Comment se debarasser de shopper report et vi

bonjour, postes un zhpdiag pour y voir plus claire

Ouvre ce lien et télécharge ZHPDiag :

https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

cliques sur télécharger "celui du bas"

ou directement ici: https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

et si problème : http://www.premiumorange.com/zeb-help-process/zhpdiag.html

tu vas en bas de la page et tu télécharges le premier tu et tu dézippes

Enregistres le sur ton Bureau.

Une fois le téléchargement achevé

pour XP, double-clique sur ZHPDiag

pour Vista,et seven tu fais un clic droit sur l'icône et exécute en tant qu'administrateur.

N'oublies pas de cocher la case qui permet de mettre un raccourci sur le Bureau.

/|\ l'outil a créé 2 icônes ZHPDiag et ZHPFix.

Double cliques sur le raccourci ZHPDiag sur ton Bureau pour XP sinon clique droit et en tant que administrateur !!

Clique sur le Tournevis puis sur Tous pour cocher toutes les cases des options.

Cliques sur la loupe pour lancer l'analyse.

Laisses l'outil travailler, il peut être assez long.

A la fin de l'analyse,clique sur l'appareil photo et enregistre le rapport sur ton Bureau.

Fermes ZHPDiag en fin d'analyse.

Pour me le transmettre clique sur ce lien :

http://www.cijoint.fr/index.php

Clique sur Parcourir et cherche le fichier C:\Documents and settings\le_nom_de_ta_session\bureau\.ZHPDiag.txt

ou directement en choisissant bureau et ZHPDiag.txt clique dessus

Clique sur Ouvrir.

Clique sur "Cliquez ici pour déposer le fichier".

Un lien de cette forme :

http://www.cijoint.fr/cjlink.php?file=cj200905/cib7SU.txt

est ajouté dans la page.

Copie ce lien dans ta réponse.

voici le rapport ad remover:

======= RAPPORT D'AD-REMOVER 2.0.0.2,B | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par TeamXscript le 07/11/10 à 01:00
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 20:27:27 le 07/11/2010, Mode normal

Microsoft Windows XP Professionnel Service Pack 3 (X86)
lanos@NOEMIE ( )

============== ACTION(S) ==============

Fichier supprimé: C:\Program Files\Mozilla FireFox\Components\AskSearch.js
Dossier supprimé: C:\Program Files\QueryExplorer
Dossier supprimé: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ShopperReports
Dossier supprimé: C:\Documents and Settings\lanos\Application Data\ShopperReports3
Dossier supprimé: C:\Program Files\ShopperReports3

(!) -- Fichiers temporaires supprimés.

Clé supprimée: HKLM\Software\Classes\CLSID\{09325003-167C-483d-A4BA-8B3122ABB432}
Clé supprimée: HKLM\Software\Classes\AppID\{0D82ACD6-A652-4496-A298-2BDE705F4227}
Clé supprimée: HKLM\Software\Classes\CLSID\{20EA9658-6BC3-4599-A87D-6371FE9295FC}
Clé supprimée: HKLM\Software\Classes\CLSID\{2721A8E5-BFDB-4562-9912-9E0531CA616C}
Clé supprimée: HKLM\Software\Classes\AppID\{7025E484-D4B0-441a-9F0B-69063BD679CE}
Clé supprimée: HKLM\Software\Classes\CLSID\{396CFC12-932D-496b-A0A8-5D7201E105E1}
Clé supprimée: HKLM\Software\Classes\AppID\{A89256AD-EC17-4a83-BEF5-4B8BC4F39306}
Clé supprimée: HKLM\Software\Classes\CLSID\{47C6C527-6204-4F91-849D-66E234DEE015}
Clé supprimée: HKLM\Software\Classes\CLSID\{60DA826C-B1C6-4358-BDEC-4837CED45470}
Clé supprimée: HKLM\Software\Classes\CLSID\{6DD76B7B-6423-4df0-9A07-84A6CAD973A0}
Clé supprimée: HKLM\Software\Classes\CLSID\{74C22317-5B90-471f-9AD2-FEC049870A16}
Clé supprimée: HKLM\Software\Classes\CLSID\{7F6CFB6A-9227-4bb8-B941-F2B067E76F51}
Clé supprimée: HKLM\Software\Classes\CLSID\{9461b922-3c5a-11d2-bf8b-00c04fb93661}
Clé supprimée: HKLM\Software\Classes\CLSID\{A16AD1E9-F69A-45af-9462-B1C286708842}
Clé supprimée: HKLM\Software\Classes\CLSID\{A7CDDCDC-BEEB-4685-A062-978F5E07CEEE}
Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\Explorer Bars\{A7CDDCDC-BEEB-4685-A062-978F5E07CEEE}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7CDDCDC-BEEB-4685-A062-978F5E07CEEE}
Clé supprimée: HKLM\Software\Classes\CLSID\{AB0EE208-DF60-4fa7-A617-C4269760033E}
Clé supprimée: HKLM\Software\Classes\CLSID\{B791A095-A4AC-4312-8894-5B7E8FF5B3CD}
Clé supprimée: HKLM\Software\Classes\CLSID\{C1089F63-7AFC-4538-B0EB-BEA0F4225A57}
Clé supprimée: HKLM\Software\Classes\CLSID\{C9CCBB35-D123-4a31-AFFC-9B2933132116}
Clé supprimée: HKLM\Software\Classes\CLSID\{CC7BD6F1-565C-47ce-A5BB-9C935E77B59D}
Clé supprimée: HKLM\Software\Classes\CLSID\{CFC16189-8A92-4a29-A940-60248385F426}
Clé supprimée: HKLM\Software\Classes\CLSID\{DEE758B4-C3FB-4a5b-9939-848B9C77A2FB}
Clé supprimée: HKLM\Software\Classes\AppID\{8258B35C-05B8-4c0e-9525-9BCCC70F8F2D}
Clé supprimée: HKLM\Software\Classes\CLSID\{E12AEAB6-7D12-4c07-8E36-5892EFB4DAFB}
Clé supprimée: HKLM\Software\Classes\CLSID\{E2F2C137-A782-4fb5-81AF-086156F5EB0A}
Clé supprimée: HKLM\Software\Classes\CLSID\{F1D06C9F-51F0-4476-BEDE-5DDF91BE304E}
Clé supprimée: HKLM\Software\Classes\CLSID\{F3A32DF2-7413-4fb1-B575-1AC920A17B76}
Clé supprimée: HKLM\Software\Classes\Interface\{115CCBAE-27B0-47C3-BA42-BAB708424393}
Clé supprimée: HKLM\Software\Classes\Interface\{17BF1E05-C0E8-413C-BD1F-A481EEA3B8E9}
Clé supprimée: HKLM\Software\Classes\Interface\{21BA420E-161C-413A-B21E-4E42AE1F4226}
Clé supprimée: HKLM\Software\Classes\Interface\{453DB0C5-F41C-4D97-8DD6-CC72ECD5F699}
Clé supprimée: HKLM\Software\Classes\Interface\{4AFC07D0-59BB-46B8-B097-1A46E88EEF71}
Clé supprimée: HKLM\Software\Classes\Interface\{6511CE4C-4722-40D0-AD3D-4AFA2F50978A}
Clé supprimée: HKLM\Software\Classes\Interface\{83B2FE06-BA20-4F7D-96C6-6FC3A4E877D3}
Clé supprimée: HKLM\Software\Classes\Interface\{8AD9AD05-36BE-4E40-BA62-5422EB0D02FB}
Clé supprimée: HKLM\Software\Classes\Interface\{9BEC9B38-BF39-4899-806E-A1C5DFEB60A2}
Clé supprimée: HKLM\Software\Classes\Interface\{AEBF09E2-0C15-43C8-99BF-928C645D98A0}
Clé supprimée: HKLM\Software\Classes\Interface\{B32966A2-F7C2-4362-A6CF-399EC8B44110}
Clé supprimée: HKLM\Software\Classes\Interface\{B86D82BF-D39F-439A-A07C-43EDDC6F6EA6}
Clé supprimée: HKLM\Software\Classes\Interface\{D8560AC2-21B5-4C1A-BDD4-BD12BC83B082}
Clé supprimée: HKLM\Software\Classes\Interface\{DA6305B9-0869-4235-8C1D-533A65E639E5}
Clé supprimée: HKLM\Software\Classes\Interface\{E25DA6D6-C365-46CF-ABAF-DC5893135D7A}
Clé supprimée: HKLM\Software\Classes\Interface\{E6961C59-CFCE-4CCD-B794-BC78DB98413A}
Clé supprimée: HKLM\Software\Classes\Interface\{F8B4EC8A-2407-4BE0-AEE2-0F430D65A90D}
Clé supprimée: HKLM\Software\Classes\TypeLib\{02AED140-2B62-4B49-8B3B-179020CC39B9}
Clé supprimée: HKLM\Software\Classes\TypeLib\{573F4ABB-A1A2-44ED-9BA9-A8DAD40AAC46}
Clé supprimée: HKLM\Software\Classes\TypeLib\{5FE0CEAE-CB69-40AF-A323-40F94257DACB}
Clé supprimée: HKLM\Software\Classes\TypeLib\{937936AF-28CA-4973-B8AE-F250406149A2}
Clé supprimée: HKLM\Software\Classes\TypeLib\{ACC62306-9A63-4864-BD2F-C8825D2D7EA6}
Clé supprimée: HKLM\Software\Classes\TypeLib\{CDCA70D8-C6A6-49EE-9BED-7429D6C477A2}
Clé supprimée: HKLM\Software\Classes\TypeLib\{D136987F-E1C4-4CCC-A220-893DF03EC5DF}
Clé supprimée: HKLM\Software\Classes\TypeLib\{E343EDFC-1E6C-4CB5-AA29-E9C922641C80}
Clé supprimée: HKLM\Software\Classes\TypeLib\{ECA4E801-17AE-4863-9F5C-AF4047AABEE0}
Clé supprimée: HKLM\Software\Classes\TypeLib\{F1A1892C-2A6C-4817-98B4-FF81443CBA20}
Clé supprimée: HKLM\Software\Classes\ShopperReports.AsyncReporter
Clé supprimée: HKLM\Software\Classes\ShopperReports.AsyncReporter.1
Clé supprimée: HKLM\Software\Classes\ShopperReports.CntntDic
Clé supprimée: HKLM\Software\Classes\ShopperReports.CntntDic.1
Clé supprimée: HKLM\Software\Classes\ShopperReports.CntntDisp
Clé supprimée: HKLM\Software\Classes\ShopperReports.CntntDisp.1
Clé supprimée: HKLM\Software\Classes\ShopperReports.Dwnldr
Clé supprimée: HKLM\Software\Classes\ShopperReports.Dwnldr.1
Clé supprimée: HKLM\Software\Classes\ShopperReports.HbAx
Clé supprimée: HKLM\Software\Classes\ShopperReports.HbAx.1
Clé supprimée: HKLM\Software\Classes\ShopperReports.HbGuru
Clé supprimée: HKLM\Software\Classes\ShopperReports.HbGuru.1
Clé supprimée: HKLM\Software\Classes\ShopperReports.HbInfoBand
Clé supprimée: HKLM\Software\Classes\ShopperReports.HbInfoBand.1
Clé supprimée: HKLM\Software\Classes\ShopperReports.IEButton
Clé supprimée: HKLM\Software\Classes\ShopperReports.IEButton.1
Clé supprimée: HKLM\Software\Classes\ShopperReports.IEButtonA
Clé supprimée: HKLM\Software\Classes\ShopperReports.IEButtonA.1
Clé supprimée: HKLM\Software\Classes\ShopperReports.KOPFF
Clé supprimée: HKLM\Software\Classes\ShopperReports.KOPFF.1
Clé supprimée: HKLM\Software\Classes\ShopperReports.MozillaNvgtnTrpr
Clé supprimée: HKLM\Software\Classes\ShopperReports.MozillaNvgtnTrpr.1
Clé supprimée: HKLM\Software\Classes\ShopperReports.MozillaPSExecuter
Clé supprimée: HKLM\Software\Classes\ShopperReports.MozillaPSExecuter.1
Clé supprimée: HKLM\Software\Classes\ShopperReports.ReportData
Clé supprimée: HKLM\Software\Classes\ShopperReports.ReportData.1
Clé supprimée: HKLM\Software\Classes\ShopperReports.Reporter
Clé supprimée: HKLM\Software\Classes\ShopperReports.Reporter.1
Clé supprimée: HKLM\Software\Classes\ShopperReports.RprtCtrl
Clé supprimée: HKLM\Software\Classes\ShopperReports.RprtCtrl.1
Clé supprimée: HKLM\Software\Classes\ShopperReports.Scopes
Clé supprimée: HKLM\Software\Classes\ShopperReports.Scopes.1
Clé supprimée: HKLM\Software\Classes\ShopperReports.Stock
Clé supprimée: HKLM\Software\Classes\ShopperReports.Stock.1
Clé supprimée: HKLM\Software\Classes\ShopperReports.TriggerImmidiate
Clé supprimée: HKLM\Software\Classes\ShopperReports.TriggerImmidiate.1
Clé supprimée: HKLM\Software\Classes\ShopperReports.TriggerImmidiateOrRandomTS
Clé supprimée: HKLM\Software\Classes\ShopperReports.TriggerImmidiateOrRandomTS.1
Clé supprimée: HKLM\Software\Classes\ShopperReports.TriggerOnceInDay
Clé supprimée: HKLM\Software\Classes\ShopperReports.TriggerOnceInDay.1
Clé supprimée: HKLM\Software\Classes\AppID\BRNstIE.DLL
Clé supprimée: HKLM\Software\Classes\AppID\CmndFF.DLL
Clé supprimée: HKLM\Software\Classes\AppID\mozillaps.dll
Clé supprimée: HKLM\Software\Classes\AppID\Pltfrm.DLL
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Hotbar
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ShopperReportsSA
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{89F88394-3828-4D03-A0CF-8203604C3DA6}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D4233F04-1789-483C-A137-731E8F113DD5}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{100EB1FD-D03E-47FD-81F3-EE91287F9465}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C5428486-50A0-4A02-9D20-520B59A9F9B2}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C5428486-50A0-4A02-9D20-520B59A9F9B3}

Valeur supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform|ShopperReports 3.0.497.0
Valeur supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform|SRS_IT_E8790571B77654503FAB91
Valeur supprimée: HKLM\Software\Mozilla\Firefox\Extensions|Shopperreports@shopperreports.com
Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{90B8B761-DF2B-48AC-BBE0-BCC03A819B3B}

============== SCAN ADDITIONNEL ==============

** Internet Explorer Version [8.0.6001.18702] **

[HKCU\Software\Microsoft\Internet Explorer\Main]
AutoHide: yes
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Do404Search: 0x01000000
Enable Browser Extensions: yes
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/
Use Custom Search URL: 1
Use Search Asst: no

[HKLM\Software\Microsoft\Internet Explorer\Main]
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/

[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm

========================================

C:\Program Files\Ad-Remover\Quarantine: 20 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 13 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 07/11/2010 (836 Octet(s))

Fin à: 20:29:53, 07/11/2010

============== E.O.F ==============

Et voici le rapport usb fix :

############################## | UsbFix 7.034 | [Suppression]

Utilisateur: lanos (Administrateur) # NOEMIE [ ]
Mis à jour le 25/10/10 par El Desaparecido / C_XX
Lancé à 20:54:48 | 07/11/2010
Site Web: http://www.teamxscript.org
Contact: eldesaparecido@teamxscript.org

CPU: AMD Turion(tm) 64 X2 Mobile Technology TL-50
CPU 2: AMD Turion(tm) 64 X2 Mobile Technology TL-50
Microsoft Windows XP Professionnel (5.1.2600 32-Bit) # Service Pack 3
Internet Explorer 8.0.6001.18702

Pare-feu Windows: Activé
Antivirus: Avira AntiVir PersonalEdition Classic 8.0.1.30 [Enabled | Updated]
RAM -> 767 Mo
C:\ (%systemdrive%) -> Disque fixe # 53 Go (6 Go libre(s) - 11%) [ACER] # FAT32
D:\ -> Disque fixe # 54 Go (1 Go libre(s) - 2%) [ACERDATA] # FAT32
E:\ -> CD-ROM
F:\ -> Disque amovible # 952 Mo (439 Mo libre(s) - 46%) [STORE'N'GO] # FAT32
G:\ -> CD-ROM
H:\ -> Disque amovible # 2 Go (840 Mo libre(s) - 42%) [] # FAT32
I:\ -> Disque fixe # 466 Go (260 Go libre(s) - 56%) [Nouveau nom] # NTFS

################## | Éléments infectieux |

Supprimé! C:\WINDOWS\system32\autorun
Supprimé! H:\Autorun.inf
Supprimé! F:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665
Supprimé! I:\Recycler\S-1-5-21-1857820244-605043307-181420079-1005

################## | Registre |

Supprimé! HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\policies\System|DisableRegistryTools
Supprimé! HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\policies\System|DisableTaskMgr
Supprimé! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives
Supprimé! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives

################## | Mountpoints2 |

Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{1b478ba2-38fc-11de-b212-0016d34b3e70}

