Security tool

terman -  
Bonjour,
mon ami a choppe security tool. comment le suprimer definitivement de son pc! malware y arrive pas!!!! merci de votre aide!!
comdialement

29 réponses

Résumé de la discussion

Problème de suppression définitive d'un malware nommé Security Tool sur Windows Vista, avec Firefox 3.5.13 et des symptômes de hijackage et de démarrages multiples répétés. Plusieurs éléments indiquent une compromission étendue, relevée dans le rapport ZHPDiag v1.26.686, incluant des extensions indésirables, des modules Plug-ins et des entrées Run au démarrage. En cas d'analyse, les éléments listés incluent des modifications de démarrage, des barres d'outils indésirables, des plug-ins et des composants système modifiés, ainsi que des règles DNS à restaurer. Des éléments comme Vuze Remote Toolbar et des modules Conduit apparaissent dans les résultats, illustrant l'étendue des traces à supprimer et la complexité de la remise en état.

Bobot (l’IA à votre service)
  1. Utilisateur anonyme
    bonsoir,

    * Télécharge ZHPDiag sur ton bureau :

    https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

    * Laisse toi guider lors de l'installation, il se lancera automatiquement à la fin.

    /!\Utilisateur de Vista et Seven : Clique droit sur le logo de ZHPdiag, « exécuter en tant qu'Administrateur »

    * Clique sur l'icône représentant une loupe (« Lancer le diagnostic »)
    * Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette
    * Héberge le rapport ZHPDiag.txt sur Cijoint, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum :
    http://www.cijoint.fr/
    ou :
    http://ww38.toofiles.com/fr/documents-upload.html

    tuto zhpdiag :
    http://www.premiumorange.com/zeb-help-process/zhpdiag.html
    3. terman
      je te fait parvenir le rapport de malware pour commencer!!!!! le voici :

      Malwarebytes' Anti-Malware 1.46
      www.malwarebytes.org

      Version de la base de données: 4052

      Windows 6.0.6002 Service Pack 2 (Safe Mode)
      Internet Explorer 8.0.6001.18904

      01/10/2010 12:00:26
      mbam-log-2010-10-01 (12-00-26).txt

      Type d'examen: Examen complet (C:\|D:\|)
      Elément(s) analysé(s): 275830
      Temps écoulé: 46 minute(s), 27 seconde(s)

      Processus mémoire infecté(s): 0
      Module(s) mémoire infecté(s): 0
      Clé(s) du Registre infectée(s): 0
      Valeur(s) du Registre infectée(s): 0
      Elément(s) de données du Registre infecté(s): 0
      Dossier(s) infecté(s): 0
      Fichier(s) infecté(s): 1

      Processus mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Module(s) mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Clé(s) du Registre infectée(s):
      (Aucun élément nuisible détecté)

      Valeur(s) du Registre infectée(s):
      (Aucun élément nuisible détecté)

      Elément(s) de données du Registre infecté(s):
      (Aucun élément nuisible détecté)

      Dossier(s) infecté(s):
      (Aucun élément nuisible détecté)

      Fichier(s) infecté(s):
      C:\Users\christophe\Desktop\Security Tool.LNK (Rogue.SecurityTool) -> Quarantined and deleted successfully.
      3. terman
        Rapport de ZHPDiag v1.26.686 par Nicolas Coolman, Update du 01/10/2010
        Run by christophe at 03/10/2010 19:41:10
        Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
        Contact : nicolascoolman@yahoo.fr

        ---\\ Web Browser
        MSIE: Internet Explorer v8.0.6001.18943
        MFIE: Mozilla Firefox (3.5.13)

        ---\\ System Information
        Platform : Windows Vista (TM) Home Basic (6.0.6002) Service Pack 2
        Processor: x86 Family 6 Model 15 Stepping 13, GenuineIntel
        Operating System: 32 Bits
        Boot mode: Sans échec avec prise en charge du réseau (Fail-safe with network boot)
        Total RAM: 1978 MB (77% free)
        System drive C: has 87 GB (62%) free of 139 GB

        ---\\ Logged in mode
        Computer Name: PC-CHRISTOPH
        User Name: christophe
        All Users Names: christophe, Administrateur,
        Unselected Option: O1,O45,O61,O62,O65,O82
        Logged in as Administrator

        ---\\ DOS/Devices
        C:\ Hard drive, Flash drive, Thumb drive (Free 87 Go of 139 Go)
        D:\ Hard drive, Flash drive, Thumb drive (Free 2 Go of 10 Go)
        E:\ CD-ROM drive (Not Inserted)
        H:\ Floppy drive, Flash card reader, USB Key (Free 1 Go of 1 Go)

        ---\\ Security Center & Tools Informations
        [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
        [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
        [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK

        ---\\ Processus lancés
        [MD5.3708CCEE4878EB0B9E7B92355A631853] - (.Microsoft Corporation - Aide et support Microsoft®.) -- C:\Windows\helppane.exe [498176]
        [MD5.C2A6367BC67329AF41225B088DDE9F83] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [555520]

        ---\\ Page de démarrage de Mozilla Firefox (M0)
        M0 - MFSP: prefs.js [christophe - zhdxufdx.default] https://www.google.fr/?gws_rd=ssl

        ---\\ Programmes d'extension pour Mozilla Firefox (M2)
        M2 - MFEP: prefs.js [christophe - zhdxufdx.default\{ba14329e-9550-4989-b3f2-9732e92d17cc}] [] Vuze Remote Toolbar 2.7.2.0 (.Conduit Ltd..)

        ---\\ Plugins de navigateurs Opera/Firefox(P1/P2)
        P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeploytk.dll
        P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins\npnul32.dll
        P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.3.4".) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll
        P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- C:\Program Files\Mozilla Firefox\Plugins\nppl3260.dll
        P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - 6.0.12.69.) -- C:\Program Files\Mozilla Firefox\Plugins\nprpjplug.dll
        P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\Macromed\Flash\NPSWF32.dll
        P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.0.) -- C:\Windows\system32\Adobe\Director\np32dsw.dll
        P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.50917.0.) -- c:\Program Files\Microsoft Silverlight\4.0.50917.0\npctrl.dll
        P2 - FPN: [HKLM] [@microsoft.com/OfficeLive,version=1.3] - (.Microsoft Corp. - Office Live Update v1.3.) -- C:\Program Files\Microsoft\Office Live\npOLW.dll
        P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=14.0.8081.0709] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
        P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
        P2 - FPN: [HKLM] [@real.com/nppl3260;version=6.0.12.69] - (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
        P2 - FPN: [HKLM] [@real.com/nprpjplug;version=6.0.12.69] - (.RealNetworks, Inc. - 6.0.12.69.) -- C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll

        ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
        F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
        F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe
        F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

        ---\\ Pages de démarrage d'Internet Explorer (R0)
        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr?cobrand=compaq-notebook.msn.com&ocid=HPDHP&pc=CPNTDF

        ---\\ Pages de recherche d'Internet Explorer (R1)
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fhome.microsoft.com%2fintl%2fbr%2faccess%2fallinone.asp%3f
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=compaq-notebook.msn.com&ocid=HPDHP&pc=CPNTDF
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=compaq-notebook.msn.com&ocid=HPDHP&pc=CPNTDF
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
        R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm

        ---\\ Internet Explorer URLSearchHook (R3)
        R3 - URLSearchHook: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} . (.Conduit Ltd. - Conduit Toolbar.) (5, 7, 2, 2) -- C:\Program Files\Vuze_Remote\tbVuze.dll
        R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} . (.Pas de propriétaire - Pas de description.) (No version) -- C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
        R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)) -- C:\Windows\system32\ieframe.dll
        R3 - URLSearchHook: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} . (.Conduit Ltd. - Conduit Toolbar.) (5, 7, 2, 2) -- C:\Program Files\Vuze_Remote\tbVuze.dll

        ---\\ Browser Helper Objects de navigateur (O2)
        O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
        O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline
        O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} . (.SEIKO EPSON CORPORATION / CyCom Technology - Epson Easy Photo Print (TBL).) -- C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
        O2 - BHO: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Vuze_Remote\tbVuze.dll
        O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
        O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll

        ---\\ Internet Explorer Toolbars (O3)
        O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} . (.SEIKO EPSON CORPORATION / CyCom Technology - Epson Easy Photo Print (TBL).) -- C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
        O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} . (.Pas de propriétaire - Pas de description.) -- (.not file.)
        O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll
        O3 - Toolbar: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Vuze_Remote\tbVuze.dll

        ---\\ Applications démarrées par registre & par dossier (O4)
        O4 - HKLM\..\Run: [avast!] . (.ALWIL Software - avast! service GUI component.) -- C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
        O4 - HKLM\..\Run: [ORAHSSSessionManager] . (.France Telecom SA - Pas de description.) -- C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
        O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
        O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
        O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
        O4 - HKCU\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
        O4 - HKCU\..\Run: [Raptr] . (.Pas de propriétaire - Raptr Client.) -- C:\PROGRA~1\Raptr\raptrstub.exe
        O4 - HKCU\..\RunOnce: [28069035] . (.Pas de propriétaire - Pas de description.) -- C:\Users\christophe\AppData\Local\28069035.exe
        O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
        O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] oobefldr.dll
        O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
        O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] oobefldr.dll
        O4 - HKUS\S-1-5-21-4092708777-1571920333-3790078888-1000\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
        O4 - HKUS\S-1-5-21-4092708777-1571920333-3790078888-1000\..\Run: [Raptr] . (.Pas de propriétaire - Raptr Client.) -- C:\PROGRA~1\Raptr\raptrstub.exe
        O4 - HKUS\S-1-5-21-4092708777-1571920333-3790078888-1000\..\RunOnce: [28069035] . (.Pas de propriétaire - Pas de description.) -- C:\Users\christophe\AppData\Local\28069035.exe

        ---\\ Autres liens utilisateurs (O4)
        O4 - Global Startup: C:\Documents And Settings\christophe\Desktop\CCleaner.lnk . (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe
        O4 - Global Startup: C:\Documents And Settings\christophe\Desktop\DVD Shrink 3.2.lnk . (.DVD Shrink.) -- C:\Program Files\DVD Shrink\DVD Shrink 3.2.exe
        O4 - Global Startup: C:\Documents And Settings\christophe\Desktop\Free FLV Converter.lnk . (.Koyote Soft.) -- C:\Program Files\Free FLV Converter\FreeFLVConverter.exe
        O4 - Global Startup: C:\Documents And Settings\christophe\Desktop\LogonStudio Vista.lnk . (.Stardock Corporation.) -- C:\Program Files\Stardock\Object Desktop\LogonStudio\LogonStudioVista.exe
        O4 - Global Startup: C:\Documents And Settings\christophe\Desktop\RICE.lnk . (.Pas de propriétaire.) -- C:\Users\christophe\Downloads\ RICE.pdf
        O4 - Global Startup: C:\Documents And Settings\christophe\Desktop\Windows Live Messenger .lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
        O4 - Global Startup: C:\Users\christophe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
        O4 - Global Startup: C:\Users\christophe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Security Tool.lnk . (.Pas de propriétaire.) -- C:\Users\christophe\AppData\Local\28069035.exe
        O4 - Global Startup: C:\Users\christophe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Mail\WinMail.exe
        O4 - Global Startup: C:\Users\christophe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
        O4 - Global Startup: C:\Users\christophe\Desktop\CCleaner.lnk . (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe
        O4 - Global Startup: C:\Users\christophe\Desktop\DVD Shrink 3.2.lnk . (.DVD Shrink.) -- C:\Program Files\DVD Shrink\DVD Shrink 3.2.exe
        O4 - Global Startup: C:\Users\christophe\Desktop\Free FLV Converter.lnk . (.Koyote Soft.) -- C:\Program Files\Free FLV Converter\FreeFLVConverter.exe
        O4 - Global Startup: C:\Users\christophe\Desktop\LogonStudio Vista.lnk . (.Stardock Corporation.) -- C:\Program Files\Stardock\Object Desktop\LogonStudio\LogonStudioVista.exe
        O4 - Global Startup: C:\Users\christophe\Desktop\RICE.lnk . (.Pas de propriétaire.) -- C:\Users\christophe\Downloads\ RICE.pdf
        O4 - Global Startup: C:\Users\christophe\Desktop\Windows Live Messenger .lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
        O4 - Global Startup: C:\Users\christophe\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Free FLV Converter.lnk . (.Koyote Soft.) -- C:\Program Files\Free FLV Converter\FreeFLVConverter.exe
        O4 - Global Startup: C:\Users\christophe\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
        O4 - Global Startup: C:\Users\christophe\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe
        O4 - Global Startup: C:\Users\christophe\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PartyPoker.fr.lnk . (.Pas de propriétaire.) -- C:\Users\christophe\Desktop\PartyFrance.exe (.not file.)
        O4 - Global Startup: C:\Users\christophe\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - Clé orpheline
        O4 - Global Startup: C:\Users\christophe\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Vuze.lnk . (.Vuze Inc..) -- C:\Program Files\Vuze\Azureus.exe
        O4 - Global Startup: C:\Users\christophe\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - Clé orpheline
        O4 - Global Startup: C:\Users\christophe\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
        O4 - Global Startup: C:\Users\christophe\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk . (.BitTorrent, Inc..) -- C:\Program Files\uTorrent\uTorrent.exe

        ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
        O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~3\Office12\EXCEL.exe

        ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
        O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
        O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft Office OneNote Internet Explorer Add-in.) -- C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
        O9 - Extra 'Tools' menuitem: PartyPoker.fr - {725EC34E-943C-4df6-B0B2-FBDE7F242276} . (.not file.) - C:\Users\christophe\Desktop\PartyPokerFr\images\ppicon.ico
        O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (.Pas de propriétaire - Pas de description.) -- C:\PROGRA~1\MICROS~3\Office12\REFBARH.ICO

        ---\\ Winsock hijacker (Layered Service Provider) (O10)
        O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
        O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
        O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
        O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
        O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
        O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll

        ---\\ Objets ActiveX (Downloaded Program Files)(O16)
        O16 - DPF: {2357B3CF-7F8D-4451-8D81-FD6097610AEE} (CamfrogWEB Advanced Unicode Control) - http://activex.camfrogweb.com/advanced/2.0.1.14/cfweb_activex.camfrogweb.com-advanced-2.0.1.14_instmodule.exe

        ---\\ Modification Domaine/Adresses DNS (O17)
        O17 - HKLM\System\CCS\Services\Tcpip\..\{5B0D89E9-F25A-44AF-B858-E518320D2908}: DhcpNameServer = 212.27.40.241 212.27.40.240
        O17 - HKLM\System\CS1\Services\Tcpip\..\{5B0D89E9-F25A-44AF-B858-E518320D2908}: DhcpNameServer = 212.27.40.241 212.27.40.240
        O17 - HKLM\System\CS3\Services\Tcpip\..\{5B0D89E9-F25A-44AF-B858-E518320D2908}: DhcpNameServer = 212.27.40.241 212.27.40.240
        O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.241 212.27.40.240

        ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
        O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll

        ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
        O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\System32\webcheck.dll

        ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
        O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll

        ---\\ Liste des services NT non Microsoft et non désactivés (O23)
        O23 - Service: avast! iAVS4 Control Service (aswUpdSv) . (.ALWIL Software - avast! Antivirus updating service.) - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
        O23 - Service: avast! Antivirus (avast! Antivirus) . (.ALWIL Software - avast! antivirus service.) - C:\Program Files\Alwil Software\Avast4\ashServ.exe
        O23 - Service: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.exe
        O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.exe
        O23 - Service: France Telecom Routing Table Service (FTRTSVC) . (.France Telecom SA - Pas de description.) - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\1\FTRTSVC.exe
        O23 - Service: HP Health Check Service (HP Health Check Service) . (.Hewlett-Packard - HP Health Check Service.) - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
        O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) . (.Hewlett-Packard Company - LightScribe Service.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
        O23 - Service: Recovery Service for Windows (Recovery Service for Windows) . (.Pas de propriétaire - STServices.) - C:\Program Files\SMINST\BLService.exe
        O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) . (.Pas de propriétaire - RichVideo Module.) - C:\Program Files\CyberLink\Shared files\RichVideo.exe
        O23 - Service: XAudioService (XAudioService) . (.Conexant Systems, Inc. - Modem Audio Service.) - C:\Windows\system32\DRIVERS\xaudio.exe

        ---\\ Enumération Active Desktop & MHTML Editor (O24)
        O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\Program Files\Microsoft Office\Office12\WINWORD.exe

        ---\\ Tâches planifiées en automatique (O39)
        O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Ad-Aware Update (Weekly).job

        ---\\ Composants installés (ActiveSetup Installed Components) (O40)
        O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\regutils.dll
        O40 - ASIC: LightScribe Control Panel - {10880D85-AAD9-4558-ABDC-2AB1552D831F} . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Common Files\LightScribe\LSRunOnce.exe
        O40 - ASIC: Adobe Flash Player 9 ActiveX - {D27CDB6E-AE6D-11CF-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 9.0 r124.) -- C:\Windows\system32\Macromed\Flash\Flash9f.ocx

