Help infectée ou pas

ronadine -  
anthony5151 Messages postés 10927 Statut Contributeur sécurité -
Bonjour,
mon pc est devenu lent et je ne sais plus acceder a ma page de banque
j'ai essayer spybot adaware malware etc
je viens de faire hijack voici le rapport quipeut m'aider svp car je ne veux pas effacer ce qu'il ne faut pas

merci d'avance

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:07:52, on 19/01/2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18999)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\PACKARD BELL\Packard Bell PowerSave Solution\ePowerTray.exe
C:\Windows\system32\taskeng.exe
C:\Users\ronadine\AppData\Local\Temp\RtkBtMnt.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\CrazyLoader\spointer\crazyloader_air.exe
C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10l_ActiveX.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.packardbell.com/...
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=60076
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/ig?hl=fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.packardbell.com/...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.packardbell.com/...
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll
O2 - BHO: Interest recogniser for Crazyloader (powered by Spointer) - {C5F65718-341D-4e7d-9842-FCB9CC89527E} - C:\Program Files\CrazyLoader\spointer\extensions\crazyloader_air_ie.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
O4 - HKLM\..\Run: [Acer ePower Management] C:\Program Files\Packard Bell\Packard Bell PowerSave Solution\ePowerTrayLauncher.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Skytel] C:\Program Files\Realtek\Audio\HDA\Skytel.exe
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/cmsidewiki.html
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix:
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.5.0.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://belgacom.extrafilm.be/ImageUploader5.cab
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} (Windows Live Hotmail Photo Upload Tool) - http://gfx2.hotmail.com/mail/w4/pr01/photouploadcontrol/VistaMSNPUpldfr-be.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Windows\system32\skype4com.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: BlueSoleilCS - IVT Corporation - C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
O23 - Service: BsHelpCS - IVT Corporation - C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\PACKARD BELL\Packard Bell PowerSave Solution\ePowerSvc.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Desktop Manager 5.9.1005.12335 (GoogleDesktopManager-051210-111108) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe

--
End of file - 9784 bytes

6 réponses

  1. anthony5151 Messages postés 10927 Statut Contributeur sécurité 790
     
    Bonjour,

    Bienvenue sur CCM !
    Nous allons essayer de régler ton problème ensemble. D'abord, quelques rappels :

    - N'ouvre pas d'autres sujets pour le même problème (que ce soit sur ce forum ou sur un autre)
    - N'hésite pas à poser des questions en cas de besoin ;)
    - Sois patient(e) quand tu postes un message, je ne réponds pas instantanément : je suis bénévole et je ne suis pas en permanence devant mon ordinateur. Mais rassure toi, je ne laisse jamais tomber personne ;)
    - La désinfection (si nécessaire) va se dérouler en plusieurs étapes. Même si les symptômes de l'infection disparaissent, la désinfection ne sera terminée que quand je te le confirmerai --> Merci de revenir jusqu'au bout, sinon ce qu'on a fait n'aura servi à rien.

    Commence par utiliser ce logiciel de diagnostic stp, il est plus complet que Hijackthis :

    * Télécharge ZHPDiag (de Nicolas Coolman)
    * Laisse toi guider lors de l'installation (pense à cocher la case pour créer un raccourci sur le Bureau)
    * Il se lancera automatiquement à la fin de l'installation
    * Clique sur l'icône représentant une loupe (« Lancer le diagnostic »)
    * Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette
    * Héberge le rapport ZHPDiag.txt sur ce site, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum

    2
    1. ronadine
       
      merci d'avance voici le rapport j'ai pas tout compris pour le lien que tu as demandé mais bon suis pas plus douée que cela mais merci d'etre la

      Rapport de ZHPDiag v1.27.1503 par Nicolas Coolman, Update du 19/01/2011
      Run by ronadine at 19/01/2011 17:17:12
      Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
      Contact : nicolascoolman@yahoo.fr

      ---\\ Web Browser
      MSIE: Internet Explorer v8.0.6001.18999 (Defaut)

      ---\\ System Information
      Windows Vista Home Basic Edition, 32-bit Service Pack 2 (Build 6002)
      Processor: x86 Family 17 Model 3 Stepping 1, AuthenticAMD
      Operating System: 32 Bits
      Boot mode: Normal (Normal boot)
      Total RAM: 2941 MB (57% free)
      System Restore: Activé (Enable)
      System drive C: has 293 GB (64%) free of 453 GB

