect.com
O15 - Trusted Zone: [HKCU\...\Domains\www] *.cssdirect.net
O15 - Trusted Zone: [HKCU\...\Domains] *.equipnet.com
O15 - Trusted Zone: [HKCU\...\Domains\www] *.equipnet.com
O15 - Trusted Zone: [HKCU\...\Domains] *.gotrain.com
O15 - Trusted Zone: [HKCU\...\Domains\www] *.gotrain.com
O15 - Trusted Zone: [HKCU\...\Domains\www] http.gp-sol.com
O15 - Trusted Zone: [HKCU\...\Domains] *.healthmedia.com
O15 - Trusted Zone: [HKCU\...\Domains\www] *.healthmedia.com
O15 - Trusted Zone: [HKCU\...\Domains] http.hewitt.com
O15 - Trusted Zone: [HKCU\...\Domains\www] http.hewitt.com
O15 - Trusted Zone: [HKCU\...\Domains\www] http.icpvision.com
O15 - Trusted Zone: [HKCU\...\Domains] *.infores.com
O15 - Trusted Zone: [HKCU\...\Domains\www] *.infores.com
O15 - Trusted Zone: [HKCU\...\Domains] *.iriworldwide.com
O15 - Trusted Zone: [HKCU\...\Domains\www] *.iriworldwide.com
O15 - Trusted Zone: [HKCU\...\Domains] http.isb
O15 - Trusted Zone: [HKCU\...\Domains\www] http.isb
O15 - Trusted Zone: [HKCU\...\Domains] *.itrinno.com
O15 - Trusted Zone: [HKCU\...\Domains\www] *.itrinno.com
O15 - Trusted Zone: [HKCU\...\Domains] http.jnj.com
O15 - Trusted Zone: [HKCU\...\Domains\www] http.jnj.com
O15 - Trusted Zone: [HKCU\...\Domains] http.kaplanwire.com
O15 - Trusted Zone: [HKCU\...\Domains\www] http.kaplanwire.com
O15 - Trusted Zone: [HKCU\...\Domains] *.kellyeorder.com
O15 - Trusted Zone: [HKCU\...\Domains\www] *.kellyeorder.com
O15 - Trusted Zone: [HKCU\...\Domains] *.lenovo.com
O15 - Trusted Zone: [HKCU\...\Domains\www] *.lenovo.com
O15 - Trusted Zone: [HKCU\...\Domains] *.Livemeeting.com
O15 - Trusted Zone: [HKCU\...\Domains\www] *.Livemeeting.com
O15 - Trusted Zone: [HKCU\...\Domains] *.mdsol.com
O15 - Trusted Zone: [HKCU\...\Domains\www] *.mdsol.com
O15 - Trusted Zone: [HKCU\...\Domains\www] http.medversation.com
O15 - Trusted Zone: [HKCU\...\Domains] *.mentorcompass.com
O15 - Trusted Zone: [HKCU\...\Domains\www] *.mentorcompass.com
O15 - Trusted Zone: [HKCU\...\Domains] *.mentorcorp.com
O15 - Trusted Zone: [HKCU\...\Domains\www] *.mentorcorp.com
O15 - Trusted Zone: [HKCU\...\Domains\www] http.mentorwwllc.com
O15 - Trusted Zone: [HKCU\...\Domains] *.noahx.com
O15 - Trusted Zone: [HKCU\...\Domains\www] http.noahx.com
O15 - Trusted Zone: [HKCU\...\Domains] http.oursource.biz
O15 - Trusted Zone: [HKCU\...\Domains\www] http.oursource.biz
O15 - Trusted Zone: [HKCU\...\Domains] http.pir
O15 - Trusted Zone: [HKCU\...\Domains\www] http.pir
O15 - Trusted Zone: [HKCU\...\Domains] *.skilldialogue.com
O15 - Trusted Zone: [HKCU\...\Domains\www] *.skilldialogue.com
O15 - Trusted Zone: [HKCU\...\Domains] *.skillport.com
O15 - Trusted Zone: [HKCU\...\Domains\www] *.skillport.com
O15 - Trusted Zone: [HKCU\...\Domains] *.skillsoft.com
O15 - Trusted Zone: [HKCU\...\Domains\www] *.skillsoft.com
O15 - Trusted Zone: [HKCU\...\Domains] *.skillwsa.com
O15 - Trusted Zone: [HKCU\...\Domains\www] *.skillwsa.com
O15 - Trusted Zone: [HKCU\...\Domains] http.sumtotalsystems.com
O15 - Trusted Zone: [HKCU\...\Domains\www] http.sumtotalsystems.com
O15 - Trusted Zone: [HKCU\...\Domains] *.trialcard.com
O15 - Trusted Zone: [HKCU\...\Domains\www] *.trialcard.com
O15 - Trusted Zone: [HKCU\...\Domains\www] *.vandeputtesafety.com
O15 - Trusted Zone: [HKCU\...\Domains\www] *.vandeputtesafetyproducts.com
O15 - Trusted Zone: [HKCU\...\Domains] *.velaro.com
O15 - Trusted Zone: [HKCU\...\Domains\www] *.velaro.com
O15 - Trusted Zone: [HKLM\...\Domains] *.accessecr.com