        ---\\ Logiciels installés (O42)
        O42 - Logiciel: ABBYY FineReader 6.0 Sprint - (.ABBYY Software House.) [HKLM] -- {ACF60000-22B9-4CE9-98D6-2CCF359BAC07}
        O42 - Logiciel: Activation Assistant for the 2007 Microsoft Office suites - (.Microsoft Corporation.) [HKLM] -- Activation Assistant for the 2007 Microsoft Office suites
        O42 - Logiciel: ActiveCheck component for HP Active Support Library - (.Hewlett-Packard.) [HKLM] -- {254C37AA-6B72-4300-84F6-98A82419187E}
        O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
        O42 - Logiciel: Adobe Flash Player 9 ActiveX - (.Adobe Systems.) [HKLM] -- ShockwaveFlash
        O42 - Logiciel: Adobe Flash Player ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
        O42 - Logiciel: Adobe Reader 9.3.4 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A93000000001}
        O42 - Logiciel: Adobe Shockwave Player - (.Adobe Systems, Inc..) [HKLM] -- {AD72CFB4-C2BF-424E-9DF0-C7BAD1F30A11}
        O42 - Logiciel: Ask.com Search Assistant 1.0.1 - (.Ask.com.) [HKLM] -- Ask.com Search Assistant
        O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
        O42 - Logiciel: Atheros Driver Installation Program - (.Atheros.) [HKLM] -- {C3A32068-8AB1-4327-BB16-BED9C6219DC7}
        O42 - Logiciel: CCleaner (remove only) - (.Piriform.) [HKLM] -- CCleaner
        O42 - Logiciel: CamfrogWEB Advanced ActiveX Plugin (remove only) - (.Pas de propriétaire.) [HKLM] -- CFWebAdvancedU
        O42 - Logiciel: Cisco EAP-FAST Module - (.Cisco Systems, Inc..) [HKLM] -- {415B2719-AD3A-4944-B404-C472DB6085B3}
        O42 - Logiciel: Cisco LEAP Module - (.Cisco Systems, Inc..) [HKLM] -- {83770D14-21B9-44B3-8689-F7B523F94560}
        O42 - Logiciel: Cisco PEAP Module - (.Cisco Systems, Inc..) [HKLM] -- {669C7BD8-DAA2-49B6-966C-F1E2AAE6B17E}
        O42 - Logiciel: Conexant HD Audio - (.Conexant.) [HKLM] -- CNXT_AUDIO_HDA
        O42 - Logiciel: CyberLink DVD Suite - (.CyberLink Corp..) [HKLM] -- InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}
        O42 - Logiciel: CyberLink DVD Suite - (.CyberLink Corp..) [HKLM] -- {1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}
        O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}
        O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D}
        O42 - Logiciel: DVD Shrink 3.2 - (.DVD Shrink.) [HKLM] -- DVD Shrink_is1
        O42 - Logiciel: EPSON SX100 Series Printer Uninstall - (.SEIKO EPSON Corporation.) [HKLM] -- EPSON SX100 Series
        O42 - Logiciel: EPSON Scan - (.Pas de propriétaire.) [HKLM] -- EPSON Scanner
        O42 - Logiciel: EPSON Stylus SX100_TX100 Manuel - (.Pas de propriétaire.) [HKLM] -- EPSON Stylus SX100_TX100 Guide d'utilisation
        O42 - Logiciel: ESU for Microsoft Vista - (.Hewlett-Packard.) [HKLM] -- {3877C901-7B90-4727-A639-B6ED2DD59D43}
        O42 - Logiciel: Epson Easy Photo Print 2 - (.SEIKO EPSON CORPORATION.) [HKLM] -- {DEDB47A3-C988-4A43-A645-E2CEA571E680}
        O42 - Logiciel: Favorit (ucqwmt) - (.Pas de propriétaire.) [HKLM] -- ucqwmt
        O42 - Logiciel: Free FLV Converter V 6.5 - (.Koyote Soft.) [HKLM] -- Free FLV Converter_is1
        O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {B131E59D-202C-43C6-84C9-68F0C37541F1}
        O42 - Logiciel: HDAUDIO Soft Data Fax Modem with SmartCP - (.Pas de propriétaire.) [HKLM] -- CNXT_MODEM_HDAUDIO_HERMOSA_HSF
        O42 - Logiciel: HP Active Support Library - (.Hewlett-Packard.) [HKLM] -- {CE7E3BE0-2DD3-4416-A690-F9E4A99A8CFF}
        O42 - Logiciel: HP Customer Experience Enhancements - (.Hewlett-Packard.) [HKLM] -- {57A5AEC1-97FC-474D-92C4-908FCC2253D4}
        O42 - Logiciel: HP DVD Play 3.7 - (.Hewlett-Packard.) [HKLM] -- {45D707E9-F3C4-11D9-A373-0050BAE317E1}
        O42 - Logiciel: HP Doc Viewer - (.Hewlett-Packard.) [HKLM] -- {082702D5-5DD8-4600-BCE5-48B15174687F}
        O42 - Logiciel: HP Help and Support - (.Hewlett-Packard Company.) [HKLM] -- {0054A0F6-00C9-4498-B821-B5C9578F433E}
        O42 - Logiciel: HP Quick Launch Buttons 6.40 H2 - (.Hewlett-Packard.) [HKLM] -- {34D2AB40-150D-475D-AE32-BD23FB5EE355}
        O42 - Logiciel: HP Total Care Advisor - (.Hewlett-Packard.) [HKLM] -- {154A4184-1A3D-4BF9-A5AE-4FA1660445F3}
        O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM] -- {C8FD5BC1-92EF-4C15-92A9-F9AC7F61985F}
        O42 - Logiciel: HP User Guides 0118 - (.Hewlett-Packard.) [HKLM] -- {B6D0B141-B2BE-4DD0-B08F-B9186F3E36B3}
        O42 - Logiciel: HP Wireless Assistant - (.Hewlett-Packard.) [HKLM] -- {9ADABDDE-9644-461B-9E73-83FA3EFCAB50}
        O42 - Logiciel: HPAsset component for HP Active Support Library - (.Hewlett-Packard.) [HKLM] -- {669D4A35-146B-4314-89F1-1AC3D7B88367}
        O42 - Logiciel: HPNetworkAssistant - (.Hewlett-Packard..) [HKLM] -- {228C6B46-64E2-404E-898A-EF0830603EF4}
        O42 - Logiciel: HPTCSSetup - (.Hewlett-Packard Company.) [HKLM] -- {846DDADA-0239-4B67-A6B1-33658863793B}
        O42 - Logiciel: HTview - (.Pas de propriétaire.) [HKLM] -- HTview
        O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
        O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
        O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3
        O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {46ABBC54-1872-4AA3-95E2-F2C063A63F31}
        O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Intel Corporation.) [HKLM] -- HDMI
        O42 - Logiciel: Java(TM) 6 Update 16 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216013FF}
        O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {E2DFE069-083E-4631-9B6C-43C48E991DE5}
        O42 - Logiciel: K-Lite Codec Pack 5.0.5 (Full) - (.Pas de propriétaire.) [HKLM] -- KLiteCodecPack_is1
        O42 - Logiciel: LG PC Suite - (.LGE.) [HKLM] -- {993960EE-CA4D-443F-8F88-E24260DD5FD2}
        O42 - Logiciel: LG USB Modem driver - (.LG Electronics.) [HKLM] -- {C3ABE126-2BB2-4246-BFE1-6797679B3579}
        O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM] -- InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}
        O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM] -- {C59C179C-668D-49A9-B6EA-0121CCFC1243}
        O42 - Logiciel: LightScribe System Software 1.14.17.1 - (.LightScribe.) [HKLM] -- {0E7DBD52-B097-4F2B-A7C7-F105B0D20FDB}
        O42 - Logiciel: LimeWire 5.5.8 - (.Lime Wire, LLC.) [HKLM] -- LimeWire
        O42 - Logiciel: LogonStudio Vista - (.Pas de propriétaire.) [HKLM] -- LogonStudio Vista
        O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
        O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
        O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
        O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
        O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) [HKLM] -- {3E31821C-7917-367E-938E-E65FC413EA31}
        O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
        O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
        O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
        O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
        O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
        O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
        O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}_HOMESTUDENTR_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
        O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-00A1-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
        O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
        O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}
        O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.) [HKLM] -- HOMESTUDENTR
        O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}
        O42 - Logiciel: Microsoft Office Live Add-in 1.3 - (.Microsoft Corporation.) [HKLM] -- {57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}
        O42 - Logiciel: Microsoft Office OneNote MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-00A1-040C-0000-0000000FF1CE}
        O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}
        O42 - Logiciel: Microsoft Office PowerPoint Viewer 2007 (French) - (.Microsoft Corporation.) [HKLM] -- {95120000-00AF-040C-0000-0000000FF1CE}
        O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}
        O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}
        O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}
        O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}
        O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}
        O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}
        O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE}
        O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}_HOMESTUDENTR_{14809F99-C601-4D4A-9391-F1E8FAA964C5}
        O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}
        O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
        O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}
        O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}_HOMESTUDENTR_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
        O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}
        O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}
        O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}
        O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
        O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) [HKLM] -- {4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
        O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
        O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {8A74E887-8F0F-4017-AF53-CBA42211AAA5}
        O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
        O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}
        O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {7299052b-02a4-4627-81f2-1818da5d550d}
        O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {3B160861-7250-451E-B5EE-8B92BF30A710}
        O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-040C-0000-0000000FF1CE}
        O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 Language Pack SP1 - fra
        O42 - Logiciel: Mozilla Firefox (3.5.13) - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.5.13)
        O42 - Logiciel: My HP Games - (.WildTangent.) [HKLM] -- WildTangent hp Master Uninstall
        O42 - Logiciel: NetWaiting - (.BVRP Software, Inc.) [HKLM] -- {3F92ABBB-6BBF-11D5-B229-002078017FBF}
        O42 - Logiciel: Orange - Logiciels Internet - (.Pas de propriétaire.) [HKLM] -- {ORAHSS}.UninstallSuite
        O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}
        O42 - Logiciel: PartyPoker.fr - (.PartyFrance.) [HKLM] -- PartyPokerFr
        O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM] -- InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}
        O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM] -- {40BF1E83-20EB-11D8-97C5-0009C5020658}
        O42 - Logiciel: PowerDirector - (.CyberLink Corp..) [HKLM] -- InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}
        O42 - Logiciel: PowerDirector - (.CyberLink Corp..) [HKLM] -- {CB099890-1D5F-11D5-9EA9-0050BAE317E1}
        O42 - Logiciel: Raptr - (.Pas de propriétaire.) [HKLM] -- Raptr
        O42 - Logiciel: Realtek 8169 8168 8101E 8102E Ethernet Driver - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
        O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM] -- {DC24971E-1946-445D-8A82-CE685433FA7D}
        O42 - Logiciel: SFR - Kit de connexion - (.SFR.) [HKLM] -- SFR_Kit
        O42 - Logiciel: SPORE Creature Creator Trial Edition - (.Electronic Arts.) [HKLM] -- {ECEE0279-785F-4CB3-9F28-E69813234BF8}
        O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2277947) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{5857EE21-03D0-482E-9620-5A30B314A2AE}
        O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288621) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{5C497F0B-2061-4CC9-A61C-6B45B867354D}
        O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB969559) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
        O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB976321) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{7F207DCA-3399-40CB-A968-6E5991B1421A}
        O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB982312) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{B0EC5722-241F-4CDA-83B4-AA5846B6F9F4}
        O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB982331) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{E8766951-2B6C-4022-86E8-80D2D1762B76}
        O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB982308) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C3F9A0DC-A5D1-4BB6-870E-2953E5A2487B}
        O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB979441) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{8CCB781A-CF6B-4FCB-B6D8-59C64DF5C6DB}
        O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB982158) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{F5B70033-E79C-4569-90BF-BC9B4E4F3F46}
        O42 - Logiciel: Security Update for Microsoft Office Visio Viewer 2007 (KB973709) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
        O42 - Logiciel: Security Update for Microsoft Office Word 2007 (KB2251419) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{7E9103DA-253F-41FF-9E83-7C83806C77DA}
        O42 - Logiciel: Security Update for Microsoft Office system 2007 (972581) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}
        O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB974234) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{FCD742B9-7A55-44BC-A776-F795F21FEDDC}
        O42 - Logiciel: Spelling Dictionaries Support For Adobe Reader 9 - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-5464-3428-900000000004}
        O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics.) [HKLM] -- SynTPDeinstKey
        O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}
        O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
        O42 - Logiciel: Update for Microsoft Office OneNote 2007 (KB980729) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{329050A9-EF80-40F9-B633-74508F54C1FF}
        O42 - Logiciel: VLC media player 0.9.9 - (.VideoLAN Team.) [HKLM] -- VLC media player
        O42 - Logiciel: Visual C++ 2008 x86 Runtime - (v9.0.30729) - (.Microsoft Corporation.) [HKLM] -- {F333A33D-125C-32A2-8DCE-5C5D14231E27}
        O42 - Logiciel: Visual C++ 2008 x86 Runtime - v9.0.30729.01 - (.Microsoft Corporation.) [HKLM] -- {F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01
        O42 - Logiciel: Vuze - (.Vuze Inc..) [HKLM] -- 8461-7759-5462-8226
        O42 - Logiciel: Vuze Remote Toolbar - (.Vuze Remote.) [HKLM] -- Vuze_Remote Toolbar
        O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
        O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3B4E636E-9D65-4D67-BA61-189800823F52}
        O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM] -- {2075CB0A-D26F-4DAA-B424-5079296B43BA}
        O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {5DD76286-9BE7-4894-A990-E905E91AC818}
        O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {770F1BEC-2871-4E70-B837-FB8525FFA3B1}
        O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM] -- {53B20C18-D8D4-4588-8737-9BBFE303C354}
        O42 - Logiciel: Windows Live OneCare safety scanner - (.Microsoft Corporation.) [HKLM] -- Windows Live OneCare safety scanner
        O42 - Logiciel: Windows Live OneCare safety scanner - (.Microsoft Corporation.) [HKLM] -- {FE0646A7-19D0-41B4-A2BB-2C35D644270D}
        O42 - Logiciel: Windows Live Toolbar - (.Microsoft Corporation.) [HKLM] -- {F7D27C70-90F5-49B9-B188-0A133C0CE353}
        O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {4634B21A-CC07-4396-890C-2B8168661FEA}
        O42 - Logiciel: avast! Antivirus - (.Alwil Software.) [HKLM] -- avast!
        O42 - Logiciel: eMule - (.Pas de propriétaire.) [HKLM] -- eMule
        O42 - Logiciel: muvee Reveal - (.muvee Technologies Pte Ltd.) [HKLM] -- {DD35C328-F115-BEDA-6EEE-E00C5AACCCBC}
        O42 - Logiciel: x3Codec - (.C4DL Media.) [HKLM] -- x3Codec
        O42 - Logiciel: µTorrent - (.Pas de propriétaire.) [HKCU] -- uTorrent

        ---\\ HKCU & HKLM Software Keys
        [HKCU\Software\ABBYY]
        [HKCU\Software\ALWIL Software]
        [HKCU\Software\Adobe]
        [HKCU\Software\AppDataLow\Software\Adobe]
        [HKCU\Software\AppDataLow\Software\Conduit]
        [HKCU\Software\AppDataLow\Software\Macromedia]
        [HKCU\Software\AppDataLow\Software\Microsoft]
        [HKCU\Software\AppDataLow\Software\Monitored]
        [HKCU\Software\AppDataLow\Software\Vuze_Remote]
        [HKCU\Software\AppDataLow\Software\settings]
        [HKCU\Software\AppDataLow\Software]
        [HKCU\Software\AppDataLow\Toolbar]
        [HKCU\Software\AppDataLow]
        [HKCU\Software\AskSearchAsst]
        [HKCU\Software\Azureus]
        [HKCU\Software\BitTorrent]
        [HKCU\Software\Camfrog]
        [HKCU\Software\Classes]
        [HKCU\Software\Clients]
        [HKCU\Software\Conduit]
        [HKCU\Software\CoreVorbis]
        [HKCU\Software\CyberLink]
        [HKCU\Software\DSP-worx]
        [HKCU\Software\DVD Shrink]
        [HKCU\Software\DivXNetworks]
        [HKCU\Software\EPSON]
        [HKCU\Software\GNU]
        [HKCU\Software\GSpot Appliance Corp]
        [HKCU\Software\Gabest]
        [HKCU\Software\HTview]
        [HKCU\Software\Haali]
        [HKCU\Software\Hewlett-Packard]
        [HKCU\Software\IM Providers]
        [HKCU\Software\Intel]
        [HKCU\Software\JavaSoft]
        [HKCU\Software\LG Electronics Inc]
        [HKCU\Software\LG Media Player]
        [HKCU\Software\LightScribe]
        [HKCU\Software\Local AppWizard-Generated Applications]
        [HKCU\Software\Macromedia]
        [HKCU\Software\Magnet]
        [HKCU\Software\MainConcept (Muvee Consumer)]
        [HKCU\Software\MainConcept (Muvee)]
        [HKCU\Software\MainConcept]
        [HKCU\Software\Malwarebytes' Anti-Malware]
        [HKCU\Software\MediaInfo]
        [HKCU\Software\Mozilla]
        [HKCU\Software\Netscape]
        [HKCU\Software\ODBC]
        [HKCU\Software\Official-eMule]
        [HKCU\Software\Opendisc]
        [HKCU\Software\PartyFrance]
        [HKCU\Software\Piriform]
        [HKCU\Software\Policies]
        [HKCU\Software\Raptr]
        [HKCU\Software\RealNetworks]
        [HKCU\Software\SEIKO EPSON]
        [HKCU\Software\Skype]
        [HKCU\Software\Synaptics]
        [HKCU\Software\Trolltech]
        [HKCU\Software\VB and VBA Program Settings]
        [HKCU\Software\YahooPartnerToolbar]
        [HKCU\Software\eMule]
        [HKCU\Software\ej-technologies]
        [HKCU\Software\kde.org]
        [HKLM\Software\ABBYY]
        [HKLM\Software\ALWIL Software]
        [HKLM\Software\Adobe]
        [HKLM\Software\Atheros]
        [HKLM\Software\Azureus]
        [HKLM\Software\BVRP Software, Inc]
        [HKLM\Software\CXT]
        [HKLM\Software\Classes]
        [HKLM\Software\Clients]
        [HKLM\Software\Codec Tweak Tool]
        [HKLM\Software\Conduit]
        [HKLM\Software\Conexant Systems Inc ]
        [HKLM\Software\Conexant]
        [HKLM\Software\Cyberlink]
        [HKLM\Software\Debug]
        [HKLM\Software\DivXNetworks]
        [HKLM\Software\EPSON]
        [HKLM\Software\EasyBits]
        [HKLM\Software\Electronic Arts]
        [HKLM\Software\FRANCE TELECOM]
        [HKLM\Software\GNU]
        [HKLM\Software\HPQ]
        [HKLM\Software\HP]
        [HKLM\Software\HaaliMkx]
        [HKLM\Software\Hewlett-Packard Company]
        [HKLM\Software\Hewlett-Packard]
        [HKLM\Software\InstallShield]
        [HKLM\Software\InstalledOptions]
        [HKLM\Software\Intel]
        [HKLM\Software\JavaSoft]
        [HKLM\Software\KLCodecPack]
        [HKLM\Software\LG Electronics]
        [HKLM\Software\LG PC Suite2]
        [HKLM\Software\LGE]
        [HKLM\Software\LabelPrint_Upgrade]
        [HKLM\Software\LightScribe]
        [HKLM\Software\Macromedia]
        [HKLM\Software\Malwarebytes' Anti-Malware]
        [HKLM\Software\MimarSinan]
        [HKLM\Software\MozillaPlugins]
        [HKLM\Software\Mozilla]
        [HKLM\Software\Neuf]
        [HKLM\Software\Notepad]
        [HKLM\Software\ODBC]
        [HKLM\Software\Official-eMule]
        [HKLM\Software\P2G_Upgrade]
        [HKLM\Software\PDR_Upgrade]
        [HKLM\Software\Policies]
        [HKLM\Software\Product_Upgrade]
        [HKLM\Software\RTLSetup]
        [HKLM\Software\RealNetworks]
        [HKLM\Software\Realtek Semiconductor Corp.]
        [HKLM\Software\Realtek USB 2.0 Card Reader]
        [HKLM\Software\Realtek]
        [HKLM\Software\RegisteredApplications]
        [HKLM\Software\S3R521]
        [HKLM\Software\SECURITOO]
        [HKLM\Software\Stardock]
        [HKLM\Software\Symantec]
        [HKLM\Software\Synaptics]
        [HKLM\Software\UCAM_Upgrade]
        [HKLM\Software\VideoLAN]
        [HKLM\Software\Vuze_Remote]
        [HKLM\Software\WOW6432Node]
        [HKLM\Software\WildTangent]
        [HKLM\Software\Windows]
        [HKLM\Software\ej-technologies]
        [HKLM\Software\mozilla.org]

