Impossible à supprimer

Bonjour, voici mon rapport de malwarebytes:

Malwarebytes' Anti-Malware 1.17
Version de la base de données: 846

00:50:14 29/10/2010
mbam-log-10-29-2010 (00-50-14).txt

Type de recherche: Examen rapide
Eléments examinés: 47579
Temps écoulé: 8 minute(s), 39 second(s)

Processus mémoire infecté(s): 1
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
C:\Documents and Settings\poste\Application Data\Microsoft\svchost.exe (Heuristics.Reserved.Word.Exploit) -> Unloaded process successfully.

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\SVCHOST (Trojan.Agent) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Documents and Settings\poste\Application Data\Microsoft\svchost.exe (Trojan.Agent) -> Quarantined and deleted successfully.

A chaque foi, ils ne veulent pas se supprimer. HELP PLEASE

6 réponses

  • Votes
  • Date
  • Date décroissante
  1. Bonjour,

    Je te conseille d'aller a :
    C:\Documents and Settings\poste\Application Data\Microsoft\svchost.exe
    Et de supprimer le fichier en faisant Clic droit => Supprimer
    1. Contributeur sécurité
      Fichier système dans APP data? C'est pas plutôt dans windows ou system32?
    2. il y en a un dans system 32. Grave ??
  2. J'avais pas remarqué !
    C'est un fichier de Windows, impossible a supprimer sinon, paf! plus d'ordi :o
    1. euh plus d'ordi.... pas cool du tout.

      Sinon on peut faire quelque chose? Et au passage si t'as une idée pour mettre à jour malware byte, pcq sa me marque que je ne suis pas connecté ou que sa vient de mon pare feu. Or je suis connecté et il est marqué dans les exception du pare feu
      1. As part Reformater et repartir ton Windows a 0 moi je vois rien d'autre a faire
        1. j'ai téléchargé ZHPDiag, voici le rapport:

          Rapport de ZHPDiag v1.26.52 par Nicolas Coolman, Update du 24/08/2010
          Run by poste at 01/11/2010 23:51:45
          Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
          Contact : nicolascoolman@yahoo.fr

          ---\\ Web Browser
          MSIE: Internet Explorer v8.0.6001.18702
          MFIE: Mozilla Firefox (3.6.12)

          ---\\ System Information
          Platform : Microsoft Windows XP (5.1.2600) Service Pack 3
          Processor: x86 Family 15 Model 3 Stepping 4, GenuineIntel
          Operating System: 32 Bits
          Boot mode: Normal (Normal boot)
          Total RAM: 1023 MB (64% free)
          System drive C: has 31 GB (45%) free of 67 GB

          ---\\ Logged in mode
          Computer Name: POSTE-54Y26QI3W
          User Name: poste
          All Users Names: SUPPORT_388945a0, poste, HelpAssistant, Administrateur,
          Unselected Option: O1,O45,O61,O65,O82
          Logged in as Administrator

          ---\\ DOS/Devices
          A:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
          C:\ Hard drive, Flash drive, Thumb drive (Free 31 Go of 67 Go)
          D:\ CD-ROM drive (Not Inserted)
          E:\ CD-ROM drive (Not Inserted)
          F:\ Hard drive, Flash drive, Thumb drive (Free 7 Go of 10 Go)
          G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
          H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
          I:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
          J:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

          ---\\ Security Center & Tools Informations
          [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
          [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
          [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
          [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
          [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
          [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
          [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
          [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
          [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
          [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
          [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
          [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK

          ---\\ Processus lancés
          [MD5.ACB544D7254F366DFB48F380BC36CD25] - (.AVAST Software - avast! Service.) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [40384]
          [MD5.96D2436434D14B99D0EDF8A26BE76EED] - (.Apple Computer, Inc. - Pas de description.) -- C:\Program Files\QuickTime\qttask.exe [77824]
          [MD5.C2444B96B191E83451C3E888D0A2DB71] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [202256]
          [MD5.BAD6BEA0DE1F69C82BDB74378CE0C20A] - (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe [932288]
          [MD5.8D54B8CD5930D2A6137D93C23B60C321] - (.Pas de propriétaire - DivX Update.) -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1144104]
          [MD5.5ECD3C3B70B6B50F284DBAF6016B2DDF] - (.EoRezo - SoftwareHelper.) -- C:\Documents and Settings\poste\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe [368224]
          [MD5.6C1B31F5C16E03153F0037AC6C451FFD] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\avastUI.exe [2838912]
          [MD5.E616A6A6E91B0A86F2F6217CDE835FFE] - (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [68856]
          [MD5.9D4A8FAE8F6B262C49313067818DA8BE] - (.Samsung Electronics Co., Ltd. - NPSAgent.) -- C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe [102400]
          [MD5.16E91805CC071039372AE0037AAA9A2B] - (.Hewlett-Packard Co. - HP Digital Imaging Monitor (CUE).) -- C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [241664]
          [MD5.6AF647EA7B8875C5EE5C1C746F104B54] - (.PIXELA CORPORATION - Pas de description.) -- C:\Program Files\PIXELA\Everio MediaBrowser\MBCameraMonitor.exe [541976]
          [MD5.D3F9205CC4CB07553F2F9472C767EA87] - (.Teruten - FsUsbDevice.) -- C:\WINDOWS\system32\FsUsbExService.Exe [233472]
          [MD5.32192B4EBE8720ED8D49A455C962CB91] - (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe [152984]
          [MD5.6E5DAC168D1FF9843E84A59D51D31107] - (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe [61440]
          [MD5.8F0DE4FEF8201E306F9938B0905AC96A] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files\Google\Update\GoogleUpdate.exe [135664]
          [MD5.9EBA7E33486464209AE48C2C319E4C69] - (.Logitech Inc. - Logitech Video COM Service.) -- C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe [186904]
          [MD5.839A107A304CC1520A5F3730070824EB] - (.Logitech Inc. - Logitech LVPrcSrv Module..) -- C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe [150040]
          [MD5.11F714F85530A2BD134074DC30E99FCA] - (.Microsoft Corporation - Machine Debug Manager.) -- C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE [322120]
          [MD5.2AAE889742376EDC5C3203DFB74F28FD] - (.Nero AG - Nero BackItUp.) -- C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [877864]
          [MD5.C7F5C284B6F46FCAF6910EA4E644700B] - (.Nero AG - Nero BackItUp.) -- C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe [935208]
          [MD5.875E4E0661F3A5994DF9E5E3A0A4F96B] - (.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) -- C:\WINDOWS\system32\IoctlSvc.exe [81920]
          [MD5.332D341D92B933600D41953B08360DFB] - (.Ulead Systems, Inc. - ULCDRSvr.) -- C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe [49152]
          [MD5.F3F709C2D49DD6636F4EDE5C2CAE5448] - (.https://www.emule-project.net/home/perl/general.cgi?l=1 - eMule.) -- C:\Program Files\eMule\emule.exe [5758976]
          [MD5.9BC4E694A7D69E77B6B72D047C9BF3D2] - (.Pas de propriétaire - Windows Host Process.) -- C:\Documents and Settings\poste\Application Data\Microsoft\svchost.exe [105472]
          [MD5.44B0C0AFD84866652D96171C4ED07656] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [1613824]
          [MD5.E43DD82E5E611F861599ECC64AE1FC88] - (.Pas de propriétaire - Desktop Window Manager.) -- C:\DOCUME~1\poste\LOCALS~1\Temp\dwm.exe [113152]