O15 - Trusted Zone: [HKLM\...\Domains\www] *.accessecr.com
O15 - Trusted Zone: [HKLM\...\Domains] *.books24x7.com
O15 - Trusted Zone: [HKLM\...\Domains\www] *.books24x7.com
O15 - Trusted Zone: [HKLM\...\Domains\www] http.cardmate-web.com
O15 - Trusted Zone: [HKLM\...\Domains] http.cerebus
O15 - Trusted Zone: [HKLM\...\Domains\www] http.cerebus
O15 - Trusted Zone: [HKLM\...\Domains\www] *.cleanandclear.com.vn
O15 - Trusted Zone: [HKLM\...\Domains] http.compliancewire.com
O15 - Trusted Zone: [HKLM\...\Domains\www] http.compliancewire.com
O15 - Trusted Zone: [HKLM\...\Domains\www] *.cssdirect.com
O15 - Trusted Zone: [HKLM\...\Domains\www] *.cssdirect.net
O15 - Trusted Zone: [HKLM\...\Domains] *.equipnet.com
O15 - Trusted Zone: [HKLM\...\Domains\www] *.equipnet.com
O15 - Trusted Zone: [HKLM\...\Domains] *.gotrain.com
O15 - Trusted Zone: [HKLM\...\Domains\www] *.gotrain.com
O15 - Trusted Zone: [HKLM\...\Domains\www] http.gp-sol.com
O15 - Trusted Zone: [HKLM\...\Domains] *.healthmedia.com
O15 - Trusted Zone: [HKLM\...\Domains\www] *.healthmedia.com
O15 - Trusted Zone: [HKLM\...\Domains] http.hewitt.com
O15 - Trusted Zone: [HKLM\...\Domains\www] http.hewitt.com
O15 - Trusted Zone: [HKLM\...\Domains\www] http.icpvision.com
O15 - Trusted Zone: [HKLM\...\Domains] *.infores.com
O15 - Trusted Zone: [HKLM\...\Domains\www] *.infores.com
O15 - Trusted Zone: [HKLM\...\Domains] *.iriworldwide.com
O15 - Trusted Zone: [HKLM\...\Domains\www] *.iriworldwide.com
O15 - Trusted Zone: [HKLM\...\Domains] http.isb
O15 - Trusted Zone: [HKLM\...\Domains\www] http.isb
O15 - Trusted Zone: [HKLM\...\Domains] *.itrinno.com
O15 - Trusted Zone: [HKLM\...\Domains\www] *.itrinno.com
O15 - Trusted Zone: [HKLM\...\Domains] http.jnj.com
O15 - Trusted Zone: [HKLM\...\Domains\www] http.jnj.com
O15 - Trusted Zone: [HKLM\...\Domains] http.kaplanwire.com
O15 - Trusted Zone: [HKLM\...\Domains\www] http.kaplanwire.com
O15 - Trusted Zone: [HKLM\...\Domains] *.kellyeorder.com
O15 - Trusted Zone: [HKLM\...\Domains\www] *.kellyeorder.com
O15 - Trusted Zone: [HKLM\...\Domains] *.lenovo.com
O15 - Trusted Zone: [HKLM\...\Domains\www] *.lenovo.com
O15 - Trusted Zone: [HKLM\...\Domains] *.mdsol.com
O15 - Trusted Zone: [HKLM\...\Domains\www] *.mdsol.com
O15 - Trusted Zone: [HKLM\...\Domains\www] http.medversation.com
O15 - Trusted Zone: [HKLM\...\Domains] *.mentorcompass.com
O15 - Trusted Zone: [HKLM\...\Domains\www] *.mentorcompass.com
O15 - Trusted Zone: [HKLM\...\Domains] *.mentorcorp.com
O15 - Trusted Zone: [HKLM\...\Domains\www] *.mentorcorp.com
O15 - Trusted Zone: [HKLM\...\Domains\www] http.mentorwwllc.com
O15 - Trusted Zone: [HKLM\...\Domains] *.noahx.com
O15 - Trusted Zone: [HKLM\...\Domains\www] http.noahx.com
O15 - Trusted Zone: [HKLM\...\Domains] http.oursource.biz
O15 - Trusted Zone: [HKLM\...\Domains\www] http.oursource.biz
O15 - Trusted Zone: [HKLM\...\Domains] http.pir
O15 - Trusted Zone: [HKLM\...\Domains\www] http.pir
O15 - Trusted Zone: [HKLM\...\Domains] *.skilldialogue.com
O15 - Trusted Zone: [HKLM\...\Domains\www] *.skilldialogue.com
O15 - Trusted Zone: [HKLM\...\Domains] *.skillport.com
O15 - Trusted Zone: [HKLM\...\Domains\www] *.skillport.com
O15 - Trusted Zone: [HKLM\...\Domains] *.skillsoft.com
O15 - Trusted Zone: [HKLM\...\Domains\www] *.skillsoft.com
O15 - Trusted Zone: [HKLM\...\Domains] *.skillwsa.com
O15 - Trusted Zone: [HKLM\...\Domains\www] *.skillwsa.com
O15 - Trusted Zone: [HKLM\...\Domains] http.sumtotalsystems.com
O15 - Trusted Zone: [HKLM\...\Domains\www] http.sumtotalsystems.com