        ---\\ Contenu des dossiers ProgramFiles/ProgramData (O43)
        O43 - CFD:Common File Directory ----D- C:\Program Files\ABBYY FineReader 6.0 Sprint
        O43 - CFD:Common File Directory ----D- C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
        O43 - CFD:Common File Directory ----D- C:\Program Files\Adobe
        O43 - CFD:Common File Directory ----D- C:\Program Files\adslTV
        O43 - CFD:Common File Directory ----D- C:\Program Files\Alwil Software
        O43 - CFD:Common File Directory ----D- C:\Program Files\Ask Search Assistant
        O43 - CFD:Common File Directory ----D- C:\Program Files\Atheros
        O43 - CFD:Common File Directory ----D- C:\Program Files\CCleaner
        O43 - CFD:Common File Directory ----D- C:\Program Files\CFWebAdvancedU
        O43 - CFD:Common File Directory ----D- C:\Program Files\Cisco
        O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files
        O43 - CFD:Common File Directory ----D- C:\Program Files\Conduit
        O43 - CFD:Common File Directory ----D- C:\Program Files\CONEXANT
        O43 - CFD:Common File Directory ----D- C:\Program Files\CyberLink
        O43 - CFD:Common File Directory ----D- C:\Program Files\DVD Shrink
        O43 - CFD:Common File Directory ----D- C:\Program Files\EasyBits For Kids
        O43 - CFD:Common File Directory ----D- C:\Program Files\eMule
        O43 - CFD:Common File Directory ----D- C:\Program Files\epson
        O43 - CFD:Common File Directory ----D- C:\Program Files\Epson Software
        O43 - CFD:Common File Directory -SH-D- C:\Program Files\Fichiers communs
        O43 - CFD:Common File Directory ----D- C:\Program Files\Free FLV Converter
        O43 - CFD:Common File Directory ----D- C:\Program Files\Hewlett-Packard
        O43 - CFD:Common File Directory ----D- C:\Program Files\Hewlett-Packard Company
        O43 - CFD:Common File Directory ----D- C:\Program Files\HP
        O43 - CFD:Common File Directory ----D- C:\Program Files\HP Games
        O43 - CFD:Common File Directory ----D- C:\Program Files\HTview
        O43 - CFD:Common File Directory --H-D- C:\Program Files\InstallShield Installation Information
        O43 - CFD:Common File Directory ----D- C:\Program Files\Intel
        O43 - CFD:Common File Directory ----D- C:\Program Files\Internet Explorer
        O43 - CFD:Common File Directory ----D- C:\Program Files\Java
        O43 - CFD:Common File Directory ----D- C:\Program Files\K-Lite Codec Pack
        O43 - CFD:Common File Directory ----D- C:\Program Files\LG Electronics
        O43 - CFD:Common File Directory ----D- C:\Program Files\LG PC Suite 2
        O43 - CFD:Common File Directory ----D- C:\Program Files\LimeWire
        O43 - CFD:Common File Directory ----D- C:\Program Files\Malwarebytes' Anti-Malware
        O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft
        O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Games
        O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Office
        O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Silverlight
        O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft SQL Server Compact Edition
        O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Sync Framework
        O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Works
        O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft.NET
        O43 - CFD:Common File Directory ----D- C:\Program Files\Movie Maker
        O43 - CFD:Common File Directory ----D- C:\Program Files\Mozilla Firefox
        O43 - CFD:Common File Directory ----D- C:\Program Files\MSBuild
        O43 - CFD:Common File Directory ----D- C:\Program Files\MSXML 4.0
        O43 - CFD:Common File Directory ----D- C:\Program Files\muvee Technologies
        O43 - CFD:Common File Directory ----D- C:\Program Files\NetWaiting
        O43 - CFD:Common File Directory R---D- C:\Program Files\Online Services
        O43 - CFD:Common File Directory ----D- C:\Program Files\OrangeHSS
        O43 - CFD:Common File Directory ----D- C:\Program Files\Raptr
        O43 - CFD:Common File Directory ----D- C:\Program Files\Realtek
        O43 - CFD:Common File Directory ----D- C:\Program Files\Reference Assemblies
        O43 - CFD:Common File Directory ----D- C:\Program Files\SFR
        O43 - CFD:Common File Directory ----D- C:\Program Files\SMINST
        O43 - CFD:Common File Directory ----D- C:\Program Files\Stardock
        O43 - CFD:Common File Directory ----D- C:\Program Files\Synaptics
        O43 - CFD:Common File Directory --H-D- C:\Program Files\Uninstall Information
        O43 - CFD:Common File Directory ----D- C:\Program Files\uTorrent
        O43 - CFD:Common File Directory ----D- C:\Program Files\VideoLAN
        O43 - CFD:Common File Directory ----D- C:\Program Files\Vuze
        O43 - CFD:Common File Directory ----D- C:\Program Files\Vuze_Remote
        O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Calendar
        O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Collaboration
        O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Defender
        O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live
        O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live Safety Center
        O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live SkyDrive
        O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Mail
        O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Media Player
        O43 - CFD:Common File Directory ----D- C:\Program Files\Windows NT
        O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Photo Gallery
        O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Sidebar
        O43 - CFD:Common File Directory ----D- C:\Program Files\x3Codec
        O43 - CFD:Common File Directory ----D- C:\Program Files\ZHPDiag
        O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Adobe
        O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\DESIGNER
        O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\France Telecom
        O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\InstallShield
        O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\LightScribe
        O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\microsoft shared
        O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\muvee Technologies
        O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Services
        O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\SpeechEngines
        O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\System
        O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Windows Live
        O43 - CFD:Common File Directory ----D- C:\ProgramData\Adobe
        O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Application Data
        O43 - CFD:Common File Directory ----D- C:\ProgramData\Atheros
        O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Bureau
        O43 - CFD:Common File Directory ----D- C:\ProgramData\CyberLink
        O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Desktop
        O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Documents
        O43 - CFD:Common File Directory ----D- C:\ProgramData\DVD Shrink
        O43 - CFD:Common File Directory ----D- C:\ProgramData\eMule
        O43 - CFD:Common File Directory ----D- C:\ProgramData\EPSON
        O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Favoris
        O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Favorites
        O43 - CFD:Common File Directory ----D- C:\ProgramData\Hewlett-Packard
        O43 - CFD:Common File Directory ----D- C:\ProgramData\Lavasoft
        O43 - CFD:Common File Directory ----D- C:\ProgramData\Malwarebytes
        O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Menu Démarrer
        O43 - CFD:Common File Directory -S--D- C:\ProgramData\Microsoft
        O43 - CFD:Common File Directory ----D- C:\ProgramData\Microsoft Help
        O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Modèles
        O43 - CFD:Common File Directory ----D- C:\ProgramData\Norton
        O43 - CFD:Common File Directory ----D- C:\ProgramData\NortonInstaller
        O43 - CFD:Common File Directory ----D- C:\ProgramData\Real
        O43 - CFD:Common File Directory ----D- C:\ProgramData\Skype
        O43 - CFD:Common File Directory ----D- C:\ProgramData\Stardock
        O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Start Menu
        O43 - CFD:Common File Directory ----D- C:\ProgramData\Temp
        O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Templates
        O43 - CFD:Common File Directory ----D- C:\ProgramData\UDL
        O43 - CFD:Common File Directory ----D- C:\ProgramData\WildTangent
        O43 - CFD:Common File Directory ----D- C:\ProgramData\WindowsSearch
        O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Adobe
        O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\DESIGNER
        O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\France Telecom
        O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\InstallShield
        O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\LightScribe
        O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\microsoft shared
        O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\muvee Technologies
        O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Services
        O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\SpeechEngines
        O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\System
        O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Windows Live

        ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
        O44 - LFC:[MD5.64F2B87772F9B480D383E651A8E52653] - 03/10/2010 - 18:41:01 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\PerfStringBackup.TMP [1498050]
        O44 - LFC:[MD5.A5C83BE6FA6996B144DF265AB8B9A182] - 03/10/2010 - 18:39:16 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\ntbtlog.txt [1716594]
        O44 - LFC:[MD5.53FAA485C0727ED6457174B86A4DED51] - 03/10/2010 - 18:32:27 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\PerfStringBackup.INI [1470810]
        O44 - LFC:[MD5.04F5E3E1712B114EC39FE2ACAA7C944F] - 03/10/2010 - 18:32:27 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfc009.dat [100640]
        O44 - LFC:[MD5.E70849AB1ED5E8326666EF3482F2CAEF] - 03/10/2010 - 18:32:27 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfc00C.dat [122972]
        O44 - LFC:[MD5.A9B286756E5E043BEBFF5332B8557150] - 03/10/2010 - 18:32:27 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfh009.dat [586568]
        O44 - LFC:[MD5.1A9413FA249394DB73DEC16AC96605F4] - 03/10/2010 - 18:32:27 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfh00C.dat [668580]
        O44 - LFC:[MD5.08344D8E8DEA6A3FFA794386A78DFA8A] - 03/10/2010 - 18:28:11 -S-A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\bootstat.dat [67584]
        O44 - LFC:[MD5.55A4B9AB2A3BF3548243442D5949DA72] - 03/10/2010 - 18:11:28 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\WindowsUpdate.log [1462615]
        O44 - LFC:[MD5.FEEB67F10AA2572F2A77CD9E2AD140FB] - 03/10/2010 - 18:08:09 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [3216]
        O44 - LFC:[MD5.FEEB67F10AA2572F2A77CD9E2AD140FB] - 03/10/2010 - 18:08:09 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [3216]
        O44 - LFC:[MD5.2757A4747421D67E1179D484B68F7DEE] - 02/10/2010 - 16:14:19 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\FNTCACHE.DAT [310600]
        O44 - LFC:[MD5.9B50773AB774AE88B2D3226A8B69B9B9] - 02/10/2010 - 16:12:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\PFRO.log [17262]
        O44 - LFC:[MD5.09FB2099672F5E6EA85B7A1B16D5548A] - 02/10/2010 - 15:54:26 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\MRT.INI [127]
        O44 - LFC:[MD5.3F337DD54339BEAF26917D3A0A32C1DE] - 01/10/2010 - 04:27:26 ---A- . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll [81920]
        O44 - LFC:[MD5.A11A3587E50351F8AFAE0DA9BB64E032] - 01/10/2010 - 04:27:05 ---A- . (.Adobe Systems Incorporated - Windows NT OpenType/Type 1 Font Driver.) -- C:\Windows\System32\atmfd.dll [289792]
        O44 - LFC:[MD5.9D68F01600AC07080B5A4739951969C9] - 01/10/2010 - 04:27:04 ---A- . (.Adobe Systems - Windows NT OpenType/Type 1 API Library..) -- C:\Windows\System32\atmlib.dll [34304]
        O44 - LFC:[MD5.C7DD7D9739785BD3A6B8499EEC1DEE7E] - 01/10/2010 - 00:06:18 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\System32\drivers\mbamswissarmy.sys [38224]
        O44 - LFC:[MD5.67B48A903430C6D4FB58CBACA1866601] - 01/10/2010 - 00:06:17 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\System32\drivers\mbam.sys [20952]
        O44 - LFC:[MD5.26B0F12F9A4C267AF5B2DA35F87A6EFA] - 07/09/2010 - 20:26:54 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\DOErrors.log [52]

        ---\\ Export de clé d'application autorisée (ECAA) (O47)
        O47 - AAKE:Key Export SP - "C:\Program Files\OrangeHSS\Connectivity\ConnectivityManager.exe" [Enabled] .(.France Telecom SA - Pas de description.) -- C:\Program Files\OrangeHSS\Connectivity\ConnectivityManager.exe

        ---\\ MountPoints2 Shell Key (MPSK) (O51)
        O51 - MPSK:{ad6c70ec-8add-11de-b3ad-001f16598a51}\Shell\AutoRun\command. (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\cmd \C launch.bat (.not file.)

        ---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52)
        O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
        O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll
        O52 - TDSD: \Drivers32\"msacm.l3codecp"="l3codecp.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\Windows\System32\l3codecp.acm
        O52 - TDSD: \Drivers32\"VIDC.X264"="x264vfw.dll" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\x264vfw.dll
        O52 - TDSD: \Drivers32\"VIDC.DIVX"="divx.dll" . (.DivX, Inc. - DivX.) -- C:\Windows\System32\divx.dll
        O52 - TDSD: \Drivers32\"VIDC.VP60"="vp6vfw.dll" . (.On2.com - VP6 VIDEO FOR WINDOWS CODEC.) -- C:\Windows\System32\vp6vfw.dll
        O52 - TDSD: \Drivers32\"VIDC.VP61"="vp6vfw.dll" . (.On2.com - VP6 VIDEO FOR WINDOWS CODEC.) -- C:\Windows\System32\vp6vfw.dll
        O52 - TDSD: \Drivers32\"VIDC.VP62"=&quo
        2. terman
          je t es founie tout ce ke lui ma donner je n ai rien d audre!! cordialement
          1. Utilisateur anonyme
            ok,
            tu es en mode sans echec avec la prise en charge du réseau.

            lis et suis ce qui est noté ci dessous , attention, pas de fausse manip :

            * Lance ZHPFix (soit via le raccourci sur ton Bureau, soit via ZHPDiag en cliquant sur l'écusson vert)
            Clique sur l'icone représentant la lettre H (« coller les lignes Helper »)
            Copie/colle les lignes suivantes en gras et place les dans ZHPFix :

            ----------------------------------------------------------

            O4 - HKCU\..\RunOnce: [28069035] . (.Pas de propriétaire - Pas de description.) -- C:\Users\christophe\AppData\Local\28069035.exe
            O4 - HKUS\S-1-5-21-4092708777-1571920333-3790078888-1000\..\RunOnce: [28069035] . (.Pas de propriétaire - Pas de description.) -- C:\Users\christophe\AppData\Local\28069035.exe
            O4 - Global Startup: C:\Users\christophe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Security Tool.lnk . (.Pas de propriétaire.) -- C:\Users\christophe\AppData\Local\28069035.exe

            ----------------------------------------------------------

            - Clique sur « Tous », puis sur « Nettoyer »
            - Copie/colle la totalité du rapport dans ta prochaine réponse
            Tuto :
            http://www.premiumorange.com/zeb-help-process/zhpfix.html

            redemarre ton pc en mode normal, puis repasse un autre zhpdiag,
            * Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette
            * Héberge le rapport ZHPDiag.txt sur Cijoint, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum :
            http://www.cijoint.fr/
            ou :
            http://ww38.toofiles.com/fr/documents-upload.html

            1. terman
              voici l integraliter de se ke tu me demande!!!

              Rapport de ZHPDiag v1.26.686 par Nicolas Coolman, Update du 01/10/2010
              Run by christophe at 03/10/2010 22:03:01
              Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
              Contact : nicolascoolman@yahoo.fr

              ---\\ Web Browser
              MSIE: Internet Explorer v8.0.6001.18943
              MFIE: Mozilla Firefox (3.5.13)

              ---\\ System Information
              Platform : Windows Vista (TM) Home Basic (6.0.6002) Service Pack 2
              Processor: x86 Family 6 Model 15 Stepping 13, GenuineIntel
              Operating System: 32 Bits
              Boot mode: Sans échec avec prise en charge du réseau (Fail-safe with network boot)
              Total RAM: 1978 MB (78% free)
              System drive C: has 87 GB (62%) free of 139 GB

              ---\\ Logged in mode
              Computer Name: PC-CHRISTOPH
              User Name: christophe
              All Users Names: christophe, Administrateur,
              Unselected Option: O1,O45,O61,O62,O65,O82
              Logged in as Administrator

              ---\\ DOS/Devices
              C:\ Hard drive, Flash drive, Thumb drive (Free 87 Go of 139 Go)
              D:\ Hard drive, Flash drive, Thumb drive (Free 2 Go of 10 Go)
              E:\ CD-ROM drive (Not Inserted)
              H:\ Floppy drive, Flash card reader, USB Key (Free 1 Go of 1 Go)

              ---\\ Security Center & Tools Informations
              [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
              [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
              [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK

              ---\\ Processus lancés
              [MD5.C2A6367BC67329AF41225B088DDE9F83] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [555520]

              ---\\ Page de démarrage de Mozilla Firefox (M0)
              M0 - MFSP: prefs.js [christophe - zhdxufdx.default] https://www.google.fr/?gws_rd=ssl

              ---\\ Programmes d'extension pour Mozilla Firefox (M2)
              M2 - MFEP: prefs.js [christophe - zhdxufdx.default\{ba14329e-9550-4989-b3f2-9732e92d17cc}] [] Vuze Remote Toolbar 2.7.2.0 (.Conduit Ltd..)

              ---\\ Plugins de navigateurs Opera/Firefox(P1/P2)
              P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeploytk.dll
              P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins\npnul32.dll
              P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.3.4".) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll
              P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- C:\Program Files\Mozilla Firefox\Plugins\nppl3260.dll
              P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - 6.0.12.69.) -- C:\Program Files\Mozilla Firefox\Plugins\nprpjplug.dll
              P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\Macromed\Flash\NPSWF32.dll
              P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.0.) -- C:\Windows\system32\Adobe\Director\np32dsw.dll
              P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.50917.0.) -- c:\Program Files\Microsoft Silverlight\4.0.50917.0\npctrl.dll
              P2 - FPN: [HKLM] [@microsoft.com/OfficeLive,version=1.3] - (.Microsoft Corp. - Office Live Update v1.3.) -- C:\Program Files\Microsoft\Office Live\npOLW.dll
              P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=14.0.8081.0709] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
              P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
              P2 - FPN: [HKLM] [@real.com/nppl3260;version=6.0.12.69] - (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
              P2 - FPN: [HKLM] [@real.com/nprpjplug;version=6.0.12.69] - (.RealNetworks, Inc. - 6.0.12.69.) -- C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll

              ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
              F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
              F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

              ---\\ Pages de démarrage d'Internet Explorer (R0)
              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
              R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr?cobrand=compaq-notebook.msn.com&ocid=HPDHP&pc=CPNTDF

              ---\\ Pages de recherche d'Internet Explorer (R1)
              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=compaq-notebook.msn.com&ocid=HPDHP&pc=CPNTDF
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=compaq-notebook.msn.com&ocid=HPDHP&pc=CPNTDF
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
              R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm

              ---\\ Internet Explorer URLSearchHook (R3)
              R3 - URLSearchHook: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} . (.Conduit Ltd. - Conduit Toolbar.) (5, 7, 2, 2) -- C:\Program Files\Vuze_Remote\tbVuze.dll
              R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} . (.Pas de propriétaire - Pas de description.) (No version) -- C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
              R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)) -- C:\Windows\system32\ieframe.dll
              R3 - URLSearchHook: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} . (.Conduit Ltd. - Conduit Toolbar.) (5, 7, 2, 2) -- C:\Program Files\Vuze_Remote\tbVuze.dll

              ---\\ Browser Helper Objects de navigateur (O2)
              O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
              O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline
              O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
              O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
              O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} . (.SEIKO EPSON CORPORATION / CyCom Technology - Epson Easy Photo Print (TBL).) -- C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
              O2 - BHO: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Vuze_Remote\tbVuze.dll
              O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
              O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll

              ---\\ Internet Explorer Toolbars (O3)
              O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} . (.SEIKO EPSON CORPORATION / CyCom Technology - Epson Easy Photo Print (TBL).) -- C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
              O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} . (.Pas de propriétaire - Pas de description.) -- (.not file.)
              O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll
              O3 - Toolbar: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Vuze_Remote\tbVuze.dll

              ---\\ Applications démarrées par registre & par dossier (O4)
              O4 - HKCU\..\RunOnce: [28069035] . (.Pas de propriétaire - Pas de description.) -- C:\Users\christophe\AppData\Local\28069035.exe
              O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
              O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] oobefldr.dll
              O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
              O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] oobefldr.dll
              O4 - HKUS\S-1-5-21-4092708777-1571920333-3790078888-1000\..\RunOnce: [28069035] . (.Pas de propriétaire - Pas de description.) -- C:\Users\christophe\AppData\Local\28069035.exe

              ---\\ Autres liens utilisateurs (O4)
              O4 - Global Startup: C:\Documents And Settings\christophe\Desktop\CCleaner.lnk . (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe
              O4 - Global Startup: C:\Documents And Settings\christophe\Desktop\DVD Shrink 3.2.lnk . (.DVD Shrink.) -- C:\Program Files\DVD Shrink\DVD Shrink 3.2.exe
              O4 - Global Startup: C:\Documents And Settings\christophe\Desktop\Free FLV Converter.lnk . (.Koyote Soft.) -- C:\Program Files\Free FLV Converter\FreeFLVConverter.exe
              O4 - Global Startup: C:\Documents And Settings\christophe\Desktop\LogonStudio Vista.lnk . (.Stardock Corporation.) -- C:\Program Files\Stardock\Object Desktop\LogonStudio\LogonStudioVista.exe
              O4 - Global Startup: C:\Documents And Settings\christophe\Desktop\RICE.lnk . (.Pas de propriétaire.) -- C:\Users\christophe\Downloads\ RICE.pdf
              O4 - Global Startup: C:\Documents And Settings\christophe\Desktop\Windows Live Messenger .lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
              O4 - Global Startup: C:\Users\christophe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
              O4 - Global Startup: C:\Users\christophe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Security Tool.lnk . (.Pas de propriétaire.) -- C:\Users\christophe\AppData\Local\28069035.exe
              O4 - Global Startup: C:\Users\christophe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Mail\WinMail.exe
              O4 - Global Startup: C:\Users\christophe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
              O4 - Global Startup: C:\Users\christophe\Desktop\CCleaner.lnk . (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe
              O4 - Global Startup: C:\Users\christophe\Desktop\DVD Shrink 3.2.lnk . (.DVD Shrink.) -- C:\Program Files\DVD Shrink\DVD Shrink 3.2.exe
              O4 - Global Startup: C:\Users\christophe\Desktop\Free FLV Converter.lnk . (.Koyote Soft.) -- C:\Program Files\Free FLV Converter\FreeFLVConverter.exe
              O4 - Global Startup: C:\Users\christophe\Desktop\LogonStudio Vista.lnk . (.Stardock Corporation.) -- C:\Program Files\Stardock\Object Desktop\LogonStudio\LogonStudioVista.exe
              O4 - Global Startup: C:\Users\christophe\Desktop\RICE.lnk . (.Pas de propriétaire.) -- C:\Users\christophe\Downloads\ RICE.pdf
              O4 - Global Startup: C:\Users\christophe\Desktop\Windows Live Messenger .lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
              O4 - Global Startup: C:\Users\christophe\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Free FLV Converter.lnk . (.Koyote Soft.) -- C:\Program Files\Free FLV Converter\FreeFLVConverter.exe
              O4 - Global Startup: C:\Users\christophe\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
              O4 - Global Startup: C:\Users\christophe\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe
              O4 - Global Startup: C:\Users\christophe\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PartyPoker.fr.lnk . (.Pas de propriétaire.) -- C:\Users\christophe\Desktop\PartyFrance.exe (.not file.)
              O4 - Global Startup: C:\Users\christophe\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - Clé orpheline
              O4 - Global Startup: C:\Users\christophe\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Vuze.lnk . (.Vuze Inc..) -- C:\Program Files\Vuze\Azureus.exe
              O4 - Global Startup: C:\Users\christophe\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - Clé orpheline
              O4 - Global Startup: C:\Users\christophe\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
              O4 - Global Startup: C:\Users\christophe\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk . (.BitTorrent, Inc..) -- C:\Program Files\uTorrent\uTorrent.exe

              ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
              O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~3\Office12\EXCEL.exe

              ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
              O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
              O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft Office OneNote Internet Explorer Add-in.) -- C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
              O9 - Extra 'Tools' menuitem: PartyPoker.fr - {725EC34E-943C-4df6-B0B2-FBDE7F242276} . (.not file.) - C:\Users\christophe\Desktop\PartyPokerFr\images\ppicon.ico
              O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (.Pas de propriétaire - Pas de description.) -- C:\PROGRA~1\MICROS~3\Office12\REFBARH.ICO

              ---\\ Winsock hijacker (Layered Service Provider) (O10)
              O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
              O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
              O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
              O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
              O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
              O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll

              ---\\ Objets ActiveX (Downloaded Program Files)(O16)
              O16 - DPF: {2357B3CF-7F8D-4451-8D81-FD6097610AEE} (CamfrogWEB Advanced Unicode Control) - http://activex.camfrogweb.com/advanced/2.0.1.14/cfweb_activex.camfrogweb.com-advanced-2.0.1.14_instmodule.exe

              ---\\ Modification Domaine/Adresses DNS (O17)
              O17 - HKLM\System\CCS\Services\Tcpip\..\{5B0D89E9-F25A-44AF-B858-E518320D2908}: DhcpNameServer = 212.27.40.241 212.27.40.240
              O17 - HKLM\System\CS1\Services\Tcpip\..\{5B0D89E9-F25A-44AF-B858-E518320D2908}: DhcpNameServer = 212.27.40.241 212.27.40.240
              O17 - HKLM\System\CS3\Services\Tcpip\..\{5B0D89E9-F25A-44AF-B858-E518320D2908}: DhcpNameServer = 212.27.40.241 212.27.40.240
              O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.241 212.27.40.240

              ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
              O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll

              ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
              O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\System32\webcheck.dll

              ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
              O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll

              ---\\ Liste des services NT non Microsoft et non désactivés (O23)
              O23 - Service: avast! iAVS4 Control Service (aswUpdSv) . (.ALWIL Software - avast! Antivirus updating service.) - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
              O23 - Service: avast! Antivirus (avast! Antivirus) . (.ALWIL Software - avast! antivirus service.) - C:\Program Files\Alwil Software\Avast4\ashServ.exe
              O23 - Service: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.exe
              O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.exe
              O23 - Service: France Telecom Routing Table Service (FTRTSVC) . (.France Telecom SA - Pas de description.) - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\1\FTRTSVC.exe
              O23 - Service: HP Health Check Service (HP Health Check Service) . (.Hewlett-Packard - HP Health Check Service.) - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
              O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) . (.Hewlett-Packard Company - LightScribe Service.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
              O23 - Service: Recovery Service for Windows (Recovery Service for Windows) . (.Pas de propriétaire - STServices.) - C:\Program Files\SMINST\BLService.exe
              O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) . (.Pas de propriétaire - RichVideo Module.) - C:\Program Files\CyberLink\Shared files\RichVideo.exe
              O23 - Service: XAudioService (XAudioService) . (.Conexant Systems, Inc. - Modem Audio Service.) - C:\Windows\system32\DRIVERS\xaudio.exe

              ---\\ Enumération Active Desktop & MHTML Editor (O24)
              O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\Program Files\Microsoft Office\Office12\WINWORD.exe

              ---\\ Tâches planifiées en automatique (O39)
              O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Ad-Aware Update (Weekly).job

              ---\\ Composants installés (ActiveSetup Installed Components) (O40)
              O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\regutils.dll
              O40 - ASIC: LightScribe Control Panel - {10880D85-AAD9-4558-ABDC-2AB1552D831F} . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Common Files\LightScribe\LSRunOnce.exe
              O40 - ASIC: Adobe Flash Player 9 ActiveX - {D27CDB6E-AE6D-11CF-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 9.0 r124.) -- C:\Windows\system32\Macromed\Flash\Flash9f.ocx

              ---\\ Logiciels installés (O42)
              O42 - Logiciel: ABBYY FineReader 6.0 Sprint - (.ABBYY Software House.) [HKLM] -- {ACF60000-22B9-4CE9-98D6-2CCF359BAC07}
              O42 - Logiciel: Activation Assistant for the 2007 Microsoft Office suites - (.Microsoft Corporation.) [HKLM] -- Activation Assistant for the 2007 Microsoft Office suites
              O42 - Logiciel: ActiveCheck component for HP Active Support Library - (.Hewlett-Packard.) [HKLM] -- {254C37AA-6B72-4300-84F6-98A82419187E}
              O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
              O42 - Logiciel: Adobe Flash Player 9 ActiveX - (.Adobe Systems.) [HKLM] -- ShockwaveFlash
              O42 - Logiciel: Adobe Flash Player ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
              O42 - Logiciel: Adobe Reader 9.3.4 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A93000000001}
              O42 - Logiciel: Adobe Shockwave Player - (.Adobe Systems, Inc..) [HKLM] -- {AD72CFB4-C2BF-424E-9DF0-C7BAD1F30A11}
              O42 - Logiciel: Ask.com Search Assistant 1.0.1 - (.Ask.com.) [HKLM] -- Ask.com Search Assistant
              O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
              O42 - Logiciel: Atheros Driver Installation Program - (.Atheros.) [HKLM] -- {C3A32068-8AB1-4327-BB16-BED9C6219DC7}
              O42 - Logiciel: CCleaner (remove only) - (.Piriform.) [HKLM] -- CCleaner
              O42 - Logiciel: CamfrogWEB Advanced ActiveX Plugin (remove only) - (.Pas de propriétaire.) [HKLM] -- CFWebAdvancedU
              O42 - Logiciel: Cisco EAP-FAST Module - (.Cisco Systems, Inc..) [HKLM] -- {415B2719-AD3A-4944-B404-C472DB6085B3}
              O42 - Logiciel: Cisco LEAP Module - (.Cisco Systems, Inc..) [HKLM] -- {83770D14-21B9-44B3-8689-F7B523F94560}
              O42 - Logiciel: Cisco PEAP Module - (.Cisco Systems, Inc..) [HKLM] -- {669C7BD8-DAA2-49B6-966C-F1E2AAE6B17E}
              O42 - Logiciel: Conexant HD Audio - (.Conexant.) [HKLM] -- CNXT_AUDIO_HDA
              O42 - Logiciel: CyberLink DVD Suite - (.CyberLink Corp..) [HKLM] -- InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}
              O42 - Logiciel: CyberLink DVD Suite - (.CyberLink Corp..) [HKLM] -- {1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}
              O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}
              O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D}
              O42 - Logiciel: DVD Shrink 3.2 - (.DVD Shrink.) [HKLM] -- DVD Shrink_is1
              O42 - Logiciel: EPSON SX100 Series Printer Uninstall - (.SEIKO EPSON Corporation.) [HKLM] -- EPSON SX100 Series
              O42 - Logiciel: EPSON Scan - (.Pas de propriétaire.) [HKLM] -- EPSON Scanner
              O42 - Logiciel: EPSON Stylus SX100_TX100 Manuel - (.Pas de propriétaire.) [HKLM] -- EPSON Stylus SX100_TX100 Guide d'utilisation
              O42 - Logiciel: ESU for Microsoft Vista - (.Hewlett-Packard.) [HKLM] -- {3877C901-7B90-4727-A639-B6ED2DD59D43}
              O42 - Logiciel: Epson Easy Photo Print 2 - (.SEIKO EPSON CORPORATION.) [HKLM] -- {DEDB47A3-C988-4A43-A645-E2CEA571E680}
              O42 - Logiciel: Favorit (ucqwmt) - (.Pas de propriétaire.) [HKLM] -- ucqwmt
              O42 - Logiciel: Free FLV Converter V 6.5 - (.Koyote Soft.) [HKLM] -- Free FLV Converter_is1
              O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {B131E59D-202C-43C6-84C9-68F0C37541F1}
              O42 - Logiciel: HDAUDIO Soft Data Fax Modem with SmartCP - (.Pas de propriétaire.) [HKLM] -- CNXT_MODEM_HDAUDIO_HERMOSA_HSF
              O42 - Logiciel: HP Active Support Library - (.Hewlett-Packard.) [HKLM] -- {CE7E3BE0-2DD3-4416-A690-F9E4A99A8CFF}
              O42 - Logiciel: HP Customer Experience Enhancements - (.Hewlett-Packard.) [HKLM] -- {57A5AEC1-97FC-474D-92C4-908FCC2253D4}
              O42 - Logiciel: HP DVD Play 3.7 - (.Hewlett-Packard.) [HKLM] -- {45D707E9-F3C4-11D9-A373-0050BAE317E1}
              O42 - Logiciel: HP Doc Viewer - (.Hewlett-Packard.) [HKLM] -- {082702D5-5DD8-4600-BCE5-48B15174687F}
              O42 - Logiciel: HP Help and Support - (.Hewlett-Packard Company.) [HKLM] -- {0054A0F6-00C9-4498-B821-B5C9578F433E}
              O42 - Logiciel: HP Quick Launch Buttons 6.40 H2 - (.Hewlett-Packard.) [HKLM] -- {34D2AB40-150D-475D-AE32-BD23FB5EE355}
              O42 - Logiciel: HP Total Care Advisor - (.Hewlett-Packard.) [HKLM] -- {154A4184-1A3D-4BF9-A5AE-4FA1660445F3}
              O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM] -- {C8FD5BC1-92EF-4C15-92A9-F9AC7F61985F}
              O42 - Logiciel: HP User Guides 0118 - (.Hewlett-Packard.) [HKLM] -- {B6D0B141-B2BE-4DD0-B08F-B9186F3E36B3}
              O42 - Logiciel: HP Wireless Assistant - (.Hewlett-Packard.) [HKLM] -- {9ADABDDE-9644-461B-9E73-83FA3EFCAB50}
              O42 - Logiciel: HPAsset component for HP Active Support Library - (.Hewlett-Packard.) [HKLM] -- {669D4A35-146B-4314-89F1-1AC3D7B88367}
              O42 - Logiciel: HPNetworkAssistant - (.Hewlett-Packard..) [HKLM] -- {228C6B46-64E2-404E-898A-EF0830603EF4}
              O42 - Logiciel: HPTCSSetup - (.Hewlett-Packard Company.) [HKLM] -- {846DDADA-0239-4B67-A6B1-33658863793B}
              O42 - Logiciel: HTview - (.Pas de propriétaire.) [HKLM] -- HTview
              O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
              O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
              O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3
              O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {46ABBC54-1872-4AA3-95E2-F2C063A63F31}
              O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Intel Corporation.) [HKLM] -- HDMI
              O42 - Logiciel: Java(TM) 6 Update 16 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216013FF}
              O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {E2DFE069-083E-4631-9B6C-43C48E991DE5}
              O42 - Logiciel: K-Lite Codec Pack 5.0.5 (Full) - (.Pas de propriétaire.) [HKLM] -- KLiteCodecPack_is1
              O42 - Logiciel: LG PC Suite - (.LGE.) [HKLM] -- {993960EE-CA4D-443F-8F88-E24260DD5FD2}
              O42 - Logiciel: LG USB Modem driver - (.LG Electronics.) [HKLM] -- {C3ABE126-2BB2-4246-BFE1-6797679B3579}
              O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM] -- InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}
              O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM] -- {C59C179C-668D-49A9-B6EA-0121CCFC1243}
              O42 - Logiciel: LightScribe System Software 1.14.17.1 - (.LightScribe.) [HKLM] -- {0E7DBD52-B097-4F2B-A7C7-F105B0D20FDB}
              O42 - Logiciel: LimeWire 5.5.8 - (.Lime Wire, LLC.) [HKLM] -- LimeWire
              O42 - Logiciel: LogonStudio Vista - (.Pas de propriétaire.) [HKLM] -- LogonStudio Vista
              O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
              O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
              O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
              O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
              O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) [HKLM] -- {3E31821C-7917-367E-938E-E65FC413EA31}
              O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
              O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
              O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
              O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
              O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
              O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
              O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}_HOMESTUDENTR_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
              O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-00A1-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
              O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
              O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}
              O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.) [HKLM] -- HOMESTUDENTR
              O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}
              O42 - Logiciel: Microsoft Office Live Add-in 1.3 - (.Microsoft Corporation.) [HKLM] -- {57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}
              O42 - Logiciel: Microsoft Office OneNote MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-00A1-040C-0000-0000000FF1CE}
              O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}
              O42 - Logiciel: Microsoft Office PowerPoint Viewer 2007 (French) - (.Microsoft Corporation.) [HKLM] -- {95120000-00AF-040C-0000-0000000FF1CE}
              O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}
              O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}
              O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}
              O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}
              O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}
              O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}
              O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE}
              O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}_HOMESTUDENTR_{14809F99-C601-4D4A-9391-F1E8FAA964C5}
              O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}
              O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
              O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}
              O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}_HOMESTUDENTR_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
              O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}
              O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}
              O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}
              O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
              O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) [HKLM] -- {4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
              O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
              O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {8A74E887-8F0F-4017-AF53-CBA42211AAA5}
              O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
              O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}
              O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {7299052b-02a4-4627-81f2-1818da5d550d}
              O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {3B160861-7250-451E-B5EE-8B92BF30A710}
              O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-040C-0000-0000000FF1CE}
              O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 Language Pack SP1 - fra
              O42 - Logiciel: Mozilla Firefox (3.5.13) - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.5.13)
              O42 - Logiciel: My HP Games - (.WildTangent.) [HKLM] -- WildTangent hp Master Uninstall
              O42 - Logiciel: NetWaiting - (.BVRP Software, Inc.) [HKLM] -- {3F92ABBB-6BBF-11D5-B229-002078017FBF}
              O42 - Logiciel: Orange - Logiciels Internet - (.Pas de propriétaire.) [HKLM] -- {ORAHSS}.UninstallSuite
              O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}
              O42 - Logiciel: PartyPoker.fr - (.PartyFrance.) [HKLM] -- PartyPokerFr
              O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM] -- InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}
              O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM] -- {40BF1E83-20EB-11D8-97C5-0009C5020658}
              O42 - Logiciel: PowerDirector - (.CyberLink Corp..) [HKLM] -- InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}
              O42 - Logiciel: PowerDirector - (.CyberLink Corp..) [HKLM] -- {CB099890-1D5F-11D5-9EA9-0050BAE317E1}
              O42 - Logiciel: Raptr - (.Pas de propriétaire.) [HKLM] -- Raptr
              O42 - Logiciel: Realtek 8169 8168 8101E 8102E Ethernet Driver - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
              O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM] -- {DC24971E-1946-445D-8A82-CE685433FA7D}
              O42 - Logiciel: SFR - Kit de connexion - (.SFR.) [HKLM] -- SFR_Kit
              O42 - Logiciel: SPORE Creature Creator Trial Edition - (.Electronic Arts.) [HKLM] -- {ECEE0279-785F-4CB3-9F28-E69813234BF8}
              O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2277947) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{5857EE21-03D0-482E-9620-5A30B314A2AE}
              O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288621) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{5C497F0B-2061-4CC9-A61C-6B45B867354D}
              O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB969559) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
              O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB976321) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{7F207DCA-3399-40CB-A968-6E5991B1421A}
              O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB982312) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{B0EC5722-241F-4CDA-83B4-AA5846B6F9F4}
              O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB982331) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{E8766951-2B6C-4022-86E8-80D2D1762B76}
              O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB982308) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C3F9A0DC-A5D1-4BB6-870E-2953E5A2487B}
              O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB979441) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{8CCB781A-CF6B-4FCB-B6D8-59C64DF5C6DB}
              O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB982158) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{F5B70033-E79C-4569-90BF-BC9B4E4F3F46}
              O42 - Logiciel: Security Update for Microsoft Office Visio Viewer 2007 (KB973709) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
              O42 - Logiciel: Security Update for Microsoft Office Word 2007 (KB2251419) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{7E9103DA-253F-41FF-9E83-7C83806C77DA}
              O42 - Logiciel: Security Update for Microsoft Office system 2007 (972581) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}
              O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB974234) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{FCD742B9-7A55-44BC-A776-F795F21FEDDC}
              O42 - Logiciel: Spelling Dictionaries Support For Adobe Reader 9 - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-5464-3428-900000000004}
              O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics.) [HKLM] -- SynTPDeinstKey
              O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}
              O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
              O42 - Logiciel: Update for Microsoft Office OneNote 2007 (KB980729) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{329050A9-EF80-40F9-B633-74508F54C1FF}
              O42 - Logiciel: VLC media player 0.9.9 - (.VideoLAN Team.) [HKLM] -- VLC media player
              O42 - Logiciel: Visual C++ 2008 x86 Runtime - (v9.0.30729) - (.Microsoft Corporation.) [HKLM] -- {F333A33D-125C-32A2-8DCE-5C5D14231E27}
              O42 - Logiciel: Visual C++ 2008 x86 Runtime - v9.0.30729.01 - (.Microsoft Corporation.) [HKLM] -- {F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01
              O42 - Logiciel: Vuze - (.Vuze Inc..) [HKLM] -- 8461-7759-5462-8226
              O42 - Logiciel: Vuze Remote Toolbar - (.Vuze Remote.) [HKLM] -- Vuze_Remote Toolbar
              O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
              O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3B4E636E-9D65-4D67-BA61-189800823F52}
              O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM] -- {2075CB0A-D26F-4DAA-B424-5079296B43BA}
              O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {5DD76286-9BE7-4894-A990-E905E91AC818}
              O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {770F1BEC-2871-4E70-B837-FB8525FFA3B1}
              O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM] -- {53B20C18-D8D4-4588-8737-9BBFE303C354}
              O42 - Logiciel: Windows Live OneCare safety scanner - (.Microsoft Corporation.) [HKLM] -- Windows Live OneCare safety scanner
              O42 - Logiciel: Windows Live OneCare safety scanner - (.Microsoft Corporation.) [HKLM] -- {FE0646A7-19D0-41B4-A2BB-2C35D644270D}
              O42 - Logiciel: Windows Live Toolbar - (.Microsoft Corporation.) [HKLM] -- {F7D27C70-90F5-49B9-B188-0A133C0CE353}
              O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {4634B21A-CC07-4396-890C-2B8168661FEA}
              O42 - Logiciel: avast! Antivirus - (.Alwil Software.) [HKLM] -- avast!
              O42 - Logiciel: eMule - (.Pas de propriétaire.) [HKLM] -- eMule
              O42 - Logiciel: muvee Reveal - (.muvee Technologies Pte Ltd.) [HKLM] -- {DD35C328-F115-BEDA-6EEE-E00C5AACCCBC}
              O42 - Logiciel: x3Codec - (.C4DL Media.) [HKLM] -- x3Codec
              O42 - Logiciel: µTorrent - (.Pas de propriétaire.) [HKCU] -- uTorrent