          ---\\ Plugins de navigateurs Opera/Firefox(P1/P2)
          P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins\npnul32.dll
          P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
          P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.5.) -- C:\WINDOWS\system32\Adobe\Director\np32dsw.dll
          P2 - FPN: [HKLM] [@divx.com/DivX Browser Plugin,version=1.0.0] - (.DivX,Inc. - DivX Web Player version 2.0.2.40.) -- C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
          P2 - FPN: [HKLM] [@divx.com/DivX Player Plugin,version=1.0.0] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (.not file.)
          P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 3.0.50106.0.) -- c:\Program Files\Microsoft Silverlight\3.0.50106.0\npctrl.dll
          P2 - FPN: [HKLM] [@microsoft.com/OfficeLive,version=1.3] - (.Microsoft Corp. - Office Live Update v1.3.) -- C:\Program Files\Microsoft\Office Live\npOLW.dll
          P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=14.0.8081.0709] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
          P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
          P2 - FPN: [HKLM] [@pandasecurity.com/activescan] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Panda Security\ActiveScan 2.0\npwrapper.dll (.not file.)
          P2 - FPN: [HKLM] [@real.com/nppl3260;version=6.0.12.709] - (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll
          P2 - FPN: [HKLM] [@real.com/nprjplug;version=1.0.3.709] - (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll
          P2 - FPN: [HKLM] [@real.com/nprpjplug;version=6.0.12.709] - (.RealNetworks, Inc. - 6.0.12.709.) -- C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll
          P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=8] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.2.183.39\npGoogleOneClick8.dll
          P2 - FPN: [HKLM] [@unity3d.com/UnityPlayer,version=1.0] - (.Unity Technologies ApS - Unity Player 3.0.0f5.) -- C:\Program Files\Unity\WebPlayer\loader\npUnity3D32.dll

          ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
          F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,
          F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

          ---\\ Création d'une valeur Ini (Created inifile value, mapped to Registry) (F3)
          F3 - REG:win.ini: load=C:\DOCUME~1\poste\LOCALS~1\Temp\dwm.exe

          ---\\ Pages de recherche d'Internet Explorer (R1)
          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/?gws_rd=ssl
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
          R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/toolbar/ie8/sidebar.html
          R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:50370

          ---\\ Internet Explorer URLSearchHook (R3)
          R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} . (.Ask.com - Ask.com Toolbar.) (5.6.8.107) -- C:\Program Files\Ask.com\GenericAskToolbar.dll
          R3 - URLSearchHook: UrlSearchHook Class - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.18904 (longhorn_ie8_gdr.100222-1700)) -- C:\WINDOWS\system32\ieframe.dll

          ---\\ Browser Helper Objects de navigateur (O2)
          O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
          O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealPlayer - RealPlayer Download and Record Plugin.) -- C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
          O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} . (.Microsoft Corporation - Family Safety Browser Helper Object Library.) -- C:\Program Files\Windows Live\Family Safety\fssbho.dll
          O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} . (.Pas de propriétaire - Pas de description.) -- (.not file.)
          O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
          O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\ssv.dll
          O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
          O2 - BHO: Ask Search Assistant BHO - {9CB65201-89C4-402c-BA80-02D8C59F9B1D} . (.Ask.com - Ask.com Search Assistant.) -- C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
          O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
          O2 - BHO: SpiderMessenger_BHO - {ADE49752-DBBC-43A3-9498-379A82F574BF} . (.Pas de propriétaire - Pas de description.) -- (.not file.)
          O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll
          O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} . (.Ask.com - Ask.com Toolbar.) -- C:\Program Files\Ask.com\GenericAskToolbar.dll
          O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
          O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll
          O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java(TM) Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
          O2 - BHO: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\free-downloads.net\tbfre0.dll
          O2 - BHO: Ask Toolbar BHO - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} . (.Ask.com - Ask Toolbar.) -- C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL

          ---\\ Internet Explorer Toolbars (O3)
          O3 - Toolbar: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\free-downloads.net\tbfre0.dll
          O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} . (.Ask.com - Ask Toolbar.) -- C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
          O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll
          O3 - Toolbar: LimeWire Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} . (.Ask.com - Ask.com Toolbar.) -- C:\Program Files\Ask.com\GenericAskToolbar.dll
          O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

          ---\\ Applications démarrées par registre & par dossier (O4)
          O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32\NvCpl.dll
          O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Computer, Inc. - Pas de description.) -- C:\Program Files\QuickTime\qttask.exe
          O4 - HKLM\..\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
          O4 - HKLM\..\Run: [Google Desktop Search] . (.Google - Google Desktop.) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
          O4 - HKLM\..\Run: [NPSStartup] Clé orpheline
          O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
          O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe
          O4 - HKLM\..\Run: [DivXUpdate] . (.Pas de propriétaire - DivX Update.) -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
          O4 - HKLM\..\Run: [SoftwareHelper] . (.EoRezo - SoftwareHelper.) -- C:\Documents and Settings\poste\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
          O4 - HKLM\..\Run: [avast5] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\avastUI.exe
          O4 - HKLM\..\Run: [svchost] . (.Pas de propriétaire - Windows Host Process.) -- C:\Documents and Settings\poste\Application Data\Microsoft\svchost.exe
          O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe (.not file.)
          O4 - HKCU\..\Run: [MsnMsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\MsnMsgr.exe
          O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
          O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
          O4 - HKCU\..\Run: [AutoStartNPSAgent] . (.Samsung Electronics Co., Ltd. - NPSAgent.) -- C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
          O4 - HKCU\..\Run: [RegistryBooster] C:\Program Files\Uniblue\RegistryBooster\launcher.exe (.not file.)
          O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\System32\CTFMON.exe
          O4 - HKUS\S-1-5-18\..\Run: [epasdugq] c:\documents and settings\poste\local settings\application data\epasdugq.exe (.not file.) @MaCo
          O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\System32\CTFMON.exe
          O4 - HKUS\S-1-5-18\..\Run: [epasdugq] c:\documents and settings\poste\local settings\application data\epasdugq.exe (.not file.) @MaCo
          O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\System32\CTFMON.exe
          O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\System32\CTFMON.exe
          O4 - HKUS\S-1-5-21-606747145-1972579041-839522115-1004\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe (.not file.)
          O4 - HKUS\S-1-5-21-606747145-1972579041-839522115-1004\..\Run: [MsnMsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\MsnMsgr.exe
          O4 - HKUS\S-1-5-21-606747145-1972579041-839522115-1004\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
          O4 - HKUS\S-1-5-21-606747145-1972579041-839522115-1004\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
          O4 - HKUS\S-1-5-21-606747145-1972579041-839522115-1004\..\Run: [AutoStartNPSAgent] . (.Samsung Electronics Co., Ltd. - NPSAgent.) -- C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
          O4 - HKUS\S-1-5-21-606747145-1972579041-839522115-1004\..\Run: [RegistryBooster] C:\Program Files\Uniblue\RegistryBooster\launcher.exe (.not file.)
          O4 - Global Startup: HP Digital Imaging Monitor.lnk . (.Hewlett-Packard Co. - HP Digital Imaging Monitor (CUE).) -- C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
          O4 - Global Startup: MBCameraMonitor.lnk . (.PIXELA CORPORATION - Pas de description.) -- C:\Program Files\PIXELA\Everio MediaBrowser\MBCameraMonitor.exe
          O4 - Global Startup: LimeWire On Startup.lnk . (.Lime Wire, LLC - LimeWire.) -- C:\Program Files\LimeWire\LimeWire.exe

          ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
          O8 - Extra context menu item: Google Sidewiki... . (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll

          ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
          O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
          O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (.Pas de propriétaire - Pas de description.) -- C:\PROGRA~1\MICROS~2\OFFICE11\REFBARH.ICO
          O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (.not file.) - (.not file.)
          O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe

          ---\\ Winsock hijacker (Layered Service Provider) (O10)
          O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
          O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
          O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll

          ---\\ Site dans la Zone de confiance d'Internet Explorer (O15)
          O15 - Trusted Zone: [HKCU\...\Domains] http.mappy.com
          O15 - Trusted Zone: [HKCU\...\Domains\www] http.mappy.com
          O15 - Trusted Zone: [HKCU\...\Domains] http.orange.fr
          O15 - Trusted Zone: [HKCU\...\Domains\www] http.orange.fr

          ---\\ Objets ActiveX (Downloaded Program Files)(O16)
          O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
          O16 - DPF: {26E6B759-DEEB-42A1-A21C-78CD29098411} (CPlayFirstFitnessDasControl Object) - http://wanadoofr.oberon-media.com/gameshell/games/channel--110167437/lc--fr/room--2ea05fb9-115c-457e-aba8-1dba25c0b104/online/fitness_dash/fr/fitnessdashweb.1.0.0.11.cab
          O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} () - http://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab
          O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://www.extrafilm.fr/ImageUploader5.cab
          O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
          O16 - DPF: {680285A8-96D3-43DA-9D3D-51DD987D0B77} (NeroVersionCheckerControl Control) - http://www.nero.com/doc/NeroVersionCheckerControl.cab
          O16 - DPF: {775879E2-7309-4619-BB02-AADE41F4B690} (CPlayFirstdreamControl Object) - http://jeuxentelechargement.orange.fr/orange2.0/games/channel--110167437/lc--fr/room--0f022fa5-afcf-4e52-9d72-47445f673462/online/dream_chronicles/fr/dreamweb.1.0.0.9.cab
          O16 - DPF: {9191F686-7F0A-441D-8A98-2FE3AC1BD913} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
          O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
          O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxmultijoueurs.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
          O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
          O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://signin3.valueactive.eu/Register/Branding/olr3313/OCX/v1018/flashax.cab
          O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
          O16 - DPF: {F7EDBBEA-1AD2-4EBF-AA07-D453CC29EE65} (Flash Casino Helper Control) - https://plugins.valueactive.eu/flashax/iefax.cab

          ---\\ Modification Domaine/Adresses DNS (O17)
          O17 - HKLM\System\CCS\Services\Tcpip\..\{CC94B3B8-8DDB-4BA1-B9BA-28570BEC879C}: DhcpNameServer = 192.168.1.1 192.168.1.1
          O17 - HKLM\System\CS1\Services\Tcpip\..\{CC94B3B8-8DDB-4BA1-B9BA-28570BEC879C}: DhcpNameServer = 192.168.1.1 192.168.1.1
          O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1

          ---\\ Protocole additionnel et piratage de protocole (O18)
          O18 - Handler: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} . (.Hewlett-Packard Company - HPCETIUI Protocol Handler Module.) -- C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll

          ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
          O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll

          ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
          O20 - AppInit_DLLs: . (.Google - Google Desktop.) - C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.dll

          ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
          O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
          O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
          O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
          O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\System32\stobject.dll
          O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll

          ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
          O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\System32\browseui.dll

          ---\\ Liste des services NT non Microsoft et non désactivés (O23)
          O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
          O23 - Service: FsUsbExService (FsUsbExService) . (.Teruten - FsUsbDevice.) - C:\WINDOWS\system32\FsUsbExService.exe
          O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
          O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe
          O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) . (.Hewlett-Packard Company - Pas de description.) - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
          O23 - Service: LVCOMSer (LVCOMSer) . (.Logitech Inc. - Logitech Video COM Service.) - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
          O23 - Service: Process Monitor (LVPrcSrv) . (.Logitech Inc. - Logitech LVPrcSrv Module..) - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
          O23 - Service: Nero BackItUp Scheduler 3 (Nero BackItUp Scheduler 3) . (.Nero AG - Nero BackItUp.) - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
          O23 - Service: Nero BackItUp Scheduler 4.0 (Nero BackItUp Scheduler 4.0) . (.Nero AG - Nero BackItUp.) - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
          O23 - Service: NVIDIA Display Driver Service (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 52.16.) - C:\WINDOWS\System32\nvsvc32.exe
          O23 - Service: PLFlash DeviceIoControl Service (PLFlash DeviceIoControl Service) . (.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) - C:\WINDOWS\system32\IoctlSvc.exe
          O23 - Service: Ulead Burning Helper (UleadBurningHelper) . (.Ulead Systems, Inc. - ULCDRSvr.) - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe

          ---\\ Enumération Active Desktop & MHTML Editor (O24)
          O24 - Desktop Component 0: (no name) - file:file:///C:/DOCUME~1/poste/LOCALS~1/Temp/msohtml1/01/clip_image002.jpg
          O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\Program Files\Microsoft Office\OFFICE11\WINWORD.exe