O15 - Trusted Zone: [HKLM\...\Domains] *.trialcard.com
O15 - Trusted Zone: [HKLM\...\Domains\www] *.trialcard.com
O15 - Trusted Zone: [HKLM\...\Domains\www] *.vandeputtesafety.com
O15 - Trusted Zone: [HKLM\...\Domains\www] *.vandeputtesafetyproducts.com
O15 - Trusted Zone: [HKLM\...\Domains] *.velaro.com
O15 - Trusted Zone: [HKLM\...\Domains\www] *.velaro.com


---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {3DC87637-DE84-4C2C-A75F-7F5398F15670} (Siebel High Interactivity Framework) - http://wjnjfrl3abw1l.wks.jnj.com:8080/18393/applets/SiebelAx_HI_Client.cab
O16 - DPF: {408902B4-F82D-4FE4-B1FF-7DB2B6E6A669} (Siebel High Interactivity Framework) - http://wjnjfrl3abw1l.wks.jnj.com/18379/applets/SiebelAx_HI_Client.cab
O16 - DPF: {5D294328-AFD7-4B8D-9F14-F6CC556B9B71} (Siebel High Interactivity Framework) - http://wjnjfrl3abw1l.wks.jnj.com/18385/applets/SiebelAx_HI_Client.cab
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
O16 - DPF: {A93B47FD-9BF6-4DA8-97FC-9270B9D64A6C} (VaPgCtrl Class) - http://www.normandie-webcam.com/plugins/h263ctrl20013/h263ctrl.cab
O16 - DPF: {C73881A2-E7F5-4CE4-B199-307EB127FE15} () - http://download.humanconcepts.com/downloads/op7/plugin/fr/hcinstall7.cab
O16 - DPF: {E5F5D008-DD2C-4D32-977D-1A0ADF03058B} (JuniperSetupControlXP Class) - https://juniper.net/dana-cached/setup/JuniperSetupSP1.cab
O16 - DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} (JuniperSetupClientControl Class) - https://juniper.net/dana-cached/sc/JuniperSetupClient.cab


---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{E43036E3-00CF-498E-A465-6497EBFD06FC}: DhcpNameServer = 80.10.246.1 81.253.149.10
O17 - HKLM\System\CS1\Services\Tcpip\..\{E43036E3-00CF-498E-A465-6497EBFD06FC}: DhcpNameServer = 80.10.246.1 81.253.149.10
O17 - HKLM\System\CS3\Services\Tcpip\..\{E43036E3-00CF-498E-A465-6497EBFD06FC}: DhcpNameServer = 80.10.246.1 81.253.149.10
O17 - HKLM\System\CCS\Services\Tcpip\..\{E43036E3-00CF-498E-A465-6497EBFD06FC}: DhcpDomain = WAG54GS
O17 - HKLM\System\CS1\Services\Tcpip\..\{E43036E3-00CF-498E-A465-6497EBFD06FC}: DhcpDomain = WAG54GS
O17 - HKLM\System\CS3\Services\Tcpip\..\{E43036E3-00CF-498E-A465-6497EBFD06FC}: DhcpDomain = WAG54GS
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = jnj.com
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 80.10.246.1 81.253.149.10


---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: ACNotify . (.Pas de propriétaire - Pas de description.) -- ACNotify.dll
O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll
O20 - Winlogon Notify: DkWLNP . (.SafeNet, Inc. - SafeNet Virtual Driver for Citrix..) -- C:\WINDOWS\System32\DkWLNP.dll
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\WINDOWS\System32\igfxdev.dll
O20 - Winlogon Notify: tpfnf2 . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Lenovo\HOTKEY\notifyf2.dll
O20 - Winlogon Notify: tphotkey . (.Lenovo Group Limited - On screen display winlogon client.) -- C:\Program Files\Lenovo\HOTKEY\tphklock.dll


---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Systray shell service object.) -- C:\WINDOWS\system32\stobject.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll


---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} . (.Microsoft Corporation - Shell Browser UI Library.) -- C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Shell Browser UI Library.) -- C:\WINDOWS\system32\browseui.dll