              ---\\ HKCU & HKLM Software Keys
              [HKCU\Software\ABBYY]
              [HKCU\Software\ALWIL Software]
              [HKCU\Software\Adobe]
              [HKCU\Software\AppDataLow\Software\Adobe]
              [HKCU\Software\AppDataLow\Software\Conduit]
              [HKCU\Software\AppDataLow\Software\Macromedia]
              [HKCU\Software\AppDataLow\Software\Microsoft]
              [HKCU\Software\AppDataLow\Software\Monitored]
              [HKCU\Software\AppDataLow\Software\Vuze_Remote]
              [HKCU\Software\AppDataLow\Software\settings]
              [HKCU\Software\AppDataLow\Software]
              [HKCU\Software\AppDataLow\Toolbar]
              [HKCU\Software\AppDataLow]
              [HKCU\Software\AskSearchAsst]
              [HKCU\Software\Azureus]
              [HKCU\Software\BitTorrent]
              [HKCU\Software\Camfrog]
              [HKCU\Software\Classes]
              [HKCU\Software\Clients]
              [HKCU\Software\Conduit]
              [HKCU\Software\CoreVorbis]
              [HKCU\Software\CyberLink]
              [HKCU\Software\DSP-worx]
              [HKCU\Software\DVD Shrink]
              [HKCU\Software\DivXNetworks]
              [HKCU\Software\EPSON]
              [HKCU\Software\GNU]
              [HKCU\Software\GSpot Appliance Corp]
              [HKCU\Software\Gabest]
              [HKCU\Software\HTview]
              [HKCU\Software\Haali]
              [HKCU\Software\Hewlett-Packard]
              [HKCU\Software\IM Providers]
              [HKCU\Software\Intel]
              [HKCU\Software\JavaSoft]
              [HKCU\Software\LG Electronics Inc]
              [HKCU\Software\LG Media Player]
              [HKCU\Software\LightScribe]
              [HKCU\Software\Local AppWizard-Generated Applications]
              [HKCU\Software\Macromedia]
              [HKCU\Software\Magnet]
              [HKCU\Software\MainConcept (Muvee Consumer)]
              [HKCU\Software\MainConcept (Muvee)]
              [HKCU\Software\MainConcept]
              [HKCU\Software\Malwarebytes' Anti-Malware]
              [HKCU\Software\MediaInfo]
              [HKCU\Software\Mozilla]
              [HKCU\Software\Netscape]
              [HKCU\Software\ODBC]
              [HKCU\Software\Official-eMule]
              [HKCU\Software\Opendisc]
              [HKCU\Software\PartyFrance]
              [HKCU\Software\Piriform]
              [HKCU\Software\Policies]
              [HKCU\Software\Raptr]
              [HKCU\Software\RealNetworks]
              [HKCU\Software\SEIKO EPSON]
              [HKCU\Software\Skype]
              [HKCU\Software\Synaptics]
              [HKCU\Software\Trolltech]
              [HKCU\Software\VB and VBA Program Settings]
              [HKCU\Software\YahooPartnerToolbar]
              [HKCU\Software\eMule]
              [HKCU\Software\ej-technologies]
              [HKCU\Software\kde.org]
              [HKLM\Software\ABBYY]
              [HKLM\Software\ALWIL Software]
              [HKLM\Software\Adobe]
              [HKLM\Software\Atheros]
              [HKLM\Software\Azureus]
              [HKLM\Software\BVRP Software, Inc]
              [HKLM\Software\CXT]
              [HKLM\Software\Classes]
              [HKLM\Software\Clients]
              [HKLM\Software\Codec Tweak Tool]
              [HKLM\Software\Conduit]
              [HKLM\Software\Conexant Systems Inc ]
              [HKLM\Software\Conexant]
              [HKLM\Software\Cyberlink]
              [HKLM\Software\Debug]
              [HKLM\Software\DivXNetworks]
              [HKLM\Software\EPSON]
              [HKLM\Software\EasyBits]
              [HKLM\Software\Electronic Arts]
              [HKLM\Software\FRANCE TELECOM]
              [HKLM\Software\GNU]
              [HKLM\Software\HPQ]
              [HKLM\Software\HP]
              [HKLM\Software\HaaliMkx]
              [HKLM\Software\Hewlett-Packard Company]
              [HKLM\Software\Hewlett-Packard]
              [HKLM\Software\InstallShield]
              [HKLM\Software\InstalledOptions]
              [HKLM\Software\Intel]
              [HKLM\Software\JavaSoft]
              [HKLM\Software\KLCodecPack]
              [HKLM\Software\LG Electronics]
              [HKLM\Software\LG PC Suite2]
              [HKLM\Software\LGE]
              [HKLM\Software\LabelPrint_Upgrade]
              [HKLM\Software\LightScribe]
              [HKLM\Software\Macromedia]
              [HKLM\Software\Malwarebytes' Anti-Malware]
              [HKLM\Software\MimarSinan]
              [HKLM\Software\MozillaPlugins]
              [HKLM\Software\Mozilla]
              [HKLM\Software\Neuf]
              [HKLM\Software\Notepad]
              [HKLM\Software\ODBC]
              [HKLM\Software\Official-eMule]
              [HKLM\Software\P2G_Upgrade]
              [HKLM\Software\PDR_Upgrade]
              [HKLM\Software\Policies]
              [HKLM\Software\Product_Upgrade]
              [HKLM\Software\RTLSetup]
              [HKLM\Software\RealNetworks]
              [HKLM\Software\Realtek Semiconductor Corp.]
              [HKLM\Software\Realtek USB 2.0 Card Reader]
              [HKLM\Software\Realtek]
              [HKLM\Software\RegisteredApplications]
              [HKLM\Software\S3R521]
              [HKLM\Software\SECURITOO]
              [HKLM\Software\Stardock]
              [HKLM\Software\Symantec]
              [HKLM\Software\Synaptics]
              [HKLM\Software\UCAM_Upgrade]
              [HKLM\Software\VideoLAN]
              [HKLM\Software\Vuze_Remote]
              [HKLM\Software\WOW6432Node]
              [HKLM\Software\WildTangent]
              [HKLM\Software\Windows]
              [HKLM\Software\ej-technologies]
              [HKLM\Software\mozilla.org]

              ---\\ Contenu des dossiers ProgramFiles/ProgramData (O43)
              O43 - CFD:Common File Directory ----D- C:\Program Files\ABBYY FineReader 6.0 Sprint
              O43 - CFD:Common File Directory ----D- C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
              O43 - CFD:Common File Directory ----D- C:\Program Files\Adobe
              O43 - CFD:Common File Directory ----D- C:\Program Files\adslTV
              O43 - CFD:Common File Directory ----D- C:\Program Files\Alwil Software
              O43 - CFD:Common File Directory ----D- C:\Program Files\Ask Search Assistant
              O43 - CFD:Common File Directory ----D- C:\Program Files\Atheros
              O43 - CFD:Common File Directory ----D- C:\Program Files\CCleaner
              O43 - CFD:Common File Directory ----D- C:\Program Files\CFWebAdvancedU
              O43 - CFD:Common File Directory ----D- C:\Program Files\Cisco
              O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files
              O43 - CFD:Common File Directory ----D- C:\Program Files\Conduit
              O43 - CFD:Common File Directory ----D- C:\Program Files\CONEXANT
              O43 - CFD:Common File Directory ----D- C:\Program Files\CyberLink
              O43 - CFD:Common File Directory ----D- C:\Program Files\DVD Shrink
              O43 - CFD:Common File Directory ----D- C:\Program Files\EasyBits For Kids
              O43 - CFD:Common File Directory ----D- C:\Program Files\eMule
              O43 - CFD:Common File Directory ----D- C:\Program Files\epson
              O43 - CFD:Common File Directory ----D- C:\Program Files\Epson Software
              O43 - CFD:Common File Directory -SH-D- C:\Program Files\Fichiers communs
              O43 - CFD:Common File Directory ----D- C:\Program Files\Free FLV Converter
              O43 - CFD:Common File Directory ----D- C:\Program Files\Hewlett-Packard
              O43 - CFD:Common File Directory ----D- C:\Program Files\Hewlett-Packard Company
              O43 - CFD:Common File Directory ----D- C:\Program Files\HP
              O43 - CFD:Common File Directory ----D- C:\Program Files\HP Games
              O43 - CFD:Common File Directory ----D- C:\Program Files\HTview
              O43 - CFD:Common File Directory --H-D- C:\Program Files\InstallShield Installation Information
              O43 - CFD:Common File Directory ----D- C:\Program Files\Intel
              O43 - CFD:Common File Directory ----D- C:\Program Files\Internet Explorer
              O43 - CFD:Common File Directory ----D- C:\Program Files\Java
              O43 - CFD:Common File Directory ----D- C:\Program Files\K-Lite Codec Pack
              O43 - CFD:Common File Directory ----D- C:\Program Files\LG Electronics
              O43 - CFD:Common File Directory ----D- C:\Program Files\LG PC Suite 2
              O43 - CFD:Common File Directory ----D- C:\Program Files\LimeWire
              O43 - CFD:Common File Directory ----D- C:\Program Files\Malwarebytes' Anti-Malware
              O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft
              O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Games
              O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Office
              O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Silverlight
              O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft SQL Server Compact Edition
              O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Sync Framework
              O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Works
              O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft.NET
              O43 - CFD:Common File Directory ----D- C:\Program Files\Movie Maker
              O43 - CFD:Common File Directory ----D- C:\Program Files\Mozilla Firefox
              O43 - CFD:Common File Directory ----D- C:\Program Files\MSBuild
              O43 - CFD:Common File Directory ----D- C:\Program Files\MSXML 4.0
              O43 - CFD:Common File Directory ----D- C:\Program Files\muvee Technologies
              O43 - CFD:Common File Directory ----D- C:\Program Files\NetWaiting
              O43 - CFD:Common File Directory R---D- C:\Program Files\Online Services
              O43 - CFD:Common File Directory ----D- C:\Program Files\OrangeHSS
              O43 - CFD:Common File Directory ----D- C:\Program Files\Raptr
              O43 - CFD:Common File Directory ----D- C:\Program Files\Realtek
              O43 - CFD:Common File Directory ----D- C:\Program Files\Reference Assemblies
              O43 - CFD:Common File Directory ----D- C:\Program Files\SFR
              O43 - CFD:Common File Directory ----D- C:\Program Files\SMINST
              O43 - CFD:Common File Directory ----D- C:\Program Files\Stardock
              O43 - CFD:Common File Directory ----D- C:\Program Files\Synaptics
              O43 - CFD:Common File Directory --H-D- C:\Program Files\Uninstall Information
              O43 - CFD:Common File Directory ----D- C:\Program Files\uTorrent
              O43 - CFD:Common File Directory ----D- C:\Program Files\VideoLAN
              O43 - CFD:Common File Directory ----D- C:\Program Files\Vuze
              O43 - CFD:Common File Directory ----D- C:\Program Files\Vuze_Remote
              O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Calendar
              O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Collaboration
              O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Defender
              O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live
              O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live Safety Center
              O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live SkyDrive
              O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Mail
              O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Media Player
              O43 - CFD:Common File Directory ----D- C:\Program Files\Windows NT
              O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Photo Gallery
              O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Sidebar
              O43 - CFD:Common File Directory ----D- C:\Program Files\x3Codec
              O43 - CFD:Common File Directory ----D- C:\Program Files\ZHPDiag
              O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Adobe
              O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\DESIGNER
              O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\France Telecom
              O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\InstallShield
              O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\LightScribe
              O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\microsoft shared
              O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\muvee Technologies
              O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Services
              O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\SpeechEngines
              O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\System
              O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Windows Live
              O43 - CFD:Common File Directory ----D- C:\ProgramData\Adobe
              O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Application Data
              O43 - CFD:Common File Directory ----D- C:\ProgramData\Atheros
              O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Bureau
              O43 - CFD:Common File Directory ----D- C:\ProgramData\CyberLink
              O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Desktop
              O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Documents
              O43 - CFD:Common File Directory ----D- C:\ProgramData\DVD Shrink
              O43 - CFD:Common File Directory ----D- C:\ProgramData\eMule
              O43 - CFD:Common File Directory ----D- C:\ProgramData\EPSON
              O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Favoris
              O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Favorites
              O43 - CFD:Common File Directory ----D- C:\ProgramData\Hewlett-Packard
              O43 - CFD:Common File Directory ----D- C:\ProgramData\Lavasoft
              O43 - CFD:Common File Directory ----D- C:\ProgramData\Malwarebytes
              O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Menu Démarrer
              O43 - CFD:Common File Directory -S--D- C:\ProgramData\Microsoft
              O43 - CFD:Common File Directory ----D- C:\ProgramData\Microsoft Help
              O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Modèles
              O43 - CFD:Common File Directory ----D- C:\ProgramData\Norton
              O43 - CFD:Common File Directory ----D- C:\ProgramData\NortonInstaller
              O43 - CFD:Common File Directory ----D- C:\ProgramData\Real
              O43 - CFD:Common File Directory ----D- C:\ProgramData\Skype
              O43 - CFD:Common File Directory ----D- C:\ProgramData\Stardock
              O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Start Menu
              O43 - CFD:Common File Directory ----D- C:\ProgramData\Temp
              O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Templates
              O43 - CFD:Common File Directory ----D- C:\ProgramData\UDL
              O43 - CFD:Common File Directory ----D- C:\ProgramData\WildTangent
              O43 - CFD:Common File Directory ----D- C:\ProgramData\WindowsSearch
              O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Adobe
              O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\DESIGNER
              O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\France Telecom
              O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\InstallShield
              O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\LightScribe
              O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\microsoft shared
              O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\muvee Technologies
              O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Services
              O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\SpeechEngines
              O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\System
              O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Windows Live

              ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
              O44 - LFC:[MD5.64F2B87772F9B480D383E651A8E52653] - 03/10/2010 - 21:02:21 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\PerfStringBackup.INI [1498050]
              O44 - LFC:[MD5.1823141CB9AC89355FD67726B73C33C2] - 03/10/2010 - 21:02:21 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfc009.dat [104532]
              O44 - LFC:[MD5.88E9C3F5DFCFEA05067C48FCF5035A30] - 03/10/2010 - 21:02:21 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfc00C.dat [127470]
              O44 - LFC:[MD5.683917A0AACB841BB97BD96852EEE3CE] - 03/10/2010 - 21:02:21 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfh009.dat [590652]
              O44 - LFC:[MD5.F23074016DA0856E724491C4E47F4442] - 03/10/2010 - 21:02:21 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfh00C.dat [682674]
              O44 - LFC:[MD5.24CF1D34917C1D9046474C39D08AE5A7] - 03/10/2010 - 20:59:01 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\ntbtlog.txt [2332800]
              O44 - LFC:[MD5.383C1C6BF531C529063389CE4C7D4CB5] - 03/10/2010 - 20:58:06 -S-A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\bootstat.dat [67584]
              O44 - LFC:[MD5.E98476A2255EDBACE8DF6E4EB3B1A119] - 03/10/2010 - 20:56:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\WindowsUpdate.log [1478707]
              O44 - LFC:[MD5.351A556A37175F58B1D2A26CF2301B93] - 03/10/2010 - 19:04:01 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [3216]
              O44 - LFC:[MD5.351A556A37175F58B1D2A26CF2301B93] - 03/10/2010 - 19:04:00 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [3216]
              O44 - LFC:[MD5.2757A4747421D67E1179D484B68F7DEE] - 02/10/2010 - 16:14:19 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\FNTCACHE.DAT [310600]
              O44 - LFC:[MD5.9B50773AB774AE88B2D3226A8B69B9B9] - 02/10/2010 - 16:12:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\PFRO.log [17262]
              O44 - LFC:[MD5.09FB2099672F5E6EA85B7A1B16D5548A] - 02/10/2010 - 15:54:26 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\MRT.INI [127]
              O44 - LFC:[MD5.3F337DD54339BEAF26917D3A0A32C1DE] - 01/10/2010 - 04:27:26 ---A- . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll [81920]
              O44 - LFC:[MD5.A11A3587E50351F8AFAE0DA9BB64E032] - 01/10/2010 - 04:27:05 ---A- . (.Adobe Systems Incorporated - Windows NT OpenType/Type 1 Font Driver.) -- C:\Windows\System32\atmfd.dll [289792]
              O44 - LFC:[MD5.9D68F01600AC07080B5A4739951969C9] - 01/10/2010 - 04:27:04 ---A- . (.Adobe Systems - Windows NT OpenType/Type 1 API Library..) -- C:\Windows\System32\atmlib.dll [34304]
              O44 - LFC:[MD5.C7DD7D9739785BD3A6B8499EEC1DEE7E] - 01/10/2010 - 00:06:18 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\System32\drivers\mbamswissarmy.sys [38224]
              O44 - LFC:[MD5.67B48A903430C6D4FB58CBACA1866601] - 01/10/2010 - 00:06:17 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\System32\drivers\mbam.sys [20952]
              O44 - LFC:[MD5.26B0F12F9A4C267AF5B2DA35F87A6EFA] - 07/09/2010 - 20:26:54 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\DOErrors.log [52]

              ---\\ Export de clé d'application autorisée (ECAA) (O47)
              O47 - AAKE:Key Export SP - "C:\Program Files\OrangeHSS\Connectivity\ConnectivityManager.exe" [Enabled] .(.France Telecom SA - Pas de description.) -- C:\Program Files\OrangeHSS\Connectivity\ConnectivityManager.exe

              ---\\ MountPoints2 Shell Key (MPSK) (O51)
              O51 - MPSK:{ad6c70ec-8add-11de-b3ad-001f16598a51}\Shell\AutoRun\command. (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\cmd \C launch.bat (.not file.)