################## | Listing |

[15/04/2005 - 14:08:42 | D ] C:\VALUEADD
[15/04/2005 - 14:08:46 | D ] C:\SUPPORT
[15/04/2005 - 14:08:50 | D ] C:\I386
[15/04/2005 - 14:12:26 | D ] C:\DOCS
[15/04/2005 - 14:12:26 | D ] C:\DOTNETFX
[15/04/2005 - 14:12:38 | D ] C:\CMPNENTS
[09/03/2008 - 20:10:38 | N | 454] C:\RECUP.DOC
[15/04/2005 - 14:13:42 | D ] C:\ELEMENTS
[15/04/2005 - 14:31:44 | D ] C:\WINDOWS
[15/04/2005 - 14:36:24 | D ] C:\Documents and Settings
[15/04/2005 - 14:45:28 | D ] C:\Program Files
[30/08/2006 - 19:31:00 | D ] C:\BOOK
[30/08/2006 - 19:31:12 | D ] C:\Sysinfo
[06/09/2006 - 12:58:30 | SHD ] C:\system volume information
[15/04/2005 - 14:26:06 | N | 512] C:\BOOTSECT.DOS
[10/08/2004 - 05:00:00 | N | 4952] C:\Bootfont.bin
[16/12/2008 - 22:39:52 | N | 252240] C:\ntldr
[10/08/2004 - 05:00:00 | N | 47564] C:\NTDETECT.COM
[18/12/2006 - 01:22:20 | N | 209] C:\boot.ini
[15/04/2005 - 14:47:34 | N | 0] C:\IO.SYS
[15/04/2005 - 14:47:34 | N | 0] C:\MSDOS.SYS
[30/08/2006 - 19:31:24 | N | 4] C:\wps.dat
[30/08/2006 - 20:35:08 | N | 519] C:\RHDSetup.log
[06/09/2006 - 13:56:00 | N | 64] C:\Preload.rev
[24/05/2001 - 12:59:30 | N | 162304] C:\UNWISE.EXE
[06/09/2006 - 13:56:00 | N | 64] C:\preload.aaa
[04/10/2006 - 16:28:26 | N | 611] C:\Patch.rev
[07/11/2010 - 20:32:56 | ASH | 1409286144] C:\pagefile.sys
[08/03/2007 - 13:19:42 | N | 1091] C:\INSTALL.LOG
[05/02/2009 - 21:22:06 | D ] C:\EPSON
[22/04/2008 - 19:44:34 | N | 35220] C:\RECUP2.DOC
[09/03/2008 - 20:10:38 | N | 2100] C:\RECUP1.DOC
[26/02/2007 - 14:49:24 | N | 187] C:\Raccourci vers Lecteur CD.lnk
[23/05/2007 - 01:47:10 | D ] C:\temp
[24/08/2009 - 01:11:52 | N | 232] C:\sqmdata18.sqm
[18/12/2006 - 01:25:58 | D ] C:\Acer
[06/08/2009 - 21:48:04 | N | 232] C:\sqmdata14.sqm
[07/11/2010 - 20:32:58 | ASH | 803909632] C:\hiberfil.sys
[20/05/2008 - 18:21:44 | N | 13200] C:\RECUP3.DOC
[27/08/2009 - 00:13:30 | N | 232] C:\sqmdata00.sqm
[22/10/2008 - 14:49:42 | D ] C:\ToolBar SD
[22/10/2008 - 15:15:06 | N | 1583] C:\TB.txt
[06/08/2009 - 21:48:04 | N | 244] C:\sqmnoopt14.sqm
[29/12/2006 - 16:45:12 | SHD ] C:\Recycled
[27/08/2009 - 00:13:30 | N | 244] C:\sqmnoopt00.sqm
[27/08/2009 - 22:27:48 | N | 232] C:\sqmdata01.sqm
[14/10/2008 - 13:54:44 | N | 115343872] C:\eDS_PSD_drive.vmdf
[27/08/2009 - 22:27:48 | N | 244] C:\sqmnoopt01.sqm
[28/08/2009 - 18:07:36 | N | 244] C:\sqmnoopt02.sqm
[28/08/2009 - 18:07:36 | N | 232] C:\sqmdata02.sqm
[29/08/2009 - 02:00:30 | N | 244] C:\sqmnoopt03.sqm
[29/08/2009 - 02:00:30 | N | 232] C:\sqmdata03.sqm
[29/08/2009 - 14:42:18 | N | 244] C:\sqmnoopt04.sqm
[29/08/2009 - 14:42:18 | N | 232] C:\sqmdata04.sqm
[28/07/2009 - 02:51:56 | N | 244] C:\sqmnoopt05.sqm
[28/07/2009 - 02:51:56 | N | 232] C:\sqmdata05.sqm
[28/07/2009 - 21:34:14 | N | 244] C:\sqmnoopt06.sqm
[28/07/2009 - 21:34:14 | N | 232] C:\sqmdata06.sqm
[29/07/2009 - 00:26:22 | N | 244] C:\sqmnoopt07.sqm
[29/07/2009 - 00:26:22 | N | 232] C:\sqmdata07.sqm
[30/07/2009 - 04:18:36 | N | 244] C:\sqmnoopt08.sqm
[30/07/2009 - 04:18:36 | N | 232] C:\sqmdata08.sqm
[31/07/2009 - 02:58:48 | N | 244] C:\sqmnoopt09.sqm
[31/07/2009 - 02:58:48 | N | 232] C:\sqmdata09.sqm
[01/08/2009 - 01:31:56 | N | 244] C:\sqmnoopt10.sqm
[01/08/2009 - 01:31:56 | N | 232] C:\sqmdata10.sqm
[01/08/2009 - 21:05:56 | N | 244] C:\sqmnoopt11.sqm
[01/08/2009 - 21:05:56 | N | 232] C:\sqmdata11.sqm
[05/08/2009 - 02:59:26 | N | 244] C:\sqmnoopt12.sqm
[05/08/2009 - 02:59:26 | N | 232] C:\sqmdata12.sqm
[05/08/2009 - 23:53:16 | N | 244] C:\sqmnoopt13.sqm
[05/08/2009 - 23:53:16 | N | 232] C:\sqmdata13.sqm
[25/08/2009 - 09:13:30 | N | 244] C:\sqmnoopt15.sqm
[25/08/2009 - 09:13:30 | N | 232] C:\sqmdata15.sqm
[07/08/2009 - 11:26:14 | N | 244] C:\sqmnoopt16.sqm
[07/08/2009 - 11:26:14 | N | 232] C:\sqmdata16.sqm
[24/08/2009 - 01:01:04 | N | 244] C:\sqmnoopt17.sqm
[24/08/2009 - 01:01:04 | N | 232] C:\sqmdata17.sqm
[24/08/2009 - 01:11:52 | N | 244] C:\sqmnoopt18.sqm
[24/08/2009 - 22:07:08 | N | 244] C:\sqmnoopt19.sqm
[24/08/2009 - 22:07:08 | N | 232] C:\sqmdata19.sqm
[06/05/2009 - 23:30:46 | D ] C:\Photo
[08/08/2010 - 00:02:22 | D ] C:\cabc2b3dd9057e4e910e97
[29/10/2010 - 21:13:38 | D ] C:\Application Data
[07/11/2010 - 20:12:38 | N | 3218] C:\ZHPRegY0.zhp
[07/11/2010 - 20:12:42 | N | 396] C:\ZHPRegY1.zhp
[07/11/2010 - 20:12:44 | N | 1332] C:\ZHPRegY2.zhp
[07/11/2010 - 20:12:44 | N | 1512] C:\ZHPRegY3.zhp
[07/11/2010 - 20:12:48 | N | 1030] C:\ZHPRegY4.zhp
[07/11/2010 - 20:12:52 | N | 1026] C:\ZHPRegY5.zhp
[07/11/2010 - 20:13:10 | N | 4302] C:\ZHPRegY6.zhp
[07/11/2010 - 20:13:14 | N | 3218] C:\ZHPRegY7.zhp
[07/11/2010 - 20:13:22 | N | 4302] C:\ZHPRegY8.zhp
[07/11/2010 - 20:30:00 | N | 11086] C:\Ad-Report-CLEAN[1].txt
[07/11/2010 - 20:54:34 | D ] C:\UsbFix
[07/11/2010 - 20:54:36 | N | 1666] C:\UsbFix.txt
[24/02/2007 - 22:19:12 | N | 490] C:\baseclasses.log
[18/12/2006 - 01:23:58 | SHD ] D:\System Volume Information
[29/12/2006 - 16:00:52 | D ] D:\MyWorks
[07/01/2007 - 00:39:00 | SHD ] D:\Recycled
[25/06/2007 - 07:11:48 | N | 104] D:\AUTORUN.FCB
[18/07/2007 - 21:20:56 | D ] D:\SMRTNTKY
[21/11/2007 - 18:36:20 | D ] D:\QTSystem
[21/11/2007 - 18:36:20 | D ] D:\QTComponents
[01/09/2006 - 17:26:06 | N | 5580360] D:\QuickTimePlayer.exe
[27/09/2005 - 12:13:02 | N | 55622] D:\Sample.mov
[01/09/2006 - 16:16:46 | N | 483328] D:\PictureViewer.exe
[27/09/2005 - 12:13:02 | N | 18663] D:\Sample.qtif
[01/09/2006 - 15:57:48 | N | 282624] D:\qttask.exe
[21/11/2007 - 18:36:22 | D ] D:\PropertyPanels
[21/11/2007 - 18:36:36 | D ] D:\PictureViewer.Resources
[21/11/2007 - 18:37:04 | D ] D:\QuickTimePlayer.Resources
[25/08/2006 - 11:22:16 | N | 10336] D:\QuickTime Read Me.htm
[21/11/2007 - 18:37:36 | D ] D:\Plugins
[22/04/2008 - 14:55:00 | N | 1182] D:\BDWizReg.log
[07/10/2008 - 14:08:30 | D ] D:\photos boulo
[30/11/2008 - 20:26:40 | N | 185] D:\Raccourci vers Lecteur CD.lnk
[09/05/2010 - 03:10:48 | D ] D:\Administrateur
[09/05/2010 - 03:14:10 | D ] D:\BACHELOR OF DESIGN
[09/05/2010 - 03:14:34 | D ] D:\liverpool year art stuff
[01/01/1995 - 01:00:02 | R | 44] E:\Track01.cda
[01/01/1995 - 01:03:39 | R | 44] E:\Track02.cda
[01/01/1995 - 01:07:17 | R | 44] E:\Track03.cda
[01/01/1995 - 01:12:00 | R | 44] E:\Track04.cda
[01/01/1995 - 01:17:37 | R | 44] E:\Track05.cda
[01/01/1995 - 01:22:03 | R | 44] E:\Track06.cda
[01/01/1995 - 01:25:59 | R | 44] E:\Track07.cda
[01/01/1995 - 01:30:46 | R | 44] E:\Track08.cda
[01/01/1995 - 01:35:06 | R | 44] E:\Track09.cda
[01/01/1995 - 01:40:29 | R | 44] E:\Track10.cda
[01/01/1995 - 01:43:57 | R | 44] E:\Track11.cda
[01/01/1995 - 01:48:34 | R | 44] E:\Track12.cda
[01/01/1995 - 01:53:29 | R | 44] E:\Track13.cda
[25/10/2009 - 20:58:56 | N | 1598078] F:\planche cartes vsites.jpg
[05/11/2010 - 13:19:30 | N | 43254] F:\wolf 1.bmp
[17/05/2010 - 03:03:12 | D ] F:\nouveaux bijoux pour boutique
[07/05/2010 - 16:12:22 | N | 1757885] F:\jewerly encyclo clasp2.jpg
[07/05/2010 - 16:14:40 | N | 1808709] F:\jewerly making catch joins 3.jpg
[07/05/2010 - 16:18:04 | N | 1645734] F:\metal enameling book.jpg
[08/05/2010 - 18:35:54 | N | 1106974] F:\desin.jpg
[08/05/2010 - 18:37:24 | N | 912702] F:\dessins.jpg
[29/04/2010 - 10:48:46 | RSHD ] F:\RECYCLER
[02/11/2010 - 02:56:00 | N | 382103] F:\lost room stencil idea 1.jpg
[05/05/2010 - 14:31:12 | D ] F:\elle deco
[28/04/2010 - 12:29:02 | N | 5206655] F:\ALICE MOODBOARD.jpg
[07/05/2010 - 16:21:02 | N | 1938286] F:\metal enamel book.jpg
[05/05/2010 - 14:33:50 | N | 1483843] F:\ikea sofa.jpg
[07/05/2010 - 16:24:16 | N | 1989698] F:\enamel book.jpg
[07/05/2010 - 16:25:54 | N | 1735130] F:\emgraving book1.jpg
[07/05/2010 - 16:27:26 | N | 1995017] F:\engraving 2.jpg
[07/05/2010 - 16:29:16 | N | 1838960] F:\etching photoetching 1.jpg
[07/05/2010 - 16:31:40 | N | 1931928] F:\etchin photoetching 2.jpg
[07/05/2010 - 15:58:44 | N | 1259199] F:\matal pices scan 1.jpg
[07/05/2010 - 16:37:34 | N | 1323544] F:\scan sketches 1.jpg
[07/05/2010 - 16:40:54 | N | 1024124] F:\scan sketches metal 2.jpg
[07/05/2010 - 16:43:02 | N | 939749] F:\scan sketches metasl 3.jpg
[05/11/2010 - 13:19:34 | N | 18372] F:\wolf 2.jpg
[07/05/2010 - 16:02:38 | N | 3069391] F:\jewelry techniques book rivet solder.jpg
[07/05/2010 - 16:45:06 | N | 817933] F:\scan metal sketches 5.jpg
[07/05/2010 - 16:46:50 | N | 758663] F:\scan sketches 6.jpg
[07/05/2010 - 16:04:58 | N | 2566086] F:\jewelry book clasps.jpg
[07/05/2010 - 16:48:34 | N | 2704821] F:\scan sketches 7.jpg
[07/05/2010 - 16:50:46 | N | 967673] F:\acan sketches metsl8.jpg
[07/05/2010 - 16:06:16 | N | 2012732] F:\jewelry making clasp2.jpg
[07/05/2010 - 16:53:14 | N | 1246481] F:\metyal technical.jpg
[07/05/2010 - 16:54:50 | N | 1448138] F:\technical enamel2.jpg
[07/05/2010 - 16:56:18 | N | 1293283] F:\technical3 etch.jpg
[07/05/2010 - 16:09:00 | N | 1454352] F:\jexelry encyclopedie clasp.jpg
[07/05/2010 - 16:58:12 | N | 1535616] F:\laminating solder inlay 1.jpg
[07/05/2010 - 17:00:00 | N | 1642037] F:\puzzle technik metal.jpg
[07/05/2010 - 17:01:06 | N | 866733] F:\sketchbook.jpg
[07/05/2010 - 16:09:24 | N | 1797839] F:\jewelry encyclopedie clasp 3.jpg
[07/05/2010 - 17:02:20 | N | 912862] F:\sketchbook 2.jpg
[17/05/2010 - 13:49:06 | N | 1762401] F:\placement form page 1.jpg
[08/05/2010 - 18:38:52 | N | 1292281] F:\dessin embroideris.jpg
[17/05/2010 - 13:49:30 | N | 1209457] F:\placement form page 2.jpg
[07/05/2010 - 17:03:50 | N | 1840711] F:\photoetching.jpg
[09/05/2010 - 06:14:06 | N | 2046072] F:\alphabet en cours copie.jpg
[17/05/2010 - 13:40:10 | N | 1322751] F:\stage papier 1 university part.jpg
[07/05/2010 - 17:05:26 | N | 1778146] F:\layout bending metal techn.jpg
[17/05/2010 - 13:56:38 | N | 685130] F:\placement form page 3.jpg
[07/05/2010 - 17:06:48 | N | 853675] F:\sketche.jpg
[08/05/2010 - 15:00:26 | N | 2891581] F:\design sheet metal finie collier 21.jpg
[17/05/2010 - 13:58:00 | N | 1521426] F:\placement form page 4.jpg
[17/05/2010 - 14:00:20 | N | 2969844] F:\placement school insurance card.jpg
[17/05/2010 - 14:00:52 | N | 1595885] F:\bulletin offivciel tage scan form.jpg
[17/05/2010 - 14:01:10 | N | 1681263] F:\stage bulletin officiel scan.jpg
[17/05/2010 - 14:34:22 | N | 1482068] F:\scan garden party bits.jpg
[08/05/2010 - 17:09:26 | D ] F:\to print
[17/05/2010 - 14:47:02 | N | 1279301] F:\page 1 scan garden party draws.jpg
[26/04/2010 - 20:13:52 | N | 11025830] F:\last cover design to print.jpg
[26/04/2010 - 20:10:18 | N | 11034008] F:\bookcover pink last design to print.jpg
[27/04/2010 - 13:53:54 | N | 11003373] F:\alice very last cover to print full scale.jpg
[17/05/2010 - 15:06:00 | N | 1200766] F:\garden party sheet 2.jpg
[26/04/2010 - 20:17:48 | N | 5426586] F:\alice front cover to print last design.jpg
[26/04/2010 - 13:48:08 | N | 3185610] F:\alice embroided pink cheek.jpg
[17/05/2010 - 15:20:16 | N | 1309821] F:\garden party sheet 3.jpg
[10/11/2009 - 15:37:44 | N | 904144] F:\page perso plus objet fond noir 1.jpg
[24/11/2009 - 15:53:30 | N | 2773533] F:\magasine pdp.jpg
[08/05/2010 - 18:06:54 | D ] F:\metal design magasine scan images
[17/05/2010 - 15:24:20 | N | 907700] F:\perso stret art1.jpg
[17/05/2010 - 15:25:20 | N | 1130367] F:\garden aprty cake card green fond 1 full size.jpg
[17/05/2010 - 15:26:24 | N | 1254144] F:\garden party fond jaune.jpg
[17/05/2010 - 15:27:14 | N | 699406] F:\garden party cake violet.jpg
[19/03/2008 - 16:54:26 | N | 2259143] F:\STREET PLANCHE1.jpg
[08/05/2010 - 18:30:06 | N | 2257463] F:\moosboard style.jpg
[08/05/2010 - 18:30:06 | N | 2257463] F:\Copie de moosboard style.jpg
[08/05/2010 - 18:30:06 | N | 2257463] F:\Copie (2) de moosboard style.jpg
[08/05/2010 - 18:30:06 | N | 2257463] F:\Copie (3) de moosboard style.jpg
[01/09/2010 - 03:31:10 | N | 843956] F:\photomato tokyo 2.jpg
[02/11/2010 - 03:35:58 | N | 257476] F:\a star café opening wednesday fond white.jpg
[02/11/2010 - 02:32:40 | N | 398803] F:\recherche numbers biennial.jpg
[19/03/2008 - 18:07:58 | N | 6399085] F:\PLANCH GRAFF22.jpg
[19/03/2008 - 17:46:04 | N | 3152878] F:\PLANCH GRAFF.jpg
[19/03/2008 - 18:10:54 | N | 5424528] F:\PLANCHE STREET 2511.jpg
[05/11/2010 - 14:13:42 | N | 670896] F:\WOLF STENCIL BITS TO PRINT.jpg
[05/11/2010 - 14:18:12 | N | 5560506] F:\WOLF STENCIL.psd
[05/11/2010 - 14:20:04 | N | 625016] F:\EOLF BIG SIZE.jpg
[02/09/2010 - 00:51:48 | N | 27880832] F:\brand new english cv 2010.psd
[02/09/2010 - 13:31:04 | D ] F:\scan noemie
[02/11/2010 - 03:39:24 | N | 278717] F:\flyer night opening a café wih adress.jpg
[02/11/2010 - 03:39:58 | N | 407447] F:\flyer night opening a café wih adress ORANGE.jpg
[02/11/2010 - 03:43:06 | N | 1745819] F:\PLANCHE a4 FLYERS N8 FOND BLANC.jpg
[02/11/2010 - 02:55:26 | N | 515920] F:\19 training.jpg
[16/09/2009 - 11:42:12 | N | 210479] H:\autorun.ico
[28/10/2010 - 11:28:24 | D ] H:\compile electro dla balle
[06/10/2010 - 02:11:28 | D ] H:\BUDDHA BAR
[06/10/2010 - 02:12:42 | D ] H:\Java_Hawaï
[02/08/2010 - 15:04:18 | D ] H:\money penny project remixes
[02/08/2010 - 15:27:08 | D ] H:\fujiya et miyagi transparent things
[02/08/2010 - 15:31:38 | D ] H:\le chapelier fou
[02/09/2010 - 14:37:42 | N | 1620] H:\BOOTEX.LOG
[21/08/2010 - 16:53:00 | D ] H:\Beat Assailant
[03/09/2010 - 16:17:06 | N | 4096] H:\._.Trashes
[03/09/2010 - 16:17:06 | D ] H:\.Trashes
[03/09/2010 - 16:17:06 | D ] H:\.Spotlight-V100
[03/09/2010 - 16:17:06 | D ] H:\.fseventsd
[28/09/2010 - 09:28:02 | D ] H:\Buena Vista Social Club
[28/09/2010 - 09:29:10 | D ] H:\dani sicilianno
[28/09/2010 - 09:30:54 | D ] H:\Chinese_Man-The_Indi_Groove_EP-Vinyl-2007-MVP
[28/09/2010 - 09:31:24 | D ] H:\Cinematic Orchestra
[28/09/2010 - 09:27:48 | N | 6342450] H:\Cinematic Orchestra - Flite.mp3
[25/01/2007 - 17:07:26 | N | 5940373] H:\Cinematic Orchestra - Fontella Bass - All That You Give.mp3
[25/01/2007 - 17:09:30 | N | 9830737] H:\Cinematic Orchestra - Burn Out.mp3
[25/01/2007 - 17:18:24 | N | 9908059] H:\Cinematic Orchestra - Everyday.mp3
[28/10/2010 - 11:29:06 | D ] H:\musique pollet
[01/11/2010 - 23:06:40 | D ] H:\Happy Birthday
[01/11/2010 - 23:08:22 | D ] H:\Drukqs Disc 2
[01/11/2010 - 23:11:20 | D ] H:\Apparat
[01/11/2010 - 23:12:34 | D ] H:\moderat modeselektor apparat
[01/11/2010 - 23:15:16 | D ] H:\Drukqs Disc 1
[02/11/2010 - 02:55:26 | N | 515920] H:\19 training.jpg
[02/11/2010 - 02:56:00 | N | 382103] H:\lost room stencil idea 1.jpg
[02/11/2010 - 02:32:40 | N | 398803] H:\recherche numbers biennial.jpg
[02/04/2010 - 14:35:38 | D ] I:\année 2009_2010
[02/09/2010 - 10:35:31 | D ] I:\année 2010-2011
[02/09/2010 - 00:38:13 | D ] I:\aout 2010
[02/09/2010 - 00:27:14 | D ] I:\BACHELOR OF DESIGN
[02/09/2010 - 12:37:03 | D ] I:\bachelor of design 2
[01/09/2010 - 02:30:12 | N | 1266600] I:\brand new english cv 2010 copie.jpg
[01/09/2010 - 02:29:58 | N | 27753435] I:\brand new english cv 2010.psd
[02/04/2010 - 13:08:48 | D ] I:\BTS textile et book
[02/04/2010 - 13:59:12 | D ] I:\buenos aires
[02/04/2010 - 14:13:19 | D ] I:\DOSSIER PRO CV LETTRE MOTIV PLANCHES
[12/08/2010 - 22:49:56 | D ] I:\FILM
[18/06/2010 - 22:14:24 | D ] I:\infographi
[02/04/2010 - 14:26:26 | D ] I:\liverpool year art stuff
[24/09/2010 - 23:22:47 | D ] I:\Ma musique
[18/06/2010 - 22:33:59 | D ] I:\MUSEE EXPO
[18/06/2010 - 22:20:58 | D ] I:\PHOTOS
[22/09/2009 - 12:48:09 | D ] I:\photos boulo
[02/04/2010 - 13:57:07 | D ] I:\PROJET STREET ART
[07/11/2010 - 20:59:44 | SHD ] I:\RECYCLER
[02/04/2010 - 13:46:11 | D ] I:\stage dessin et inspraton
[29/03/2010 - 20:59:52 | SHD ] I:\System Volume Information
[02/04/2010 - 14:14:19 | D ] I:\THINGS TO PRINT

################## | Vaccin |

C:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)
D:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)
F:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)
H:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)
I:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)

################## | Upload |

Veuillez envoyer le fichier: C:\UsbFix_Upload_Me_NOEMIE.zip
http://www.teamxscript.org/Sample/Upload.php
Merci de votre contribution.