---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Ac Profile Manager Service (AcPrfMgrSvc) . (.Lenovo - Access Connections Profile Manager Service.) - C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe
O23 - Service: Access Connections Main Service (AcSvc) . (.Lenovo - Access Connections Main Service.) - C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe
O23 - Service: Browser Defender Update Service (Browser Defender Update Service) . (.Threat Expert Ltd. - Browser Defender Update Service.) - C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe
O23 - Service: SafeNet Log Service (DkLogger) . (.SafeNet, Inc. - SafeNet's Logging Service for NT.) - C:\WINDOWS\system32\dklog.exe
O23 - Service: SafeNet Token Service (DkTknSrv) . (.SafeNet, Inc. - SafeNet's Token Service.) - C:\WINDOWS\system32\dkcktkn.exe
O23 - Service: SafeNet Virtual Channel Monitor (DkVcm) . (.SafeNet, Inc. - SafeNet's Virtual Channel Monitor.) - C:\WINDOWS\system32\dkvcm.exe
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) . (.Intel(R) Corporation - Intel(R) PROSet/Wireless Event Log Service.) - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: Service Google Update (gupdate1ca8b1fd734f69) (gupdate1ca8b1fd734f69) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: ThinkPad PM Service (IBMPMSVC) . (.Lenovo - ThinkPad Power Management Service.) - C:\WINDOWS\system32\ibmpmsvc.exe
O23 - Service: iPassPeriodicUpdateService (iPassPeriodicUpdateService) . (.iPass, Inc. - iPass Periodic Update Service.) - C:\Program Files\iPass\iPassConnect\iPassPeriodicUpdateService.exe
O23 - Service: Juniper Unified Network Service (JuniperAccessService) . (.Juniper Networks - Juniper Access Service.) - C:\Program Files\Common Files\Juniper Networks\JUNS\dsAccessService.exe
O23 - Service: lxbk_device (lxbk_device) . (.Pas de propriétaire - Printer Communication System.) - C:\WINDOWS\system32\lxbkcoms.exe
O23 - Service: Power Manager DBC Service (Power Manager DBC Service) . (.Pas de propriétaire - PWMDBSVC Module.) - C:\Program Files\ThinkPad\Utilities\PWMDBSVC.exe
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) . (.Intel(R) Corporation - Intel(R) PROSet/Wireless Registry Service.) - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Intel® PROSet/Wireless WiFi Service (S24EventMonitor) . (.Intel(R) Corporation - Intel(R) Wireless Management Service.) - C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) . (.PC Tools - PC Tools Auxiliary Service.) - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) . (.PC Tools - PC Tools Security Service.) - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: Symantec Protection Agent 5.1 (SmcService) . (.Symantec Corporation - Symantec Agent Firewall.) - C:\Program Files\Symantec\SPA\smc.exe
O23 - Service: Symantec NAC Service (SNAC) . (.Symantec Corporation - Symantec Network Access Control.) - C:\Program Files\Symantec\SPA\snac.exe


---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Desktop Component 0: My Current Home Page - file:About:Home
O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\Program Files\Microsoft Office\Office12\WINWORD.exe


---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Install_NSS.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\MP Scheduled Quick Scan.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\MP Scheduled Scan.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\MP Scheduled Signature Update.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\PMTask.job


---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre1.6.0_05\bin\regutils.dll