              ---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52)
              O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
              O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll
              O52 - TDSD: \Drivers32\"msacm.l3codecp"="l3codecp.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\Windows\System32\l3codecp.acm
              O52 - TDSD: \Drivers32\"VIDC.X264"="x264vfw.dll" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\x264vfw.dll
              O52 - TDSD: \Drivers32\"VIDC.DIVX"="divx.dll" . (.DivX, Inc. - DivX.) -- C:\Windows\System32\divx.dll
              O52 - TDSD: \Drivers32\"VIDC.VP60"="vp6vfw.dll" . (.On2.com - VP6 VIDEO FOR WINDOWS CODEC.) -- C:\Windows\System32\vp6vfw.dll
              O52 - TDSD: \Drivers32\"VIDC.VP61"="vp6vfw.dll" . (.On2.com - VP6 VIDEO FOR WINDOWS CODEC.) -- C:\Windows\System32\vp6vfw.dll
              O52 - TDSD: \Drivers32\"VIDC.VP62"="vp6vfw.dll" . (.On2.com - VP6 VIDEO FOR WINDOWS CODEC.) -- C:\Windows\System32\vp6vfw.dll
              O52 - TDSD: \Drivers32\"VIDC.VP70"="vp7vfw.dll" . (.On2.com - VP70 VIDEO FOR WINDOWS CODEC.) -- C:\Windows\System32\vp7vfw.dll
              O52 - TDSD: \Drivers32\"VIDC.XVID"="xvidvfw.dll" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\xvidvfw.dll
              O52 - TDSD: \Drivers32\"VIDC.HFYU"="huffyuv.dll" . (.Disappearing Inc. - Huffyuv lossless video codec.) -- C:\Windows\System32\huffyuv.dll
              O52 - TDSD: \Drivers32\"VIDC.YV12"="yv12vfw.dll" . (.www.helixcommunity.org - Helix YV12 YUV Codec.) -- C:\Windows\System32\yv12vfw.dll
              O52 - TDSD: \Drivers32\"VIDC.FFDS"="ff_vfw.dll" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\ff_vfw.dll
              O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
              O52 - TDSD: \drivers.desc\"C:\PROGRA~1\CYBERL~1\Power2Go\CLMP3Enc.ACM"="CyberLink MP3 Encoder" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
              O52 - TDSD: \drivers.desc\"x264vfw.dll"="x264 H.264 Video Codec" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
              O52 - TDSD: \drivers.desc\"divx.dll"="DivX 6.8.5" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
              O52 - TDSD: \drivers.desc\"vp6vfw.dll"="On2 VP6" . (.O
              2. terman
                O52 - TDSD: \Drivers32\"VIDC.VP60"="vp6vfw.dll" . (.On2.com - VP6 VIDEO FOR WINDOWS CODEC.) -- C:\Windows\System32\vp6vfw.dll
                O52 - TDSD: \Drivers32\"VIDC.VP61"="vp6vfw.dll" . (.On2.com - VP6 VIDEO FOR WINDOWS CODEC.) -- C:\Windows\System32\vp6vfw.dll
                O52 - TDSD: \Drivers32\"VIDC.VP62"="vp6vfw.dll" . (.On2.com - VP6 VIDEO FOR WINDOWS CODEC.) -- C:\Windows\System32\vp6vfw.dll
                O52 - TDSD: \Drivers32\"VIDC.VP70"="vp7vfw.dll" . (.On2.com - VP70 VIDEO FOR WINDOWS CODEC.) -- C:\Windows\System32\vp7vfw.dll
                O52 - TDSD: \Drivers32\"VIDC.XVID"="xvidvfw.dll" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\xvidvfw.dll
                O52 - TDSD: \Drivers32\"VIDC.HFYU"="huffyuv.dll" . (.Disappearing Inc. - Huffyuv lossless video codec.) -- C:\Windows\System32\huffyuv.dll
                O52 - TDSD: \Drivers32\"VIDC.YV12"="yv12vfw.dll" . (.www.helixcommunity.org - Helix YV12 YUV Codec.) -- C:\Windows\System32\yv12vfw.dll
                O52 - TDSD: \Drivers32\"VIDC.FFDS"="ff_vfw.dll" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\ff_vfw.dll
                O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
                O52 - TDSD: \drivers.desc\"C:\PROGRA~1\CYBERL~1\Power2Go\CLMP3Enc.ACM"="CyberLink MP3 Encoder" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
                O52 - TDSD: \drivers.desc\"x264vfw.dll"="x264 H.264 Video Codec" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
                O52 - TDSD: \drivers.desc\"divx.dll"="DivX 6.8.5" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
                O52 - TDSD: \drivers.desc\"vp6vfw.dll"="On2 VP6" . (.On2.com - VP6 VIDEO FOR WINDOWS CODEC.) -- C:\Windows\System32\vp6vfw.dll
                O52 - TDSD: \drivers.desc\"vp7vfw.dll"="On2 VP7" . (.On2.com - VP70 VIDEO FOR WINDOWS CODEC.) -- C:\Windows\System32\vp7vfw.dll
                O52 - TDSD: \drivers.desc\"xvidvfw.dll"="Xvid MPEG-4 Video Codec 1.2.2" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
                O52 - TDSD: \drivers.desc\"huffyuv.dll"="Huffyuv lossless codec" . (.Disappearing Inc. - Huffyuv lossless video codec.) -- C:\Windows\System32\huffyuv.dll
                O52 - TDSD: \drivers.desc\"ff_vfw.dll"="ffdshow video encoder" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\ff_vfw.dll

                ---\\ ShareTools MSconfig StartupReg (SMSR) (O53)
                O53 - SMSR:HKLM\...\startupreg\Adobe Reader Speed Launcher [Key] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
                O53 - SMSR:HKLM\...\startupreg\EPSON SX100 Series [Key] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIEDE.exe
                O53 - SMSR:HKLM\...\startupreg\HotKeysCmds [Key] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
                O53 - SMSR:HKLM\...\startupreg\HP Health Check Scheduler [Key] . (.Hewlett-Packard - HP Health Check Scheduler.) -- c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
                O53 - SMSR:HKLM\...\startupreg\HP Software Update [Key] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
                O53 - SMSR:HKLM\...\startupreg\HPAdvisor [Key] . (.Hewlett-Packard - HP Advisor.) -- C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
                O53 - SMSR:HKLM\...\startupreg\hpWirelessAssistant [Key] . (.Hewlett-Packard Development Company, L.P. - HPWAMain Module.) -- C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
                O53 - SMSR:HKLM\...\startupreg\IgfxTray [Key] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe
                O53 - SMSR:HKLM\...\startupreg\LightScribe Control Panel [Key] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
                O53 - SMSR:HKLM\...\startupreg\msnmsgr [Key] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                O53 - SMSR:HKLM\...\startupreg\ORAHSSSessionManager [Key] . (.France Telecom SA - Pas de description.) -- C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
                O53 - SMSR:HKLM\...\startupreg\Persistence [Key] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe
                O53 - SMSR:HKLM\...\startupreg\QlbCtrl.exe [Key] . (. Hewlett-Packard Development Company, L.P. - Quick Launch Buttons.) -- C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
                O53 - SMSR:HKLM\...\startupreg\QPService [Key] . (.CyberLink Corp. - HP QuickPlay Resident Program.) -- C:\Program Files\HP\QuickPlay\QPService.exe
                O53 - SMSR:HKLM\...\startupreg\SunJavaUpdateSched [Key] . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jusched.exe
                O53 - SMSR:HKLM\...\startupreg\SynTPEnh [Key] . (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                O53 - SMSR:HKLM\...\startupreg\UCam_Menu [Key] . (.CyberLink Corp. - StartMen Application.) -- C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe
                O53 - SMSR:HKLM\...\startupreg\UpdateLBPShortCut [Key] . (.CyberLink Corp. - StartMen Application.) -- C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe
                O53 - SMSR:HKLM\...\startupreg\UpdateP2GoShortCut [Key] . (.CyberLink Corp. - StartMen Application.) -- C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe
                O53 - SMSR:HKLM\...\startupreg\UpdatePDIRShortCut [Key] . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe7.0
                O53 - SMSR:HKLM\...\startupreg\UpdatePSTShortCut [Key] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe
                O53 - SMSR:HKLM\...\startupreg\Windows Defender [Key] . (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe

                ---\\ Microsoft Control Security Providers (MCSP) (O54)
                O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll
                O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll

                ---\\ Microsoft Windows Policies System (MWPS) (O55)
                O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=2
                O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=1
                O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
                O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
                O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
                O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
                O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
                O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
                O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
                O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=
                O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=
                O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
                O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
                O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
                O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
                O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0

                ---\\ Microsoft Windows Policies Explorer (MWPE) (O56)
                O56 - MWPE:[HKCU\...\policies\Explorer] - "NoRun"=0
                O56 - MWPE:[HKCU\...\policies\Explorer] - "NoFind"=0
                O56 - MWPE:[HKCU\...\policies\Explorer] - "NoLogOff"=0
                O56 - MWPE:[HKCU\...\policies\Explorer] - "NoSetFolders"=0
                O56 - MWPE:[HKCU\...\policies\Explorer] - "DisallowRun"=0
                O56 - MWPE:[HKLM\...\policies\Explorer] - "BindDirectlyToPropertySetStorage"=0

                ---\\ Liste des Drivers Système (SDL) (O58)
                O58 - SDL:[MD5.04F0FCAC69C7C71A3AC4EB97FAFC8303] - 21/01/2008 - 03:32:46 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys
                O58 - SDL:[MD5.60505E0041F7751BDBB80F88BF45C2CE] - 21/01/2008 - 03:32:51 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys
                O58 - SDL:[MD5.8A42779B02AEC986EAB64ECFC98F8BD7] - 21/01/2008 - 03:32:52 ---A- . (.Adaptec, Inc. - Adaptec LH Ultra160 Driver (x86).) -- C:\Windows\system32\drivers\adpu160m.sys
                O58 - SDL:[MD5.241C9E37F8CE45EF51C3DE27515CA4E5] - 21/01/2008 - 03:32:53 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\system32\drivers\adpu320.sys
                O58 - SDL:[MD5.5D2888182FB46632511ACEE92FDAD522] - 21/01/2008 - 03:32:49 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys
                O58 - SDL:[MD5.5E2A321BD7C8B3624E41FDEC3E244945] - 21/01/2008 - 03:32:50 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys
                O58 - SDL:[MD5.B4D09E666CB1D72F2CFAB3F8FB395518] - 05/02/2009 - 21:07:12 ---A- . (.ALWIL Software - avast! File System Access Blocking Driver.) -- C:\Windows\system32\drivers\aswFsBlk.sys
                O58 - SDL:[MD5.3532945DACCBA83C63A4379EB44B2859] - 05/02/2009 - 21:06:59 ---A- . (.ALWIL Software - avast! File System Minifilter for Windows 2003/Vista.) -- C:\Windows\system32\drivers\aswMonFlt.sys
                O58 - SDL:[MD5.4F25BB4A1299006AC04FA02D25A0E62D] - 05/02/2009 - 21:06:10 ---A- . (.ALWIL Software - avast! TDI RDR Driver.) -- C:\Windows\system32\drivers\aswRdr.sys
                O58 - SDL:[MD5.F8ABCEC435CB0F918C12FD84B6EAEE11] - 05/02/2009 - 21:07:23 ---A- . (.ALWIL Software - avast! self protection module.) -- C:\Windows\system32\drivers\aswSP.sys
                O58 - SDL:[MD5.95C9CCF994E7C39322AA2CA44A6F8382] - 05/02/2009 - 21:06:20 ---A- . (.ALWIL Software - avast! TDI Filter Driver.) -- C:\Windows\system32\drivers\aswTdi.sys
                O58 - SDL:[MD5.600EFE56F37ADBD65A0FB076B50D1B8D] - 27/04/2008 - 11:07:44 ---A- . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driver.) -- C:\Windows\system32\drivers\athr.sys
                O58 - SDL:[MD5.9F9ACC7F7CCDE8A15C282D3F88B43309] - 02/11/2006 - 09:24:45 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys
                O58 - SDL:[MD5.56801AD62213A41F6497F96DEE83755A] - 02/11/2006 - 09:24:46 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys
                O58 - SDL:[MD5.B304E75CFF293029EDDF094246747113] - 02/11/2006 - 09:25:24 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys
                O58 - SDL:[MD5.203F0B1E73ADADBBB7B7B1FABD901F6B] - 02/11/2006 - 09:24:44 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys
                O58 - SDL:[MD5.BD456606156BA17E60A04E18016AE54B] - 02/11/2006 - 09:24:44 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys
                O58 - SDL:[MD5.AF72ED54503F717A43268B3CC5FAEC2E] - 02/11/2006 - 09:24:47 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys
                O58 - SDL:[MD5.DDA0CB141150FEF87419926790CD26C8] - 03/10/2008 - 02:39:28 ---A- . (.Conexant Systems Inc. - High Definition Audio Function Driver.) -- C:\Windows\system32\drivers\CHDRT32.sys
                O58 - SDL:[MD5.AE1FDF7BF7BB6C6A70F67699D880592A] - 02/11/2006 - 10:50:11 ---A- . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\system32\drivers\djsvs.sys
                O58 - SDL:[MD5.5425F74AC0C1DBD96A1E04F17D63F94C] - 21/01/2008 - 03:32:50 ---A- . (.Intel Corporation - Pilote désérialisé NDIS 6 de la carte Intel(R) PRO/1000.) -- C:\Windows\system32\drivers\E1G60I32.sys
                O58 - SDL:[MD5.23B62471681A124889978F6295B3F4C6] - 21/01/2008 - 03:32:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys
                O58 - SDL:[MD5.16EE7B23A009E00D835CDB79574A91A6] - 21/01/2008 - 03:32:52 ---A- . (.Hewlett-Packard Company - Smart Array Storport Driver.) -- C:\Windows\system32\drivers\HpCISSs.sys
                O58 - SDL:[MD5.35956140E686D53BF676CF0C778880FC] - 18/06/2007 - 17:12:04 ---A- . (.Hewlett-Packard Development Company, L.P. - HpqKbFiltr Keyboard Filter Driver.) -- C:\Windows\system32\drivers\HpqKbFiltr.sys
                O58 - SDL:[MD5.A2882945CC4B6E3E4E9E825590438888] - 01/11/2007 - 02:47:54 ---A- . (.Conexant Systems, Inc. - HSF_HWAZL WDM driver.) -- C:\Windows\system32\drivers\HSXHWAZL.sys
                O58 - SDL:[MD5.0ACD399F5DB3DF1B58903CF4949AB5A8] - 01/11/2007 - 02:47:08 ---A- . (.Conexant Systems, Inc. - HSF_CNXT driver.) -- C:\Windows\system32\drivers\HSX_CNXT.sys
                O58 - SDL:[MD5.CC267848CB3508E72762BE65734E764D] - 01/11/2007 - 02:51:26 ---A- . (.Conexant Systems, Inc. - HSF_DP driver.) -- C:\Windows\system32\drivers\HSX_DPV.sys
                O58 - SDL:[MD5.54155EA1B0DF185878E0FC9EC3AC3A14] - 21/01/2008 - 03:32:49 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver (base).) -- C:\Windows\system32\drivers\iaStorV.sys
                O58 - SDL:[MD5.F1F52F4B4DD7CB8B47570690363F1B28] - 06/07/2008 - 21:15:24 ---A- . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\system32\drivers\igdkmd32.sys
                O58 - SDL:[MD5.2D077BF86E843F901D8DB709C95B49A5] - 02/11/2006 - 10:50:17 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\system32\drivers\iirsp.sys
                O58 - SDL:[MD5.C7E7E43CBD34D3B0A0156B51B917DFCC] - 29/06/2008 - 15:52:26 ---A- . (.Intel(R) Corporation - Intel(R) High Definition Audio HDMI.) -- C:\Windows\system32\drivers\IntcHdmi.sys
                O58 - SDL:[MD5.BCED60D16156E428F8DF8CF27B0DF150] - 02/11/2006 - 10:50:07 ---A- . (.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) -- C:\Windows\system32\drivers\iteatapi.sys
                O58 - SDL:[MD5.06FA654504A498C30ADCA8BEC4E87E7E] - 02/11/2006 - 10:50:09 ---A- . (.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) -- C:\Windows\system32\drivers\iteraid.sys
                O58 - SDL:[MD5.5AADC9297C39AA249CD994ACDBA19034] - 11/07/2007 - 10:40:18 ---A- . (.LG Electronics Inc. - LG CDMA USB Multi function Driver.) -- C:\Windows\system32\drivers\lgusbbus.sys
                O58 - SDL:[MD5.4650FFE04E5922399B0E932319E6B215] - 11/07/2007 - 15:51:48 ---A- . (.LG Electronics Inc. - LG CDMA USB Diagnostics Driver.) -- C:\Windows\system32\drivers\lgusbdiag.sys
                O58 - SDL:[MD5.2666FE171E0C2E7085CCD5FE0BAC09E3] - 11/07/2007 - 10:45:00 ---A- . (.LG Electronics Inc. - LG CDMA USB Modem Driver.) -- C:\Windows\system32\drivers\lgusbmodem.sys
                O58 - SDL:[MD5.C7E15E82879BF3235B559563D4185365] - 21/01/2008 - 03:32:49 ---A- . (.LSI Logic - LSI Logic Fusion-MPT FC Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_fc.sys
                O58 - SDL:[MD5.EE01EBAE8C9BF0FA072E0FF68718920A] - 21/01/2008 - 03:32:51 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas.sys
                O58 - SDL:[MD5.912A04696E9CA30146A62AFA1463DD5C] - 21/01/2008 - 03:32:48 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_scsi.sys
                O58 - SDL:[MD5.67B48A903430C6D4FB58CBACA1866601] - 29/04/2010 - 14:39:26 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbam.sys
                O58 - SDL:[MD5.C7DD7D9739785BD3A6B8499EEC1DEE7E] - 29/04/2010 - 14:39:38 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbamswissarmy.sys
                O58 - SDL:[MD5.0CEA2D0D3FA284B85ED5B68365114F76] - 19/06/2006 - 23:26:58 ---A- . (.Conexant - Diagnostic Interface x86 Driver.) -- C:\Windows\system32\drivers\mdmxsdk.sys
                O58 - SDL:[MD5.0001CE609D66632FA17B84705F658879] - 21/01/2008 - 03:32:53 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows Vista/Longhorn for x.) -- C:\Windows\system32\drivers\megasas.sys
                O58 - SDL:[MD5.C252F32CD9A49DBFC25ECF26EBD51A99] - 21/01/2008 - 03:32:52 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\system32\drivers\MegaSR.sys
                O58 - SDL:[MD5.4FBBB70D30FD20EC51F80061703B001E] - 02/11/2006 - 10:49:59 ---A- . (.LSI Logic Corporation - MegaRAID RAID Controller Driver for Windows Vista/Longhorn for.) -- C:\Windows\system32\drivers\Mraid35x.sys
                O58 - SDL:[MD5.35D5458D9A1B26B2005ABFFBF4C1C5E7] - 21/01/2008 - 03:32:45 ---A- . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\Windows\system32\drivers\NETw3v32.sys
                O58 - SDL:[MD5.2E7FB731D4790A1BC6270ACCEFACB36E] - 02/11/2006 - 10:50:19 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\system32\drivers\nfrd960.sys
                O58 - SDL:[MD5.E875C093AEC0C978A90F30C9E0DFBB72] - 02/11/2006 - 08:36:50 ---A- . (.N-trig Innovative Technologies - Pilote intégré de digitalisateur de tablette N-trig.) -- C:\Windows\system32\drivers\ntrigdigi.sys
                O58 - SDL:[MD5.2EDF9E7751554B42CBB60116DE727101] - 21/01/2008 - 03:32:47 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\system32\drivers\nvraid.sys
                O58 - SDL:[MD5.ABED0C09758D1D97DB0042DBB2688177] - 21/01/2008 - 03:32:47 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\system32\drivers\nvstor.sys
                O58 - SDL:[MD5.0A6DB55AFB7820C99AA1F3A1D270F4F6] - 21/01/2008 - 03:32:50 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\system32\drivers\ql2300.sys
                O58 - SDL:[MD5.81A7E5C076E59995D54BC1ED3A16E60B] - 02/11/2006 - 10:50:35 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\system32\drivers\ql40xx.sys
                O58 - SDL:[MD5.125C504A34D0A2E152517E342E7E432C] - 10/06/2008 - 19:54:36 ---A- . (.Realtek Corporation - Realtek 8101E/8168/8169 NDIS6 32-bit Driver.) -- C:\Windows\system32\drivers\Rtlh86.sys
                O58 - SDL:[MD5.D1FB9A678BD6C2B1129FCB09D5FEB6DD] - 26/03/2009 - 07:00:02 ---A- . (.Realtek Semiconductor Corp. - Realtek USB Mass Storage Driver for Vista.) -- C:\Windows\system32\drivers\RTSTOR.sys
                O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 02/11/2006 - 07:37:21 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\system32\drivers\secdrv.sys
                O58 - SDL:[MD5.A99C6C8B0BAA970D8AA59DDC50B57F94] - 21/01/2008 - 03:32:52 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\system32\drivers\sisraid4.sys
                O58 - SDL:[MD5.192AA3AC01DF071B541094F251DEED10] - 02/11/2006 - 10:50:05 ---A- . (.LSI Logic - LSI Logic 8XX SCSI Miniport Driver.) -- C:\Windows\system32\drivers\symc8xx.sys
                O58 - SDL:[MD5.8C8EB8C76736EBAF3B13B633B2E64125] - 02/11/2006 - 10:49:56 ---A- . (.LSI Logic - LSI Logic Hi-Perf SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_hi.sys
                O58 - SDL:[MD5.8072AF52B5FD103BBBA387A1E49F62CB] - 02/11/2006 - 10:50:03 ---A- . (.LSI Logic - LSI Logic Ultra160 SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_u3.sys
                O58 - SDL:[MD5.00B19F27858F56181EDB58B71A7C67A0] - 17/04/2008 - 19:05:16 ---A- . (.Synaptics, Inc. - Synaptics Touchpad Driver.) -- C:\Windows\system32\drivers\SynTP.sys
                O58 - SDL:[MD5.9224BB254F591DE4CA8D572A5F0D635C] - 21/01/2008 - 03:32:45 ---A- . (.ULi Electronics Inc. - ULi SATA Controller Driver.) -- C:\Windows\system32\drivers\uliahci.sys
                O58 - SDL:[MD5.8514D0E5CD0534467C5FC61BE94A569F] - 02/11/2006 - 10:50:35 ---A- . (.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win2003.) -- C:\Windows\system32\drivers\ulsata.sys
                O58 - SDL:[MD5.38C3C6E62B157A6BC46594FADA45C62B] - 21/01/2008 - 03:32:49 ---A- . (.Promise Technology, Inc. - Promise SATAII150 Series Windows Drivers.) -- C:\Windows\system32\drivers\ulsata2.sys
                O58 - SDL:[MD5.587253E09325E6BF226B299774B728A9] - 21/01/2008 - 03:32:49 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\system32\drivers\vsmraid.sys
                O58 - SDL:[MD5.DAB33CFA9DD24251AAA389FF36B64D4B] - 18/10/2007 - 00:36:54 ---A- . (.Conexant Systems, Inc. - Modem Audio Device Driver.) -- C:\Windows\system32\drivers\XAudio.sys
                O58 - SDL:[MD5.7D1F3B131D503EF43EE594B5A2B9B427] - 02/11/2006 - 08:30:56 ---A- . (.Marvell - Pilote miniport NDIS6.0 pour contrôleur Ethernet Marvell Yukon.) -- C:\Windows\system32\drivers\yk60x86.sys
                O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 02/11/2006 - 08:09:42 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\ANSI.SYS
                O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 02/11/2006 - 08:09:45 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\country.sys
                O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 02/11/2006 - 08:09:41 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\HIMEM.SYS
                O58 - SDL:[MD5.492090267B9608C62B956CD29BE3AFB7] - 02/11/2006 - 08:09:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\KEY01.SYS
                O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 02/11/2006 - 08:09:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\KEYBOARD.SYS
                O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 02/11/2006 - 08:09:29 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS.SYS
                O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 02/11/2006 - 08:09:35 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS404.SYS
                O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 02/11/2006 - 08:09:38 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS411.SYS
                O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 02/11/2006 - 08:09:40 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS412.SYS
                O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 02/11/2006 - 08:09:31 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS804.SYS
                O58 - SDL:[MD5.2E4112FB7D1B76E11ADFD7487B5D0E95] - 02/11/2006 - 08:09:20 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO.SYS
                O58 - SDL:[MD5.A98EBD4C2DF983665BF2D1AF49949974] - 02/11/2006 - 08:09:23 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO404.SYS
                O58 - SDL:[MD5.3F7E6406EDEF197C5CAAB2240EEF6F48] - 02/11/2006 - 08:09:24 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO411.SYS
                O58 - SDL:[MD5.3E64D681B776CC57BDC38A46D881F85B] - 02/11/2006 - 08:09:26 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO412.SYS
                O58 - SDL:[MD5.D86B6435729231C171432B4E77801BDB] - 02/11/2006 - 08:09:22 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO804.SYS