          ---\\ Redirection du fichier Hosts (O1)
          O1 - Hosts: 74.125.45.100 4-open-davinci.com
          O1 - Hosts: 74.125.45.100 securitysoftwarepayments.com
          O1 - Hosts: 74.125.45.100 privatesecuredpayments.com
          O1 - Hosts: 74.125.45.100 secure.privatesecuredpayments.com
          O1 - Hosts: 74.125.45.100 getantivirusplusnow.com
          O1 - Hosts: 74.125.45.100 secure-plus-payments.com
          O1 - Hosts: 74.125.45.100 www.getantivirusplusnow.com
          O1 - Hosts: 74.125.45.100 www.secure-plus-payments.com
          O1 - Hosts: 74.125.45.100 www.getavplusnow.com
          O1 - Hosts: 74.125.45.100 safebrowsing-cache.google.com
          O1 - Hosts: 74.125.45.100 urs.microsoft.com
          O1 - Hosts: 74.125.45.100 www.securesoftwarebill.com
          O1 - Hosts: 74.125.45.100 secure.paysecuresystem.com
          O1 - Hosts: 74.125.45.100 paysoftbillsolution.com
          O1 - Hosts: 74.125.45.100 protected.maxisoftwaremart.com
          O1 - Hosts: 209.212.147.139 www.google.com
          O1 - Hosts: 209.212.147.139 google.com
          O1 - Hosts: 209.212.147.139 google.com.au
          O1 - Hosts: 209.212.147.139 www.google.com.au
          O1 - Hosts: 209.212.147.139 google.be
          O1 - Hosts: 209.212.147.139 www.google.be
          O1 - Hosts: 209.212.147.139 google.com.br
          O1 - Hosts: 209.212.147.139 www.google.com.br
          O1 - Hosts: 209.212.147.139 google.ca
          O1 - Hosts: 209.212.147.139 www.google.ca
          O1 - Hosts: 209.212.147.139 google.ch
          O1 - Hosts: 209.212.147.139 www.google.ch
          O1 - Hosts: 209.212.147.139 google.de
          O1 - Hosts: 209.212.147.139 www.google.de
          O1 - Hosts: 209.212.147.139 google.dk
          O1 - Hosts: 209.212.147.139 www.google.dk
          O1 - Hosts: 209.212.147.139 google.fr
          O1 - Hosts: 209.212.147.139 www.google.fr
          O1 - Hosts: 209.212.147.139 google.ie
          O1 - Hosts: 209.212.147.139 www.google.ie
          O1 - Hosts: 209.212.147.139 google.it
          O1 - Hosts: 209.212.147.139 www.google.it
          O1 - Hosts: 209.212.147.139 google.co.jp
          O1 - Hosts: 209.212.147.139 www.google.co.jp
          O1 - Hosts: 209.212.147.139 google.nl
          O1 - Hosts: 209.212.147.139 www.google.nl
          O1 - Hosts: 209.212.147.139 google.no
          O1 - Hosts: 209.212.147.139 www.google.no
          O1 - Hosts: 209.212.147.139 google.co.nz
          O1 - Hosts: 209.212.147.139 www.google.co.nz
          O1 - Hosts: 209.212.147.139 google.pl
          O1 - Hosts: 209.212.147.139 www.google.pl
          O1 - Hosts: 209.212.147.139 google.se
          O1 - Hosts: 209.212.147.139 www.google.se
          O1 - Hosts: 209.212.147.139 google.co.uk
          O1 - Hosts: 209.212.147.139 www.google.co.uk
          O1 - Hosts: 209.212.147.139 google.co.za
          O1 - Hosts: 209.212.147.139 www.google.co.za
          O1 - Hosts: 209.212.147.139 www.google-analytics.com
          O1 - Hosts: 209.212.147.139 www.bing.com
          O1 - Hosts: 209.212.147.139 search.yahoo.com
          O1 - Hosts: 209.212.147.139 www.search.yahoo.com
          O1 - Hosts: 209.212.147.139 uk.search.yahoo.com
          O1 - Hosts: 209.212.147.139 ca.search.yahoo.com
          O1 - Hosts: 209.212.147.139 de.search.yahoo.com
          O1 - Hosts: 209.212.147.139 fr.search.yahoo.com
          O1 - Hosts: 209.212.147.139 au.search.yahoo.com
          O1 - Hosts: 209.212.147.139 www.youtube.com

          ---\\ Composants installés (ActiveSetup Installed Components) (O40)
          O40 - ASIC: Personnalisation du navigateur - >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS . (.Pas de propriétaire - Pas de description.) -- RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
          O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\regutils.dll
          O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\msnetmtg.inf
          O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\msmsgs.inf
          O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\wmp11.inf
          O40 - ASIC: Adobe Flash Player 9 ActiveX - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 10.0 r45.) -- C:\WINDOWS\System32\Macromed\Flash\Flash10e.ocx