O40 - ASIC: Macromedia Shockwave Director 10.1 - {166B1BCA-3F9C-11CF-8075-444553540000} . (.Adobe Systems, Inc. - Shockwave ActiveX Control.) -- C:\WINDOWS\system32\Adobe\Director\SwDir.dll
O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\msnetmtg.inf
O40 - ASIC: Internet Explorer - {4b218e3e-bc98-4770-93d3-2731b9329278} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\inf\ie.inf
O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\msmsgs.inf
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\wmp.inf
O40 - ASIC: Fax - {8b15971b-5355-4c82-8c07-7e181ea07608} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\fxsocm.inf
O40 - ASIC: (no name) - {C63E7C60-25EB-11D3-8EDA-00A0C911E8E5} . (.Pas de propriétaire - Pas de description.) -- msiexec.exe /qb! /fu {C63E7C60-25EB-11D3-8EDA-00A0C911E8E5}
O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 10.1 r53.) -- C:\WINDOWS\system32\Macromed\Flash\Flash10h.ocx


---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: (ANC) . (.IBM Corp. - IBM Access Connections - ANC.) - C:\Windows\system32\drivers\ANC.sys
O41 - Driver: (IBMTPCHK) . (.Pas de propriétaire - Pas de description.) - C:\WINDOWS\system32\Drivers\IBMBLDID.sys
O41 - Driver: SABKUTIL (SABKUTIL) . (.Pas de propriétaire - Pas de description.) - C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\SABKUTIL.sys
O41 - Driver: (TPHKDRV) . (.Lenovo Group Limited - ThinkPad Hotkey Driver.) - C:\Windows\system32\DRIVERS\TPHKDRV.sys
O41 - Driver: (TPPWRIF) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\drivers\Tppwrif.sys
O41 - Driver: wpsdrvnt (wpsdrvnt) . (.Symantec Corporation - wpsdrvnt.) - C:\WINDOWS\system32\drivers\wpsdrvnt.sys


---\\ Logiciels installés (O42)
O42 - Logiciel: 1024-bit POLCA Certificate - (.JJEDS.) [HKLM] -- {3245D2E1-B118-4499-8DD2-DC71C078846D}
O42 - Logiciel: 2048-bit ActiveX - (.JJEDS.) [HKLM] -- {BB282EC4-CF13-4179-AA45-D76D340237FD}
O42 - Logiciel: 2048-bit POLCA Certificate - (.JJEDS.) [HKLM] -- {8CEF03CE-4696-4B69-8662-146A35CCA8F7}
O42 - Logiciel: 32 Bit HP CIO Components Installer - (.Hewlett-Packard.) [HKLM] -- {2614F54E-A828-49FA-93BA-45A3F756BFAA}
O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Reader 8.1.7 - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1033-7B44-A81300000003}
O42 - Logiciel: Adobe Reader UPDATE v8.1.6 - (.Pas de propriétaire.) [HKLM] -- Adobe Reader UPDATE v8.1.6
O42 - Logiciel: Adobe Reader UPDATE v8.1.7 - (.Pas de propriétaire.) [HKLM] -- Adobe Reader UPDATE v8.1.7
O42 - Logiciel: Adobe Shockwave Player - (.Adobe Systems, Inc..) [HKLM] -- {D8DFA46A-39F7-4368-810D-18AFCFDDAEAF}
O42 - Logiciel: AdvantisPlus Remote Incremental R3 - (.MDnD Siebel CoC.) [HKLM] -- {8406BD24-6853-4271-A39F-E07240208A1F}
O42 - Logiciel: Browser Defender 2.0.6.15 - (.Threat Expert Ltd..) [HKLM] -- Browser Defender_is1
O42 - Logiciel: Codec Pack - (.K-Lite.) [HKLM] -- {CECF39CC-CF48-4FD9-B442-572A63FB5513}
O42 - Logiciel: Conexant HD Audio - (.Conexant.) [HKLM] -- CNXT_AUDIO_HDA
O42 - Logiciel: Disable Windows Firewall in XP - (.ITS .) [HKLM] -- {153B6651-3055-4FBC-8CAA-0737A5642226}
O42 - Logiciel: EasyEject Utility - (.Lenovo.) [HKLM] -- {81DDD078-5FCE-4B02-A7CF-41E83E804A51}
O42 - Logiciel: Filter Pack - (.Microsoft.) [HKLM] -- {B6F7F6C4-AF8A-4923-A8F6-758ED9BF6CCC}
O42 - Logiciel: Flash Player - (.Adobe.) [HKLM] -- {FFB768E4-E427-4553-BC36-A11F5E62A94D}
O42 - Logiciel: Gestionnaire d'alimentation ThinkPad - (.Pas de propriétaire.) [HKLM] -- {A0E64EBA-8BF0-49FB-90C0-BB3D781A2016}