                ---\\ Liste des outils de nettoyage (LATC) (O63)
                O63 - Logiciel: ZHPDiag 1.26 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1

                ---\\ Liste des services Legacy (LALS) (O64)
                O64 - Services: CurCS - C:\Windows\system32\drivers\adp94xx.sys - adp94xx (adp94xx) .(.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) - LEGACY_ADP94XX
                O64 - Services: CurCS - C:\Windows\system32\drivers\adpahci.sys - adpahci (adpahci) .(.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) - LEGACY_ADPAHCI
                O64 - Services: CurCS - C:\Windows\system32\drivers\adpu160m.sys - adpu160m (adpu160m) .(.Adaptec, Inc. - Adaptec LH Ultra160 Driver (x86).) - LEGACY_ADPU160M
                O64 - Services: CurCS - C:\Windows\system32\drivers\adpu320.sys - adpu320 (adpu320) .(.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) - LEGACY_ADPU320
                O64 - Services: CurCS - C:\Windows\system32\drivers\afd.sys - Ancilliary Function Driver for Winsock (AFD) .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD
                O64 - Services: CurCS - C:\Windows\system32\drivers\djsvs.sys - aic78xx (aic78xx) .(.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) - LEGACY_AIC78XX
                O64 - Services: CurCS - C:\Windows\system32\drivers\aliide.sys - aliide (aliide) .(.Acer Laboratories Inc. - ALi mini IDE Driver.) - LEGACY_ALIIDE
                O64 - Services: CurCS - C:\Windows\system32\drivers\amdide.sys - amdide (amdide) .(.Microsoft Corporation - Pilote IDE AMD.) - LEGACY_AMDIDE
                O64 - Services: CurCS - C:\Windows\system32\drivers\arc.sys - arc (arc) .(.Adaptec, Inc. - Adaptec RAID Storport Driver.) - LEGACY_ARC
                O64 - Services: CurCS - C:\Windows\system32\drivers\arcsas.sys - arcsas (arcsas) .(.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) - LEGACY_ARCSAS
                O64 - Services: CurCS - C:\Windows\system32\DRIVERS\aswFsBlk.sys - aswFsBlk (aswFsBlk) .(.ALWIL Software - avast! File System Access Blocking Driver.) - LEGACY_ASWFSBLK
                O64 - Services: CurCS - C:\Windows\system32\DRIVERS\aswMonFlt.sys - aswMonFlt (aswMonFlt) .(.ALWIL Software - avast! File System Minifilter for Windows 2.) - LEGACY_ASWMONFLT
                O64 - Services: CurCS - (.not file.) - aswRdr (aswRdr) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWRDR
                O64 - Services: CurCS - (.not file.) - avast! Self Protection (aswSP) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWSP
                O64 - Services: CurCS - (.not file.) - avast! Network Shield Support (aswTdi) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWTDI
                O64 - Services: CurCS - C:\Windows\system32\drivers\atapi.sys - IDE Channel (atapi) .(.Microsoft Corporation - ATAPI IDE Miniport Driver.) - LEGACY_ATAPI
                O64 - Services: CurCS - (.not file.) - AVG Free8 Network Redirector (AvgTdiX) .(.Pas de propriétaire - Pas de description.) - LEGACY_AVGTDIX
                O64 - Services: CurCS - (.not file.) - Beep (Beep) .(.Pas de propriétaire - Pas de description.) - LEGACY_BEEP
                O64 - Services: CurCS - C:\Windows\system32\DRIVERS\bowser.sys - Bowser (bowser) .(.Microsoft Corporation - NT Lan Manager Datagram Receiver Driver.) - LEGACY_BOWSER
                O64 - Services: CurCS - C:\Windows\system32\DRIVERS\cdfs.sys - CD/DVD File System Reader (cdfs) .(.Microsoft Corporation - CD-ROM File System Driver.) - LEGACY_CDFS
                O64 - Services: CurCS - C:\Windows\system32\CLFS.sys - Common Log (CLFS) (CLFS) .(.Microsoft Corporation - Common Log File System Driver.) - LEGACY_CLFS
                O64 - Services: CurCS - C:\Windows\system32\drivers\cmdide.sys - cmdide (cmdide) .(.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) - LEGACY_CMDIDE
                O64 - Services: CurCS - C:\Windows\system32\drivers\crcdisk.sys - Crcdisk Filter Driver (crcdisk) .(.Microsoft Corporation - Disk Block Verification Filter Driver.) - LEGACY_CRCDISK
                O64 - Services: CurCS - C:\Windows\system32\drivers\dfsc.sys (DfsC) .(.Microsoft Corporation - DFS Namespace Client Driver.) - LEGACY_DFSC
                O64 - Services: CurCS - C:\Windows\system32\drivers\dxgkrnl.sys - LDDM Graphics Subsystem (DXGKrnl) .(.Microsoft Corporation - DirectX Graphics Kernel.) - LEGACY_DXGKRNL
                O64 - Services: CurCS - C:\Windows\system32\drivers\ecache.sys - ReadyBoost Caching Driver (Ecache) .(.Microsoft Corporation - Special Memory Device Cache.) - LEGACY_ECACHE
                O64 - Services: CurCS - C:\Windows\system32\drivers\elxstor.sys - elxstor (elxstor) .(.Emulex - Storport Miniport Driver for LightPulse HBA.) - LEGACY_ELXSTOR
                O64 - Services: CurCS - (.not file.) - FAT12/16/32 File System Driver (fastfat) .(.Pas de propriétaire - Pas de description.) - LEGACY_FASTFAT
                O64 - Services: CurCS - C:\Windows\system32\drivers\fileinfo.sys - File Information FS MiniFilter (FileInfo) .(.Microsoft Corporation - FileInfo Filter Driver.) - LEGACY_FILEINFO
                O64 - Services: CurCS - C:\Windows\system32\drivers\fltmgr.sys - FltMgr (FltMgr) .(.Microsoft Corporation - Gestionnaire de filtres de système de fichi.) - LEGACY_FLTMGR
                O64 - Services: CurCS - C:\Windows\system32\Drivers\FS_REC.sys - Fs_Rec (Fs_Rec) .(.Pas de propriétaire - Pas de description.) - LEGACY_FS_REC
                O64 - Services: CurCS - C:\Windows\system32\drivers\hpcisss.sys - HpCISSs (HpCISSs) .(.Hewlett-Packard Company - Smart Array Storport Driver.) - LEGACY_HPCISSS
                O64 - Services: CurCS - C:\Windows\system32\drivers\HTTP.sys - HTTP (HTTP) .(.Microsoft Corporation - HTTP Pile du protocole.) - LEGACY_HTTP
                O64 - Services: CurCS - C:\Windows\system32\drivers\i2omp.sys - i2omp (i2omp) .(.Microsoft Corporation - I2O Miniport Driver.) - LEGACY_I2OMP
                O64 - Services: CurCS - C:\Windows\system32\drivers\iastorv.sys - Intel RAID Controller Vista (iaStorV) .(.Intel Corporation - Intel Matrix Storage Manager driver (base).) - LEGACY_IASTORV
                O64 - Services: CurCS - (.not file.) - IDSVix86 (IDSVix86) .(.Pas de propriétaire - Pas de description.) - LEGACY_IDSVIX86
                O64 - Services: CurCS - C:\Windows\system32\drivers\iirsp.sys - iirsp (iirsp) .(.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) - LEGACY_IIRSP
                O64 - Services: CurCS - C:\Windows\system32\drivers\intelide.sys - intelide (intelide) .(.Microsoft Corporation - Intel PCI IDE Driver.) - LEGACY_INTELIDE
                O64 - Services: CurCS - C:\Windows\system32\DRIVERS\ipnat.sys - IP Network Address Translator (IPNAT) .(.Microsoft Corporation - IP Network Address Translator.) - LEGACY_IPNAT
                O64 - Services: CurCS - C:\Windows\system32\drivers\isapnp.sys - PnP ISA/EISA Bus Driver (isapnp) .(.Microsoft Corporation - Pilote de bus PNP ISA.) - LEGACY_ISAPNP
                O64 - Services: CurCS - C:\Windows\system32\drivers\iteatapi.sys - ITEATAPI_Service_Install (iteatapi) .(.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) - LEGACY_ITEATAPI
                O64 - Services: CurCS - C:\Windows\system32\drivers\iteraid.sys - ITERAID_Service_Install (iteraid) .(.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) - LEGACY_ITERAID
                O64 - Services: CurCS - C:\Windows\system32\Drivers\ksecdd.sys - KSecDD (KSecDD) .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECDD
                O64 - Services: CurCS - C:\Windows\system32\DRIVERS\lltdio.sys - Link-Layer Topology Discovery Mapper I/O Driver (lltdio) .(.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) - LEGACY_LLTDIO
                O64 - Services: CurCS - C:\Windows\system32\drivers\lsi_fc.sys - LSI_FC (LSI_FC) .(.LSI Logic - LSI Logic Fusion-MPT FC Driver (StorPort).) - LEGACY_LSI_FC
                O64 - Services: CurCS - C:\Windows\system32\drivers\lsi_sas.sys - LSI_SAS (LSI_SAS) .(.LSI Logic - LSI Logic Fusion-MPT SAS Driver (StorPort).) - LEGACY_LSI_SAS
                O64 - Services: CurCS - C:\Windows\system32\drivers\lsi_scsi.sys - LSI_SCSI (LSI_SCSI) .(.LSI Logic - LSI Logic Fusion-MPT SCSI Driver (StorPort).) - LEGACY_LSI_SCSI
                O64 - Services: CurCS - C:\Windows\system32\drivers\luafv.sys - UAC File Virtualization (luafv) .(.Microsoft Corporation - Pilote de filtre de virtualisation de fichi.) - LEGACY_LUAFV
                O64 - Services: CurCS - (.not file.) - mbr (mbr) .(.Pas de propriétaire - Pas de description.) - LEGACY_MBR
                O64 - Services: CurCS - C:\Windows\system32\drivers\megasas.sys - megasas (megasas) .(.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) - LEGACY_MEGASAS
                O64 - Services: CurCS - C:\Windows\system32\drivers\megasr.sys - MegaSR (MegaSR) .(.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) - LEGACY_MEGASR
                O64 - Services: CurCS - C:\Windows\system32\drivers\mountmgr.sys - Mount Point Manager (MountMgr) .(.Microsoft Corporation - Mount Point Manager.) - LEGACY_MOUNTMGR
                O64 - Services: CurCS - C:\Windows\system32\FirewallAPI.dll (mpsdrv) .(.Microsoft Corporation - API du Pare-feu Windows.) - LEGACY_MPSDRV
                O64 - Services: CurCS - C:\Windows\system32\drivers\mraid35x.sys - Mraid35x (Mraid35x) .(.LSI Logic Corporation - MegaRAID RAID Controller Driver for Windows.) - LEGACY_MRAID35X
                O64 - Services: CurCS - C:\Windows\system32\drivers\mrxdav.sys - WebDav Client Redirector Driver (MRxDAV) .(.Microsoft Corporation - Windows NT WebDav Minirdr.) - LEGACY_MRXDAV
                O64 - Services: CurCS - C:\Windows\system32\DRIVERS\mrxsmb.sys - SMB MiniRedirector Wrapper and Engine (mrxsmb) .(.Microsoft Corporation - Windows NT SMB Minirdr.) - LEGACY_MRXSMB
                O64 - Services: CurCS - C:\Windows\system32\DRIVERS\mrxsmb10.sys - SMB 1.x MiniRedirector (mrxsmb10) .(.Microsoft Corporation - Longhorn SMB Downlevel SubRdr.) - LEGACY_MRXSMB10
                O64 - Services: CurCS - C:\Windows\system32\DRIVERS\mrxsmb20.sys - SMB 2.0 MiniRedirector (mrxsmb20) .(.Microsoft Corporation - Longhorn SMB 2.0 Redirector.) - LEGACY_MRXSMB20
                O64 - Services: CurCS - C:\Windows\system32\drivers\msdsm.sys - Microsoft Multi-Path Device Specific Module (msdsm) .(.Microsoft Corporation - Microsoft Device Specific Module.) - LEGACY_MSDSM
                O64 - Services: CurCS - C:\Windows\system32\Drivers\MSFS.sys - Msfs (Msfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_MSFS
                O64 - Services: CurCS - C:\Windows\system32\drivers\msisadrv.sys - ISA/EISA Class Driver (msisadrv) .(.Microsoft Corporation - ISA Driver.) - LEGACY_MSISADRV
                O64 - Services: CurCS - C:\Windows\system32\Drivers\mup.sys - Mup (Mup) .(.Microsoft Corporation - Multiple UNC Provider driver.) - LEGACY_MUP
                O64 - Services: CurCS - C:\Windows\system32\DRIVERS\nwifi.sys - NativeWiFi Filter (NativeWifiP) .(.Microsoft Corporation - NativeWiFi Miniport Driver.) - LEGACY_NATIVEWIFIP
                O64 - Services: CurCS - C:\Windows\system32\drivers\ndis.sys - NDIS System Driver (NDIS) .(.Microsoft Corporation - NDIS 6.0 wrapper driver.) - LEGACY_NDIS
                O64 - Services: CurCS - C:\Windows\system32\DRIVERS\ndisuio.sys - NDIS Usermode I/O Protocol (Ndisuio) .(.Microsoft Corporation - NDIS User mode I/O driver.) - LEGACY_NDISUIO
                O64 - Services: CurCS - C:\Windows\system32\Drivers\NDPROXY.sys - NDProxy (NDProxy) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDPROXY
                O64 - Services: CurCS - C:\Windows\system32\DRIVERS\netbios.sys - NetBIOS Interface (NetBIOS) .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS
                O64 - Services: CurCS - C:\Windows\system32\DRIVERS\netbt.sys - NETBT (netbt) .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT
                O64 - Services: CurCS - C:\Windows\system32\drivers\nfrd960.sys - nfrd960 (nfrd960) .(.IBM Corporation - IBM ServeRAID Controller Driver.) - LEGACY_NFRD960
                O64 - Services: CurCS - C:\Windows\system32\Drivers\NPFS.sys - Npfs (Npfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NPFS
                O64 - Services: CurCS - C:\Windows\system32\drivers\nsiproxy.sys - NSI proxy service (nsiproxy) .(.Microsoft Corporation - NSI Proxy.) - LEGACY_NSIPROXY
                O64 - Services: CurCS - C:\Windows\system32\Drivers\NTFS.sys - Ntfs (Ntfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NTFS
                O64 - Services: CurCS - C:\Windows\system32\Drivers\NULL.sys - Null (Null) .(.Pas de propriétaire - Pas de description.) - LEGACY_NULL
                O64 - Services: CurCS - C:\Windows\system32\drivers\nvraid.sys - NVIDIA nForce RAID Driver (nvraid) .(.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) - LEGACY_NVRAID
                O64 - Services: CurCS - C:\Windows\system32\drivers\nvstor.sys - nvstor (nvstor) .(.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) - LEGACY_NVSTOR
                O64 - Services: CurCS - C:\Windows\system32\Drivers\PCAMp50.sys - PCAMp50 NDIS Protocol Driver (PCAMp50) .(.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 5.0 MPR Protocol Driver.) - LEGACY_PCAMP50
                O64 - Services: CurCS - C:\Windows\system32\Drivers\PCASp50.sys - PCASp50 NDIS Protocol Driver (PCASp50) .(.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 5.0 SPR Protocol Driver.) - LEGACY_PCASP50
                O64 - Services: CurCS - C:\Windows\system32\drivers\pciide.sys - pciide (pciide) .(.Microsoft Corporation - Generic PCI IDE Bus Driver.) - LEGACY_PCIIDE
                O64 - Services: CurCS - C:\Windows\system32\drivers\peauth.sys - PEAUTH (PEAUTH) .(.Microsoft Corporation - Protected Environment Authentication and Au.) - LEGACY_PEAUTH
                O64 - Services: CurCS - C:\Windows\system32\drivers\pacer.sys (PSched) .(.Microsoft Corporation - Planificateur de paquets QoS.) - LEGACY_PSCHED
                O64 - Services: CurCS - C:\Windows\system32\drivers\ql2300.sys - QLogic Fibre Channel Miniport Driver (ql2300) .(.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) - LEGACY_QL2300
                O64 - Services: CurCS - C:\Windows\system32\drivers\ql40xx.sys - QLogic iSCSI Miniport Driver (ql40xx) .(.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) - LEGACY_QL40XX
                O64 - Services: CurCS - C:\Windows\system32\DRIVERS\rasacd.sys - Remote Access Auto Connection Driver (RasAcd) .(.Microsoft Corporation - RAS Automatic Connection Driver.) - LEGACY_RASACD
                O64 - Services: CurCS - C:\Windows\system32\DRIVERS\rdbss.sys - Redirected Buffering Sub Sysytem (rdbss) .(.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - LEGACY_RDBSS
                O64 - Services: CurCS - C:\Windows\system32\DRIVERS\RDPCDD.sys - RDPCDD (RDPCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD
                O64 - Services: CurCS - C:\Windows\system32\drivers\rdpencdd.sys - RDP Encoder Mirror Driver (RDPENCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPENCDD
                O64 - Services: CurCS - C:\Windows\system32\DRIVERS\rspndr.sys - Link-Layer Topology Discovery Responder (rspndr) .(.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) - LEGACY_RSPNDR
                O64 - Services: CurCS - C:\Windows\system32\drivers\sbp2port.sys - SBP-2 Transport/Protocol Bus Driver (sbp2port) .(.Microsoft Corporation - SBP-2 Protocol Driver.) - LEGACY_SBP2PORT
                O64 - Services: CurCS - (.not file.) - Security Driver (secdrv) .(.Pas de propriétaire - Pas de description.) - LEGACY_SECDRV
                O64 - Services: CurCS - C:\Windows\system32\drivers\sisraid2.sys - SiSRaid2 (SiSRaid2) .(.Microsoft Corporation - SiS RAID Stor Miniport Driver.) - LEGACY_SISRAID2
                O64 - Services: CurCS - C:\Windows\system32\drivers\sisraid4.sys - SiSRaid4 (SiSRaid4) .(.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) - LEGACY_SISRAID4
                O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (Smb) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_SMB
                O64 - Services: CurCS - (.not file.) - Security Processor Loader Driver (spldr) .(.Pas de propriétaire - Pas de description.) - LEGACY_SPLDR
                O64 - Services: CurCS - C:\Windows\system32\DRIVERS\srv.sys - srv (srv) .(.Microsoft Corporation - Server driver.) - LEGACY_SRV
                O64 - Services: CurCS - C:\Windows\system32\DRIVERS\srv2.sys - srv2 (srv2) .(.Microsoft Corporation - Smb 2.0 Server driver.) - LEGACY_SRV2
                O64 - Services: CurCS - C:\Windows\system32\DRIVERS\srvnet.sys - srvnet (srvnet) .(.Microsoft Corporation - Server Network driver.) - LEGACY_SRVNET
                O64 - Services: CurCS - C:\Windows\system32\drivers\symc8xx.sys - Symc8xx (Symc8xx) .(.LSI Logic - LSI Logic 8XX SCSI Miniport Driver.) - LEGACY_SYMC8XX
                O64 - Services: CurCS - (.not file.) - SYMDNS (SYMDNS) .(.Pas de propriétaire - Pas de description.) - LEGACY_SYMDNS
                O64 - Services: CurCS - (.not file.) - Symantec Extended File Attributes (SymEFA) .(.Pas de propriétaire - Pas de description.) - LEGACY_SYMEFA
                O64 - Services: CurCS - (.not file.) - SYMFW (SYMFW) .(.Pas de propriétaire - Pas de description.) - LEGACY_SYMFW
                O64 - Services: CurCS - (.not file.) - SYMNDISV (SYMNDISV) .(.Pas de propriétaire - Pas de description.) - LEGACY_SYMNDISV
                O64 - Services: CurCS - (.not file.) - SYMREDRV (SYMREDRV) .(.Pas de propriétaire - Pas de description.) - LEGACY_SYMREDRV
                O64 - Services: CurCS - (.not file.) - SYMTDI (SYMTDI) .(.Pas de propriétaire - Pas de description.) - LEGACY_SYMTDI
                O64 - Services: CurCS - C:\Windows\system32\drivers\sym_hi.sys - Sym_hi (Sym_hi) .(.LSI Logic - LSI Logic Hi-Perf SCSI Miniport Driver.) - LEGACY_SYM_HI
                O64 - Services: CurCS - C:\Windows\system32\drivers\sym_u3.sys - Sym_u3 (Sym_u3) .(.LSI Logic - LSI Logic Ultra160 SCSI Miniport Driver.) - LEGACY_SYM_U3
                O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (Tcpip) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TCPIP
                O64 - Services: CurCS - C:\Windows\system32\drivers\tcpipreg.sys - TCP/IP Registry Compatibility (tcpipreg) .(.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) - LEGACY_TCPIPREG
                O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (tdx) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TDX
                O64 - Services: CurCS - C:\Windows\system32\DRIVERS\udfs.sys - udfs (udfs) .(.Microsoft Corporation - UDF File System Driver.) - LEGACY_UDFS
                O64 - Services: CurCS - C:\Windows\system32\drivers\uliahci.sys - uliahci (uliahci) .(.ULi Electronics Inc. - ULi SATA Controller Driver.) - LEGACY_ULIAHCI
                O64 - Services: CurCS - C:\Windows\system32\drivers\ulsata.sys - UlSata (UlSata) .(.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win200.) - LEGACY_ULSATA
                O64 - Services: CurCS - C:\Windows\system32\drivers\ulsata2.sys - ulsata2 (ulsata2) .(.Promise Technology, Inc. - Promise SATAII150 Series Windows Drivers.) - LEGACY_ULSATA2
                O64 - Services: CurCS - C:\Windows\system32\drivers\vga.sys - VgaSave (VgaSave) .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE
                O64 - Services: CurCS - C:\Windows\system32\drivers\viaide.sys - viaide (viaide) .(.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) - LEGACY_VIAIDE
                O64 - Services: CurCS - C:\Windows\system32\drivers\volmgrx.sys - Dynamic Volume Manager (volmgrx) .(.Microsoft Corporation - Volume Manager Extension Driver.) - LEGACY_VOLMGRX
                O64 - Services: CurCS - C:\Windows\system32\drivers\volsnap.sys - Volumes de stockage (volsnap) .(.Microsoft Corporation - Pilote de cliché instantané du volume.) - LEGACY_VOLSNAP
                O64 - Services: CurCS - C:\Windows\system32\drivers\vsmraid.sys - vsmraid (vsmraid) .(.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) - LEGACY_VSMRAID
                O64 - Services: CurCS - C:\Windows\system32\DRIVERS\wanarp.sys - Remote Access IPv6 ARP Driver (Wanarpv6) .(.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - LEGACY_WANARPV6
                O64 - Services: CurCS - C:\Windows\system32\drivers\wd.sys - Microsoft Watchdog Timer Driver (Wd) .(.Microsoft Corporation - Microsoft Watchdog Timer Driver.) - LEGACY_WD
                O64 - Services: CurCS - C:\Windows\system32\drivers\Wdf01000.sys - Kernel Mode Driver Frameworks service (Wdf01000) .(.Microsoft Corporation - WDF dynamique.) - LEGACY_WDF01000
                O64 - Services: CurCS - C:\Windows\system32\drivers\WPRO_40_1340.sys (.not file.) - WinPcap Packet Driver (WPRO_40_1340) (WPRO_40_1340) .(.Pas de propriétaire - Pas de description.) - LEGACY_WPRO_40_1340
                O64 - Services: CurCS - C:\Windows\system32\DRIVERS\xaudio.sys - XAudio (XAudio) .(.Conexant Systems, Inc. - Modem Audio Device Driver.) - LEGACY_XAUDIO