################## | E.O.F |

bonjour ! voici l'analyse malaware bites qui a pris pres de 12 h ! :

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Version de la base de données: 5072

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

09/11/2010 01:56:49
mbam-log-2010-11-09 (01-56-49).txt

Type d'examen: Examen complet (C:\|D:\|)
Elément(s) analysé(s): 249366
Temps écoulé: 13 heure(s), 1 minute(s), 29 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 7
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 45

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\Interface\{65a16874-2ed0-460e-a547-5fe2ec3a13a7} (Adware.ShopperReports) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{71e02280-5212-45c3-b174-4d5a35da254f} (Adware.ShopperReports) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{2aa2fbf8-9c76-4e97-a226-25c5f4ab6358} (Adware.Hotbar) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{100eb1fd-d03e-47fd-81f3-ee91287f9465} (Adware.ShopperReports) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{2aa2fbf8-9c76-4e97-a226-25c5f4ab6358} (Adware.Hotbar) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\setup.exe (Adware.Dropper.Gen) -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_QUERYEXPLORER_SERVICE (Adware.QueryExplorer) -> No action taken.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\WINDOWS\Temp\QUE78.tmp\upgrade.exe (Adware.Dropper.Gen) -> No action taken.
C:\Documents and Settings\lanos\Local Settings\Temp\stb5F.tmp\setup.exe (Adware.Dropper.Gen) -> No action taken.
C:\Program Files\ZHPDiag\Quarantine\queryexplorer117.exe.VIR (Adware.QueryExplorer) -> No action taken.
C:\Program Files\ZHPDiag\Quarantine\queryexplorer.exe.VIR (Adware.QueryExplorer) -> No action taken.
C:\Program Files\ZHPDiag\Quarantine\shopperreports.dll.VIR (Adware.ShopperReports) -> No action taken.
C:\Program Files\ZHPDiag\Quarantine\ShopperReports3.DIR\bin\3.0.497.0\ShopperReports.dll (Adware.ShopperReports) -> No action taken.
C:\Program Files\ZHPDiag\Quarantine\ShopperReports3.DIR\bin\3.0.497.0\Pltfrm.dll (Adware.ShopperReports) -> No action taken.
C:\Program Files\ZHPDiag\Quarantine\ShopperReports3.DIR\bin\3.0.497.0\BRNstIE.dll (Adware.ShopperReports) -> No action taken.
C:\Program Files\ZHPDiag\Quarantine\ShopperReports3.DIR\bin\3.0.497.0\CmndFF.dll (Adware.ShopperReports) -> No action taken.
C:\Program Files\ZHPDiag\Quarantine\ShopperReports3.DIR\bin\3.0.497.0\mozillaps.dll (Adware.ShopperReports) -> No action taken.
C:\Program Files\ZHPDiag\Quarantine\ShopperReports3.DIR\bin\3.0.497.0\CntntCntr.dll (Adware.ShopperReports) -> No action taken.
C:\Program Files\ZHPDiag\Quarantine\ShopperReports3.DIR\bin\3.0.497.0\firefox\firefoxtoolbar\extensions\components\BRNstFF.dll (Adware.ShopperReports) -> No action taken.
C:\Program Files\ZHPDiag\Quarantine\ShopperReports3.DIR\ShopperReports3\bin\3.0.497.0\ShopperReports.dll (Adware.ShopperReports) -> No action taken.
C:\Program Files\ZHPDiag\Quarantine\ShopperReports3.DIR\ShopperReports3\bin\3.0.497.0\Pltfrm.dll (Adware.ShopperReports) -> No action taken.
C:\Program Files\ZHPDiag\Quarantine\ShopperReports3.DIR\ShopperReports3\bin\3.0.497.0\BRNstIE.dll (Adware.ShopperReports) -> No action taken.
C:\Program Files\ZHPDiag\Quarantine\ShopperReports3.DIR\ShopperReports3\bin\3.0.497.0\CmndFF.dll (Adware.ShopperReports) -> No action taken.
C:\Program Files\ZHPDiag\Quarantine\ShopperReports3.DIR\ShopperReports3\bin\3.0.497.0\mozillaps.dll (Adware.ShopperReports) -> No action taken.
C:\Program Files\ZHPDiag\Quarantine\ShopperReports3.DIR\ShopperReports3\bin\3.0.497.0\CntntCntr.dll (Adware.ShopperReports) -> No action taken.
C:\Program Files\ZHPDiag\Quarantine\ShopperReports3.DIR\ShopperReports3\bin\3.0.497.0\firefox\firefoxtoolbar\extensions\components\BRNstFF.dll (Adware.ShopperReports) -> No action taken.
C:\Program Files\ZHPDiag\Quarantine\QueryExplorer.DIR\queryexplorer.dll (Adware.Agent.Gen) -> No action taken.
C:\Program Files\ZHPDiag\Quarantine\QueryExplorer.DIR\QueryExplorer\queryexplorer.dll (Adware.Agent.Gen) -> No action taken.
C:\Program Files\Ad-Remover\Quarantine\C\Program Files\QueryExplorer\queryexplorer.dll.vir (Adware.Agent.Gen) -> No action taken.
C:\Program Files\Ad-Remover\Quarantine\C\Program Files\ShopperReports3\bin\3.0.497.0\ShopperReports.dll.vir (Adware.ShopperReports) -> No action taken.
C:\Program Files\Ad-Remover\Quarantine\C\Program Files\ShopperReports3\bin\3.0.497.0\Pltfrm.dll.vir (Adware.ShopperReports) -> No action taken.
C:\Program Files\Ad-Remover\Quarantine\C\Program Files\ShopperReports3\bin\3.0.497.0\BRNstIE.dll.vir (Adware.ShopperReports) -> No action taken.
C:\Program Files\Ad-Remover\Quarantine\C\Program Files\ShopperReports3\bin\3.0.497.0\CmndFF.dll.vir (Adware.ShopperReports) -> No action taken.
C:\Program Files\Ad-Remover\Quarantine\C\Program Files\ShopperReports3\bin\3.0.497.0\mozillaps.dll.vir (Adware.ShopperReports) -> No action taken.
C:\Program Files\Ad-Remover\Quarantine\C\Program Files\ShopperReports3\bin\3.0.497.0\CntntCntr.dll.vir (Adware.ShopperReports) -> No action taken.
C:\Program Files\Ad-Remover\Quarantine\C\Program Files\ShopperReports3\bin\3.0.497.0\firefox\firefoxtoolbar\extensions\components\BRNstFF.dll.vir (Adware.ShopperReports) -> No action taken.
C:\system volume information\_restore{7D0A09CF-FCEC-40B1-949D-E158943906CC}\RP735\A0127791.exe (Adware.QueryExplorer) -> No action taken.
C:\system volume information\_restore{7D0A09CF-FCEC-40B1-949D-E158943906CC}\RP735\A0127792.exe (Adware.QueryExplorer) -> No action taken.
C:\system volume information\_restore{7D0A09CF-FCEC-40B1-949D-E158943906CC}\RP735\A0127814.dll (Adware.Agent.Gen) -> No action taken.
C:\system volume information\_restore{7D0A09CF-FCEC-40B1-949D-E158943906CC}\RP735\A0127818.dll (Adware.ShopperReports) -> No action taken.
C:\system volume information\_restore{7D0A09CF-FCEC-40B1-949D-E158943906CC}\RP735\A0127819.dll (Adware.ShopperReports) -> No action taken.
C:\system volume information\_restore{7D0A09CF-FCEC-40B1-949D-E158943906CC}\RP735\A0127820.dll (Adware.ShopperReports) -> No action taken.
C:\system volume information\_restore{7D0A09CF-FCEC-40B1-949D-E158943906CC}\RP735\A0127821.dll (Adware.ShopperReports) -> No action taken.
C:\system volume information\_restore{7D0A09CF-FCEC-40B1-949D-E158943906CC}\RP735\A0127822.dll (Adware.ShopperReports) -> No action taken.
C:\system volume information\_restore{7D0A09CF-FCEC-40B1-949D-E158943906CC}\RP735\A0127823.dll (Adware.ShopperReports) -> No action taken.
C:\system volume information\_restore{7D0A09CF-FCEC-40B1-949D-E158943906CC}\RP735\A0127825.dll (Adware.ShopperReports) -> No action taken.
C:\system volume information\_restore{7D0A09CF-FCEC-40B1-949D-E158943906CC}\RP735\A0128401.exe (Trojan.Dropper) -> No action taken.
C:\system volume information\_restore{7D0A09CF-FCEC-40B1-949D-E158943906CC}\RP720\A0125207.dll (Adware.Agent.Gen) -> No action taken.
C:\system volume information\_restore{7D0A09CF-FCEC-40B1-949D-E158943906CC}\RP720\A0125208.exe (Adware.QueryExplorer) -> No action taken.
C:\system volume information\_restore{7D0A09CF-FCEC-40B1-949D-E158943906CC}\RP720\A0125209.exe (Adware.ClickPotato) -> No action taken.
C:\system volume information\_restore{7D0A09CF-FCEC-40B1-949D-E158943906CC}\RP720\A0125210.dll (Adware.ClickPotato) -> No action taken.
C:\UsbFix\Quarantine\C\WINDOWS\system32\autorun\Drivers\WINXP\webcam\Logitech\techsupt\CleanupOrbicam.exe.vir (Trojan.Dropper) -> No action taken.

Oui je suis sur que j'ai cliquer sur supprimer la selection mais il est possible que j'ai enregistrer deux rapport dont un avant la suppression car je n'etais pas sure de la manip. voici mon rapport dans log :

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Version de la base de données: 5072

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

09/11/2010 01:58:07
mbam-log-2010-11-09 (01-58-07).txt

Type d'examen: Examen complet (C:\|D:\|)
Elément(s) analysé(s): 249366
Temps écoulé: 13 heure(s), 1 minute(s), 29 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 7
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 45

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\Interface\{65a16874-2ed0-460e-a547-5fe2ec3a13a7} (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{71e02280-5212-45c3-b174-4d5a35da254f} (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{2aa2fbf8-9c76-4e97-a226-25c5f4ab6358} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{100eb1fd-d03e-47fd-81f3-ee91287f9465} (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{2aa2fbf8-9c76-4e97-a226-25c5f4ab6358} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\setup.exe (Adware.Dropper.Gen) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_QUERYEXPLORER_SERVICE (Adware.QueryExplorer) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\WINDOWS\Temp\QUE78.tmp\upgrade.exe (Adware.Dropper.Gen) -> Quarantined and deleted successfully.
C:\Documents and Settings\lanos\Local Settings\Temp\stb5F.tmp\setup.exe (Adware.Dropper.Gen) -> Quarantined and deleted successfully.
C:\Program Files\ZHPDiag\Quarantine\queryexplorer117.exe.VIR (Adware.QueryExplorer) -> Quarantined and deleted successfully.
C:\Program Files\ZHPDiag\Quarantine\queryexplorer.exe.VIR (Adware.QueryExplorer) -> Quarantined and deleted successfully.
C:\Program Files\ZHPDiag\Quarantine\shopperreports.dll.VIR (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Program Files\ZHPDiag\Quarantine\ShopperReports3.DIR\bin\3.0.497.0\ShopperReports.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Program Files\ZHPDiag\Quarantine\ShopperReports3.DIR\bin\3.0.497.0\Pltfrm.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Program Files\ZHPDiag\Quarantine\ShopperReports3.DIR\bin\3.0.497.0\BRNstIE.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Program Files\ZHPDiag\Quarantine\ShopperReports3.DIR\bin\3.0.497.0\CmndFF.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Program Files\ZHPDiag\Quarantine\ShopperReports3.DIR\bin\3.0.497.0\mozillaps.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Program Files\ZHPDiag\Quarantine\ShopperReports3.DIR\bin\3.0.497.0\CntntCntr.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Program Files\ZHPDiag\Quarantine\ShopperReports3.DIR\bin\3.0.497.0\firefox\firefoxtoolbar\extensions\components\BRNstFF.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Program Files\ZHPDiag\Quarantine\ShopperReports3.DIR\ShopperReports3\bin\3.0.497.0\ShopperReports.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Program Files\ZHPDiag\Quarantine\ShopperReports3.DIR\ShopperReports3\bin\3.0.497.0\Pltfrm.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Program Files\ZHPDiag\Quarantine\ShopperReports3.DIR\ShopperReports3\bin\3.0.497.0\BRNstIE.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Program Files\ZHPDiag\Quarantine\ShopperReports3.DIR\ShopperReports3\bin\3.0.497.0\CmndFF.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Program Files\ZHPDiag\Quarantine\ShopperReports3.DIR\ShopperReports3\bin\3.0.497.0\mozillaps.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Program Files\ZHPDiag\Quarantine\ShopperReports3.DIR\ShopperReports3\bin\3.0.497.0\CntntCntr.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Program Files\ZHPDiag\Quarantine\ShopperReports3.DIR\ShopperReports3\bin\3.0.497.0\firefox\firefoxtoolbar\extensions\components\BRNstFF.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Program Files\ZHPDiag\Quarantine\QueryExplorer.DIR\queryexplorer.dll (Adware.Agent.Gen) -> Quarantined and deleted successfully.
C:\Program Files\ZHPDiag\Quarantine\QueryExplorer.DIR\QueryExplorer\queryexplorer.dll (Adware.Agent.Gen) -> Quarantined and deleted successfully.
C:\Program Files\Ad-Remover\Quarantine\C\Program Files\QueryExplorer\queryexplorer.dll.vir (Adware.Agent.Gen) -> Quarantined and deleted successfully.
C:\Program Files\Ad-Remover\Quarantine\C\Program Files\ShopperReports3\bin\3.0.497.0\ShopperReports.dll.vir (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Program Files\Ad-Remover\Quarantine\C\Program Files\ShopperReports3\bin\3.0.497.0\Pltfrm.dll.vir (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Program Files\Ad-Remover\Quarantine\C\Program Files\ShopperReports3\bin\3.0.497.0\BRNstIE.dll.vir (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Program Files\Ad-Remover\Quarantine\C\Program Files\ShopperReports3\bin\3.0.497.0\CmndFF.dll.vir (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Program Files\Ad-Remover\Quarantine\C\Program Files\ShopperReports3\bin\3.0.497.0\mozillaps.dll.vir (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Program Files\Ad-Remover\Quarantine\C\Program Files\ShopperReports3\bin\3.0.497.0\CntntCntr.dll.vir (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Program Files\Ad-Remover\Quarantine\C\Program Files\ShopperReports3\bin\3.0.497.0\firefox\firefoxtoolbar\extensions\components\BRNstFF.dll.vir (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\system volume information\_restore{7D0A09CF-FCEC-40B1-949D-E158943906CC}\RP735\A0127791.exe (Adware.QueryExplorer) -> Quarantined and deleted successfully.
C:\system volume information\_restore{7D0A09CF-FCEC-40B1-949D-E158943906CC}\RP735\A0127792.exe (Adware.QueryExplorer) -> Quarantined and deleted successfully.
C:\system volume information\_restore{7D0A09CF-FCEC-40B1-949D-E158943906CC}\RP735\A0127814.dll (Adware.Agent.Gen) -> Quarantined and deleted successfully.
C:\system volume information\_restore{7D0A09CF-FCEC-40B1-949D-E158943906CC}\RP735\A0127818.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\system volume information\_restore{7D0A09CF-FCEC-40B1-949D-E158943906CC}\RP735\A0127819.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\system volume information\_restore{7D0A09CF-FCEC-40B1-949D-E158943906CC}\RP735\A0127820.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\system volume information\_restore{7D0A09CF-FCEC-40B1-949D-E158943906CC}\RP735\A0127821.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\system volume information\_restore{7D0A09CF-FCEC-40B1-949D-E158943906CC}\RP735\A0127822.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\system volume information\_restore{7D0A09CF-FCEC-40B1-949D-E158943906CC}\RP735\A0127823.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\system volume information\_restore{7D0A09CF-FCEC-40B1-949D-E158943906CC}\RP735\A0127825.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\system volume information\_restore{7D0A09CF-FCEC-40B1-949D-E158943906CC}\RP735\A0128401.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\system volume information\_restore{7D0A09CF-FCEC-40B1-949D-E158943906CC}\RP720\A0125207.dll (Adware.Agent.Gen) -> Quarantined and deleted successfully.
C:\system volume information\_restore{7D0A09CF-FCEC-40B1-949D-E158943906CC}\RP720\A0125208.exe (Adware.QueryExplorer) -> Quarantined and deleted successfully.
C:\system volume information\_restore{7D0A09CF-FCEC-40B1-949D-E158943906CC}\RP720\A0125209.exe (Adware.ClickPotato) -> Quarantined and deleted successfully.
C:\system volume information\_restore{7D0A09CF-FCEC-40B1-949D-E158943906CC}\RP720\A0125210.dll (Adware.ClickPotato) -> Quarantined and deleted successfully.
C:\UsbFix\Quarantine\C\WINDOWS\system32\autorun\Drivers\WINXP\webcam\Logitech\techsupt\CleanupOrbicam.exe.vir (Trojan.Dropper) -> Quarantined and deleted successfully.

et voici la deuxieme analyse ZHPdiag :

Rapport de ZHPDiag v1.27.06 par Nicolas Coolman, Update du 30/10/2010
Run by lanos at 10/11/2010 23:26:43
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Contact : nicolascoolman@yahoo.fr

---\\ Web Browser
MSIE: Internet Explorer v8.0.6001.18702

---\\ System Information
Windows XP Professional Service Pack 3 (Build 2600)
Processor: x86 Family 15 Model 72 Stepping 2, AuthenticAMD
Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 766 MB (21% free)
System drive C: has 4 GB (7%) free of 53 GB

---\\ Logged in mode
Computer Name: NOEMIE
User Name: lanos
All Users Names: SUPPORT_388945a0, lanos, HelpAssistant, ASPNET, Administrateur,
Unselected Option: None
Logged in as Administrator

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 4 Go of 53 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 1 Go of 54 Go)
E:\ CD-ROM drive (Not Inserted)
F:\ Floppy drive, Flash card reader, USB Key (Free 1 Go of 2 Go)
G:\ CD-ROM drive (Not Inserted)

---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK

---\\ Recherche particulière de fichiers générics
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\explorer.exe [1037824]
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows.) -- C:\Windows\System32\Winlogon.exe [512000]

---\\ Processus lancés
[MD5.D6C8942BEA3698A2E7559BD423BFA5D7] - (.Avira GmbH - Antivirus Scheduler.) -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe [68865]
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) -- C:\WINDOWS\Explorer.EXE [1037824]
[MD5.9C69E6A25F5500501B14AF43311F8D8B] - (.Microsoft Corporation - Media Center Tray Applet.) -- C:\WINDOWS\ehome\ehtray.exe [64512]
[MD5.93AD0B78C7357A05F50E594EC7C22300] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\RUNDLL32.EXE [33792]
[MD5.10B0722C7203181B0C50C6CB974D2F2A] - (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.EXE [16261632]
[MD5.DAEFB050AC8FEE4F1097FCF7CB97220E] - (.Microsoft Corporation - Media Center Media Status Aggregator Servic.) -- C:\WINDOWS\eHome\ehmsas.exe [46592]
[MD5.DFAE0D430C5D2458340F67FD2841F3E7] - (.Dritek System Inc. - Acer Launch Manager Keyboard Application.) -- C:\PROGRA~1\LAUNCH~1\LManager.exe [634880]
[MD5.A1FF818BDDFF23BC89F9C54DD467D857] - (.Pas de propriétaire - Acer ePower Management DMC.) -- C:\Acer\Empowering Technology\ePower\ePower_DMC.exe [438272]
[MD5.07E4D5E1147BF360F06525FD4BB6010A] - (.Acer Inc. - Acer ePresentation HPD.) -- C:\Acer\Empowering Technology\ePresentation\ePresentation.exe [208896]
[MD5.72D78BD9AB1F457502F01832B07133CF] - (.HiTRUST - eDSloader.) -- C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe [345088]
[MD5.C67E00C1DCA52FB369DC54E9EE653D47] - (.Acer Inc. - eRecovery agent.) -- C:\Acer\Empowering Technology\eRecovery\eRAgent.exe [413696]
[MD5.9EA4C4BB4E2F2EA38F4A328B3763876B] - (.Pas de propriétaire - BsCom MFC Application.) -- C:\WINDOWS\BUtilityBar\BisonBar.exe [245760]
[MD5.4323A5EE3EBC7F5681CD41B69360D2D4] - (.DT Soft Ltd. - Virtual DAEMON Manager.) -- C:\Program Files\DAEMON Tools\daemon.exe [157592]
[MD5.CAF03357DE72F8F19FA099581A685C1A] - (.Apple Computer, Inc. - QuickTime Task.) -- D:\qttask.exe [282624]
[MD5.6F0A8B9C7DC51B220F69234A5CC587E1] - (.SAMSUNG ELECTRONICS - SMSTray.exe.) -- C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe [126976]
[MD5.A2CFF52E175E823E86646E6097DAB57B] - (.Pas de propriétaire - Pas de description.) -- C:\Acer\Empowering Technology\eLock\Monitor\LockMon.exe [348160]
[MD5.FF11C156D9D5A43FED97C30D611797C7] - (.(?)???? - MaSAFER Agent ?? ????.) -- C:\Program Files\MarkAny\ContentSafer\MAAgent.exe [57344]
[MD5.6E812818306D460D62B4ABEA9FDC6679] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe [266497]
[MD5.4BD55DF6374E27416F21CF06CBB2D991] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe [21755688]
[MD5.E616A6A6E91B0A86F2F6217CDE835FFE] - (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [68856]
[MD5.CA1BCBBFA76C7BF7BD60B1E997FB778A] - (.Acer Inc. - Acer Empowering Techonology Framework Launc.) -- C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe [45056]
[MD5.A7A071726A35955C05FCBF9ABDDBBD97] - (.Acer Inc. - Pas de description.) -- C:\Acer\Empowering Technology\ePerformance\MemCheck.exe [28672]
[MD5.335A142923FE7F97E8C8388ACD067568] - (.Avira GmbH - Antivirus On-Access Service.) -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe [151297]
[MD5.CFD4C3352E29A8B729536648466E8DF5] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [229376]
[MD5.D039A0C347632622934906BD59A4E1EA] - (.Microsoft Corporation - Media Center Receiver Service.) -- C:\WINDOWS\eHome\ehRecvr.exe [237568]
[MD5.980EEEA91776357518892C5544768E2B] - (.Microsoft Corporation - Service de planification Media Center.) -- C:\WINDOWS\eHome\ehSched.exe [103424]
[MD5.86E8BCAA91FC2ACFACD99CF2BF9F1F47] - (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe [49152]
[MD5.2DCC5C800F51D487178814CA9EADA181] - (.Microsoft Corporation - Bloc-notes.) -- C:\WINDOWS\system32\NOTEPAD.EXE [70656]
[MD5.3A81CA261B031AD49D1E69C276CAA368] - (.Pas de propriétaire - Pas de description.) -- C:\Acer\Empowering Technology\eLock\LockServ.exe [520192]
[MD5.6D88C26BF33D2B8404F01CECBDD47D3A] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 86.02.) -- C:\WINDOWS\system32\nvsvc32.exe [143426]
[MD5.E39574B471EF0B8719B13CC99AAFF0B8] - (.Realtek Semiconductor Corp. - Realtek HD Audio Data Rerouter.) -- C:\DOCUME~1\lanos\LOCALS~1\Temp\RtkBtMnt.exe [208896]
[MD5.A8D36ADDD1FCD24A450807EE693E4762] - (.Skype Technologies - Skype Extras Manager.) -- C:\Program Files\Skype\Plugin Manager\skypePM.exe [76744]
[MD5.0DAD93BB0FECF5016AE3C06CBB0A873B] - (.Microsoft Corporation - COM Surrogate.) -- C:\WINDOWS\system32\dllhost.exe [5120]
[MD5.B60DDDD2D63CE41CB8C487FCFBB6419E] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe [638816]
[MD5.CDE0E3E640A9FCCF53471484019F8456] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [613888]

---\\ Plugins de navigateurs Opera/Firefox(P1/P2)
P2 - FPN: [HKLM] [@divx.com/DivX Player Plugin,version=1.0.0] - (.DivX, Inc - npdivxplayerplugin.) -- C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll

---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe,
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

---\\ Pages de démarrage d'Internet Explorer (R0)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr

---\\ Pages de recherche d'Internet Explorer (R1)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0

---\\ Internet Explorer URLSearchHook (R3)
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.18968 (longhorn_ie8_gdr.100824-1830)) -- C:\WINDOWS\system32\ieframe.dll
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} Clé orpheline

---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe Acrobat IE Helper Version 7.0 for Act.) -- C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} . (.Skype Technologies S.A. - Skype add-on for IE.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} . (.Google Inc. - Fast Search.) -- C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll

---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: (no name) - {1E796980-9CC5-11D1-A83F-00C04FC99D61} . (.Pas de propriétaire - Pas de description.) -- (.not file.)