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: HP Customer Participation Program 10.0 - (.HP.) [HKLM] -- HPExtendedCapabilities
O42 - Logiciel: HP Deskjet D2500 Printer Driver Software 10.0 Rel .3 - (.HP.) [HKLM] -- {89998BCF-F415-468a-8282-CB042765A26F}
O42 - Logiciel: HP Imaging Device Functions 10.0 - (.HP.) [HKLM] -- HP Imaging Device Functions
O42 - Logiciel: HP Photosmart Essential 2.5 - (.HP.) [HKLM] -- HP Photosmart Essential
O42 - Logiciel: HP Smart Web Printing - (.HP.) [HKLM] -- HP Smart Web Printing
O42 - Logiciel: HP Solution Center 10.0 - (.HP.) [HKLM] -- HP Solution Center & Imaging Support Tools
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
O42 - Logiciel: Hotfix for Windows XP (KB942288-v3) - (.Microsoft Corporation.) [HKLM] -- KB942288-v3
O42 - Logiciel: Hotfix for Windows XP (KB953761) - (.Microsoft Corporation.) [HKLM] -- KB953761
O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5
O42 - Logiciel: Hotfix for Windows XP (KB976098-v2) - (.Microsoft Corporation.) [HKLM] -- KB976098-v2
O42 - Logiciel: ITS FCS Force Definitions Update v1.0 - (.Pas de propriétaire.) [HKLM] -- ITS FCS Force Definitions Update v1.0
O42 - Logiciel: ITS Microsoft Forefront Smart Installation v3.1 - (.Pas de propriétaire.) [HKLM] -- ITS Microsoft Forefront Smart Installation v3.1
O42 - Logiciel: Intel PROSet Wireless - (.Pas de propriétaire.) [HKLM] -- ProInst
O42 - Logiciel: Intel Wireless LAN 11abgn for Windows XP v12.00.400 - (.Pas de propriétaire.) [HKLM] -- Intel Wireless LAN 11abgn for Windows XP v12.00.400
O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Pas de propriétaire.) [HKLM] -- HDMI
O42 - Logiciel: JJEDS POLCA Certificate v1.0 R2 - (.Pas de propriétaire.) [HKLM] -- JJEDS POLCA Certificate v1.0 R2
O42 - Logiciel: Java 2048 JJEDS Certificates - (.ITS.) [HKLM] -- {0077B750-253E-44F6-9714-D8CE3A94DC4E}
O42 - Logiciel: Java(TM) 6 Update 5 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160050}
O42 - Logiciel: JnJ ERA Internet Shortcuts - (.ITS.) [HKLM] -- {D1222D6B-4398-4702-BE26-EE427DCC822E}
O42 - Logiciel: JnJ ITonDemand CheckClient ActiveX v1.5 - (.Pas de propriétaire.) [HKLM] -- JnJ ITonDemand CheckClient ActiveX v1.5
O42 - Logiciel: JnJ Wireless Profile for Access Connections - (.ITSUS.) [HKLM] -- {98B8F123-970A-40FA-B910-731856A088B2}
O42 - Logiciel: Juniper Installer Service - (.Juniper Networks.) [HKLM] -- {8D73F85D-3989-4D3F-B812-D3C63EE7BB50}
O42 - Logiciel: Juniper Networks Setup Client Activex Control - (.Juniper Networks.) [HKLM] -- Juniper_Setup_Client Activex Control
O42 - Logiciel: Lenovo Access Connections ITSFR Home - (.JnJ.) [HKLM] -- {416F974F-AD65-4FBE-BBA8-D466056E854C}
O42 - Logiciel: Lenovo Access Connections for Windows XP v5.02 - (.Pas de propriétaire.) [HKLM] -- Lenovo Access Connections for Windows XP v5.02
O42 - Logiciel: Lenovo Hotkey Utility v2.08.2008 - (.Pas de propriétaire.) [HKLM] -- Lenovo Hotkey Utility v2.08.2008
O42 - Logiciel: Lenovo Power Manager for Windows XP v1.45 R2 - (.Pas de propriétaire.) [HKLM] -- Lenovo Power Manager for Windows XP v1.45 R2
O42 - Logiciel: Lexmark X1100 Series - (.Lexmark International, Inc..) [HKLM] -- Lexmark X1100 Series
O42 - Logiciel: MDnD EMEA AdvantisPlus R2 - (.Siebel.) [HKLM] -- {BE36CA9E-D766-41DA-8319-81C4EED65810}
O42 - Logiciel: MOM 2005 agent hotfix KB949874 - (.Microsoft.) [HKLM] -- {51F2A3B7-4A6F-43EB-A164-23BDA81ABA84}
O42 - Logiciel: MSVC80_x86_v2 - (.Nokia.) [HKLM] -- {6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}