      ---\\ Logged in mode
      Computer Name: PC-DE-RONADINE
      User Name: ronadine
      All Users Names: ronadine, Administrateur,
      Unselected Option: O45,O61,O62,O65,O66,O80,O82
      Logged in as Administrator

      ---\\ Environnement Variables
      %AppData%=%USERPROFILE%\AppData\Roaming
      %LocalAppData%=%USERPROFILE%\AppData\Local
      %StartMenu%=%USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu

      ---\\ DOS/Devices
      C:\ Hard drive, Flash drive, Thumb drive (Free 293 Go of 453 Go)
      D:\ CD-ROM drive (Not Inserted)


      ---\\ Security Center & Tools Informations
      [HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
      [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
      [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
      [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
      [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
      [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
      [HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
      [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
      [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
      [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
      [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
      [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
      [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
      [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK
      [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK
      [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableTaskMgr: OK
      [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableRegistryTools: OK
      [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] NoDispScrSavPage: OK
      [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK


      ---\\ Recherche particulière de fichiers génériques
      [MD5.D07D4C3038F3578FFCE1C0237F2A1253] - (.Microsoft Corporation - Explorateur Windows.) (.11/04/2009 7:27:36.) -- C:\Windows\Explorer.exe [2926592]
      [MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) (.21/01/2008 3:33:13.) -- C:\Windows\System32\Wininit.exe [96768]
      [MD5.898E7C06A350D4A1A64A9EA264D55452] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.11/04/2009 7:28:13.) -- C:\Windows\System32\Winlogon.exe [314368]
      [MD5.1F05B78AB91C9075565A9D8A4B880BC4] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.11/04/2009 7:32:26.) -- C:\Windows\System32\drivers\atapi.sys [19944]
      [MD5.6A4A98CEE84CF9E99564510DDA4BAA47] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.11/04/2009 7:32:49.) -- C:\Windows\System32\drivers\ntfs.sys [1083880]


      ---\\ Processus lancés
      [MD5.BEC03D0FD49473F4A829C85E2F450BA9] - (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [6789664]
      [MD5.9029943CC4A2E9BD58036F070D8713E3] - (.Acer Incorporated - ePowerTray.) -- C:\Program Files\PACKARD BELL\Packard Bell PowerSave Solution\ePowerTray.exe [707104]
      [MD5.B2994EC6452DBD04E57828EEFEDFB93C] - (.Realtek Semiconductor Corp. - Realtek HD Audio Data Rerouter.) -- C:\Users\ronadine\AppData\Local\Temp\RtkBtMnt.exe [204800]
      [MD5.D394ADF0EEE713FAFD13A8442BA6643B] - (.Dritek System Inc. - Launch Manager.) -- C:\Program Files\Launch Manager\LManager.exe [862728]
      [MD5.1ABF80D4F4941ECEE600AEC768173523] - (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1430824]
      [MD5.9D5E8B45BD348DF0882C69EED0E83111] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [281768]
      [MD5.E616A6A6E91B0A86F2F6217CDE835FFE] - (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [68856]
      [MD5.33C014C1709F7222CEFF61B780EDC967] - (.Advanced Micro Devices Inc. - Catalyst Control Center: Monitoring program.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe [49152]
      [MD5.BA7D56C1F3DD385EE58ADDA14C6FFB54] - (.ATI Technologies Inc. - Catalyst Control Centre: Host application.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe [49152]
      [MD5.F92871A389230747AC6348C64D41AD57] - (.Synaptics Incorporated - Synaptics Pointing Device Helper.) -- C:\Program Files\Synaptics\SynTP\SynTPHelper.exe [103720]
      [MD5.62BB79160F86CD962F312C68C6239BFD] - (.Microsoft Corporation - Windows Update.) -- C:\Windows\system32\wuauclt.exe [53472]
      [MD5.5AB037B17F8A87D052F5A88E0D29A3C8] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe [638232]
      [MD5.0F0BA53C9DFCE0F821B8F5C407847FFB] - (.Crazyloader - Interest Recognizer for Crazyloader.) -- C:\Program Files\CrazyLoader\spointer\crazyloader_air.exe [1274528]
      [MD5.8B4022226C18FA378C324C11CBADDA36] - (.Google Inc. - Google Toolbar Broker.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe [304304]
      [MD5.711FD53E441255983C0AB014E2F107F4] - (.Adobe Systems, Inc. - Adobe® Flash® Player Installer/Uninstaller.) -- C:\Windows\system32\Macromed\Flash\FlashUtil10l_ActiveX.exe [233936]
      [MD5.B7974E7AB555A93CB95CFAF371BDBC8F] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [623616]


      ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2)
      P2 - FPN: [HKLM] [@divx.com/DivX Browser Plugin,version=1.0.0] - (.DivX, LLC - DivX Web Player version 2.1.0.900.) -- C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
      P2 - FPN: [HKLM] [@divx.com/DivX OVS Helper,version=1.0.0] - (.DivX, LLC. - DivX OVS Helper Plug-in.) -- C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll
      P2 - FPN: [HKLM] [@google.com/npPicasa3,version=3.0.0] - (.Google, Inc. - Picasa plugin.) -- C:\Program Files\Google\Picasa3\npPicasa3.dll
      P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=14.0.8117.0416] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
      P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
      P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=8] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.2.183.39\npGoogleOneClick8.dll
      P2 - FPN: [HKCU] [@facebook.com/FBPlugin,version=1.0.1] - (.Pas de propriétaire - Provides additional functionality on Facebook. See <a href="http://www.) -- C:\Users\ronadine\AppData\Roaming\Facebook\npfbplugin_1_0_1.dll


      ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
      G1 - GCS: Preference [User Data\Default] None
      G0 - GCSP: Preference [User Data\Default][HomePage] https://www.google.com/?gws_rd=ssl
      G2 - GCE: Preference [User Data\Default] [cknkimpcfkpmmikggddpidpmaljigegp] AT_Rampage_v2 v.3 (Activé)


      ---\\ Internet Explorer, Démarrage,Recherche,URSearchHook (R0,R1,R3)
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.packardbell.com/rdr.aspx?b=ACPW&l=080c&s=2&o=vb32&d=1009&m=easynote_lj61
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.packardbell.com/rdr.aspx?b=ACPW&l=080c&s=2&o=vb32&d=1009&m=easynote_lj61
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.packardbell.com/rdr.aspx?b=ACPW&l=080c&s=2&o=vb32&d=1009&m=easynote_lj61
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
      R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)) -- C:\Windows\system32\ieframe.dll


      ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
      F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe
      F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"


      ---\\ Browser Helper Objects de navigateur (O2)
      O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
      O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} . (.DivX, LLC - DivX Web Player version 2.1.0.900.) -- C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
      O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} . (.Safer Networking Limited - SBSD IE Protection.) -- C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} . (.DivX, LLC - DivX Web Player version 2.1.0.900.) -- C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
      O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll
      O2 - BHO: Interest recogniser for Crazyloader (powered by Spointer) - {C5F65718-341D-4e7d-9842-FCB9CC89527E} . (.Crazyloader - Interest Recognizer for Crazyloader.) -- C:\Program Files\CrazyLoader\spointer\extensions\crazyloader_air_ie.dll
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll


      ---\\ Internet Explorer Toolbars (O3)
      O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll


      ---\\ Applications démarrées par registre & par dossier (O4)
      O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
      O4 - HKLM\..\Run: [Acer ePower Management] . (.Acer Incorporated - ePowerTrayLauncher.) -- C:\Program Files\Packard Bell\Packard Bell PowerSave Solution\ePowerTrayLauncher.exe
      O4 - HKLM\..\Run: [LManager] . (.Dritek System Inc. - Launch Manager.) -- C:\PROGRA~1\LAUNCH~1\LManager.exe
      O4 - HKLM\..\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
      O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
      O4 - HKLM\..\Run: [Skytel] . (.Realtek Semiconductor Corp. - Realtek Voice Manager.) -- C:\Program Files\Realtek\Audio\HDA\Skytel.exe
      O4 - HKLM\..\Run: [Windows Defender] . (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe
      O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      O4 - HKCU\..\Run: [WahOO] Clé orpheline
      O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
      O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] oobefldr.dll
      O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
      O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] oobefldr.dll
      O4 - HKUS\S-1-5-21-1421856316-1894885307-933502617-1000\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      O4 - HKUS\S-1-5-21-1421856316-1894885307-933502617-1000\..\Run: [WahOO] Clé orpheline