          ---\\ Logiciels installés (O42)
          O42 - Logiciel: AVS4YOU Software Navigator 1.3 - (.Online Media Technologies Ltd..) [HKLM] -- AVS4YOU Software Navigator
          O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
          O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems, Inc..) [HKLM] -- {AF36CE1D-FD2C-4BA0-93FA-1196785DD610}
          O42 - Logiciel: Adobe Flash Player 9 ActiveX - (.Adobe Systems.) [HKLM] -- ShockwaveFlash
          O42 - Logiciel: Adobe Photoshop 5.0 Limited Edition - (.Adobe Systems, Inc..) [HKLM] -- Adobe Photoshop 5.0 Limited Edition
          O42 - Logiciel: Adobe Reader 9.3.2 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A93000000001}
          O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player
          O42 - Logiciel: Age of Empires III - The WarChiefs Trial - (.Microsoft Game Studios.) [HKLM] -- InstallShield_{ABFE9B50-BA4B-4FDF-A943-EA025119DBED}
          O42 - Logiciel: Analyseur et SDK XML Microsoft - (.Microsoft Corporation.) [HKLM] -- {3E908702-AF35-4611-9518-955DA24B7E07}
          O42 - Logiciel: Ask Toolbar - (.Ask.com.) [HKLM] -- AskTBar Uninstall
          O42 - Logiciel: Ask Toolbar - (.Ask.com.) [HKLM] -- {86D4B82A-ABED-442A-BE86-96357B70F4FE}
          O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
          O42 - Logiciel: BitSpirit v3.0.1.086 Stable Release - (.LANSPIRIT.NET.) [HKLM] -- BitSpirit
          O42 - Logiciel: C-Media WDM Audio Driver - (.Pas de propriétaire.) [HKLM] -- C-Media Audio Driver
          O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
          O42 - Logiciel: Coffret de pilotes Logitech QuickCam for Enterprise - (.Pas de propriétaire.) [HKLM] -- lvdrivers_11.72
          O42 - Logiciel: Configuration DivX - (.DivX, Inc. .) [HKLM] -- DivX Setup.divx.com
          O42 - Logiciel: Coup de pouce Jardin d'éveil v1.0 - (.Pas de propriétaire.) [HKLM] -- CPJARDIN_1.0
          O42 - Logiciel: DVD Suite - (.CyberLink Corporation.) [HKLM] -- {1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}
          O42 - Logiciel: Digital Camera Driver - (.Pas de propriétaire.) [HKLM] -- Digital Camera Driver
          O42 - Logiciel: Digital Photo Navigator 1.5 - (.Pas de propriétaire.) [HKLM] -- {CF9CD37C-E29A-11D5-AE3D-005004B8E30C}
          O42 - Logiciel: DivX Converter - (.DivX, Inc..) [HKLM] -- {B13A7C41581B411290FBC0395694E2A9}
          O42 - Logiciel: DivX Plus DirectShow Filters - (.DivX, Inc..) [HKLM] -- DivX Plus DirectShow Filters
          O42 - Logiciel: Everio MediaBrowser - (.PIXELA.) [HKLM] -- {5CA03ECF-B4A6-464B-9F5D-64D8B61B083F}
          O42 - Logiciel: Favorit (qbtwf) - (.Pas de propriétaire.) [HKLM] -- qbtwf
          O42 - Logiciel: Funky Emoticons - (.Favorit Network S.L..) [HKLM] -- Funky Emoticons
          O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {B131E59D-202C-43C6-84C9-68F0C37541F1}
          O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome
          O42 - Logiciel: Google Desktop - (.Google.) [HKLM] -- Google Desktop
          O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
          O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
          O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
          O42 - Logiciel: Grab & Burn, Version 5.0.2 Free( Build 2006-08-23, Win32, CSS ) - (.Rocket Division Software.) [HKLM] -- Rocket Division Software Grab & Burn
          O42 - Logiciel: HP Image Zone 4.2 - (.HP.) [HKLM] -- HP Photo & Imaging
          O42 - Logiciel: HP PSC & OfficeJet 4.2 - (.HP.) [HKLM] -- {A1062847-0846-427A-92A1-BB8251A91E91}
          O42 - Logiciel: HP Software Update - (.Hewlett-Packard.) [HKLM] -- {457791C5-D702-4143-A7B2-2744BE9573F2}
          O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
          O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
          O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399
          O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5
          O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5
          O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3
          O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {46ABBC54-1872-4AA3-95E2-F2C063A63F31}
          O42 - Logiciel: InterVideo MediaOne Gallery - (.Pas de propriétaire.) [HKLM] -- {34F0D55F-C386-4195-9A5B-961D3F6ACD46}
          O42 - Logiciel: Java(TM) 6 Update 11 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216011FF}
          O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {E2DFE069-083E-4631-9B6C-43C48E991DE5}
          O42 - Logiciel: LEGO Digital Designer - (.Pas de propriétaire.) [HKLM] -- New LEGO Digital Designer
          O42 - Logiciel: LG ODD Auto Firmware Update - (.Pas de propriétaire.) [HKLM] -- {6179550A-3E7C-499E-BCC9-9E8113E0A285}
          O42 - Logiciel: Lecteur Windows Media 11 - (.Pas de propriétaire.) [HKLM] -- Windows Media Player
          O42 - Logiciel: LimeWire 5.5.8 - (.Lime Wire, LLC.) [HKLM] -- LimeWire
          O42 - Logiciel: Logiciel d'impression photo HP - (.Pas de propriétaire.) [HKLM] -- Logiciel d'impression photo HP
          O42 - Logiciel: Logitech QuickCam for Enterprise - (.Logitech Inc..) [HKLM] -- {A69626F0-D359-47F4-847B-F881A8A7D134}
          O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
          O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
          O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
          O42 - Logiciel: MSXML 6.0 Parser (KB925673) - (.Microsoft Corporation.) [HKLM] -- {FE9126DB-5F84-495A-BB46-3C724F1C2D08}
          O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes.) [HKLM] -- Malwarebytes' Anti-Malware
          O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
          O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
          O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
          O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
          O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
          O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1
          O42 - Logiciel: Microsoft Internationalized Domain Names Mitigation APIs - (.Microsoft Corporation.) [HKLM] -- IDNMitigationAPIs
          O42 - Logiciel: Microsoft National Language Support Downlevel APIs - (.Microsoft Corporation.) [HKLM] -- NLSDownlevelMapping
          O42 - Logiciel: Microsoft Office Live Add-in 1.3 - (.Microsoft Corporation.) [HKLM] -- {57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}
          O42 - Logiciel: Microsoft Office Outlook Connector - (.Microsoft Corporation.) [HKLM] -- {95120000-0122-040C-0000-0000000FF1CE}
          O42 - Logiciel: Microsoft Office Professional Edition 2003 - (.Microsoft Corporation.) [HKLM] -- {9011040C-6000-11D3-8CFE-0150048383C9}
          O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
          O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) [HKLM] -- {4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
          O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
          O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {8A74E887-8F0F-4017-AF53-CBA42211AAA5}
          O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