---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [ehTray] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [preload] . (.Wistron - RunXMLPL.) -- C:\Windows\RUNXMLPL.exe
O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32\NvCpl.dll
O4 - HKLM\..\Run: [NvMediaCenter] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\WINDOWS\system32\NvMcTray.dll
O4 - HKLM\..\Run: [RTHDCPL] . (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\Windows\RTHDCPL.exe
O4 - HKLM\..\Run: [SkyTel] . (.Realtek Semiconductor Corp. - Realtek Voice Manager.) -- C:\Windows\SkyTel.exe
O4 - HKLM\..\Run: [AzMixerSel] . (.Realtek Semiconductor Corp. - Azalia Mixer Selector.) -- C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [ntiMUI] . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] . (.Microsoft Corporation - Microsoft IME.) -- C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe
O4 - HKLM\..\Run: [MSPY2002] . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe
O4 - HKLM\..\Run: [PHIME2002ASync] . (.Microsoft Corporation - ???????? 2002a.) -- C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe
O4 - HKLM\..\Run: [PHIME2002A] . (.Microsoft Corporation - ???????? 2002a.) -- C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe
O4 - HKLM\..\Run: [LManager] . (.Dritek System Inc. - Acer Launch Manager Keyboard Application.) -- C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [ePower_DMC] . (.Pas de propriétaire - Acer ePower Management DMC.) -- C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [Boot] . (.Pas de propriétaire - Pas de description.) -- C:\Acer\Empowering Technology\ePower\Boot.exe
O4 - HKLM\..\Run: [Acer ePresentation HPD] . (.Acer Inc. - Acer ePresentation HPD.) -- C:\Acer\Empowering Technology\ePresentation\ePresentation.exe
O4 - HKLM\..\Run: [eLockMonitor] . (.Pas de propriétaire - Pas de description.) -- C:\Acer\Empowering Technology\eLock\Monitor\LaunchMonitor.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] . (.HiTRUST - eDSloader.) -- C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [eRecoveryService] . (.Acer Inc. - eRecovery agent.) -- C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [BisonBar] . (.Pas de propriétaire - BsCom MFC Application.) -- C:\WINDOWS\BUtilityBar\BisonBar.exe
O4 - HKLM\..\Run: [DAEMON Tools] . (.DT Soft Ltd. - Virtual DAEMON Manager.) -- C:\Program Files\DAEMON Tools\daemon.exe
O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Computer, Inc. - QuickTime Task.) -- D:\qttask.exe
O4 - HKLM\..\Run: [SMSTray] . (.SAMSUNG ELECTRONICS - SMSTray.exe.) -- C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe
O4 - HKLM\..\Run: [MAAgent] . (.(?)???? - MaSAFER Agent ?? ????.) -- C:\Program Files\MarkAny\ContentSafer\MAAgent.exe
O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
O4 - HKCU\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] C:\Program Files\Windows Live\Messenger\MsnMsgr.exe (.not file.)
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [DriverCure] C:\Program Files\ParetoLogic\DriverCure\DriverCure.exe (.not file.)
O4 - HKCU\..\Run: [FAST Defrag] Clé orpheline
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-21-1857820244-605043307-181420079-1005\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-21-1857820244-605043307-181420079-1005\..\Run: [MsnMsgr] C:\Program Files\Windows Live\Messenger\MsnMsgr.exe (.not file.)
O4 - HKUS\S-1-5-21-1857820244-605043307-181420079-1005\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
O4 - HKUS\S-1-5-21-1857820244-605043307-181420079-1005\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-21-1857820244-605043307-181420079-1005\..\Run: [DriverCure] C:\Program Files\ParetoLogic\DriverCure\DriverCure.exe (.not file.)
O4 - HKUS\S-1-5-21-1857820244-605043307-181420079-1005\..\Run: [FAST Defrag] Clé orpheline
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Adobe Reader Speed Launch.lnk . (.Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Acer Empowering Technology.lnk . (.Acer Inc..) -- C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Microsoft Office.lnk . (.Microsoft Corporation.) -- C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Adobe Gamma Loader.lnk . (.Adobe Systems, Inc..) -- C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: C:\Documents And Settings\lanos\Menu Démarrer\Programmes\Démarrage\Adobe Gamma.lnk . (.Adobe Systems, Inc..) -- C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe

---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk . (.Microsoft Corporation.) -- C:\Program Files\Messenger\msmsgs.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Movie Maker\moviemk.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader 7.0.lnk . (.Pas de propriétaire.) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1033-7B44-A70000000000}\SC_Reader_PM.ico
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Media Center.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\ehome\ehshell.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe ImageReady CS2.lnk . (.Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Adobe Photoshop CS2\ImageReady.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Bridge.lnk . (.Adobe Systems, Inc..) -- C:\Program Files\Adobe\Adobe Bridge\Bridge.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Help Center.lnk . (.Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Adobe Help Center\ahc.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Access.lnk . (.Pas de propriétaire.) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\accicons.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Excel.lnk . (.Pas de propriétaire.) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\xlicons.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft FrontPage.lnk . (.Pas de propriétaire.) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\misc.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Outlook.lnk . (.Pas de propriétaire.) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\outicon.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft PowerPoint.lnk . (.Pas de propriétaire.) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\pptico.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Word.lnk . (.Pas de propriétaire.) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\wordicon.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Illustrator CS.lnk . (.Adobe Systems, Inc..) -- C:\Program Files\Adobe\Illustrator CS\Support Files\Contents\Windows\Illustrator.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Apple Software Update.lnk . (.Pas de propriétaire.) -- C:\WINDOWS\Installer\{02DFF6B1-1654-411C-8D7B-FD6052EF016F}\AppleSoftwareUpdateIco.exe
O4 - Global Startup: C:\Documents And Settings\lanos\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe
O4 - Global Startup: C:\Documents And Settings\lanos\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe
O4 - Global Startup: C:\Documents And Settings\lanos\Menu Démarrer\Programmes\Lecteur Windows Media.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Documents And Settings\lanos\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: Add to Windows &Live Favorites - (.not file.) - http:\\favorites.live.com\quickadd.aspx
O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Excel.) -- C:\PROGRA~1\MICROS~2\Office10\EXCEL.exe

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} . (.Pas de propriétaire - Pas de description.) -- C:\PROGRA~1\Skype\Toolbars\INTERN~1\favicon.ico
O9 - Extra button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} . (.Apple Inc. - Bonjour Resource Module.) -- C:\Program Files\Bonjour\ExplorerPlugin.Resources\ExplorerPluginResources.dll
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (.not file.) - (.not file.)
O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe

---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Service client pour le fournisseur NetWare et DLL d'authentification.) -- C:\WINDOWS\system32\nwprovau.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll

---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} () - http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{6CA1597D-4281-49D2-81E1-BB18AE9CB2CB}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{6CA1597D-4281-49D2-81E1-BB18AE9CB2CB}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{6CA1597D-4281-49D2-81E1-BB18AE9CB2CB}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS3\Services\Tcpip\..\{6CA1597D-4281-49D2-81E1-BB18AE9CB2CB}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

---\\ Protocole additionnel et piratage de protocole (O18)
O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\Windows\System32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\Windows\System32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\Windows\System32\cscdll.dll
O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\Windows\System32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\WlNotify.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: WgaLogon . (.Microsoft Corporation - Notifications Windows Genuine Advantage.) -- C:\Windows\System32\WgaLogon.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll

---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Memory Check Service (AcerMemUsageCheckService) . (.Acer Inc. - Pas de description.) - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) . (.Hewlett-Packard Company - Pas de description.) - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: LockServ (LockServ) . (.Pas de propriétaire - Pas de description.) - C:\Acer\Empowering Technology\eLock\LockServ.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 86.02.) - C:\WINDOWS\system32\nvsvc32.exe

---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Word.) - C:\Program Files\Microsoft Office\Office10\WINWORD.exe

---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\ParetoLogic Update Version2.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\ParetoLogic Registration.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\FileCure.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\FileCure Startup.job

---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Personnalisation du navigateur - >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS . (.Pas de propriétaire - Pas de description.) -- Rundll32 IEDKCS32.dll
O40 - ASIC: Media Center - {407408d4-94ed-4d86-ab69-a7f649d112ee} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\inf\mcdftreg.inf
O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\msnetmtg.inf
O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\msmsgs.inf
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\wmp.inf
O40 - ASIC: Fax - {8b15971b-5355-4c82-8c07-7e181ea07608} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\fxsocm.inf
O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 10.0 r42.) -- C:\WINDOWS\system32\Macromed\Flash\Flash10d.ocx

---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: Pilote de processeur AMD (AmdK8) . (.Advanced Micro Devices - AMD Processor Driver.) - C:\Windows\system32\DRIVERS\AmdK8.sys
O41 - Driver: avgio (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys
O41 - Driver: avipbb (avipbb) . (.Avira GmbH - Avira Driver for RootKit Detection.) - C:\Windows\system32\DRIVERS\avipbb.sys
O41 - Driver: sdcplh (sdcplh) . (.Macrovision Europe Ltd - SDCPLH.) - C:\Windows\system32\drivers\sdcplh.sys
O41 - Driver: ssmdrv (ssmdrv) . (.AVIRA GmbH - AVIRA SnapShot Driver.) - C:\Windows\system32\DRIVERS\ssmdrv.sys

---\\ Logiciels installés (O42)
O42 - Logiciel: Acer Empowering Technology - (.Acer.) [HKLM] -- {AB6097D9-D722-4987-BD9E-A076E2848EE2}
O42 - Logiciel: Acer GridVista - (.Pas de propriétaire.) [HKLM] -- GridVista
O42 - Logiciel: Acer OrbiCam - (.Pas de propriétaire.) [HKLM] -- {4A57592C-FF92-4083-97A9-92783BD5AFB4}
O42 - Logiciel: Acer OrbiCam Utility Bar - (.Pas de propriétaire.) [HKLM] -- {AA396ABC-98AF-4F4A-B0F8-EB160DFF344B}
O42 - Logiciel: Acer Screensaver - (.acer.) [HKLM] -- {D458BBDC-0363-42E0-8FF9-4736E3CB3CA2}
O42 - Logiciel: Acer eDataSecurity Management - (.Acer.) [HKLM] -- {4AD13F68-CADA-4C6B-9759-C33753F89908}
O42 - Logiciel: Acer eDataSecurity Management 2.0.3077 - (.Acer.) [HKLM] -- InstallShield_{4AD13F68-CADA-4C6B-9759-C33753F89908}
O42 - Logiciel: Acer eLock Management - (.acer.) [HKLM] -- {116FF17B-1A30-4FC2-9B01-5BC5BD46B0B3}
O42 - Logiciel: Acer ePerformance Management - (.Acer.) [HKLM] -- {7057702F-6D71-4F30-8000-9E72BC771887}
O42 - Logiciel: Acer ePower Management - (.Acer Inc.) [HKLM] -- {58E5844B-7CE2-413D-83D1-99294BF6C74F}
O42 - Logiciel: Acer ePresentation Management - (.Acer Inc..) [HKLM] -- {BF839132-BD43-4056-ACBF-4377F4A88E2A}
O42 - Logiciel: Acer eSettings Management - (.Acer.) [HKLM] -- {1F2C8256-2773-46C7-9ABA-3E39C24ABB51}
O42 - Logiciel: Adobe Bridge 1.0 - (.Adobe Systems.) [HKLM] -- {B74D4E10-6884-0000-0000-000000000101}
O42 - Logiciel: Adobe Common File Installer - (.Adobe System Incorporated.) [HKLM] -- {8EDBA74D-0686-4C99-BFDD-F894678E5101}
O42 - Logiciel: Adobe Help Center 1.0 - (.Adobe Systems.) [HKLM] -- {E9787678-119F-4D52-B551-6739B2B22101}
O42 - Logiciel: Adobe Illustrator CS - (.Adobe Systems, Inc..) [HKLM] -- {91A4AD99-69CE-4745-97B7-0E0DFBECFDE5}
O42 - Logiciel: Adobe Photoshop CS2 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Photoshop CS2 - {236BB7C4-4419-42FD-040C-1E257A25E34D}
O42 - Logiciel: Adobe Reader 7.0 - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1033-7B44-A70000000000}
O42 - Logiciel: Adobe SVG Viewer 3.0 - (.Adobe Systems, Inc..) [HKLM] -- Adobe SVG Viewer
O42 - Logiciel: Adobe Stock Photos 1.0 - (.Adobe Systems.) [HKLM] -- {786C5747-0C40-4930-9AFE-113BCE553101}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {02DFF6B1-1654-411C-8D7B-FD6052EF016F}
O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}
O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM] -- AntiVir PersonalEdition Classic
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {47BF1BD6-DCAC-468F-A0AD-E5DECC2211C3}
O42 - Logiciel: CD Burning 4 - (.CDS.) [HKLM] -- {31BBD146-CCC2-4E3F-B560-4D3906E2B041}
O42 - Logiciel: Combined Community Codec Pack 2008-09-21 16:18 - (.CCCP Project.) [HKLM] -- Combined Community Codec Pack_is1
O42 - Logiciel: DivX Codec - (.DivX, Inc..) [HKLM] -- {7B63B2922B174135AFC0E1377DD81EC2}
O42 - Logiciel: DivX Player - (.DivXNetworks, Inc..) [HKLM] -- {8ADFC4160D694100B5B8A22DE9DCABD9}
O42 - Logiciel: EPSON Logiciel imprimante - (.Pas de propriétaire.) [HKLM] -- EPSON Printer and Utilities
O42 - Logiciel: EasyCleaner - (.ToniArts.) [HKLM] -- {F5346614-B7C4-4E94-826A-E2363155233D}
O42 - Logiciel: FAST Defrag Freeware 2.3 - (.AMS.) [HKLM] -- FAST Defrag Freeware_is1
O42 - Logiciel: GemMaster Mystic - (.Pas de propriétaire.) [HKLM] -- 99A88D57-2C93-491B-87B8-E41A870FB6BE
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
O42 - Logiciel: HDAUDIO Soft Data Fax Modem with SmartCP - (.Pas de propriétaire.) [HKLM] -- CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_10250093
O42 - Logiciel: High Definition Audio Driver Package - KB888111 - (.Microsoft Corporation.) [HKLM] -- KB888111WXPSP2
O42 - Logiciel: Hotfix for Windows Media Player 10 (KB903157) - (.Microsoft Corporation.) [HKLM] -- KB903157
O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5
O42 - Logiciel: Lame ACM MP3 Codec - (.Pas de propriétaire.) [HKLM] -- Lame MP3 Codec (for the ACM)
O42 - Logiciel: Launch Manager - (.Pas de propriétaire.) [HKLM] -- LManager
O42 - Logiciel: MSXML 4.0 SP2 (KB936181) - (.Microsoft Corporation.) [HKLM] -- {C04E32E0-0416-434D-AFB9-6969D703A9EF}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Microsoft .NET Framework 1.0 Hotfix (KB953295) - (.Microsoft Corporation.) [HKLM] -- KB953295
O42 - Logiciel: Microsoft .NET Framework 1.0 Hotfix (KB979904) - (.Microsoft Corporation.) [HKLM] -- KB979904
O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Microsoft.) [HKLM] -- {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Pas de propriétaire.) [HKLM] -- Microsoft .NET Framework 1.1 (1033)
O42 - Logiciel: Microsoft .NET Framework 1.1 French Language Pack - (.Microsoft.) [HKLM] -- {9A394342-4A68-4EBA-85A6-55B559F4E700}
O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB2416447) - (.Pas de propriétaire.) [HKLM] -- M2416447
O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB979906) - (.Pas de propriétaire.) [HKLM] -- M979906
O42 - Logiciel: Microsoft Internationalized Domain Names Mitigation APIs - (.Microsoft Corporation.) [HKLM] -- IDNMitigationAPIs
O42 - Logiciel: Microsoft National Language Support Downlevel APIs - (.Microsoft Corporation.) [HKLM] -- NLSDownlevelMapping
O42 - Logiciel: Microsoft Office XP Professional avec FrontPage - (.Microsoft Corporation.) [HKLM] -- {9028040C-6000-11D3-8CFE-0050048383C9}
O42 - Logiciel: NTI Backup NOW! 4.5 - (.NewTech Infosystems.) [HKLM] -- {B06B842F-2450-494F-BBDE-217CDC151A37}
O42 - Logiciel: NTI CD & DVD-Maker - (.NewTech Infosystems.) [HKLM] -- InstallShield_{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2}
O42 - Logiciel: NVIDIA Drivers - (.Pas de propriétaire.) [HKLM] -- NVIDIA Drivers
O42 - Logiciel: Otto - (.Pas de propriétaire.) [HKLM] -- 0D20D36D-A11C-444c-9AF7-70CBFED42ECF
O42 - Logiciel: Package de pilotes Windows - Advanced Micro Devices (AmdK8) Processor (04/28/2006 1.3.1.0) - (.Advanced Micro Devices.) [HKLM] -- 7B97A8EDCCEC659B382D562C55FC61601C43C968
O42 - Logiciel: PowerDVD - (.CyberLink Corporation.) [HKLM] -- {6811CAA0-BF12-11D4-9EA1-0050BAE317E1}
O42 - Logiciel: PowerProducer - (.Pas de propriétaire.) [HKLM] -- {B7A0CE06-068E-11D6-97FD-0050BACBF861}
O42 - Logiciel: QuickTime - (.Apple Computer, Inc..) [HKLM] -- {F07B861C-72B9-40A4-8B1A-AAED4C06A7E8}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Samsung Media Studio - (.Samsung.) [HKLM] -- {C20CE592-B0F8-4D20-BF31-0151CA6331A6}
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
O42 - Logiciel: Skype(TM) 3.8 - (.Skype Technologies S.A..) [HKLM] -- {5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
O42 - Logiciel: Sonic Encoders - (.Sonic Solutions.) [HKLM] -- {9941F0AA-B903-4AF4-A055-83A9815CC011}
O42 - Logiciel: Texas Instruments PCIxx21/x515/xx12 drivers. - (.Texas Instruments Inc..) [HKLM] -- InstallShield_{4497AFF6-98C4-4F49-B073-F48F42BCBF9E}
O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474) - (.Microsoft Corporation.) [HKLM] -- WgaNotify
O42 - Logiciel: Windows Internet Explorer 7 - (.Microsoft Corporation.) [HKLM] -- ie7
O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8
O42 - Logiciel: Windows Live installer - (.Microsoft Corporation.) [HKLM] -- {FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
O42 - Logiciel: Windows Media Format Runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime
O42 - Logiciel: Windows XP Media Center Edition 2005 KB912067 - (.Microsoft Corporation.) [HKLM] -- KB912067
O42 - Logiciel: Windows XP Media Center Edition 2005 KB973768 - (.Microsoft Corporation.) [HKLM] -- KB973768
O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service
O42 - Logiciel: XviD MPEG-4 Video Codec - (.XviD Team (Koepi).) [HKLM] -- XviD_is1