      ---\\ Autres liens utilisateurs (O4)
      O4 - Global Startup: C:\Documents And Settings\ronadine\Desktop\Documents - Raccourci.lnk . (.Pas de propriétaire.) -- C:\Users\ronadine\Documents
      O4 - Global Startup: C:\Documents And Settings\ronadine\Desktop\EPSON Scan.lnk . (.SEIKO EPSON CORP..) -- C:\Windows\twain_32\escndv\escndv.exe
      O4 - Global Startup: C:\Documents And Settings\ronadine\Desktop\HijackThis.lnk . (.Trend Micro Inc..) -- C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
      O4 - Global Startup: C:\Documents And Settings\ronadine\Desktop\Zuma Deluxe.lnk . (.Pas de propriétaire.) -- C:\Program Files\Zuma Deluxe\zuma.exe
      O4 - Global Startup: C:\Documents And Settings\ronadine\Desktop\Zuma's Revenge!.lnk . (.PopCap Games, Inc..) -- C:\Program Files\Zuma's Revenge!\ZumasRevenge.exe
      O4 - Global Startup: C:\Users\ronadine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
      O4 - Global Startup: C:\Users\ronadine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Mail\WinMail.exe
      O4 - Global Startup: C:\Users\ronadine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
      O4 - Global Startup: C:\Users\ronadine\Desktop\Documents - Raccourci.lnk . (.Pas de propriétaire.) -- C:\Users\ronadine\Documents
      O4 - Global Startup: C:\Users\ronadine\Desktop\EPSON Scan.lnk . (.SEIKO EPSON CORP..) -- C:\Windows\twain_32\escndv\escndv.exe
      O4 - Global Startup: C:\Users\ronadine\Desktop\HijackThis.lnk . (.Trend Micro Inc..) -- C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
      O4 - Global Startup: C:\Users\ronadine\Desktop\Zuma Deluxe.lnk . (.Pas de propriétaire.) -- C:\Program Files\Zuma Deluxe\zuma.exe
      O4 - Global Startup: C:\Users\ronadine\Desktop\Zuma's Revenge!.lnk . (.PopCap Games, Inc..) -- C:\Program Files\Zuma's Revenge!\ZumasRevenge.exe
      O4 - Global Startup: C:\Users\ronadine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\A Prendre ou A Laisser.lnk . (.Pas de propriétaire.) -- C:\Program Files\Mindscape\A Prendre ou A Laisser\apoal.exe (.not file.)
      O4 - Global Startup: C:\Users\ronadine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Adobe Photoshop CS4 - Raccourci.lnk . (.Adobe Systems, Incorporated.) -- C:\Users\ronadine\Documents\PROGRAMME\Adobe Photoshop CS4 FR by UREZO\Adobe Photoshop CS4 FR Portable\Adobe Photoshop CS4.exe
      O4 - Global Startup: C:\Users\ronadine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Adobe Photoshop Elements 6.0.lnk . (.Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Photoshop Elements 6.0\Photoshop Elements 6.0.exe
      O4 - Global Startup: C:\Users\ronadine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Audacity 1.3 Beta (Unicode).lnk . (.The Audacity Team.) -- C:\Program Files\Audacity 1.3 Beta (Unicode)\audacity.exe
      O4 - Global Startup: C:\Users\ronadine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\CCleaner.lnk . (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe
      O4 - Global Startup: C:\Users\ronadine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\CyberLink PowerDVD 8.lnk . (.CyberLink Corp..) -- C:\Program Files\CyberLink\PowerDVD8\PowerDVD8.exe
      O4 - Global Startup: C:\Users\ronadine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\DivX Movies (2).lnk . (.Pas de propriétaire.) -- C:\Users\ronadine\Videos\DivX Movies
      O4 - Global Startup: C:\Users\ronadine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\DivX Movies.lnk . (.Pas de propriétaire.) -- C:\Users\ronadine\Videos\DivX Movies
      O4 - Global Startup: C:\Users\ronadine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\DivX Plus Converter.lnk . (.DivX, Inc..) -- C:\Program Files\DivX\DivX Plus Converter\DivXConverterLauncher.exe
      O4 - Global Startup: C:\Users\ronadine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Emplacements Bluetooth - Raccourci (2).lnk - Clé orpheline