O42 - Logiciel: MSVC90_x86 - (.Nokia.) [HKLM] -- {AF111648-99A1-453E-81DD-80DBBF6DAD0D}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA - (.Microsoft Corporation.) [HKLM] -- {72AD53CC-CCC0-3757-8480-9EE176866A7C}
O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA - (.Microsoft Corporation.) [HKLM] -- {0BD83598-C2EF-3343-847B-7D2E84599128}
O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) [HKLM] -- {3E31821C-7917-367E-938E-E65FC413EA31}
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
O42 - Logiciel: Microsoft .NET Framework v3.5 SP1 - (.Pas de propriétaire.) [HKLM] -- Microsoft .NET Framework v3.5 SP1
O42 - Logiciel: Microsoft .Net Framework v3.5 - (.Pas de propriétaire.) [HKLM] -- Microsoft .Net Framework v3.5
O42 - Logiciel: Microsoft ActiveSync - (.Microsoft Corporation.) [HKLM] -- {99052DB7-9592-4522-A558-5417BBAD48EE}
O42 - Logiciel: Microsoft Corp. Office Enterprise Prof Equivalent v2007 SP1 - (.Pas de propriétaire.) [HKLM] -- Microsoft Corp. Office Enterprise Prof Equivalent v2007 SP1
O42 - Logiciel: Microsoft Corp. Office Language Pack French v2007 SP1 - (.Pas de propriétaire.) [HKLM] -- Microsoft Corp. Office Language Pack French v2007 SP1
O42 - Logiciel: Microsoft Corporation Hotfix KB953761 v1.0 - (.Pas de propriétaire.) [HKLM] -- Microsoft Corporation Hotfix KB953761 v1.0
O42 - Logiciel: Microsoft Corporation Windows Desktop Search v3.01 - (.Pas de propriétaire.) [HKLM] -- Microsoft Corporation Windows Desktop Search v3.01
O42 - Logiciel: Microsoft Corporation XMLLite for XP KB915865 v11 - (.Pas de propriétaire.) [HKLM] -- Microsoft Corporation XMLLite for XP KB915865 v11
O42 - Logiciel: Microsoft FCS Agent Hotfix KB971026 v1.0 - (.Pas de propriétaire.) [HKLM] -- Microsoft FCS Agent Hotfix KB971026 v1.0
O42 - Logiciel: Microsoft Forefront Client Security Antimalware Service - (.Microsoft Corporation.) [HKLM] -- {2DF2E496-D3B7-4A6F-A341-6DE48FDFEF0A}
O42 - Logiciel: Microsoft Forefront Client Security State Assessment Service - (.Microsoft Corporation.) [HKLM] -- {2AB5A838-9DAC-45F5-8EC2-019DDDC4B4F6}
O42 - Logiciel: Microsoft GPO Client Side Extensions Windows XP v1.0 - (.Pas de propriétaire.) [HKLM] -- Microsoft GPO Client Side Extensions Windows XP v1.0
O42 - Logiciel: Microsoft KB972890 v1.0 - (.Pas de propriétaire.) [HKLM] -- Microsoft KB972890 v1.0
O42 - Logiciel: Microsoft Kernel-Mode Driver Framework Feature Pack 1.7 - (.Microsoft Corporation.) [HKLM] -- Wdf01007
O42 - Logiciel: Microsoft Multilanguage Windows XP FRENCH v2002 R2 - (.Pas de propriétaire.) [HKLM] -- Microsoft Multilanguage Windows XP FRENCH v2002 R2
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-00BA-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0114-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0115-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0117-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}
O42 - Logiciel: Microsoft Office Access MUI (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0015-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Access MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Access Setup Metadata MUI (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0117-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Enterprise 2007 - (.Microsoft Corporation.) [HKLM] -- ENTERPRISE