---\\ HKCU & HKLM Software Keys
[HKCU\Software\AMS]
[HKCU\Software\Ad-Remover]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow]
[HKCU\Software\Avira]
[HKCU\Software\CDDB]
[HKCU\Software\CDS]
[HKCU\Software\Classes]
[HKCU\Software\Cyberlink]
[HKCU\Software\DivXNetworks]
[HKCU\Software\EPSON]
[HKCU\Software\GNU]
[HKCU\Software\Gabest]
[HKCU\Software\Genesis Digital Innovations]
[HKCU\Software\Google]
[HKCU\Software\Haali]
[HKCU\Software\IM Providers]
[HKCU\Software\Intel]
[HKCU\Software\Kazaa]
[HKCU\Software\Lake]
[HKCU\Software\Ligos]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\Macromedia]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Netscape]
[HKCU\Software\NewTech Infosystems]
[HKCU\Software\ODBC]
[HKCU\Software\Opendisc]
[HKCU\Software\ParetoLogic]
[HKCU\Software\Policies]
[HKCU\Software\Realtek]
[HKCU\Software\Samsung Media Studio]
[HKCU\Software\Skype]
[HKCU\Software\Smart Projects]
[HKCU\Software\Symantec]
[HKCU\Software\Sysinternals]
[HKCU\Software\Usbfix]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\VirtuaMedia]
[HKCU\Software\Wget]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\Wistron]
[HKCU\Software\Xobni]
[HKCU\Software\Yahoo]
[HKCU\Software\acer]
[HKCU\Software\ahead]
[HKCU\Software\ej-technologies]
[HKLM\Software\0]
[HKLM\Software\1332]
[HKLM\Software\781]
[HKLM\Software\8ec]
[HKLM\Software\AMD]
[HKLM\Software\Acer Inc.]
[HKLM\Software\Acer Inc]
[HKLM\Software\Acer OrbiCam Utility Bar]
[HKLM\Software\Acer OrbiCam]
[HKLM\Software\Adobe Systems]
[HKLM\Software\Adobe]
[HKLM\Software\Ahead]
[HKLM\Software\AppDataLow]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Avira]
[HKLM\Software\BisonCam]
[HKLM\Software\BrowserChoice]
[HKLM\Software\C07ft5Y]
[HKLM\Software\CDDB]
[HKLM\Software\CDS]
[HKLM\Software\CXT]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Combined-Community-Codec-Pack]
[HKLM\Software\CyberLink]
[HKLM\Software\DivXNetworks]
[HKLM\Software\EPSON]
[HKLM\Software\EnjSoft]
[HKLM\Software\GNU]
[HKLM\Software\Gabest]
[HKLM\Software\Gemplus]
[HKLM\Software\Google]
[HKLM\Software\HaaliMkx]
[HKLM\Software\InstallShield]
[HKLM\Software\InstalledOptions]
[HKLM\Software\Intel]
[HKLM\Software\Kodak]
[HKLM\Software\Lake]
[HKLM\Software\LightScribe]
[HKLM\Software\Macromedia]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\MarkAny]
[HKLM\Software\McAfee.com]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\MusicNet]
[HKLM\Software\Mvcdbct]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\NewTech Infosystems]
[HKLM\Software\ODBC]
[HKLM\Software\ParetoLogic]
[HKLM\Software\Policies]
[HKLM\Software\Program Groups]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\S3R521]
[HKLM\Software\Samsung]
[HKLM\Software\Schlumberger]
[HKLM\Software\Secure]
[HKLM\Software\Services]
[HKLM\Software\Skype]
[HKLM\Software\SoftShape]
[HKLM\Software\Sonic]
[HKLM\Software\Symantec]
[HKLM\Software\ToniArts]
[HKLM\Software\TrendMicro]
[HKLM\Software\WebCam]
[HKLM\Software\Windows 3.1 Migration Status]
[HKLM\Software\Wistron]
[HKLM\Software\X-AVCSD]
[HKLM\Software\Yahoo]
[HKLM\Software\acer]
[HKLM\Software\ej-technologies]
[HKLM\Software\knight]
[HKLM\Software\lameme]
[HKLM\Software\magnet]
[HKLM\Software\muvee Technologies]
[HKLM\Software\nSplitter]
[HKLM\Software\swearware]

---\\ Contenu des dossiers ProgramFiles/ProgramData (O43)
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers communs
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows NT
O43 - CFD:Common File Directory ----D- C:\Program Files\MSN
O43 - CFD:Common File Directory ----D- C:\Program Files\MSN Gaming Zone
O43 - CFD:Common File Directory ----D- C:\Program Files\Messenger
O43 - CFD:Common File Directory ----D- C:\Program Files\Movie Maker
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Plus
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Media Player
O43 - CFD:Common File Directory ----D- C:\Program Files\Online Services
O43 - CFD:Common File Directory ----D- C:\Program Files\ComPlus Applications
O43 - CFD:Common File Directory ----D- C:\Program Files\Internet Explorer
O43 - CFD:Common File Directory ----D- C:\Program Files\Outlook Express
O43 - CFD:Common File Directory ----D- C:\Program Files\NetMeeting
O43 - CFD:Common File Directory ----D- C:\Program Files\Services en ligne
O43 - CFD:Common File Directory --H-D- C:\Program Files\WindowsUpdate
O43 - CFD:Common File Directory ----D- C:\Program Files\microsoft frontpage
O43 - CFD:Common File Directory ----D- C:\Program Files\xerox
O43 - CFD:Common File Directory --H-D- C:\Program Files\Uninstall Information
O43 - CFD:Common File Directory ----D- C:\Program Files\DIFX
O43 - CFD:Common File Directory --H-D- C:\Program Files\InstallShield Installation Information
O43 - CFD:Common File Directory ----D- C:\Program Files\Realtek
O43 - CFD:Common File Directory ----D- C:\Program Files\CONEXANT
O43 - CFD:Common File Directory ----D- C:\Program Files\NewTech Infosystems
O43 - CFD:Common File Directory ----D- C:\Program Files\Acer Inc
O43 - CFD:Common File Directory ----D- C:\Program Files\Adobe
O43 - CFD:Common File Directory ----D- C:\Program Files\FrenchOtto
O43 - CFD:Common File Directory ----D- C:\Program Files\GemMasterFrench
O43 - CFD:Common File Directory ----D- C:\Program Files\CyberLink
O43 - CFD:Common File Directory ----D- C:\Program Files\Launch Manager
O43 - CFD:Common File Directory ----D- C:\Program Files\Yahoo!
O43 - CFD:Common File Directory ----D- C:\Program Files\DAEMON Tools
O43 - CFD:Common File Directory ----D- C:\Program Files\DivXCodec
O43 - CFD:Common File Directory ----D- C:\Program Files\Ahead
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Office
O43 - CFD:Common File Directory ----D- C:\Program Files\DivX
O43 - CFD:Common File Directory ----D- C:\Program Files\CDS
O43 - CFD:Common File Directory ----D- C:\Program Files\Samsung
O43 - CFD:Common File Directory ----D- C:\Program Files\MarkAny
O43 - CFD:Common File Directory ----D- C:\Program Files\XviD
O43 - CFD:Common File Directory ----D- C:\Program Files\Lame MP3 Codec
O43 - CFD:Common File Directory ----D- C:\Program Files\MSXML 4.0
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft CAPICOM 2.1.0.2
O43 - CFD:Common File Directory ----D- C:\Program Files\MSN Messenger
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live Toolbar
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live Favorites
O43 - CFD:Common File Directory ----D- C:\Program Files\Apple Software Update
O43 - CFD:Common File Directory ----D- C:\Program Files\Bonjour
O43 - CFD:Common File Directory ----D- C:\Program Files\Skype
O43 - CFD:Common File Directory ----D- C:\Program Files\Google
O43 - CFD:Common File Directory ----D- C:\Program Files\EPSON
O43 - CFD:Common File Directory ----D- C:\Program Files\Combined Community Codec Pack
O43 - CFD:Common File Directory ----D- C:\Program Files\Avira
O43 - CFD:Common File Directory ----D- C:\Program Files\VideoLAN
O43 - CFD:Common File Directory ----D- C:\Program Files\ToniArts
O43 - CFD:Common File Directory ----D- C:\Program Files\FDF
O43 - CFD:Common File Directory ----D- C:\Program Files\Mozilla Firefox
O43 - CFD:Common File Directory ----D- C:\Program Files\ParetoLogic
O43 - CFD:Common File Directory ----D- C:\Program Files\ZHPDiag
O43 - CFD:Common File Directory ----D- C:\Program Files\Ad-Remover
O43 - CFD:Common File Directory ----D- C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Microsoft Shared
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\SpeechEngines
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\ODBC
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\System
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\MSSoap
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Services
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\InstallShield
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\NewTech Infosystems
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\muvee Technologies
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\LightScribe
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Adobe
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Symantec Shared
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Adobe Systems Shared
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Designer
O43 - CFD:Common File Directory -SH-D- C:\Program Files\Fichiers Communs\WindowsLiveInstaller
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Skype
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\ParetoLogic
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\i4j_jres

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.80EE1300F915817C00FCFD7F54EF1300] - 10/11/2010 - 21:25:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\WindowsUpdate.log [1782694]
O44 - LFC:[MD5.9DE313C0FBD4D1A06F1E661582286256] - 09/11/2010 - 02:02:14 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\setupapi.log [583154]
O44 - LFC:[MD5.E22AD6AA8DE8F916BDEC52559DABD438] - 09/11/2010 - 02:02:06 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\wpa.dbl [1170]
O44 - LFC:[MD5.80EE1300F915817C00FCFD7F54EF1300] - 09/11/2010 - 02:02:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ModemLog_HDAUDIO Soft Data Fax Modem with SmartCP.txt [7924]
O44 - LFC:[MD5.80EE1300F915817C00FCFD7F54EF1300] - 09/11/2010 - 02:01:42 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiadebug.log [300]
O44 - LFC:[MD5.68374CA113D7B10C30DF600A834F57FF] - 09/11/2010 - 02:00:58 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ComponentList.xml [97]
O44 - LFC:[MD5.6AB0FD4BEE15FA1C35F74DFAFC09A68A] - 09/11/2010 - 02:00:58 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\nvapps.xml [51048]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 09/11/2010 - 02:00:50 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\0.log [0]
O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 09/11/2010 - 02:00:48 -S-A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\bootstat.dat [2048]
O44 - LFC:[MD5.80EE1300F915817C00FCFD7F54EF1300] - 09/11/2010 - 01:59:48 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\SchedLgU.Txt [32560]
O44 - LFC:[MD5.80EE1300F915817C00FCFD7F54EF1300] - 09/11/2010 - 01:59:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiaservc.log [50]
O44 - LFC:[MD5.C7DD7D9739785BD3A6B8499EEC1DEE7E] - 08/11/2010 - 08:21:53 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [38224]
O44 - LFC:[MD5.67B48A903430C6D4FB58CBACA1866601] - 08/11/2010 - 08:21:49 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\System32\drivers\mbam.sys [20952]
O44 - LFC:[MD5.ED9D8B8268F3769A0055793A6B13624C] - 08/11/2010 - 08:21:30 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wmsetup.log [164814]
O44 - LFC:[MD5.2441B5D5778641390053300B25AF0737] - 07/11/2010 - 21:06:54 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\UsbFix.txt [18360]
O44 - LFC:[MD5.2C8A1238BEE277FED88EB4B36EBBF721] - 07/11/2010 - 21:06:40 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\UsbFix_Upload_Me_NOEMIE.zip [617638642]
O44 - LFC:[MD5.8071AC6346A7CB8811C071C512F296F9] - 31/10/2010 - 14:01:12 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\FNTCACHE.DAT [198552]
O44 - LFC:[MD5.CE0E21063A77828F040D024B9FA1BC40] - 15/10/2010 - 20:24:14 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\spupdsvc.log [61797]
O44 - LFC:[MD5.232D41CC7E1FEFFAA8B47E3C1033D17C] - 15/10/2010 - 11:00:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\FaxSetup.log [1909554]
O44 - LFC:[MD5.ADAED4188A306011106152DEEF7DD6DB] - 15/10/2010 - 11:00:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2387149.log [16040]
O44 - LFC:[MD5.09B401CE48B734C9CAD70D541079FB6C] - 15/10/2010 - 11:00:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\MedCtrOC.log [205310]
O44 - LFC:[MD5.00EB80FC60CFB31132887B0D06B00DD2] - 15/10/2010 - 11:00:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\comsetup.log [599028]
O44 - LFC:[MD5.FCED141AB2411CCB95962BCD86F4A3DE] - 15/10/2010 - 11:00:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ehOCGen.log [104393]
O44 - LFC:[MD5.6E9565457C31F7C4FAB4B3926111E0E7] - 15/10/2010 - 11:00:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\iis6.log [60946]
O44 - LFC:[MD5.DB5060593B9FF665861814C92C799401] - 15/10/2010 - 11:00:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\imsins.log [1393]
O44 - LFC:[MD5.D301ED271A7A4EF288738B880D017597] - 15/10/2010 - 11:00:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\msgsocm.log [95161]
O44 - LFC:[MD5.0C4333725EEB4EBB675FB7F4E9B4958D] - 15/10/2010 - 11:00:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\msmqinst.log [586438]
O44 - LFC:[MD5.2CD4B320636C3E238BC32978830D15D0] - 15/10/2010 - 11:00:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\netfxocm.log [346265]
O44 - LFC:[MD5.2B2D05DCD5CAAF93DC1E761FE8B285DF] - 15/10/2010 - 11:00:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ntdtcsetup.log [361239]
O44 - LFC:[MD5.D947C84C83686D876FD35E481E7A0B33] - 15/10/2010 - 11:00:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ocgen.log [915605]
O44 - LFC:[MD5.C9895EE444AC50D5B5FA596ADC4DA0D4] - 15/10/2010 - 11:00:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ocmsn.log [98213]
O44 - LFC:[MD5.6D86AD43A2952DBBCCC71EA4E0B75E42] - 15/10/2010 - 11:00:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\plusoc.log [217239]
O44 - LFC:[MD5.9BF5BB7D194F80F647FDD96B230A20EB] - 15/10/2010 - 11:00:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\tabletoc.log [95994]
O44 - LFC:[MD5.B00A778E2CDA72346C5344A5070FC01A] - 15/10/2010 - 11:00:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\tsoc.log [875419]
O44 - LFC:[MD5.EEDAAE737D7DA23335706FAC6244F07B] - 15/10/2010 - 11:00:02 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\updspapi.log [374045]
O44 - LFC:[MD5.3F3B1E8715A7DC634E7CDE5BEEEE3938] - 15/10/2010 - 10:59:56 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2279986.log [20636]
O44 - LFC:[MD5.FDA1852AA8FB34DDEFC9022CFFDDA0E4] - 15/10/2010 - 10:59:56 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\imsins.BAK [1393]
O44 - LFC:[MD5.ECB774D59D1967E130347EFED718DB5A] - 15/10/2010 - 10:59:50 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2345886.log [21925]
O44 - LFC:[MD5.0C50C02AB4C00E8CE244E016A0272F23] - 15/10/2010 - 10:59:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2296011.log [12258]
O44 - LFC:[MD5.A222F02920CCEF1E7801C1543A381A8A] - 15/10/2010 - 10:59:38 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2378111.log [12551]
O44 - LFC:[MD5.6EDC78E08D5DA3B4FDAA858C5C78E290] - 15/10/2010 - 10:59:30 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB982132.log [19875]
O44 - LFC:[MD5.9DE5F93DDBAC0FE8703276BFB8246CC3] - 15/10/2010 - 10:59:24 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB979687.log [20473]
O44 - LFC:[MD5.94D4E63589ACB21FFB5098F7B1BD9ED9] - 15/10/2010 - 10:59:16 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2360131-IE8.log [17496]
O44 - LFC:[MD5.B42255A16AC1C30287374A8C5D2DA287] - 15/10/2010 - 03:08:34 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB981957.log [15785]
O44 - LFC:[MD5.F85881EED0547ACA2AF2A2E48544B9C4] - 15/10/2010 - 03:04:20 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2360937.log [9829]
O44 - LFC:[MD5.9F0F57D121A5BFD905D8BF6D70E14647] - 15/10/2010 - 03:04:20 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\iis6.BAK [2001471]

---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.6974D510490456513CF095E199F84359] - 04/11/2010 - 12:33:08 ---A- - C:\WINDOWS\Prefetch\MACSMGR.EXE-28A06FE0.pf
O45 - LFCP:[MD5.5F6D39FADA9A952BA6EEA7DF8F23F515] - 06/11/2010 - 20:20:36 ---A- - C:\WINDOWS\Prefetch\ADOBE GAMMA LOADER.EXE-14139C8F.pf
O45 - LFCP:[MD5.6815C5FF2724137AEEFFC07C7A45A4F5] - 07/11/2010 - 19:56:54 ---A- - C:\WINDOWS\Prefetch\QUERYEXPLORER.EXE-23195142.pf
O45 - LFCP:[MD5.E2AB0A63C0743093BFB8F8EF60FABA93] - 07/11/2010 - 20:12:56 ---A- - C:\WINDOWS\Prefetch\SUBINACL.EXE-041720E4.pf
O45 - LFCP:[MD5.32D8C2DD30B96248B1A02EA96BCE9DC1] - 07/11/2010 - 20:13:14 ---A- - C:\WINDOWS\Prefetch\CATCHME.EXE-263E38B0.pf
O45 - LFCP:[MD5.E464C1AFFD2206A9EC19C015778A112A] - 07/11/2010 - 20:13:18 ---A- - C:\WINDOWS\Prefetch\SETACL.EXE-089EBA3B.pf
O45 - LFCP:[MD5.F2B09786C20A8330B46FD01C189E9E31] - 07/11/2010 - 20:59:42 ---A- - C:\WINDOWS\Prefetch\CMD.EXE-034B0549.pf
O45 - LFCP:[MD5.EE148205FA5E6A2CAD871233C6642565] - 07/11/2010 - 21:04:16 ---A- - C:\WINDOWS\Prefetch\GOOGLETOOLBARNOTIFIER.EXE-0047A1C5.pf
O45 - LFCP:[MD5.82234FCF82672B4BCCF35065B0A06910] - 08/11/2010 - 08:20:22 ---A- - C:\WINDOWS\Prefetch\SETUP_WM.EXE-02751BCA.pf
O45 - LFCP:[MD5.373BA86DEFFC32DADEE54A5E87B49DEE] - 08/11/2010 - 08:23:32 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-41FB74E5.pf
O45 - LFCP:[MD5.4E560C24515BE8322E8C95D2F89297C7] - 08/11/2010 - 10:47:00 ---A- - C:\WINDOWS\Prefetch\LOGON.SCR-24ADF392.pf
O45 - LFCP:[MD5.50EAC9F2CD358D97D6D5301938B74027] - 08/11/2010 - 18:00:02 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-473AFCBA.pf
O45 - LFCP:[MD5.ED7C16C55A308EBE4018DD07F5DD6578] - 08/11/2010 - 19:58:04 ---A- - C:\WINDOWS\Prefetch\AVNOTIFY.EXE-1A41E508.pf
O45 - LFCP:[MD5.2F18DE0F42C2D63A41C426049E03FD36] - 08/11/2010 - 21:18:18 ---A- - C:\WINDOWS\Prefetch\SKYPE.EXE-2EAF99A0.pf
O45 - LFCP:[MD5.3065F384084D843BCB896F23F994D9A5] - 08/11/2010 - 22:34:08 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-3C500167.pf
O45 - LFCP:[MD5.B4687D282F8BB33ACE09D5EA7A7FEAC4] - 08/11/2010 - 23:12:12 ---A- - C:\WINDOWS\Prefetch\DLLHOST.EXE-14573387.pf
O45 - LFCP:[MD5.1089569002B086DF6FEC4AEFB5309CD2] - 08/11/2010 - 23:12:16 ---A- - C:\WINDOWS\Prefetch\SOFTWAREUPDATE.EXE-1709A272.pf
O45 - LFCP:[MD5.4FB72518ABFDEA748E068B2A28A23DF1] - 09/11/2010 - 00:33:02 ---A- - C:\WINDOWS\Prefetch\PARETO_UPDATE.EXE-335F1F31.pf
O45 - LFCP:[MD5.C41B43B63BC5032D4CA12A7918E9455B] - 09/11/2010 - 01:58:04 ---A- - C:\WINDOWS\Prefetch\REGEDIT.EXE-2AE3423E.pf
O45 - LFCP:[MD5.D358BD8056758585B5A1D297E12EA6BB] - 09/11/2010 - 02:01:54 ---A- - C:\WINDOWS\Prefetch\LOCKSERV.EXE-01C41F30.pf
O45 - LFCP:[MD5.2999A503A013A4E33AEF02EAFC89504D] - 09/11/2010 - 02:01:54 ---A- - C:\WINDOWS\Prefetch\LSSRVC.EXE-108234EC.pf
O45 - LFCP:[MD5.4D3ED5A460EEA687A0183FF5AB9A6761] - 09/11/2010 - 02:01:54 ---A- - C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf
O45 - LFCP:[MD5.D395DFA8E3F1F0634B919ED4A552D86D] - 09/11/2010 - 02:01:54 ---A- - C:\WINDOWS\Prefetch\NVSVC32.EXE-0756FC6B.pf
O45 - LFCP:[MD5.826EC0D0E79DC382D39FB995570040C9] - 09/11/2010 - 02:01:54 ---A- - C:\WINDOWS\Prefetch\SVCHOST.EXE-2D5FBD18.pf
O45 - LFCP:[MD5.C5DF60EDB801D034D70078012C34961F] - 09/11/2010 - 02:01:54 ---A- - C:\WINDOWS\Prefetch\WDFMGR.EXE-22A3D9C5.pf
O45 - LFCP:[MD5.D1342DF1853DD337178A1FF342FAC0EB] - 09/11/2010 - 02:01:56 ---A- - C:\WINDOWS\Prefetch\FXSSVC.EXE-140862E7.pf
O45 - LFCP:[MD5.88955C56091A66F43FA3633D3762C62F] - 09/11/2010 - 02:01:56 ---A- - C:\WINDOWS\Prefetch\MCRDSVC.EXE-05390B47.pf
O45 - LFCP:[MD5.C3BBA852E1B3A7D3571DD482E20EC8FB] - 09/11/2010 - 02:01:56 ---A- - C:\WINDOWS\Prefetch\RTKBTMNT.EXE-0F0DA563.pf
O45 - LFCP:[MD5.600535CE10F0E0F66953E53825D33099] - 09/11/2010 - 02:02:02 ---A- - C:\WINDOWS\Prefetch\SKYPEPM.EXE-082BC99E.pf
O45 - LFCP:[MD5.8C28640875D79EA03D74AB3EC71321B9] - 09/11/2010 - 02:02:06 ---A- - C:\WINDOWS\Prefetch\WMIAPSRV.EXE-02740A4B.pf
O45 - LFCP:[MD5.FA131ACCB165EC784938A3907C64BBD8] - 09/11/2010 - 02:02:08 ---A- - C:\WINDOWS\Prefetch\DLLHOST.EXE-474D72E6.pf
O45 - LFCP:[MD5.A600190EF5A63FCF6B6729487A3F3F5A] - 09/11/2010 - 02:02:12 ---A- - C:\WINDOWS\Prefetch\ALG.EXE-275708CF.pf
O45 - LFCP:[MD5.3C2412B5B348F130B87E46ADFF244778] - 09/11/2010 - 02:02:12 ---A- - C:\WINDOWS\Prefetch\WMIPRVSE.EXE-0D449B4F.pf
O45 - LFCP:[MD5.63987180136E7ACFCE8761F5FBF13D95] - 09/11/2010 - 02:02:20 ---A- - C:\WINDOWS\Prefetch\UNSECAPP.EXE-16EB9856.pf
O45 - LFCP:[MD5.FACFD4554F55E0D20B6A690A39F3A885] - 10/11/2010 - 01:14:10 ---A- - C:\WINDOWS\Prefetch\PREUPD.EXE-16574861.pf
O45 - LFCP:[MD5.2947EEE0F535AF67AB466CD153E0EAAE] - 10/11/2010 - 01:14:14 ---A- - C:\WINDOWS\Prefetch\UPDATE.EXE-380C6CAC.pf
O45 - LFCP:[MD5.D76C9E6B893E1F1465730EBD2AD6F386] - 10/11/2010 - 01:14:2