      O4 - Global Startup: C:\Users\ronadine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Emplacements Bluetooth - Raccourci.lnk - Clé orpheline
      O4 - Global Startup: C:\Users\ronadine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Emsisoft Anti-Malware.lnk . (.Emsi Software GmbH.) -- C:\Program Files\Emsisoft Anti-Malware\a2start.exe
      O4 - Global Startup: C:\Users\ronadine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Format Factory.lnk . (.Free Time.) -- C:\Program Files\FreeTime\FormatFactory\FormatFactory.exe
      O4 - Global Startup: C:\Users\ronadine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Incoming - Raccourci.lnk . (.Pas de propriétaire.) -- C:\Users\ronadine\Downloads\eMule\Incoming
      O4 - Global Startup: C:\Users\ronadine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\JMCAssemblageGsm.lnk . (.Jean-Marie CAPELLEN.) -- C:\Program Files\JMCAssemblageGsm\JMCAssemblageGsm.exe
      O4 - Global Startup: C:\Users\ronadine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
      O4 - Global Startup: C:\Users\ronadine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Malwarebytes' Anti-Malware.lnk . (.Malwarebytes Corporation.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
      O4 - Global Startup: C:\Users\ronadine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Nero Express Essentials SE.lnk . (.Nero AG.) -- C:\Program Files\Nero\Nero8\Nero Burning Rom\nero.exe
      O4 - Global Startup: C:\Users\ronadine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Nero StartSmart Essentials.lnk . (.Nero AG.) -- C:\Program Files\Nero\Nero8\Nero StartSmart\NeroStartSmart.exe
      O4 - Global Startup: C:\Users\ronadine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Nero StartSmart.lnk . (.Nero AG.) -- C:\Program Files\Nero\Nero 9\Nero StartSmart\NeroStartSmart.exe
      O4 - Global Startup: C:\Users\ronadine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\OpenOffice.org 3.2.lnk . (.OpenOffice.org.) -- C:\Program Files\OpenOffice.org 3\program\soffice.exe
      O4 - Global Startup: C:\Users\ronadine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PHOTOfunSTUDIO 5.0.lnk . (.Panasonic Corporation.) -- C:\Program Files\Panasonic\PHOTOfunSTUDIO 5.0\PHOTOfunSTUDIO.exe
      O4 - Global Startup: C:\Users\ronadine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Piano Virtuel Midi.lnk . (.Home.) -- C:\Program Files\Pvm\Piano virtuel midi.exe
      O4 - Global Startup: C:\Users\ronadine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - Clé orpheline
      O4 - Global Startup: C:\Users\ronadine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk . (.Safer Networking Limited.) -- C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
      O4 - Global Startup: C:\Users\ronadine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\virtualdj - Raccourci.lnk . (.Atomix Productions.) -- C:\Program Files\VirtualDJ\virtualdj.exe
      O4 - Global Startup: C:\Users\ronadine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\VLC media player.lnk . (.Pas de propriétaire.) -- C:\Program Files\VideoLAN\VLC\vlc.exe
      O4 - Global Startup: C:\Users\ronadine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\WahOO.lnk . (.Kow Media.) -- C:\Users\ronadine\AppData\Local\WahOO\WahOO.exe
      O4 - Global Startup: C:\Users\ronadine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - Clé orpheline
      O4 - Global Startup: C:\Users\ronadine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Live Messenger .lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
      O4 - Global Startup: C:\Users\ronadine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
      O4 - Global Startup: C:\Users\ronadine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Zylom puzzles Deluxe.lnk . (.Pas de propriétaire.) -- C:\Users\ronadine\AppData\Local\Zylom Games\Zylom puzzles Deluxe\zylompuzzlesPromo.exe


      ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
      O8 - Extra context menu item: Add to Google Photos Screensa&ver . (.Google Inc. - Google Photos Screensaver.) -- C:\Windows\system32\GPhotos.scr
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - (.not file.) - C:\PROGRA~1\MICROS~2\Office12\EXCEL.exe
      O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
      O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
      O8 - Extra context menu item: Google Sidewiki... . (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll


      ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
      O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
      O9 - Extra button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\WIDCOMM\Bluetooth Software\bt_hot_icon.ico
      O9 - Extra button: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\WIDCOMM\Bluetooth Software\bt_hot_icon.ico


      ---\\ Winsock hijacker (Layered Service Provider) (O10)
      O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
      O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
      O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
      O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
      O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
      O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
      O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll


      ---\\ Objets ActiveX (Downloaded Program Files)(O16)
      O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.5.0.cab
      O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://belgacom.extrafilm.be/ImageUploader5.cab
      O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} () - http://download.eset.com/special/eos/OnlineScanner.cab
      O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
      O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game.zylom.com/activex/zylomgamesplayer.cab
      O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
      O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} (Windows Live Hotmail Photo Upload Tool) - http://gfx2.hotmail.com/mail/w4/pr01/photouploadcontrol/VistaMSNPUpldfr-be.cab


      ---\\ Modification Domaine/Adresses DNS (O17)
      O17 - HKLM\System\CCS\Services\Tcpip\..\{AA0A9409-F011-456E-870B-9D527369C820}: DhcpNameServer = 192.168.1.1
      O17 - HKLM\System\CCS\Services\Tcpip\..\{B8D0BA25-4D3E-4077-9290-160FE0C06A2B}: DhcpNameServer = 192.168.1.1
      O17 - HKLM\System\CS1\Services\Tcpip\..\{AA0A9409-F011-456E-870B-9D527369C820}: DhcpNameServer = 192.168.1.1
      O17 - HKLM\System\CS1\Services\Tcpip\..\{B8D0BA25-4D3E-4077-9290-160FE0C06A2B}: DhcpNameServer = 192.168.1.1
      O17 - HKLM\System\CS2\Services\Tcpip\..\{AA0A9409-F011-456E-870B-9D527369C820}: DhcpNameServer = 192.168.1.1
      O17 - HKLM\System\CS2\Services\Tcpip\..\{B8D0BA25-4D3E-4077-9290-160FE0C06A2B}: DhcpNameServer = 192.168.1.1
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1


      ---\\ Protocole additionnel et piratage de protocole (O18)
      O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\Windows\system32\skype4com.dll


      ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
      O20 - AppInit_DLLs: . (.Google - Google Desktop.) - C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.dll


      ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
      O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\System32\webcheck.dll


      ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
      O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll


      ---\\ Liste des services NT non Microsoft et non désactivés (O23)
      O23 - Service: (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe
      O23 - Service: (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
      O23 - Service: (Ati External Event Utility) . (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - C:\Windows\system32\Ati2evxx.exe
      O23 - Service: (BlueSoleilCS) . (.IVT Corporation - Bluetooth Application.) - C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
      O23 - Service: (ePowerSvc) . (.Acer Incorporated - ePowerSvc.) - C:\Program Files\PACKARD BELL\Packard Bell PowerSave Solution\ePowerSvc.exe
      O23 - Service: (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
      O23 - Service: (NTI IScheduleSvc) . (.NewTech Infosystems, Inc. - Backup Manager Module.) - C:\Program Files\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe
      O23 - Service: (PLFlash DeviceIoControl Service) . (.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) - C:\Windows\system32\IoctlSvc.exe
      O23 - Service: (SBSDWSCService) . (.Safer Networking Ltd. - Spybot-S&D Security Center integration.) - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe


      ---\\ Enumération Active Desktop & MHTML Editor (O24)
      O24 - Default MHTML Editor: Last - .(.Pas de propriétaire - Pas de description.) - (.not file.)