          O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- Wudf01000
          O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}
          O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {7299052b-02a4-4627-81f2-1818da5d550d}
          O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {A49F249F-0C91-497F-86DF-B2585E8E76B7}
          O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
          O42 - Logiciel: Microsoft Works 6-9 Converter - (.Microsoft Corporation.) [HKLM] -- {172423F9-522A-483A-AD65-03600CE4CA4F}
          O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-040C-0000-0000000FF1CE}
          O42 - Logiciel: Mozilla Firefox (3.6.12) - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.6.12)
          O42 - Logiciel: NVIDIA Display Driver - (.Pas de propriétaire.) [HKLM] -- NVIDIA Display Driver
          O42 - Logiciel: Nero 8 Trial - (.Nero AG.) [HKLM] -- {8410B358-107A-4FB7-AB2B-6FD952F15A8F}
          O42 - Logiciel: Nero 9 - (.Nero AG.) [HKLM] -- {b0f8c922-e382-4eca-9345-a2b287d2b194}
          O42 - Logiciel: Nero BackItUp 4 - (.Nero AG.) [HKLM] -- {8effafee-94d3-42f1-9805-663bf814b328}
          O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}
          O42 - Logiciel: PC Connectivity Solution - (.Nokia.) [HKLM] -- {AC599724-5755-48C1-ABE7-ABB857652930}
          O42 - Logiciel: Package de pilotes Windows - MobileTop (sshpmdm) Modem (02/23/2007 2.5.0.0) - (.MobileTop.) [HKLM] -- 6194C28A8F62DD817EA1B918E6E46E806A21B452
          O42 - Logiciel: Package de pilotes Windows - MobileTop (sshpusb) USB (02/23/2007 2.5.0.0) - (.MobileTop.) [HKLM] -- 65B6FE5418CE28F4D72543FB2D964C3CEC83F161
          O42 - Logiciel: Package de pilotes Windows - Nokia pccsmcfd (10/12/2007 6.85.4.0) - (.Nokia.) [HKLM] -- 3A5DEFA413DDE699DBA6EBE0A63534ACA524D30F
          O42 - Logiciel: Platine Quizz - (.1000Softs.com.) [HKLM] -- {975DF86B-6F90-4B66-BF7E-9A1F365C37C8}
          O42 - Logiciel: QuickTime - (.Pas de propriétaire.) [HKLM] -- QuickTime
          O42 - Logiciel: RealPlayer - (.RealNetworks.) [HKLM] -- RealPlayer 12.0
          O42 - Logiciel: RealUpgrade 1.0 - (.RealNetworks, Inc..) [HKLM] -- {F4F4F84E-804F-4E9A-84D7-C34283F0088F}
          O42 - Logiciel: SAMSUNG CDMA Modem Driver Set - (.Pas de propriétaire.) [HKLM] -- SAMSUNG CDMA Modem
          O42 - Logiciel: SAMSUNG Mobile Composite Device Software - (.Pas de propriétaire.) [HKLM] -- SAMSUNG Mobile Composite Device
          O42 - Logiciel: SAMSUNG Mobile Modem Driver Set - (.Pas de propriétaire.) [HKLM] -- SAMSUNG Mobile Modem
          O42 - Logiciel: SAMSUNG Mobile USB Modem 1.0 Software - (.Pas de propriétaire.) [HKLM] -- SAMSUNG Mobile USB Modem 1.0
          O42 - Logiciel: SAMSUNG Mobile USB Modem Software - (.Pas de propriétaire.) [HKLM] -- SAMSUNG Mobile USB Modem
          O42 - Logiciel: SAMSUNG USB Mobile Device Software - (.Pas de propriétaire.) [HKLM] -- SAMSUNG USB Mobile Device
          O42 - Logiciel: Samsung Mobile Modem Device Software - (.Pas de propriétaire.) [HKLM] -- Samsung Mobile Modem Device
          O42 - Logiciel: Samsung Mobile phone USB driver Software - (.Pas de propriétaire.) [HKLM] -- Samsung Mobile phone USB driver
          O42 - Logiciel: Samsung New PC Studio - (.Samsung Electronics Co., Ltd..) [HKLM] -- InstallShield_{F193FC0E-9E18-40FC-A974-509A1BDD240A}
          O42 - Logiciel: Samsung New PC Studio - (.Samsung Electronics Co., Ltd..) [HKLM] -- {F193FC0E-9E18-40FC-A974-509A1BDD240A}
          O42 - Logiciel: SamsungConnectivityCableDriver - (.Samsung.) [HKLM] -- {7E84FAC8-C518-40F9-9807-7455301D6D25}
          O42 - Logiciel: SecurDisc Viewer - (.Nero AG.) [HKLM] -- {BE90CE58-41DE-4708-9291-A9D1D49B1036}
          O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906
          O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
          O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
          O42 - Logiciel: SoftwareUpdate 1.0 - (.EoRezo.) [HKLM] -- SoftwareUpdate
          O42 - Logiciel: Unity Web Player (All users) - (.Unity Technologies ApS.) [HKLM] -- UnityWebPlayer
          O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
          O42 - Logiciel: VC80CRTRedist - 8.0.50727.4053 - (.DivX, Inc.) [HKLM] -- {5EE7D259-D137-4438-9A5F-42F432EC0421}
          O42 - Logiciel: VCRedistSetup - (.Nero AG.) [HKLM] -- {3921A67A-5AB1-4E48-9444-C71814CF3027}
          O42 - Logiciel: VIA Rhine-Family Fast-Ethernet Adapter - (.Pas de propriétaire.) [HKLM] -- VN_VUIns_Rhine_VIA
          O42 - Logiciel: VLC media player 1.0.5 - (.VideoLAN Team.) [HKLM] -- VLC media player
          O42 - Logiciel: Visual C++ 2008 x86 Runtime - (v9.0.30729) - (.Microsoft Corporation.) [HKLM] -- {F333A33D-125C-32A2-8DCE-5C5D14231E27}
          O42 - Logiciel: Visual C++ 2008 x86 Runtime - v9.0.30729.01 - (.Microsoft Corporation.) [HKLM] -- {F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01
          O42 - Logiciel: Vodafone 804SS USB driver Software - (.Pas de propriétaire.) [HKLM] -- Vodafone 804SS USB driver
          O42 - Logiciel: Windows Internet Explorer 7 - (.Microsoft Corporation.) [HKLM] -- ie7
          O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8
          O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
          O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3B4E636E-9D65-4D67-BA61-189800823F52}
          O42 - Logiciel: Windows Live Contrôle parental - (.Microsoft Corporation.) [HKLM] -- {D5D81435-B8DE-4CAF-867F-7998F2B92CFC}
          O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM] -- {2075CB0A-D26F-4DAA-B424-5079296B43BA}
          O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {5DD76286-9BE7-4894-A990-E905E91AC818}
          O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {770F1BEC-2871-4E70-B837-FB8525FFA3B1}
          O42 - Logiciel: Windows Live OneCare safety scanner - (.Pas de propriétaire.) [HKLM] -- Windows Live OneCare safety scanner
          O42 - Logiciel: Windows Live Toolbar - (.Microsoft Corporation.) [HKLM] -- {F7D27C70-90F5-49B9-B188-0A133C0CE353}
          O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {4634B21A-CC07-4396-890C-2B8168661FEA}
          O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11
          O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime
          O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11
          O42 - Logiciel: Windows Presentation Foundation - (.Microsoft Corporation.) [HKLM] -- {BAF78226-3200-4DB4-BE33-4D922A799840}
          O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service
          O42 - Logiciel: XML Paper Specification Shared Components Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- XpsEPSC
          O42 - Logiciel: avast! Free Antivirus - (.Alwil Software.) [HKLM] -- avast5
          O42 - Logiciel: eMule - (.Pas de propriétaire.) [HKLM] -- eMule
          O42 - Logiciel: free-downloads.net Toolbar - (.Pas de propriétaire.) [HKLM] -- free-downloads.net Toolbar
          O42 - Logiciel: hp photosmart Série 1218 (Supprimer uniquement) - (.Pas de propriétaire.) [HKLM] -- hp photosmart 1218 series
          O42 - Logiciel: neroxml - (.Nero AG.) [HKLM] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B}