Rapport de ZHPDiag v1.27.06 par Nicolas Coolman, Update du 30/10/2010
Run by lanos at 10/11/2010 23:26:43
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Contact : nicolascoolman@yahoo.fr

---\\ Web Browser
MSIE: Internet Explorer v8.0.6001.18702

---\\ System Information
Windows XP Professional Service Pack 3 (Build 2600)
Processor: x86 Family 15 Model 72 Stepping 2, AuthenticAMD
Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 766 MB (21% free)
System drive C: has 4 GB (7%) free of 53 GB

---\\ Logged in mode
Computer Name: NOEMIE
User Name: lanos
All Users Names: SUPPORT_388945a0, lanos, HelpAssistant, ASPNET, Administrateur,
Unselected Option: None
Logged in as Administrator

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 4 Go of 53 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 1 Go of 54 Go)
E:\ CD-ROM drive (Not Inserted)
F:\ Floppy drive, Flash card reader, USB Key (Free 1 Go of 2 Go)
G:\ CD-ROM drive (Not Inserted)

---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK

---\\ Recherche particulière de fichiers générics
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\explorer.exe [1037824]
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows.) -- C:\Windows\System32\Winlogon.exe [512000]

---\\ Processus lancés
[MD5.D6C8942BEA3698A2E7559BD423BFA5D7] - (.Avira GmbH - Antivirus Scheduler.) -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe [68865]
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) -- C:\WINDOWS\Explorer.EXE [1037824]
[MD5.9C69E6A25F5500501B14AF43311F8D8B] - (.Microsoft Corporation - Media Center Tray Applet.) -- C:\WINDOWS\ehome\ehtray.exe [64512]
[MD5.93AD0B78C7357A05F50E594EC7C22300] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\RUNDLL32.EXE [33792]
[MD5.10B0722C7203181B0C50C6CB974D2F2A] - (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.EXE [16261632]
[MD5.DAEFB050AC8FEE4F1097FCF7CB97220E] - (.Microsoft Corporation - Media Center Media Status Aggregator Servic.) -- C:\WINDOWS\eHome\ehmsas.exe [46592]
[MD5.DFAE0D430C5D2458340F67FD2841F3E7] - (.Dritek System Inc. - Acer Launch Manager Keyboard Application.) -- C:\PROGRA~1\LAUNCH~1\LManager.exe [634880]
[MD5.A1FF818BDDFF23BC89F9C54DD467D857] - (.Pas de propriétaire - Acer ePower Management DMC.) -- C:\Acer\Empowering Technology\ePower\ePower_DMC.exe [438272]
[MD5.07E4D5E1147BF360F06525FD4BB6010A] - (.Acer Inc. - Acer ePresentation HPD.) -- C:\Acer\Empowering Technology\ePresentation\ePresentation.exe [208896]
[MD5.72D78BD9AB1F457502F01832B07133CF] - (.HiTRUST - eDSloader.) -- C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe [345088]
[MD5.C67E00C1DCA52FB369DC54E9EE653D47] - (.Acer Inc. - eRecovery agent.) -- C:\Acer\Empowering Technology\eRecovery\eRAgent.exe [413696]
[MD5.9EA4C4BB4E2F2EA38F4A328B3763876B] - (.Pas de propriétaire - BsCom MFC Application.) -- C:\WINDOWS\BUtilityBar\BisonBar.exe [245760]
[MD5.4323A5EE3EBC7F5681CD41B69360D2D4] - (.DT Soft Ltd. - Virtual DAEMON Manager.) -- C:\Program Files\DAEMON Tools\daemon.exe [157592]
[MD5.CAF03357DE72F8F19FA099581A685C1A] - (.Apple Computer, Inc. - QuickTime Task.) -- D:\qttask.exe [282624]
[MD5.6F0A8B9C7DC51B220F69234A5CC587E1] - (.SAMSUNG ELECTRONICS - SMSTray.exe.) -- C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe [126976]
[MD5.A2CFF52E175E823E86646E6097DAB57B] - (.Pas de propriétaire - Pas de description.) -- C:\Acer\Empowering Technology\eLock\Monitor\LockMon.exe [348160]
[MD5.FF11C156D9D5A43FED97C30D611797C7] - (.(?)???? - MaSAFER Agent ?? ????.) -- C:\Program Files\MarkAny\ContentSafer\MAAgent.exe [57344]
[MD5.6E812818306D460D62B4ABEA9FDC6679] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe [266497]
[MD5.4BD55DF6374E27416F21CF06CBB2D991] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe [21755688]
[MD5.E616A6A6E91B0A86F2F6217CDE835FFE] - (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [68856]
[MD5.CA1BCBBFA76C7BF7BD60B1E997FB778A] - (.Acer Inc. - Acer Empowering Techonology Framework Launc.) -- C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe [45056]
[MD5.A7A071726A35955C05FCBF9ABDDBBD97] - (.Acer Inc. - Pas de description.) -- C:\Acer\Empowering Technology\ePerformance\MemCheck.exe [28672]
[MD5.335A142923FE7F97E8C8388ACD067568] - (.Avira GmbH - Antivirus On-Access Service.) -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe [151297]
[MD5.CFD4C3352E29A8B729536648466E8DF5] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [229376]
[MD5.D039A0C347632622934906BD59A4E1EA] - (.Microsoft Corporation - Media Center Receiver Service.) -- C:\WINDOWS\eHome\ehRecvr.exe [237568]
[MD5.980EEEA91776357518892C5544768E2B] - (.Microsoft Corporation - Service de planification Media Center.) -- C:\WINDOWS\eHome\ehSched.exe [103424]
[MD5.86E8BCAA91FC2ACFACD99CF2BF9F1F47] - (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe [49152]
[MD5.2DCC5C800F51D487178814CA9EADA181] - (.Microsoft Corporation - Bloc-notes.) -- C:\WINDOWS\system32\NOTEPAD.EXE [70656]
[MD5.3A81CA261B031AD49D1E69C276CAA368] - (.Pas de propriétaire - Pas de description.) -- C:\Acer\Empowering Technology\eLock\LockServ.exe [520192]
[MD5.6D88C26BF33D2B8404F01CECBDD47D3A] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 86.02.) -- C:\WINDOWS\system32\nvsvc32.exe [143426]
[MD5.E39574B471EF0B8719B13CC99AAFF0B8] - (.Realtek Semiconductor Corp. - Realtek HD Audio Data Rerouter.) -- C:\DOCUME~1\lanos\LOCALS~1\Temp\RtkBtMnt.exe [208896]
[MD5.A8D36ADDD1FCD24A450807EE693E4762] - (.Skype Technologies - Skype Extras Manager.) -- C:\Program Files\Skype\Plugin Manager\skypePM.exe [76744]
[MD5.0DAD93BB0FECF5016AE3C06CBB0A873B] - (.Microsoft Corporation - COM Surrogate.) -- C:\WINDOWS\system32\dllhost.exe [5120]
[MD5.B60DDDD2D63CE41CB8C487FCFBB6419E] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe [638816]
[MD5.CDE0E3E640A9FCCF53471484019F8456] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [613888]

---\\ Plugins de navigateurs Opera/Firefox(P1/P2)
P2 - FPN: [HKLM] [@divx.com/DivX Player Plugin,version=1.0.0] - (.DivX, Inc - npdivxplayerplugin.) -- C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll

---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe,
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

---\\ Pages de démarrage d'Internet Explorer (R0)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr

---\\ Pages de recherche d'Internet Explorer (R1)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0

---\\ Internet Explorer URLSearchHook (R3)
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.18968 (longhorn_ie8_gdr.100824-1830)) -- C:\WINDOWS\system32\ieframe.dll
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} Clé orpheline

---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe Acrobat IE Helper Version 7.0 for Act.) -- C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} . (.Skype Technologies S.A. - Skype add-on for IE.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} . (.Google Inc. - Fast Search.) -- C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll

---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: (no name) - {1E796980-9CC5-11D1-A83F-00C04FC99D61} . (.Pas de propriétaire - Pas de description.) -- (.not file.)

---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [ehTray] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [preload] . (.Wistron - RunXMLPL.) -- C:\Windows\RUNXMLPL.exe
O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32\NvCpl.dll
O4 - HKLM\..\Run: [NvMediaCenter] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\WINDOWS\system32\NvMcTray.dll
O4 - HKLM\..\Run: [RTHDCPL] . (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\Windows\RTHDCPL.exe
O4 - HKLM\..\Run: [SkyTel] . (.Realtek Semiconductor Corp. - Realtek Voice Manager.) -- C:\Windows\SkyTel.exe
O4 - HKLM\..\Run: [AzMixerSel] . (.Realtek Semiconductor Corp. - Azalia Mixer Selector.) -- C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [ntiMUI] . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] . (.Microsoft Corporation - Microsoft IME.) -- C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe
O4 - HKLM\..\Run: [MSPY2002] . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe
O4 - HKLM\..\Run: [PHIME2002ASync] . (.Microsoft Corporation - ???????? 2002a.) -- C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe
O4 - HKLM\..\Run: [PHIME2002A] . (.Microsoft Corporation - ???????? 2002a.) -- C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe
O4 - HKLM\..\Run: [LManager] . (.Dritek System Inc. - Acer Launch Manager Keyboard Application.) -- C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [ePower_DMC] . (.Pas de propriétaire - Acer ePower Management DMC.) -- C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [Boot] . (.Pas de propriétaire - Pas de description.) -- C:\Acer\Empowering Technology\ePower\Boot.exe
O4 - HKLM\..\Run: [Acer ePresentation HPD] . (.Acer Inc. - Acer ePresentation HPD.) -- C:\Acer\Empowering Technology\ePresentation\ePresentation.exe
O4 - HKLM\..\Run: [eLockMonitor] . (.Pas de propriétaire - Pas de description.) -- C:\Acer\Empowering Technology\eLock\Monitor\LaunchMonitor.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] . (.HiTRUST - eDSloader.) -- C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [eRecoveryService] . (.Acer Inc. - eRecovery agent.) -- C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [BisonBar] . (.Pas de propriétaire - BsCom MFC Application.) -- C:\WINDOWS\BUtilityBar\BisonBar.exe
O4 - HKLM\..\Run: [DAEMON Tools] . (.DT Soft Ltd. - Virtual DAEMON Manager.) -- C:\Program Files\DAEMON Tools\daemon.exe
O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Computer, Inc. - QuickTime Task.) -- D:\qttask.exe
O4 - HKLM\..\Run: [SMSTray] . (.SAMSUNG ELECTRONICS - SMSTray.exe.) -- C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe
O4 - HKLM\..\Run: [MAAgent] . (.(?)???? - MaSAFER Agent ?? ????.) -- C:\Program Files\MarkAny\ContentSafer\MAAgent.exe
O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
O4 - HKCU\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] C:\Program Files\Windows Live\Messenger\MsnMsgr.exe (.not file.)
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [DriverCure] C:\Program Files\ParetoLogic\DriverCure\DriverCure.exe (.not file.)
O4 - HKCU\..\Run: [FAST Defrag] Clé orpheline
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-21-1857820244-605043307-181420079-1005\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-21-1857820244-605043307-181420079-1005\..\Run: [MsnMsgr] C:\Program Files\Windows Live\Messenger\MsnMsgr.exe (.not file.)
O4 - HKUS\S-1-5-21-1857820244-605043307-181420079-1005\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
O4 - HKUS\S-1-5-21-1857820244-605043307-181420079-1005\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-21-1857820244-605043307-181420079-1005\..\Run: [DriverCure] C:\Program Files\ParetoLogic\DriverCure\DriverCure.exe (.not file.)
O4 - HKUS\S-1-5-21-1857820244-605043307-181420079-1005\..\Run: [FAST Defrag] Clé orpheline
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Adobe Reader Speed Launch.lnk . (.Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Acer Empowering Technology.lnk . (.Acer Inc..) -- C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Microsoft Office.lnk . (.Microsoft Corporation.) -- C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Adobe Gamma Loader.lnk . (.Adobe Systems, Inc..) -- C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: C:\Documents And Settings\lanos\Menu Démarrer\Programmes\Démarrage\Adobe Gamma.lnk . (.Adobe Systems, Inc..) -- C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe

---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk . (.Microsoft Corporation.) -- C:\Program Files\Messenger\msmsgs.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Movie Maker\moviemk.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader 7.0.lnk . (.Pas de propriétaire.) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1033-7B44-A70000000000}\SC_Reader_PM.ico
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Media Center.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\ehome\ehshell.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe ImageReady CS2.lnk . (.Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Adobe Photoshop CS2\ImageReady.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Bridge.lnk . (.Adobe Systems, Inc..) -- C:\Program Files\Adobe\Adobe Bridge\Bridge.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Help Center.lnk . (.Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Adobe Help Center\ahc.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Access.lnk . (.Pas de propriétaire.) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\accicons.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Excel.lnk . (.Pas de propriétaire.) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\xlicons.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft FrontPage.lnk . (.Pas de propriétaire.) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\misc.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Outlook.lnk . (.Pas de propriétaire.) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\outicon.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft PowerPoint.lnk . (.Pas de propriétaire.) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\pptico.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Word.lnk . (.Pas de propriétaire.) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\wordicon.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Illustrator CS.lnk . (.Adobe Systems, Inc..) -- C:\Program Files\Adobe\Illustrator CS\Support Files\Contents\Windows\Illustrator.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Apple Software Update.lnk . (.Pas de propriétaire.) -- C:\WINDOWS\Installer\{02DFF6B1-1654-411C-8D7B-FD6052EF016F}\AppleSoftwareUpdateIco.exe
O4 - Global Startup: C:\Documents And Settings\lanos\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe
O4 - Global Startup: C:\Documents And Settings\lanos\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe
O4 - Global Startup: C:\Documents And Settings\lanos\Menu Démarrer\Programmes\Lecteur Windows Media.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Documents And Settings\lanos\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: Add to Windows &Live Favorites - (.not file.) - http:\\favorites.live.com\quickadd.aspx
O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Excel.) -- C:\PROGRA~1\MICROS~2\Office10\EXCEL.exe

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} . (.Pas de propriétaire - Pas de description.) -- C:\PROGRA~1\Skype\Toolbars\INTERN~1\favicon.ico
O9 - Extra button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} . (.Apple Inc. - Bonjour Resource Module.) -- C:\Program Files\Bonjour\ExplorerPlugin.Resources\ExplorerPluginResources.dll
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (.not file.) - (.not file.)
O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe

---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Service client pour le fournisseur NetWare et DLL d'authentification.) -- C:\WINDOWS\system32\nwprovau.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll

---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} () - http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{6CA1597D-4281-49D2-81E1-BB18AE9CB2CB}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{6CA1597D-4281-49D2-81E1-BB18AE9CB2CB}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{6CA1597D-4281-49D2-81E1-BB18AE9CB2CB}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS3\Services\Tcpip\..\{6CA1597D-4281-49D2-81E1-BB18AE9CB2CB}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

---\\ Protocole additionnel et piratage de protocole (O18)
O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\Windows\System32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\Windows\System32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\Windows\System32\cscdll.dll
O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\Windows\System32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\WlNotify.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: WgaLogon . (.Microsoft Corporation - Notifications Windows Genuine Advantage.) -- C:\Windows\System32\WgaLogon.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll

---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Memory Check Service (AcerMemUsageCheckService) . (.Acer Inc. - Pas de description.) - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) . (.Hewlett-Packard Company - Pas de description.) - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: LockServ (LockServ) . (.Pas de propriétaire - Pas de description.) - C:\Acer\Empowering Technology\eLock\LockServ.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 86.02.) - C:\WINDOWS\system32\nvsvc32.exe

---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Word.) - C:\Program Files\Microsoft Office\Office10\WINWORD.exe

---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\ParetoLogic Update Version2.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\ParetoLogic Registration.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\FileCure.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\FileCure Startup.job

---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Personnalisation du navigateur - >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS . (.Pas de propriétaire - Pas de description.) -- Rundll32 IEDKCS32.dll
O40 - ASIC: Media Center - {407408d4-94ed-4d86-ab69-a7f649d112ee} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\inf\mcdftreg.inf
O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\msnetmtg.inf
O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\msmsgs.inf
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\wmp.inf
O40 - ASIC: Fax - {8b15971b-5355-4c82-8c07-7e181ea07608} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\fxsocm.inf
O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 10.0 r42.) -- C:\WINDOWS\system32\Macromed\Flash\Flash10d.ocx

---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: Pilote de processeur AMD (AmdK8) . (.Advanced Micro Devices - AMD Processor Driver.) - C:\Windows\system32\DRIVERS\AmdK8.sys
O41 - Driver: avgio (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys
O41 - Driver: avipbb (avipbb) . (.Avira GmbH - Avira Driver for RootKit Detection.) - C:\Windows\system32\DRIVERS\avipbb.sys
O41 - Driver: sdcplh (sdcplh) . (.Macrovision Europe Ltd - SDCPLH.) - C:\Windows\system32\drivers\sdcplh.sys
O41 - Driver: ssmdrv (ssmdrv) . (.AVIRA GmbH - AVIRA SnapShot Driver.) - C:\Windows\system32\DRIVERS\ssmdrv.sys