O42 - Logiciel: Microsoft Office Enterprise 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0030-0000-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Excel MUI (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Groove MUI (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-00BA-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Groove MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-00BA-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Groove Setup Metadata MUI (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0114-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office InfoPath MUI (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0044-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Language Pack 2007 - French/Français - (.Microsoft Corporation.) [HKLM] -- OMUI.fr-fr
O42 - Logiciel: Microsoft Office Language Pack 2007 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}_OMUI.fr-fr_{A0353900-21A2-42CF-B973-883500A027F7}
O42 - Logiciel: Microsoft Office Language Pack 2007 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}_OMUI.fr-fr_{A0353900-21A2-42CF-B973-883500A027F7}
O42 - Logiciel: Microsoft Office Language Pack 2007 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}_OMUI.fr-fr_{A0353900-21A2-42CF-B973-883500A027F7}
O42 - Logiciel: Microsoft Office Language Pack 2007 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}_OMUI.fr-fr_{A0353900-21A2-42CF-B973-883500A027F7}
O42 - Logiciel: Microsoft Office Language Pack 2007 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}_OMUI.fr-fr_{A0353900-21A2-42CF-B973-883500A027F7}
O42 - Logiciel: Microsoft Office Language Pack 2007 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}_OMUI.fr-fr_{A0353900-21A2-42CF-B973-883500A027F7}
O42 - Logiciel: Microsoft Office Language Pack 2007 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}_OMUI.fr-fr_{A0353900-21A2-42CF-B973-883500A027F7}
O42 - Logiciel: Microsoft Office Language Pack 2007 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-00A1-040C-0000-0000000FF1CE}_OMUI.fr-fr_{A0353900-21A2-42CF-B973-883500A027F7}
O42 - Logiciel: Microsoft Office Language Pack 2007 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-00BA-040C-0000-0000000FF1CE}_OMUI.fr-fr_{A0353900-21A2-42CF-B973-883500A027F7}
O42 - Logiciel: Microsoft Office Language Pack 2007 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-0100-040C-0000-0000000FF1CE}_OMUI.fr-fr_{A0353900-21A2-42CF-B973-883500A027F7}
O42 - Logiciel: Microsoft Office Language Pack 2007 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-0101-040C-0000-0000000FF1CE}_OMUI.fr-fr_{A0353900-21A2-42CF-B973-883500A027F7}
O42 - Logiciel: Microsoft Office Live Meeting 2007 - (.Microsoft Corporation.) [HKLM] -- {511A931E-5DA3-48CB-AA93-E9D8BFD637FF}
O42 - Logiciel: Microsoft Office O MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0100-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office OneNote MUI (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-00A1-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office OneNote MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-00A1-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Outlook MUI (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001A-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office PowerPoint MUI (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office PromptClose Update v2007 - (.Pas de propriétaire.) [HKLM] -- Microsoft Office PromptClose Update v2007
O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proofing (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-04