          ---\\ HKCU & HKLM Software Keys
          [HKCU\Software\3]
          [HKCU\Software\?? ?? ???? ????? ??? ?? ????]
          [HKCU\Software\ALWIL Software]
          [HKCU\Software\AVS4YOU]
          [HKCU\Software\Adobe]
          [HKCU\Software\Ahead]
          [HKCU\Software\Alcohol Soft]
          [HKCU\Software\AnalogX]
          [HKCU\Software\AppDataLow\AskToolbarInfo]
          [HKCU\Software\AppDataLow\Software\Macromedia]
          [HKCU\Software\AppDataLow\Software]
          [HKCU\Software\AppDataLow]
          [HKCU\Software\Artogon]
          [HKCU\Software\Ask.com]
          [HKCU\Software\AskToolbar]
          [HKCU\Software\Aurigma]
          [HKCU\Software\Big Fish Games]
          [HKCU\Software\Boonty]
          [HKCU\Software\CDDB]
          [HKCU\Software\CDIP]
          [HKCU\Software\Celeris]
          [HKCU\Software\Classes]
          [HKCU\Software\Clients]
          [HKCU\Software\Codeminion]
          [HKCU\Software\Conduit]
          [HKCU\Software\Cyberlink]
          [HKCU\Software\DataLode]
          [HKCU\Software\Detective Stories: Hollywood]
          [HKCU\Software\Digital River]
          [HKCU\Software\DivXNetworks]
          [HKCU\Software\DivX]
          [HKCU\Software\Dragon Altar Games]
          [HKCU\Software\DxO]
          [HKCU\Software\Ecru]
          [HKCU\Software\Emulators]
          [HKCU\Software\EoRezo]
          [HKCU\Software\Fighters]
          [HKCU\Software\Fugazo]
          [HKCU\Software\FunkyEmoticons]
          [HKCU\Software\GOG]
          [HKCU\Software\Game Maker]
          [HKCU\Software\Google]
          [HKCU\Software\Grand Virtual]
          [HKCU\Software\Hewlett-Packard]
          [HKCU\Software\IM Providers]
          [HKCU\Software\IVIIS]
          [HKCU\Software\IncrediMail]
          [HKCU\Software\Intel]
          [HKCU\Software\InterVideo]
          [HKCU\Software\ItsLabel]
          [HKCU\Software\JEDI-VCL]
          [HKCU\Software\JavaSoft]
          [HKCU\Software\JetDogs Studios]
          [HKCU\Software\JollyBear]
          [HKCU\Software\Lake]
          [HKCU\Software\LanConfig]
          [HKCU\Software\Lavasoft]
          [HKCU\Software\Local AppWizard-Generated Applications]
          [HKCU\Software\LogiShared]
          [HKCU\Software\Logitech]
          [HKCU\Software\MGS]
          [HKCU\Software\Macromedia]
          [HKCU\Software\MagiciansHandbookCursedValley]
          [HKCU\Software\Magnet]
          [HKCU\Software\Mainconcept]
          [HKCU\Software\Malwarebytes' Anti-Malware]
          [HKCU\Software\Meridian93]
          [HKCU\Software\MicroGaming]
          [HKCU\Software\Mobileleader]
          [HKCU\Software\MozillaPlugins]
          [HKCU\Software\Mozilla]
          [HKCU\Software\NVIDIA Corporation]
          [HKCU\Software\Need4Video]
          [HKCU\Software\NeroDigital]
          [HKCU\Software\Nero]
          [HKCU\Software\Netscape]
          [HKCU\Software\ODBC]
          [HKCU\Software\ORL]
          [HKCU\Software\OXXOgames]
          [HKCU\Software\Oberon Media]
          [HKCU\Software\Oberon]
          [HKCU\Software\PIXELA]
          [HKCU\Software\Panicware]
          [HKCU\Software\Paprikari]
          [HKCU\Software\Piriform]
          [HKCU\Software\Platine]
          [HKCU\Software\Play United Casino]
          [HKCU\Software\Policies]
          [HKCU\Software\PopCap]
          [HKCU\Software\PuzzleLab]
          [HKCU\Software\RIT]
          [HKCU\Software\RealNetworks]
          [HKCU\Software\Samsung]
          [HKCU\Software\Sensaura]
          [HKCU\Software\Softonic]
          [HKCU\Software\Spamihilator]
          [HKCU\Software\SpiderMessenger]
          [HKCU\Software\Stargaze Interactive]
          [HKCU\Software\Test3D]
          [HKCU\Software\Tracker Software]
          [HKCU\Software\Trolltech]
          [HKCU\Software\Ubi Soft]
          [HKCU\Software\VB and VBA Program Settings]
          [HKCU\Software\VSO]
          [HKCU\Software\Valve]
          [HKCU\Software\VirginMega]
          [HKCU\Software\WinRAR SFX]
          [HKCU\Software\Windows Live Writer]
          [HKCU\Software\Winsudate]
          [HKCU\Software\YahooPartnerToolbar]
          [HKCU\Software\eMule]
          [HKCU\Software\free-downloads.net]
          [HKCU\Software\yahoo]
          [HKLM\Software\AGEIA Technologies]
          [HKLM\Software\ALWIL Software]
          [HKLM\Software\AVS4YOU]
          [HKLM\Software\Adobe]
          [HKLM\Software\Alcohol Soft]
          [HKLM\Software\AppDataLow]
          [HKLM\Software\Apple Computer, Inc.]
          [HKLM\Software\AskTBar]
          [HKLM\Software\Audible]
          [HKLM\Software\Big Fish Games]
          [HKLM\Software\BrowserChoice]
          [HKLM\Software\C07ft5Y]
          [HKLM\Software\Canon]
          [HKLM\Software\Classes]
          [HKLM\Software\Clients]
          [HKLM\Software\Conduit]
          [HKLM\Software\CyberLink]
          [HKLM\Software\DIOC]
          [HKLM\Software\DivXNetworks]
          [HKLM\Software\DivX]
          [HKLM\Software\Ecru]
          [HKLM\Software\EdenFlirt]
          [HKLM\Software\EnigmaSoftwareGroup]
          [HKLM\Software\EoRezo]
          [HKLM\Software\Ericsson]
          [HKLM\Software\FRANCE TELECOM]
          [HKLM\Software\Fighters]
          [HKLM\Software\FunkyEmoticons]
          [HKLM\Software\Gemplus]
          [HKLM\Software\Google]
          [HKLM\Software\HP]
          [HKLM\Software\Hewlett-Packard]
          [HKLM\Software\HipSoft]
          [HKLM\Software\ICE]
          [HKLM\Software\IVIIS]
          [HKLM\Software\InstallShield]
          [HKLM\Software\Intel]
          [HKLM\Software\InterVideo]
          [HKLM\Software\ItsLabel]
          [HKLM\Software\JVC]
          [HKLM\Software\JavaSoft]
          [HKLM\Software\KONAMI]
          [HKLM\Software\Knowledge Adventure]
          [HKLM\Software\Kodak]
          [HKLM\Software\LG Electronics]
          [HKLM\Software\Lagence3D]
          [HKLM\Software\Lake]
          [HKLM\Software\Lavasoft]
          [HKLM\Software\Licenses]
          [HKLM\Software\LightScribe]
          [HKLM\Software\Logitech]
          [HKLM\Software\MCCI]
          [HKLM\Software\Macromedia]
          [HKLM\Software\MarkAny]
          [HKLM\Software\MimarSinan]
          [HKLM\Software\MozillaPlugins]
          [HKLM\Software\Mozilla]
          [HKLM\Software\NOS]
          [HKLM\Software\NVIDIA Corporation]
          [HKLM\Software\Need4Video]
          [HKLM\Software\NeoEdge Networks]
          [HKLM\Software\NeroDigital]
          [HKLM\Software\Nero]
          [HKLM\Software\ODBC]
          [HKLM\Software\Oberon Media]
          [HKLM\Software\PC Connectivity Solution]
          [HKLM\Software\PCSuite]
          [HKLM\Software\PIXELA]
          [HKLM\Software\PTECH]
          [HKLM\Software\Panda Software]
          [HKLM\Software\Panicware]
          [HKLM\Software\Play United Casino]
          [HKLM\Software\Policies]
          [HKLM\Software\PopCap]
          [HKLM\Software\Program Groups]
          [HKLM\Software\QATestSystem]
          [HKLM\Software\QubeSoft]
          [HKLM\Software\RealNetworks]
          [HKLM\Software\RegisteredApplications]
          [HKLM\Software\RichFX]
          [HKLM\Software\S3R521]
          [HKLM\Software\Samsung]
          [HKLM\Software\Schlumberger]
          [HKLM\Software\Secure]
          [HKLM\Software\Skype]
          [HKLM\Software\Symantec]
          [HKLM\Software\TENCENT]
          [HKLM\Software\Tracker Software]
          [HKLM\Software\TrendMicro]
          [HKLM\Software\Ulead Systems]
          [HKLM\Software\Ulead]
          [HKLM\Software\Uniblue]
          [HKLM\Software\Unity]
          [HKLM\Software\VN_VUIns]
          [HKLM\Software\VSO]
          [HKLM\Software\VideoLAN]
          [HKLM\Software\VirginMega]
          [HKLM\Software\WinLicense]
          [HKLM\Software\Windows 3.1 Migration Status]
          [HKLM\Software\Wise Solutions]
          [HKLM\Software\Wow6432Node]
          [HKLM\Software\Xing Technology Corp.]
          [HKLM\Software\Yahoo]
          [HKLM\Software\Zlong Games]
          [HKLM\Software\ahead]
          [HKLM\Software\free-downloads.net]
          [HKLM\Software\iWin]
          [HKLM\Software\lameme]
          [HKLM\Software\mozilla.org]