---\\ Logiciels installés (O42)
O42 - Logiciel: Acer Empowering Technology - (.Acer.) [HKLM] -- {AB6097D9-D722-4987-BD9E-A076E2848EE2}
O42 - Logiciel: Acer GridVista - (.Pas de propriétaire.) [HKLM] -- GridVista
O42 - Logiciel: Acer OrbiCam - (.Pas de propriétaire.) [HKLM] -- {4A57592C-FF92-4083-97A9-92783BD5AFB4}
O42 - Logiciel: Acer OrbiCam Utility Bar - (.Pas de propriétaire.) [HKLM] -- {AA396ABC-98AF-4F4A-B0F8-EB160DFF344B}
O42 - Logiciel: Acer Screensaver - (.acer.) [HKLM] -- {D458BBDC-0363-42E0-8FF9-4736E3CB3CA2}
O42 - Logiciel: Acer eDataSecurity Management - (.Acer.) [HKLM] -- {4AD13F68-CADA-4C6B-9759-C33753F89908}
O42 - Logiciel: Acer eDataSecurity Management 2.0.3077 - (.Acer.) [HKLM] -- InstallShield_{4AD13F68-CADA-4C6B-9759-C33753F89908}
O42 - Logiciel: Acer eLock Management - (.acer.) [HKLM] -- {116FF17B-1A30-4FC2-9B01-5BC5BD46B0B3}
O42 - Logiciel: Acer ePerformance Management - (.Acer.) [HKLM] -- {7057702F-6D71-4F30-8000-9E72BC771887}
O42 - Logiciel: Acer ePower Management - (.Acer Inc.) [HKLM] -- {58E5844B-7CE2-413D-83D1-99294BF6C74F}
O42 - Logiciel: Acer ePresentation Management - (.Acer Inc..) [HKLM] -- {BF839132-BD43-4056-ACBF-4377F4A88E2A}
O42 - Logiciel: Acer eSettings Management - (.Acer.) [HKLM] -- {1F2C8256-2773-46C7-9ABA-3E39C24ABB51}
O42 - Logiciel: Adobe Bridge 1.0 - (.Adobe Systems.) [HKLM] -- {B74D4E10-6884-0000-0000-000000000101}
O42 - Logiciel: Adobe Common File Installer - (.Adobe System Incorporated.) [HKLM] -- {8EDBA74D-0686-4C99-BFDD-F894678E5101}
O42 - Logiciel: Adobe Help Center 1.0 - (.Adobe Systems.) [HKLM] -- {E9787678-119F-4D52-B551-6739B2B22101}
O42 - Logiciel: Adobe Illustrator CS - (.Adobe Systems, Inc..) [HKLM] -- {91A4AD99-69CE-4745-97B7-0E0DFBECFDE5}
O42 - Logiciel: Adobe Photoshop CS2 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Photoshop CS2 - {236BB7C4-4419-42FD-040C-1E257A25E34D}
O42 - Logiciel: Adobe Reader 7.0 - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1033-7B44-A70000000000}
O42 - Logiciel: Adobe SVG Viewer 3.0 - (.Adobe Systems, Inc..) [HKLM] -- Adobe SVG Viewer
O42 - Logiciel: Adobe Stock Photos 1.0 - (.Adobe Systems.) [HKLM] -- {786C5747-0C40-4930-9AFE-113BCE553101}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {02DFF6B1-1654-411C-8D7B-FD6052EF016F}
O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}
O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM] -- AntiVir PersonalEdition Classic
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {47BF1BD6-DCAC-468F-A0AD-E5DECC2211C3}
O42 - Logiciel: CD Burning 4 - (.CDS.) [HKLM] -- {31BBD146-CCC2-4E3F-B560-4D3906E2B041}
O42 - Logiciel: Combined Community Codec Pack 2008-09-21 16:18 - (.CCCP Project.) [HKLM] -- Combined Community Codec Pack_is1
O42 - Logiciel: DivX Codec - (.DivX, Inc..) [HKLM] -- {7B63B2922B174135AFC0E1377DD81EC2}
O42 - Logiciel: DivX Player - (.DivXNetworks, Inc..) [HKLM] -- {8ADFC4160D694100B5B8A22DE9DCABD9}
O42 - Logiciel: EPSON Logiciel imprimante - (.Pas de propriétaire.) [HKLM] -- EPSON Printer and Utilities
O42 - Logiciel: EasyCleaner - (.ToniArts.) [HKLM] -- {F5346614-B7C4-4E94-826A-E2363155233D}
O42 - Logiciel: FAST Defrag Freeware 2.3 - (.AMS.) [HKLM] -- FAST Defrag Freeware_is1
O42 - Logiciel: GemMaster Mystic - (.Pas de propriétaire.) [HKLM] -- 99A88D57-2C93-491B-87B8-E41A870FB6BE
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
O42 - Logiciel: HDAUDIO Soft Data Fax Modem with SmartCP - (.Pas de propriétaire.) [HKLM] -- CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_10250093
O42 - Logiciel: High Definition Audio Driver Package - KB888111 - (.Microsoft Corporation.) [HKLM] -- KB888111WXPSP2
O42 - Logiciel: Hotfix for Windows Media Player 10 (KB903157) - (.Microsoft Corporation.) [HKLM] -- KB903157
O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5
O42 - Logiciel: Lame ACM MP3 Codec - (.Pas de propriétaire.) [HKLM] -- Lame MP3 Codec (for the ACM)
O42 - Logiciel: Launch Manager - (.Pas de propriétaire.) [HKLM] -- LManager
O42 - Logiciel: MSXML 4.0 SP2 (KB936181) - (.Microsoft Corporation.) [HKLM] -- {C04E32E0-0416-434D-AFB9-6969D703A9EF}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Microsoft .NET Framework 1.0 Hotfix (KB953295) - (.Microsoft Corporation.) [HKLM] -- KB953295
O42 - Logiciel: Microsoft .NET Framework 1.0 Hotfix (KB979904) - (.Microsoft Corporation.) [HKLM] -- KB979904
O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Microsoft.) [HKLM] -- {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Pas de propriétaire.) [HKLM] -- Microsoft .NET Framework 1.1 (1033)
O42 - Logiciel: Microsoft .NET Framework 1.1 French Language Pack - (.Microsoft.) [HKLM] -- {9A394342-4A68-4EBA-85A6-55B559F4E700}
O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB2416447) - (.Pas de propriétaire.) [HKLM] -- M2416447
O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB979906) - (.Pas de propriétaire.) [HKLM] -- M979906
O42 - Logiciel: Microsoft Internationalized Domain Names Mitigation APIs - (.Microsoft Corporation.) [HKLM] -- IDNMitigationAPIs
O42 - Logiciel: Microsoft National Language Support Downlevel APIs - (.Microsoft Corporation.) [HKLM] -- NLSDownlevelMapping
O42 - Logiciel: Microsoft Office XP Professional avec FrontPage - (.Microsoft Corporation.) [HKLM] -- {9028040C-6000-11D3-8CFE-0050048383C9}
O42 - Logiciel: NTI Backup NOW! 4.5 - (.NewTech Infosystems.) [HKLM] -- {B06B842F-2450-494F-BBDE-217CDC151A37}
O42 - Logiciel: NTI CD & DVD-Maker - (.NewTech Infosystems.) [HKLM] -- InstallShield_{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2}
O42 - Logiciel: NVIDIA Drivers - (.Pas de propriétaire.) [HKLM] -- NVIDIA Drivers
O42 - Logiciel: Otto - (.Pas de propriétaire.) [HKLM] -- 0D20D36D-A11C-444c-9AF7-70CBFED42ECF
O42 - Logiciel: Package de pilotes Windows - Advanced Micro Devices (AmdK8) Processor (04/28/2006 1.3.1.0) - (.Advanced Micro Devices.) [HKLM] -- 7B97A8EDCCEC659B382D562C55FC61601C43C968
O42 - Logiciel: PowerDVD - (.CyberLink Corporation.) [HKLM] -- {6811CAA0-BF12-11D4-9EA1-0050BAE317E1}
O42 - Logiciel: PowerProducer - (.Pas de propriétaire.) [HKLM] -- {B7A0CE06-068E-11D6-97FD-0050BACBF861}
O42 - Logiciel: QuickTime - (.Apple Computer, Inc..) [HKLM] -- {F07B861C-72B9-40A4-8B1A-AAED4C06A7E8}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Samsung Media Studio - (.Samsung.) [HKLM] -- {C20CE592-B0F8-4D20-BF31-0151CA6331A6}
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
O42 - Logiciel: Skype(TM) 3.8 - (.Skype Technologies S.A..) [HKLM] -- {5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
O42 - Logiciel: Sonic Encoders - (.Sonic Solutions.) [HKLM] -- {9941F0AA-B903-4AF4-A055-83A9815CC011}
O42 - Logiciel: Texas Instruments PCIxx21/x515/xx12 drivers. - (.Texas Instruments Inc..) [HKLM] -- InstallShield_{4497AFF6-98C4-4F49-B073-F48F42BCBF9E}
O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474) - (.Microsoft Corporation.) [HKLM] -- WgaNotify
O42 - Logiciel: Windows Internet Explorer 7 - (.Microsoft Corporation.) [HKLM] -- ie7
O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8
O42 - Logiciel: Windows Live installer - (.Microsoft Corporation.) [HKLM] -- {FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
O42 - Logiciel: Windows Media Format Runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime
O42 - Logiciel: Windows XP Media Center Edition 2005 KB912067 - (.Microsoft Corporation.) [HKLM] -- KB912067
O42 - Logiciel: Windows XP Media Center Edition 2005 KB973768 - (.Microsoft Corporation.) [HKLM] -- KB973768
O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service
O42 - Logiciel: XviD MPEG-4 Video Codec - (.XviD Team (Koepi).) [HKLM] -- XviD_is1

---\\ HKCU & HKLM Software Keys
[HKCU\Software\AMS]
[HKCU\Software\Ad-Remover]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow]
[HKCU\Software\Avira]
[HKCU\Software\CDDB]
[HKCU\Software\CDS]
[HKCU\Software\Classes]
[HKCU\Software\Cyberlink]
[HKCU\Software\DivXNetworks]
[HKCU\Software\EPSON]
[HKCU\Software\GNU]
[HKCU\Software\Gabest]
[HKCU\Software\Genesis Digital Innovations]
[HKCU\Software\Google]
[HKCU\Software\Haali]
[HKCU\Software\IM Providers]
[HKCU\Software\Intel]
[HKCU\Software\Kazaa]
[HKCU\Software\Lake]
[HKCU\Software\Ligos]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\Macromedia]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Netscape]
[HKCU\Software\NewTech Infosystems]
[HKCU\Software\ODBC]
[HKCU\Software\Opendisc]
[HKCU\Software\ParetoLogic]
[HKCU\Software\Policies]
[HKCU\Software\Realtek]
[HKCU\Software\Samsung Media Studio]
[HKCU\Software\Skype]
[HKCU\Software\Smart Projects]
[HKCU\Software\Symantec]
[HKCU\Software\Sysinternals]
[HKCU\Software\Usbfix]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\VirtuaMedia]
[HKCU\Software\Wget]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\Wistron]
[HKCU\Software\Xobni]
[HKCU\Software\Yahoo]
[HKCU\Software\acer]
[HKCU\Software\ahead]
[HKCU\Software\ej-technologies]
[HKLM\Software\0]
[HKLM\Software\1332]
[HKLM\Software\781]
[HKLM\Software\8ec]
[HKLM\Software\AMD]
[HKLM\Software\Acer Inc.]
[HKLM\Software\Acer Inc]
[HKLM\Software\Acer OrbiCam Utility Bar]
[HKLM\Software\Acer OrbiCam]
[HKLM\Software\Adobe Systems]
[HKLM\Software\Adobe]
[HKLM\Software\Ahead]
[HKLM\Software\AppDataLow]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Avira]
[HKLM\Software\BisonCam]
[HKLM\Software\BrowserChoice]
[HKLM\Software\C07ft5Y]
[HKLM\Software\CDDB]
[HKLM\Software\CDS]
[HKLM\Software\CXT]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Combined-Community-Codec-Pack]
[HKLM\Software\CyberLink]
[HKLM\Software\DivXNetworks]
[HKLM\Software\EPSON]
[HKLM\Software\EnjSoft]
[HKLM\Software\GNU]
[HKLM\Software\Gabest]
[HKLM\Software\Gemplus]
[HKLM\Software\Google]
[HKLM\Software\HaaliMkx]
[HKLM\Software\InstallShield]
[HKLM\Software\InstalledOptions]
[HKLM\Software\Intel]
[HKLM\Software\Kodak]
[HKLM\Software\Lake]
[HKLM\Software\LightScribe]
[HKLM\Software\Macromedia]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\MarkAny]
[HKLM\Software\McAfee.com]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\MusicNet]
[HKLM\Software\Mvcdbct]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\NewTech Infosystems]
[HKLM\Software\ODBC]
[HKLM\Software\ParetoLogic]
[HKLM\Software\Policies]
[HKLM\Software\Program Groups]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\S3R521]
[HKLM\Software\Samsung]
[HKLM\Software\Schlumberger]
[HKLM\Software\Secure]
[HKLM\Software\Services]
[HKLM\Software\Skype]
[HKLM\Software\SoftShape]
[HKLM\Software\Sonic]
[HKLM\Software\Symantec]
[HKLM\Software\ToniArts]
[HKLM\Software\TrendMicro]
[HKLM\Software\WebCam]
[HKLM\Software\Windows 3.1 Migration Status]
[HKLM\Software\Wistron]
[HKLM\Software\X-AVCSD]
[HKLM\Software\Yahoo]
[HKLM\Software\acer]
[HKLM\Software\ej-technologies]
[HKLM\Software\knight]
[HKLM\Software\lameme]
[HKLM\Software\magnet]
[HKLM\Software\muvee Technologies]
[HKLM\Software\nSplitter]
[HKLM\Software\swearware]

---\\ Contenu des dossiers ProgramFiles/ProgramData (O43)
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers communs
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows NT
O43 - CFD:Common File Directory ----D- C:\Program Files\MSN
O43 - CFD:Common File Directory ----D- C:\Program Files\MSN Gaming Zone
O43 - CFD:Common File Directory ----D- C:\Program Files\Messenger
O43 - CFD:Common File Directory ----D- C:\Program Files\Movie Maker
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Plus
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Media Player
O43 - CFD:Common File Directory ----D- C:\Program Files\Online Services
O43 - CFD:Common File Directory ----D- C:\Program Files\ComPlus Applications
O43 - CFD:Common File Directory ----D- C:\Program Files\Internet Explorer
O43 - CFD:Common File Directory ----D- C:\Program Files\Outlook Express
O43 - CFD:Common File Directory ----D- C:\Program Files\NetMeeting
O43 - CFD:Common File Directory ----D- C:\Program Files\Services en ligne
O43 - CFD:Common File Directory --H-D- C:\Program Files\WindowsUpdate
O43 - CFD:Common File Directory ----D- C:\Program Files\microsoft frontpage
O43 - CFD:Common File Directory ----D- C:\Program Files\xerox
O43 - CFD:Common File Directory --H-D- C:\Program Files\Uninstall Information
O43 - CFD:Common File Directory ----D- C:\Program Files\DIFX
O43 - CFD:Common File Directory --H-D- C:\Program Files\InstallShield Installation Information
O43 - CFD:Common File Directory ----D- C:\Program Files\Realtek
O43 - CFD:Common File Directory ----D- C:\Program Files\CONEXANT
O43 - CFD:Common File Directory ----D- C:\Program Files\NewTech Infosystems
O43 - CFD:Common File Directory ----D- C:\Program Files\Acer Inc
O43 - CFD:Common File Directory ----D- C:\Program Files\Adobe
O43 - CFD:Common File Directory ----D- C:\Program Files\FrenchOtto
O43 - CFD:Common File Directory ----D- C:\Program Files\GemMasterFrench
O43 - CFD:Common File Directory ----D- C:\Program Files\CyberLink
O43 - CFD:Common File Directory ----D- C:\Program Files\Launch Manager
O43 - CFD:Common File Directory ----D- C:\Program Files\Yahoo!
O43 - CFD:Common File Directory ----D- C:\Program Files\DAEMON Tools
O43 - CFD:Common File Directory ----D- C:\Program Files\DivXCodec
O43 - CFD:Common File Directory ----D- C:\Program Files\Ahead
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Office
O43 - CFD:Common File Directory ----D- C:\Program Files\DivX
O43 - CFD:Common File Directory ----D- C:\Program Files\CDS
O43 - CFD:Common File Directory ----D- C:\Program Files\Samsung
O43 - CFD:Common File Directory ----D- C:\Program Files\MarkAny
O43 - CFD:Common File Directory ----D- C:\Program Files\XviD
O43 - CFD:Common File Directory ----D- C:\Program Files\Lame MP3 Codec
O43 - CFD:Common File Directory ----D- C:\Program Files\MSXML 4.0
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft CAPICOM 2.1.0.2
O43 - CFD:Common File Directory ----D- C:\Program Files\MSN Messenger
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live Toolbar
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live Favorites
O43 - CFD:Common File Directory ----D- C:\Program Files\Apple Software Update
O43 - CFD:Common File Directory ----D- C:\Program Files\Bonjour
O43 - CFD:Common File Directory ----D- C:\Program Files\Skype
O43 - CFD:Common File Directory ----D- C:\Program Files\Google
O43 - CFD:Common File Directory ----D- C:\Program Files\EPSON
O43 - CFD:Common File Directory ----D- C:\Program Files\Combined Community Codec Pack
O43 - CFD:Common File Directory ----D- C:\Program Files\Avira
O43 - CFD:Common File Directory ----D- C:\Program Files\VideoLAN
O43 - CFD:Common File Directory ----D- C:\Program Files\ToniArts
O43 - CFD:Common File Directory ----D- C:\Program Files\FDF
O43 - CFD:Common File Directory ----D- C:\Program Files\Mozilla Firefox
O43 - CFD:Common File Directory ----D- C:\Program Files\ParetoLogic
O43 - CFD:Common File Directory ----D- C:\Program Files\ZHPDiag
O43 - CFD:Common File Directory ----D- C:\Program Files\Ad-Remover
O43 - CFD:Common File Directory ----D- C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Microsoft Shared
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\SpeechEngines
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\ODBC
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\System
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\MSSoap
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Services
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\InstallShield
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\NewTech Infosystems
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\muvee Technologies
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\LightScribe
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Adobe
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Symantec Shared
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Adobe Systems Shared
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Designer
O43 - CFD:Common File Directory -SH-D- C:\Program Files\Fichiers Communs\WindowsLiveInstaller
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Skype
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\ParetoLogic
O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\i4j_jres

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.80EE1300F915817C00FCFD7F54EF1300] - 10/11/2010 - 21:25:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\WindowsUpdate.log [1782694]
O44 - LFC:[MD5.9DE313C0FBD4D1A06F1E661582286256] - 09/11/2010 - 02:02:14 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\setupapi.log [583154]
O44 - LFC:[MD5.E22AD6AA8DE8F916BDEC52559DABD438] - 09/11/2010 - 02:02:06 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\wpa.dbl [1170]
O44 - LFC:[MD5.80EE1300F915817C00FCFD7F54EF1300] - 09/11/2010 - 02:02:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ModemLog_HDAUDIO Soft Data Fax Modem with SmartCP.txt [7924]
O44 - LFC:[MD5.80EE1300F915817C00FCFD7F54EF1300] - 09/11/2010 - 02:01:42 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiadebug.log [300]
O44 - LFC:[MD5.68374CA113D7B10C30DF600A834F57FF] - 09/11/2010 - 02:00:58 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ComponentList.xml [97]
O44 - LFC:[MD5.6AB0FD4BEE15FA1C35F74DFAFC09A68A] - 09/11/2010 - 02:00:58 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\nvapps.xml [51048]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 09/11/2010 - 02:00:50 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\0.log [0]
O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 09/11/2010 - 02:00:48 -S-A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\bootstat.dat [2048]
O44 - LFC:[MD5.80EE1300F915817C00FCFD7F54EF1300] - 09/11/2010 - 01:59:48 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\SchedLgU.Txt [32560]
O44 - LFC:[MD5.80EE1300F915817C00FCFD7F54EF1300] - 09/11/2010 - 01:59:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiaservc.log [50]
O44 - LFC:[MD5.C7DD7D9739785BD3A6B8499EEC1DEE7E] - 08/11/2010 - 08:21:53 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [38224]
O44 - LFC:[MD5.67B48A903430C6D4FB58CBACA1866601] - 08/11/2010 - 08:21:49 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\System32\drivers\mbam.sys [20952]
O44 - LFC:[MD5.ED9D8B8268F3769A0055793A6B13624C] - 08/11/2010 - 08:21:30 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wmsetup.log [164814]
O44 - LFC:[MD5.2441B5D5778641390053300B25AF0737] - 07/11/2010 - 21:06:54 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\UsbFix.txt [18360]
O44 - LFC:[MD5.2C8A1238BEE277FED88EB4B36EBBF721] - 07/11/2010 - 21:06:40 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\UsbFix_Upload_Me_NOEMIE.zip [617638642]
O44 - LFC:[MD5.8071AC6346A7CB8811C071C512F296F9] - 31/10/2010 - 14:01:12 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\FNTCACHE.DAT [198552]
O44 - LFC:[MD5.CE0E21063A77828F040D024B9FA1BC40] - 15/10/2010 - 20:24:14 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\spupdsvc.log [61797]
O44 - LFC:[MD5.232D41CC7E1FEFFAA8B47E3C1033D17C] - 15/10/2010 - 11:00:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\FaxSetup.log [1909554]
O44 - LFC:[MD5.ADAED4188A306011106152DEEF7DD6DB] - 15/10/2010 - 11:00:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2387149.log [16040]
O44 - LFC:[MD5.09B401CE48B734C9CAD70D541079FB6C] - 15/10/2010 - 11:00:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\MedCtrOC.log [205310]
O44 - LFC:[MD5.00EB80FC60CFB31132887B0D06B00DD2] - 15/10/2010 - 11:00:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\comsetup.log [599028]
O44 - LFC:[MD5.FCED141AB2411CCB95962BCD86F4A3DE] - 15/10/2010 - 11:00:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ehOCGen.log [104393]
O44 - LFC:[MD5.6E9565457C31F7C4FAB4B3926111E0E7] - 15/10/2010 - 11:00:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\iis6.log [60946]
O44 - LFC:[MD5.DB5060593B9FF665861814C92C799401] - 15/10/2010 - 11:00:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\imsins.log [1393]
O44 - LFC:[MD5.D301ED271A7A4EF288738B880D017597] - 15/10/2010 - 11:00:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\msgsocm.log [95161]
O44 - LFC:[MD5.0C4333725EEB4EBB675FB7F4E9B4958D] - 15/10/2010 - 11:00:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\msmqinst.log [586438]
O44 - LFC:[MD5.2CD4B320636C3E238BC32978830D15D0] - 15/10/2010 - 11:00:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\netfxocm.log [346265]
O44 - LFC:[MD5.2B2D05DCD5CAAF93DC1E761FE8B285DF] - 15/10/2010 - 11:00:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ntdtcsetup.log [361239]
O44 - LFC:[MD5.D947C84C83686D876FD35E481E7A0B33] - 15/10/2010 - 11:00:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ocgen.log [915605]
O44 - LFC:[MD5.C9895EE444AC50D5B5FA596ADC4DA0D4] - 15/10/2010 - 11:00:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ocmsn.log [98213]
O44 - LFC:[MD5.6D86AD43A2952DBBCCC71EA4E0B75E42] - 15/10/2010 - 11:00:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\plusoc.log [217239]
O44 - LFC:[MD5.9BF5BB7D194F80F647FDD96B230A20EB] - 15/10/2010 - 11:00:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\tabletoc.log [95994]
O44 - LFC:[MD5.B00A778E2CDA72346C5344A5070FC01A] - 15/10/2010 - 11:00:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\tsoc.log [875419]
O44 - LFC:[MD5.EEDAAE737D7DA23335706FAC6244F07B] - 15/10/2010 - 11:00:02 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\updspapi.log [374045]
O44 - LFC:[MD5.3F3B1E8715A7DC634E7CDE5BEEEE3938] - 15/10/2010 - 10:59:56 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2279986.log [20636]
O44 - LFC:[MD5.FDA1852AA8FB34DDEFC9022CFFDDA0E4] - 15/10/2010 - 10:59:56 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\imsins.BAK [1393]
O44 - LFC:[MD5.ECB774D59D1967E130347EFED718DB5A] - 15/10/2010 - 10:59:50 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2345886.log [21925]
O44 - LFC:[MD5.0C50C02AB4C00E8CE244E016A0272F23] - 15/10/2010 - 10:59:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2296011.log [12258]
O44 - LFC:[MD5.A222F02920CCEF1E7801C1543A381A8A] - 15/10/2010 - 10:59:38 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2378111.log [12551]
O44 - LFC:[MD5.6EDC78E08D5DA3B4FDAA858C5C78E290] - 15/10/2010 - 10:59:30 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB982132.log [19875]
O44 - LFC:[MD5.9DE5F93DDBAC0FE8703276BFB8246CC3] - 15/10/2010 - 10:59:24 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB979687.log [20473]
O44 - LFC:[MD5.94D4E63589ACB21FFB5098F7B1BD9ED9] - 15/10/2010 - 10:59:16 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2360131-IE8.log [17496]
O44 - LFC:[MD5.B42255A16AC1C30287374A8C5D2DA287] - 15/10/2010 - 03:08:34 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB981957.log [15785]
O44 - LFC:[MD5.F85881EED0547ACA2AF2A2E48544B9C4] - 15/10/2010 - 03:04:20 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2360937.log [9829]
O44 - LFC:[MD5.9F0F57D121A5BFD905D8BF6D70E14647] - 15/10/2010 - 03:04:20 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\iis6.BAK [2001471]