                ---\\ File Associations Shell Spawning (O67)
                O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] "%1" %* (.not file.)
                O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
                O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] "%1" %* (.not file.)
                O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] "%1" %* (.not file.)
                O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d'événements.) -- C:\Windows\system32\eventvwr.exe
                O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] "%1" %* (.not file.)
                O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
                O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
                O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
                O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
                O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] "%1" %* (.not file.)
                O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
                O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] "%1" %* (.not file.)
                O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] "%1" %* (.not file.)
                O67 - Shell Spawning: <.evt> <evtfile>[HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d'événements.) -- C:\Windows\system32\eventvwr.exe
                O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] "%1" %* (.not file.)
                O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
                O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
                O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe

                ---\\ Start Menu Internet (SMI) (O68)
                O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
                O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

                ---\\ Search Browser Infection (SBI) (O69)
                O69 - SBI: C:\Users\christophe\Application Data\Mozilla\Firefox\Profiles\\zhdxufdx.default\searchplugins\conduit.xml
                O69 - SBI: prefs.js [christophe - zhdxufdx.default] user_pref("CT2504091.SearchEngine", "Search||https://www.bing.com/search?q=UCM_SEARCH_TERM&pc=cosp&ptag=G6C999A435D7A4933&form=CONORG&conlogo=CT3210127
                O69 - SBI: prefs.js [christophe - zhdxufdx.default] user_pref("CT2504091.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2504091&q=");
                O69 - SBI: prefs.js [christophe - zhdxufdx.default] user_pref("browser.search.defaulturl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2504091&SearchSource=3&q={searchTerms}");
                O69 - SBI: prefs.js [christophe - zhdxufdx.default] user_pref("keyword.URL", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2504091&q=");
                O69 - SBI: SearchScopes [HKCU] {0F4A55B7-29FC-4958-8833-A8EB26E92155} - (AOL Recherche) - http://slirsredirect.search.aol.com
                O69 - SBI: SearchScopes [HKCU] {729C26C7-C66B-450A-A732-E3EBC91D55E8} - (Yahoo!) - https://fr.search.yahoo.com/
                O69 - SBI: SearchScopes [HKCU] {8214321A-903B-046D-0B63-1B620B35B433} - (Ask) - http://www2.iesearch.com
                O69 - SBI: SearchScopes [HKCU] {904EF889-DA79-4DDE-80D7-D9B92F630014} [DefaultScope] - (Yahoo! Search) - https://fr.search.yahoo.com/
                O69 - SBI: SearchScopes [HKCU] {9B6103C1-F818-48a8-9683-314055BE6075} - (MyStart Search) - http://mystart.hiyo.com
                O69 - SBI: SearchScopes [HKCU] {BE5435BA-1A5E-4C84-95D6-5440A1ACAC05} - (Kelkoo) - http://fr.kelkoopartners.net
                O69 - SBI: SearchScopes [HKCU] {CF739809-1C6C-47C0-85B9-569DBB141420} - (Ask Search) - http://toolbar.ask.com

                ---\\ Recherche Master Boot Record Infection (MBR)(O80)
                Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net
                Run by christophe at 03/10/2010 22:03:56
                device: opened successfully
                user: MBR read successfully
                called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ataport.SYS hal.dll PCIIDEX.SYS msahci.sys ndis.sys athr.sys
                kernel: MBR read successfully
                user & kernel MBR OK

                ---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)
                MBRCheck, version 1.2.3 by ad13, http://ad13.geekstog
                Run by christophe at 03/10/2010 22:03:57
                Dump file Name : C:\Program Files\ZHPDiag\MBRDump_10-03-10_22-03-58_PhysicalDrive0.bin

                ---\\ Recherche des services démarrés par Svchost (SSS) (O83)
                O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d'application.) -- C:\Windows\System32\aelupsvc.dll [24576]
                O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [62976]
                O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\system32\shsvcs.dll [247296]
                O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [40448]
                O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [40448]
                O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\system32\srvsvc.dll [122880]
                O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [576512]
                O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [438784]
                O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [315392]
                O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d'accès distant.) -- C:\Windows\System32\rasauto.dll [90624]
                O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d'accès distant.) -- C:\Windows\System32\rasmans.dll [262144]
                O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d'interface dynamique.) -- C:\Windows\System32\mprdim.dll [68608]
                O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d'événements système (SENS).) -- C:\Windows\System32\sens.dll [47104]
                O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll [288256]
                O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\Windows\System32\tapisrv.dll [242688]
                O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes Terminal Server.) -- C:\Windows\System32\termsrv.dll [449024]
                O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\system32\wuaueng.dll [1929952]
                O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\Windows\System32\qmgr.dll [758784]
                O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [247296]
                O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll [200704]
                O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll [19968]
                O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d'application.) -- C:\Windows\System32\appinfo.dll [33280]
                O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\system32\iscsiexe.dll [111616]
                O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\system32\mmcss.dll [45056]
                O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\system32\profsvc.dll [153088]
                O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [57344]
                O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\system32\wbem\WMIsvc.dll [162304]
                O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\system32\schedsvc.dll [595456]
                O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service de configuration des services Terminal Server.) -- C:\Windows\system32\sessenv.dll [84992]
                O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d'ordinateurs.) -- C:\Windows\System32\browser.dll [81920]
                O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\system32\kmsvc.dll [68096]
                O83 - Search Svchost Services: ezSharedSvc (ezSharedSvc) . (.EasyBits Sofware AS - Shared EasyBits services for Windows.) -- C:\Windows\System32\ezsvc7.dll [129992]

                ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
                SS - | Auto 05/02/2009 18752 | C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe (aswUpdSv) . (.ALWIL Software.) - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                SS - | Auto 05/02/2009 138680 | C:\Program Files\Alwil Software\Avast4\ashServ.exe (avast! Antivirus) . (.ALWIL Software.) - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                SS - | Demand 05/02/2009 254040 | C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe (avast! Mail Scanner) . (.ALWIL Software.) - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                SS - | Demand 05/02/2009 352920 | C:\Program Files\Alwil Software\Avast4\ashWebSv.exe (avast! Web Scanner) . (.ALWIL Software.) - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                SS - | Demand 03/04/2008 193840 | C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe (Com4QLBEx) . (.Hewlett-Packard Development Company, L.P..) - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
                SS - | Auto 17/12/2007 143872 | C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.exe (EPSON_EB_RPCV4_01) . (.SEIKO EPSON CORPORATION.) - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.exe
                SS - | Auto 11/01/2007 113664 | C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.exe (EPSON_PM_RPCV4_01) . (.SEIKO EPSON CORPORATION.) - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.exe
                SS - | Auto 21/01/2008 21504 | C:\Windows\System32\ezsvc7.dll (ezSharedSvc) . (.EasyBits Sofware AS.) - C:\Windows\system32\svchost.exe
                SS - | Auto 20/06/2008 65536 | C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\1\FTRTSVC.exe (FTRTSVC) . (.France Telecom SA.) - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\1\FTRTSVC.exe
                SS - | Demand 06/05/2008 165416 | C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe (GameConsoleService) . (.WildTangent, Inc..) - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
                SS - | Auto 09/10/2008 94208 | c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe (HP Health Check Service) . (.Hewlett-Packard.) - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
                SS - | Demand 01/05/2008 165192 | C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe (hpqwmiex) . (.Hewlett-Packard Development Company, L.P..) - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
                SS - | Demand 22/10/2004 73728 | C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe (IDriverT) . (.Macrovision Corporation.) - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
                SS - | Auto 09/06/2008 73728 | C:\Program Files\Common Files\LightScribe\LSSrvc.exe (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
                SS - | Demand 09/06/2008 0 | C:\Windows\system32\msiexec \V (msiserver) . (.Pas de propriétaire.) - C:\Windows\system32\msiexec \V
                SS - | Auto 06/10/2008 365952 | C:\Program Files\SMINST\BLService.exe (Recovery Service for Windows) . (.Pas de propriétaire.) - C:\Program Files\SMINST\BLService.exe
                SS - | Auto 15/09/2008 241734 | C:\Program Files\CyberLink\Shared files\RichVideo.exe (RichVideo) . (.Pas de propriétaire.) - C:\Program Files\CyberLink\Shared files\RichVideo.exe
                SS - | Auto 18/10/2007 386560 | C:\Windows\system32\DRIVERS\xaudio.exe (XAudioService) . (.Conexant Systems, Inc..) - C:\Windows\system32\DRIVERS\xaudio.exe

                ---\\ Infection BT - BHO/Toolbar (Possible)
                O42 - Logiciel: Ask.com Search Assistant 1.0.1 - (.Ask.com.) [HKLM] -- Ask.com Search Assistant
                O69 - SBI: SearchScopes [HKCU] {CF739809-1C6C-47C0-85B9-569DBB141420} - (Ask Search) - http://toolbar.ask.com

                End of the scan (1092 lines in 00mn 58s)(0)
                1. terman
                  vous devez tout avoir!!!
                  merci de me donner votre avie
                  1. 00lina00 Modérateur
                    Bonsoir terman,

                    Il est inutile de poster ton rapport sur d'autres discussions.
                    Tu vas rester sur celle-ci.

                    Merci.

                    La Modération de CCM
                2. Utilisateur anonyme
                  lis et suis ce qui est noté ci dessous , attention, pas de fausse manip :

                  * Lance ZHPFix (soit via le raccourci sur ton Bureau, soit via ZHPDiag en cliquant sur l'écusson vert)
                  Clique sur l'icone représentant la lettre H (« coller les lignes Helper »)
                  Copie/colle les lignes suivantes en gras et place les dans ZHPFix :

                  ----------------------------------------------------------

                  O4 - HKCU\..\RunOnce: [28069035] . (.Pas de propriétaire - Pas de description.) -- C:\Users\christophe\AppData\Local\28069035.exe
                  O4 - HKUS\S-1-5-21-4092708777-1571920333-3790078888-1000\..\RunOnce: [28069035] . (.Pas de propriétaire - Pas de description.) -- C:\Users\christophe\AppData\Local\28069035.exe
                  O4 - Global Startup: C:\Users\christophe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Security Tool.lnk . (.Pas de propriétaire.) -- C:\Users\christophe\AppData\Local\28069035.exe

                  ----------------------------------------------------------

                  - Clique sur « Tous », puis sur « Nettoyer »
                  - Copie/colle la totalité du rapport dans ta prochaine réponse
                  Tuto :
                  http://www.premiumorange.com/zeb-help-process/zhpfix.html

                  relance MBAM, vide sa quarantaine, fais une mise à jour, lance un scan complet de ton pc, s'il trouve des choses mets tout en quarantaien, poste moi son rapport

                  @++

                  1. terman
                    voici le rapport apres manipulation :

                    O4 - HKCU\..\RunOnce: [28069035] . (.Pas de propriétaire - Pas de description.) -- C:\Users\christophe\AppData\Local\28069035.exe
                    O4 - HKUS\S-1-5-21-4092708777-1571920333-3790078888-1000\..\RunOnce: [28069035] . (.Pas de propriétaire - Pas de description.) -- C:\Users\christophe\AppData\Local\28069035.exe
                    O4 - Global Startup: C:\Users\christophe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Security Tool.lnk . (.Pas de propriétaire.) -- C:\Users\christophe\AppData\Local\28069035.exe
                    1. terman
                      Rapport de ZHPFix 1.12.3205 par Nicolas Coolman, Update du 29/09/2010
                      Fichier d'export Registre : C:\ZHPExportRegistry-03-10-2010-23-42-56.txt
                      Run by christophe at 03/10/2010 23:42:56
                      Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
                      Contact : nicolascoolman@yahoo.fr

                      ========== Valeur(s) du Registre ==========
                      O4 - HKCU\..\RunOnce: [28069035] . (.Pas de propriétaire - Pas de description.) -- C:\Users\christophe\AppData\Local\28069035.exe => Valeur supprimée avec succès
                      O4 - HKUS\S-1-5-21-4092708777-1571920333-3790078888-1000\..\RunOnce: [28069035] . (.Pas de propriétaire - Pas de description.) -- C:\Users\christophe\AppData\Local\28069035.exe => Valeur absente

                      ========== Fichier(s) ==========
                      c:\users\christophe\appdata\local\28069035.exe => Supprimé et mis en quarantaine
                      c:\users\christophe\appdata\roaming\microsoft\windows\start menu\programs\security tool.lnk => Supprimé et mis en quarantaine

                      ========== Récapitulatif ==========
                      2 : Valeur(s) du Registre
                      2 : Fichier(s)

                      End of the scan
                      1. Tigzy Contributeur sécurité
                        Salut vous 2

                        @electricien : Tu aurais pu lui faire utiliser RogueKiller *snif* tant pis :)

                        @terman : tu ne dois plus avoir Security tools?
                        1. terman
                          je vient de redemaner le pc aparament security tool n y est plus je suis en train de faire une analyse de mon disc avec avast!!!
                          1. Tigzy Contributeur sécurité
                            Laisse tomber Avast il ne trouvera rien.
                            Attends les instructions de Electricien69 mais c'est ok à priori
                          2. terman
                            ok!!! mais une chose et sur c k il ne plus se salle visus!!!!!

                            merci
                        2. Utilisateur anonyme
                          bonjour à vous deux :-)
                          @Tigzy :
                          pour la prochaine fois ;-)

                          @ terman :

                          ce n'est pas fini, j'attends le rapport de MBAM en mode normal !

                          tu as d'autres infections sur ton pc que je n'ai pas encore traitées !!!

                          • 1
                          • 2

                          Discussions similaires

                          Security boot fail lors du démarrage
                          Steu

                          5 réponses
                          SecurityHealth est a désactiver ou pas au démarrage de W10 Pro 64 ?
                          Walti55

                          2 réponses
                          Comment retirer le SECURE BOOT ?
                          Elparigo60

                          10 réponses
                          Security Boot Fail Windows 10 Acer
                          benjamin5800

                          22 réponses