          ---\\ Contenu des dossiers ProgramFiles/ProgramData (O43)
          O43 - CFD:Common File Directory ----D- C:\Program Files\Adobe
          O43 - CFD:Common File Directory ----D- C:\Program Files\Alcohol Soft
          O43 - CFD:Common File Directory ----D- C:\Program Files\Alwil Software
          O43 - CFD:Common File Directory ----D- C:\Program Files\Ask.com
          O43 - CFD:Common File Directory ----D- C:\Program Files\AskTBar
          O43 - CFD:Common File Directory ----D- C:\Program Files\AVS4YOU
          O43 - CFD:Common File Directory ----D- C:\Program Files\BitSpirit
          O43 - CFD:Common File Directory ----D- C:\Program Files\Boonty
          O43 - CFD:Common File Directory ----D- C:\Program Files\BoontyGames
          O43 - CFD:Common File Directory ----D- C:\Program Files\C-Media
          O43 - CFD:Common File Directory ----D- C:\Program Files\CCleaner
          O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files
          O43 - CFD:Common File Directory ----D- C:\Program Files\Conduit
          O43 - CFD:Common File Directory ----D- C:\Program Files\CyberLink
          O43 - CFD:Common File Directory ----D- C:\Program Files\DIFX
          O43 - CFD:Common File Directory ----D- C:\Program Files\Digital Camera
          O43 - CFD:Common File Directory ----D- C:\Program Files\Digital Photo Navigator 1.5
          O43 - CFD:Common File Directory ----D- C:\Program Files\DivX
          O43 - CFD:Common File Directory ----D- C:\Program Files\DxO Labs
          O43 - CFD:Common File Directory ----D- C:\Program Files\Eidos
          O43 - CFD:Common File Directory ----D- C:\Program Files\eMule
          O43 - CFD:Common File Directory ----D- C:\Program Files\Enigma Software Group
          O43 - CFD:Common File Directory ----D- C:\Program Files\EoRezo
          O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers communs
          O43 - CFD:Common File Directory ----D- C:\Program Files\Fighters
          O43 - CFD:Common File Directory ----D- C:\Program Files\free-downloads.net
          O43 - CFD:Common File Directory ----D- C:\Program Files\FunkyEmoticons
          O43 - CFD:Common File Directory ----D- C:\Program Files\Google
          O43 - CFD:Common File Directory ----D- C:\Program Files\Hewlett-Packard
          O43 - CFD:Common File Directory ----D- C:\Program Files\HiYo
          O43 - CFD:Common File Directory ----D- C:\Program Files\HP
          O43 - CFD:Common File Directory ----D- C:\Program Files\hp photosmart
          O43 - CFD:Common File Directory --H-D- C:\Program Files\InstallShield Installation Information
          O43 - CFD:Common File Directory ----D- C:\Program Files\Internet Explorer
          O43 - CFD:Common File Directory ----D- C:\Program Files\InterVideo
          O43 - CFD:Common File Directory ----D- C:\Program Files\InterVideo Information Service
          O43 - CFD:Common File Directory ----D- C:\Program Files\Java
          O43 - CFD:Common File Directory ----D- C:\Program Files\LEGO Company
          O43 - CFD:Common File Directory ----D- C:\Program Files\lg_fwupdate
          O43 - CFD:Common File Directory ----D- C:\Program Files\LimeWire
          O43 - CFD:Common File Directory ----D- C:\Program Files\Logitech
          O43 - CFD:Common File Directory ----D- C:\Program Files\Ludi
          O43 - CFD:Common File Directory ----D- C:\Program Files\Malwarebytes' Anti-Malware
          O43 - CFD:Common File Directory ----D- C:\Program Files\MarkAny
          O43 - CFD:Common File Directory ----D- C:\Program Files\Messenger
          O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft
          O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft CAPICOM 2.1.0.2
          O43 - CFD:Common File Directory ----D- C:\Program Files\microsoft frontpage
          O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Games
          O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Office
          O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Office Outlook Connector
          O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Silverlight
          O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft SQL Server Compact Edition
          O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Sync Framework
          O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Visual Studio
          O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Works
          O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft.NET
          O43 - CFD:Common File Directory ----D- C:\Program Files\Movie Maker
          O43 - CFD:Common File Directory ----D- C:\Program Files\Mozilla Firefox
          O43 - CFD:Common File Directory ----D- C:\Program Files\MSBuild
          O43 - CFD:Common File Directory ----D- C:\Program Files\MSECache
          O43 - CFD:Common File Directory ----D- C:\Program Files\MSN
          O43 - CFD:Common File Directory ----D- C:\Program Files\MSN Gaming Zone
          O43 - CFD:Common File Directory ----D- C:\Program Files\MSXML 4.0
          O43 - CFD:Common File Directory ----D- C:\Program Files\MyMediaRecorder (YouTube & Dailymotion Enabled)
          O43 - CFD:Common File Directory ----D- C:\Program Files\Need4 Video Converter 5.9
          O43 - CFD:Common File Directory ----D- C:\Program Files\Nero