---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.6974D510490456513CF095E199F84359] - 04/11/2010 - 12:33:08 ---A- - C:\WINDOWS\Prefetch\MACSMGR.EXE-28A06FE0.pf
O45 - LFCP:[MD5.5F6D39FADA9A952BA6EEA7DF8F23F515] - 06/11/2010 - 20:20:36 ---A- - C:\WINDOWS\Prefetch\ADOBE GAMMA LOADER.EXE-14139C8F.pf
O45 - LFCP:[MD5.6815C5FF2724137AEEFFC07C7A45A4F5] - 07/11/2010 - 19:56:54 ---A- - C:\WINDOWS\Prefetch\QUERYEXPLORER.EXE-23195142.pf
O45 - LFCP:[MD5.E2AB0A63C0743093BFB8F8EF60FABA93] - 07/11/2010 - 20:12:56 ---A- - C:\WINDOWS\Prefetch\SUBINACL.EXE-041720E4.pf
O45 - LFCP:[MD5.32D8C2DD30B96248B1A02EA96BCE9DC1] - 07/11/2010 - 20:13:14 ---A- - C:\WINDOWS\Prefetch\CATCHME.EXE-263E38B0.pf
O45 - LFCP:[MD5.E464C1AFFD2206A9EC19C015778A112A] - 07/11/2010 - 20:13:18 ---A- - C:\WINDOWS\Prefetch\SETACL.EXE-089EBA3B.pf
O45 - LFCP:[MD5.F2B09786C20A8330B46FD01C189E9E31] - 07/11/2010 - 20:59:42 ---A- - C:\WINDOWS\Prefetch\CMD.EXE-034B0549.pf
O45 - LFCP:[MD5.EE148205FA5E6A2CAD871233C6642565] - 07/11/2010 - 21:04:16 ---A- - C:\WINDOWS\Prefetch\GOOGLETOOLBARNOTIFIER.EXE-0047A1C5.pf
O45 - LFCP:[MD5.82234FCF82672B4BCCF35065B0A06910] - 08/11/2010 - 08:20:22 ---A- - C:\WINDOWS\Prefetch\SETUP_WM.EXE-02751BCA.pf
O45 - LFCP:[MD5.373BA86DEFFC32DADEE54A5E87B49DEE] - 08/11/2010 - 08:23:32 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-41FB74E5.pf
O45 - LFCP:[MD5.4E560C24515BE8322E8C95D2F89297C7] - 08/11/2010 - 10:47:00 ---A- - C:\WINDOWS\Prefetch\LOGON.SCR-24ADF392.pf
O45 - LFCP:[MD5.50EAC9F2CD358D97D6D5301938B74027] - 08/11/2010 - 18:00:02 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-473AFCBA.pf
O45 - LFCP:[MD5.ED7C16C55A308EBE4018DD07F5DD6578] - 08/11/2010 - 19:58:04 ---A- - C:\WINDOWS\Prefetch\AVNOTIFY.EXE-1A41E508.pf
O45 - LFCP:[MD5.2F18DE0F42C2D63A41C426049E03FD36] - 08/11/2010 - 21:18:18 ---A- - C:\WINDOWS\Prefetch\SKYPE.EXE-2EAF99A0.pf
O45 - LFCP:[MD5.3065F384084D843BCB896F23F994D9A5] - 08/11/2010 - 22:34:08 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-3C500167.pf
O45 - LFCP:[MD5.B4687D282F8BB33ACE09D5EA7A7FEAC4] - 08/11/2010 - 23:12:12 ---A- - C:\WINDOWS\Prefetch\DLLHOST.EXE-14573387.pf
O45 - LFCP:[MD5.1089569002B086DF6FEC4AEFB5309CD2] - 08/11/2010 - 23:12:16 ---A- - C:\WINDOWS\Prefetch\SOFTWAREUPDATE.EXE-1709A272.pf
O45 - LFCP:[MD5.4FB72518ABFDEA748E068B2A28A23DF1] - 09/11/2010 - 00:33:02 ---A- - C:\WINDOWS\Prefetch\PARETO_UPDATE.EXE-335F1F31.pf
O45 - LFCP:[MD5.C41B43B63BC5032D4CA12A7918E9455B] - 09/11/2010 - 01:58:04 ---A- - C:\WINDOWS\Prefetch\REGEDIT.EXE-2AE3423E.pf
O45 - LFCP:[MD5.D358BD8056758585B5A1D297E12EA6BB] - 09/11/2010 - 02:01:54 ---A- - C:\WINDOWS\Prefetch\LOCKSERV.EXE-01C41F30.pf
O45 - LFCP:[MD5.2999A503A013A4E33AEF02EAFC89504D] - 09/11/2010 - 02:01:54 ---A- - C:\WINDOWS\Prefetch\LSSRVC.EXE-108234EC.pf
O45 - LFCP:[MD5.4D3ED5A460EEA687A0183FF5AB9A6761] - 09/11/2010 - 02:01:54 ---A- - C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf
O45 - LFCP:[MD5.D395DFA8E3F1F0634B919ED4A552D86D] - 09/11/2010 - 02:01:54 ---A- - C:\WINDOWS\Prefetch\NVSVC32.EXE-0756FC6B.pf
O45 - LFCP:[MD5.826EC0D0E79DC382D39FB995570040C9] - 09/11/2010 - 02:01:54 ---A- - C:\WINDOWS\Prefetch\SVCHOST.EXE-2D5FBD18.pf
O45 - LFCP:[MD5.C5DF60EDB801D034D70078012C34961F] - 09/11/2010 - 02:01:54 ---A- - C:\WINDOWS\Prefetch\WDFMGR.EXE-22A3D9C5.pf
O45 - LFCP:[MD5.D1342DF1853DD337178A1FF342FAC0EB] - 09/11/2010 - 02:01:56 ---A- - C:\WINDOWS\Prefetch\FXSSVC.EXE-140862E7.pf
O45 - LFCP:[MD5.88955C56091A66F43FA3633D3762C62F] - 09/11/2010 - 02:01:56 ---A- - C:\WINDOWS\Prefetch\MCRDSVC.EXE-05390B47.pf
O45 - LFCP:[MD5.C3BBA852E1B3A7D3571DD482E20EC8FB] - 09/11/2010 - 02:01:56 ---A- - C:\WINDOWS\Prefetch\RTKBTMNT.EXE-0F0DA563.pf
O45 - LFCP:[MD5.600535CE10F0E0F66953E53825D33099] - 09/11/2010 - 02:02:02 ---A- - C:\WINDOWS\Prefetch\SKYPEPM.EXE-082BC99E.pf
O45 - LFCP:[MD5.8C28640875D79EA03D74AB3EC71321B9] - 09/11/2010 - 02:02:06 ---A- - C:\WINDOWS\Prefetch\WMIAPSRV.EXE-02740A4B.pf
O45 - LFCP:[MD5.FA131ACCB165EC784938A3907C64BBD8] - 09/11/2010 - 02:02:08 ---A- - C:\WINDOWS\Prefetch\DLLHOST.EXE-474D72E6.pf
O45 - LFCP:[MD5.A600190EF5A63FCF6B6729487A3F3F5A] - 09/11/2010 - 02:02:12 ---A- - C:\WINDOWS\Prefetch\ALG.EXE-275708CF.pf
O45 - LFCP:[MD5.3C2412B5B348F130B87E46ADFF244778] - 09/11/2010 - 02:02:12 ---A- - C:\WINDOWS\Prefetch\WMIPRVSE.EXE-0D449B4F.pf
O45 - LFCP:[MD5.63987180136E7ACFCE8761F5FBF13D95] - 09/11/2010 - 02:02:20 ---A- - C:\WINDOWS\Prefetch\UNSECAPP.EXE-16EB9856.pf
O45 - LFCP:[MD5.FACFD4554F55E0D20B6A690A39F3A885] - 10/11/2010 - 01:14:10 ---A- - C:\WINDOWS\Prefetch\PREUPD.EXE-16574861.pf
O45 - LFCP:[MD5.2947EEE0F535AF67AB466CD153E0EAAE] - 10/11/2010 - 01:14:14 ---A- - C:\WINDOWS\Prefetch\UPDATE.EXE-380C6CAC.pf
O45 - LFCP:[MD5.D76C9E6B893E1F1465730EBD2AD6F386] - 10/11/2010 - 01:14:20 ---A- - C:\WINDOWS\Prefetch\GOOGLEUPDATERSERVICE.EXE-2F4A2F7

Je n'ai pas vu de lien ci joint donc j'ai essayer de reposter le rapport qui m'as l'air d'etre trop long pour pouvoir tenir en entier sur la page !
Aussi je suis ennuyé car aprés toute ces manip' j'ai toujours un message de FILECURE a chaque redémarrage de mon ordinateur me dsant que j'ai une erreur avec mon installation , donc ce probleme dois peut etre etre regler par une autre analyse ?

merci en tout cas

bonjour, desolé de ces reponses entrecoupé mais j'ai completement oublié mes probleme d'ordinateur. Je pense que le postage du fichier est reussi cette fois ! Toujour un message filecure qui s'affiche a chaque demarrage .

Sorry ! again I didnt realise it . here we go :

http://www.cijoint.fr/cjlink.php?file=cj201011/cijKdH254h.txt

del fix rapport :

########## DelFix - Nettoyeur d'outils de désinfection ##########
#
# DelFix v6.6 - Rapport créé le 30/11/2010 à 21:38
# Mis à jour le 28/11/10 à 13h30 par Xplode
# Système d'exploitation : Microsoft Windows XP (32 bits) [version 5.1.2600] Service Pack 3
# Nom d'utilisateur : lanos - NOEMIE (Administrateur)
# Exécuté depuis : C:\Documents and Settings\lanos\Bureau\LOGICIELS NETOYAGE ORDI\DelFix.exe
# Option [Suppression]

~~~~~~ Dossier(s) ~~~~~~

Supprimé : C:\USBFix
Supprimé : C:\ToolBar SD
Supprimé : C:\Program Files\Ad-Remover
Supprimé : C:\Program Files\ZHPDiag
Supprimé : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ZHP

~~~~~~ Fichier(s) ~~~~~~

Supprimé : C:\UsbFix.txt
Supprimé : C:\UsbFix_Upload_Me_NOEMIE.zip
Supprimé : C:\TB.txt
Supprimé : C:\Ad-Report-CLEAN[1].txt
Supprimé : C:\Documents and Settings\lanos\Bureau\ZHPFixReport.txt

~~~~~~ Registre ~~~~~~

Clé Supprimée : HKCU\SOFTWARE\Ad-Remover
Clé Supprimée : HKCU\SOFTWARE\USBFix
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\ZHP
Clé Supprimée : HKLM\Software\swearware
Clé Supprimée : HKLM\Software\TrendMicro
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Ad-Remover
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\USBFix
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\combofix.exe

~~~~~~ Autre ~~~~~~

########## EOF - "C:\DelFixSuppr.txt" - [1670 octets] ##########

Bonjour !!

j'ai bien suivis la pocédure mais compte tenu de la lenteur de mon ordinateur sa a pris beaucoup de temps et sa a buger deux fois ou j'ai donc du recommencer. Voici le lien avec le rapport d'analyse. J'espere que tu pouras dechiffrer le ou les problemes.

merci enormement pour ton aide et le réponse rapide !

http://www.cijoint.fr/cjlink.php?file=cj201010/cijCFijS4x.txt

bonjour ,
j'ai le même problème .J'ai donc télécharger le logiciel et fait un scanne
S'il était possible de m'aider ce serait sympa
merci d'avance
voici le lien:
http://www.cijoint.fr/cjlink.php?file=cj201011/cijQPIs5Af.txt

bonjour !

Je suis désolé mais je me suis absenté quelques temps loin de mon ordinateur.
En tout cas merci pour toute ce proposition de solutions.
Voici la premier rapport ZHP diag, je vas continuer a faire les analyses suivantes et les posté rapidement.

mERCI !

Rapport de ZHPFix 1.12.3213 par Nicolas Coolman, Update du 27/10/2010
Fichier d'export Registre :
Run by lanos at 07/11/2010 20:13:32
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
Contact : nicolascoolman@yahoo.fr

========== Clé(s) du Registre ==========
O42 - Logiciel: QueryExplorer 1.0 build 117 - (.Pas de propriétaire.) [HKLM] -- QueryExplorer => Désinstallation logicielle annulée par l'utilisateur ou désinstallation partielle!
O42 - Logiciel: ShopperReports - (.SmartShopper.) [HKLM] -- ShopperReportsSA => Désinstallation logicielle annulée par l'utilisateur ou désinstallation partielle!
O2 - BHO: ShopperReports - {100EB1FD-D03E-47fd-81F3-EE91287F9465} . (.SmartShopper Inc. - ShopperReports.) -- C:\Program Files\ShopperReports3\bin\3.0.497.0\ShopperReports.dll => Clé absente
O9 - Extra button: ShopperReports - Compare product prices - {C5428486-50A0-4a02-9D20-520B59A9F9B2} . (.SmartShopper Inc. - ShopperReports.) -- C:\Program Files\ShopperReports3\bin\3.0.497.0\ShopperReports.dll => Clé absente
O9 - Extra button: ShopperReports - Compare travel rates - {C5428486-50A0-4a02-9D20-520B59A9F9B3} . (.SmartShopper Inc. - ShopperReports.) -- C:\Program Files\ShopperReports3\bin\3.0.497.0\ShopperReports.dll => Clé absente
O23 - Service: QueryExplorer Service (QueryExplorer Service) . (.Pas de propriétaire - Pas de description.) - C:\Documents and Settings\All Users\Application Data\QueryExplorer\queryexplorer117.exe => Clé supprimée avec succès
HKCU\Software\ShopperReports3 => Clé supprimée avec succès
HKLM\Software\ShopperReports3 => Clé supprimée avec succès
O51 - MPSK:{330bde84-574b-11dd-b106-0016d34b3e70}\Shell\AutoRun\command. (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\activexdebugger32.exe => Clé supprimée avec succès
O51 - MPSK:{330bde84-574b-11dd-b106-0016d34b3e70}\Shell\explore\command. (.Pas de propriétaire - Pas de description.) -- activexdebugger32.exe => Clé absente
O51 - MPSK:{330bde84-574b-11dd-b106-0016d34b3e70}\Shell\auto\command. (.Pas de propriétaire - Pas de description.) -- activexdebugger32.exe => Clé absente
O51 - MPSK:{330bde84-574b-11dd-b106-0016d34b3e70}\Shell\open\command. (.Pas de propriétaire - Pas de description.) -- activexdebugger32.exe => Clé absente
O51 - MPSK:{e17d72d2-915e-11dd-b126-0016d34b3e70}\Shell\AutoRun\command. (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\activexdebugger32.exe => Clé supprimée avec succès
O51 - MPSK:{e17d72d2-915e-11dd-b126-0016d34b3e70}\Shell\explore\command. (.Pas de propriétaire - Pas de description.) -- F:\activexdebugger32.exe => Clé absente
O51 - MPSK:{e17d72d2-915e-11dd-b126-0016d34b3e70}\Shell\auto\command. (.Pas de propriétaire - Pas de description.) -- F:\activexdebugger32.exe => Clé absente
O51 - MPSK:{e17d72d2-915e-11dd-b126-0016d34b3e70}\Shell\open\command. (.Pas de propriétaire - Pas de description.) -- F:\activexdebugger32.exe => Clé absente
O51 - MPSK:{e884ae2a-92fc-11dd-b128-0016d34b3e70}\Shell\AutoRun\command. (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\activexdebugger32.exe => Clé supprimée avec succès
O51 - MPSK:{e884ae2a-92fc-11dd-b128-0016d34b3e70}\Shell\explore\command. (.Pas de propriétaire - Pas de description.) -- F:\activexdebugger32.exe => Clé absente
O51 - MPSK:{e884ae2a-92fc-11dd-b128-0016d34b3e70}\Shell\auto\command. (.Pas de propriétaire - Pas de description.) -- F:\activexdebugger32.exe => Clé absente
O51 - MPSK:{e884ae2a-92fc-11dd-b128-0016d34b3e70}\Shell\open\command. (.Pas de propriétaire - Pas de description.) -- F:\activexdebugger32.exe => Clé absente
O64 - Services: CurCS - C:\Documents and Settings\All Users\Application Data\QueryExplorer\queryexplorer117.exe - QueryExplorer Service (QueryExplorer Service) .(.Pas de propriétaire - Pas de description.) - LEGACY_QUERYEXPLORER_SERVICE => Clé non supprimée

========== Elément(s) de donnée du Registre ==========
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: Modified => Donnée supprimée avec succès
O69 - SBI: SearchScopes [HKCU] {CF739809-1C6C-47C0-85B9-569DBB141420} - (Ask Search) - http://toolbar.ask.com => Donnée remplacée avec succès

========== Dossier(s) ==========
C:\Program Files\ShopperReports3 => Fichier supprimé au reboot
C:\Program Files\QueryExplorer => Fichier supprimé au reboot

========== Fichier(s) ==========
c:\documents and settings\all users\application data\queryexplorer\queryexplorer117.exe => Fichier absent
c:\program files\queryexplorer\queryexplorer.exe => Fichier absent
c:\program files\shopperreports3\bin\3.0.497.0\shopperreports.dll () => Fichier non supprimé
c:\windows\system32\activexdebugger32.exe () => Fichier absent
activexdebugger32.exe () => Fichier absent
f:\activexdebugger32.exe () => Fichier absent
c:\documents and settings\lanos\application data\skype\noze_1\config.xml => Supprimé et mis en quarantaine
c:\documents and settings\lanos\application data\shopperreports3\ie\cs\report\send_storage.xml => Supprimé et mis en quarantaine
c:\documents and settings\lanos\application data\shopperreports3\ie\cs\db\aliases.dbs => Supprimé et mis en quarantaine
c:\documents and settings\lanos\application data\shopperreports3\ie\cs\db\sites.dbs => Supprimé et mis en quarantaine

========== Récapitulatif ==========
21 : Clé(s) du Registre
2 : Elément(s) de donnée du Registre
2 : Dossier(s)
10 : Fichier(s)

End of the scan

Nouveaux rapport ZHP dag :

Rapport de ZHPFix 1.12.3213 par Nicolas Coolman, Update du 27/10/2010
Fichier d'export Registre :
Run by lanos at 30/11/2010 21:32:42
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
Contact : nicolascoolman@yahoo.fr

========== Fichier(s) ==========
c:\documents and settings\lanos\application data\skype\noze_1\config.xml => Supprimé et mis en quarantaine

========== Master Boot Record ==========
Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll sdcplh.sys atapi.sys sptd.sys >>UNKNOWN [0x83BD07AC]<<
kernel: MBR read successfully
user & kernel MBR OK

Resultat après le fix :
Master Boot Record non infecté

========== Récapitulatif ==========
1 : Fichier(s)
1 : Master Boot Record

End of the scan