      ---\\ Tâches planifiées en automatique (O39)
      O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
      O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
      O39 - APT:Automatic Planified Task - C:\Windows\Tasks\SLOW-PCfighter-ronadine-Startup.job
      [MD5.00000000000000000000000000000000] [APT] [Ad-Aware Update (Daily 1)] (.Pas de propriétaire.) -- C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe (.not file.)
      [MD5.00000000000000000000000000000000] [APT] [Ad-Aware Update (Daily 2)] (.Pas de propriétaire.) -- C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe (.not file.)
      [MD5.00000000000000000000000000000000] [APT] [Ad-Aware Update (Daily 3)] (.Pas de propriétaire.) -- C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe (.not file.)
      [MD5.00000000000000000000000000000000] [APT] [Ad-Aware Update (Daily 4)] (.Pas de propriétaire.) -- C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe (.not file.)
      [MD5.00000000000000000000000000000000] [APT] [Ad-Aware Update (Weekly)] (.Pas de propriétaire.) -- C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe (.not file.)
      [MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
      [MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
      [MD5.00000000000000000000000000000000] [APT] [RunAsStdUser Task] (.Pas de propriétaire.) -- C:\Users\ronadine\AppData\Local\Temp\{86D4B82A-ABED-442A-BE86-96357B70F4FE}\RunIE.exe (.not file.)
      [MD5.00000000000000000000000000000000] [APT] [SLOW-PCfighter-ronadine-Startup] (.Pas de propriétaire.) -- C:\Program Files\Fighters\SLOW-PCfighter\SLOW-PCfighter.exe (.not file.)


      ---\\ Pilotes lancés au démarrage (O41)
      O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
      O41 - Driver: (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys
      O41 - Driver: (avipbb) . (.Avira GmbH - Avira Driver for Security Enhancement.) - C:\Windows\System32\DRIVERS\avipbb.sys
      O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
      O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
      O41 - Driver: (DritekPortIO) . (.Dritek System Inc. - General Port I/O.) - C:\PROGRA~1\LAUNCH~1\DPortIO.sys
      O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\System32\DRIVERS\i8042prt.sys
      O41 - Driver: (kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\System32\DRIVERS\kbdclass.sys
      O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre clavier HID.) - C:\Windows\System32\DRIVERS\kbdhid.sys
      O41 - Driver: (mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\System32\DRIVERS\mouclass.sys
      O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
      O41 - Driver: (netbt) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
      O41 - Driver: (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
      O41 - Driver: C:\Windows\system32\drivers\pacer.sys (PSched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
      O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\System32\DRIVERS\rasacd.sys
      O41 - Driver: (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys
      O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
      O41 - Driver: (RDPENCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
      O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Smb) . (.Microsoft Corporation - SMB Transport driver.) - C:\Windows\System32\DRIVERS\smb.sys
      O41 - Driver: (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\Windows\System32\DRIVERS\ssmdrv.sys
      O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
      O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys
      O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
      O41 - Driver: (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys


      ---\\ Logiciels installés (O42)
      O42 - Logiciel: AGEIA PhysX v7.11.13 - (.AGEIA Technologies, Inc..) [HKLM] -- {95FC26FB-19FD-4A96-BBB1-B1062E8648F5}
      O42 - Logiciel: AMD USB Audio Driver Filter - (.Advanced Micro Devices, Inc..) [HKLM] -- {C2F62AF2-8748-4CAE-BE53-1AF4763CFC15}
      O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
      O42 - Logiciel: Adobe Photoshop Elements 6.0 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Photoshop Elements 6
      O42 - Logiciel: Adobe Photoshop Lightroom 2.6 - (.Adobe.) [HKLM] -- {81CB77FF-9789-4337-A46E-185F7876AC40}
      O42 - Logiciel: Adobe Reader 9.3.4 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A93000000001}
      O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
      O42 - Logiciel: Atlantis Quest 1.0 - (.Pas de propriétaire.) [HKLM] -- Atlantis Quest_is1
      O42 - Logiciel: Audacity 1.3.12 (Unicode) - (.Audacity Team.) [HKLM] -- Audacity 1.3 Beta (Unicode)_is1
      O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM] -- Avira AntiVir Desktop
      O42 - Logiciel: Bluesoleil 5.4.277.0 - (.IVT Corporation.) [HKLM] -- {25887983-54F3-4F55-A7C5-91229AD67C16}
      O42 - Logiciel: CANON iMAGE GATEWAY Task for ZoomBrowser EX - (.Canon Inc..) [HKLM] -- CANON iMAGE GATEWAY Task
      O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
      O42 - Logiciel: Canon Internet Library for ZoomBrowser EX - (.Canon Inc..) [HKLM] -- Canon Internet Library for ZoomBrowser EX
      O42 - Logiciel: Canon RAW Image Task for ZoomBrowser EX - (.Canon Inc..) [HKLM] -- RAW Image Task
      O42 - Logiciel: Canon Utilities CameraWindow - (.Canon Inc..) [HKLM] -- CameraWindowLauncher
      O42 - Logiciel: Canon Utilities CameraWindow DC_DV 6 for ZoomBrowser EX - (.Canon Inc..) [HKLM] -- CameraWindowDVC6
      O42 - Logiciel: Canon Utilities Digital Photo Professional 3.4 - (.Canon Inc..) [HKLM] -- DPP
      O42 - Logiciel: Canon Utilities MyCamera - (.Canon Inc..) [HKLM] -- MyCamera
      O42 - Logiciel: Canon Utilities Original Data Security Tools - (.Canon Inc..) [HKLM] -- Original Data Security Tools
      O42 - Logiciel: Canon Utilities RemoteCapture Task for ZoomBrowser EX - (.Canon Inc..) [HKLM] -- RemoteCaptureTask
      O42 - Logiciel: Canon Utilities ZoomBrowser EX - (.Canon Inc..) [HKLM] -- ZoomBrowser EX
      O42 - Logiciel: Canon ZoomBrowser EX Memory Card Utility - (.Canon Inc..) [HKLM] -- ZoomBrowser EX Memory Card Utility
      O42 - Logiciel: Catalyst Control Center - Branding - (.ATI.) [HKLM] -- {92ABBA93-EE00-41C7-8D44-67D0C9DEF51E}
      O42 - Logiciel: Configuration DivX - (.DivX, LLC.) [HKLM] -- DivX Setup.divx.com
      O42 - Logiciel: CrazyLoader - (.Pas de propriétaire.) [HKLM] -- CrazyLoader
      O42 - Logiciel: CyberLink PowerDVD 8 - (.CyberLink Corp..) [HKLM] -- InstallShield_{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}
      O42 - Logiciel: CyberLink PowerDVD 8 - (.CyberLink Corp..) [HKLM] -- {2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}
      O42 - Logiciel: DivX Converter - (.DivX, Inc..) [HKLM] -- {B13A7C41581B411290FBC0395694E2A9}
      O42 - Logiciel: DivX Plus DirectShow Filters - (.DivX, Inc..) [HKLM] -- DivX Plus DirectShow Filters
      O42 - Logiciel: EPSON Copy Utility 3 - (.Pas de propriétaire.) [HKLM] -- {67EDD823-135A-4D59-87BD-950616D6E857}
      O42 - Logiciel: EPSON Logiciel imprimante - (.SEIKO EPSON Corporation.) [HKLM] -- EPSON Printer and Utilities
      O42 - Logiciel: EPSON Scan - (.Pas de propriétaire.) [HKLM] -- EPSON Scanner
      O42 - Logiciel: Emsisoft Anti-Malware 5.0 - (.Emsi Software GmbH.) [HKLM] -- Emsisoft Anti-Malware_is1
      O42 - Logiciel: ExtraFilm Designer BE FR - (.Pas de propriétaire.) [HKLM] -- ExtraFilmDesignerBE FR
      O42 - Logiciel: Facebook Plug-In - (.Facebook, Inc..) [HKCU] -- Facebook Plug-In
      O42 - Logiciel: FormatFactory 2.60 - (.Free Time.) [HKLM] -- FormatFactory
      O42 - Logiciel: Free FLV Converter V 6.8.0 - (.Koyote Soft.) [HKLM] -- Free FLV Converter_is1
      O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {1EE04769-91C4-4A06-92B7-FCAFE6BABDD9}
      O42 - Logiciel: Google Desktop - (.Google.) [HKLM] -- Google Desktop
      O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
      O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
      O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
      O42 - Logiciel: Hospital Tycoon - (.Pas de propriétaire.) [HKLM] -- HospitalTycoon
      O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
      O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
      O42 - Logiciel: Identity Card - (.Packard Bell.) [HKLM] -- Identity Card
      O42 - Logiciel: InfoCentre - (.Packard Bell.) [HKLM] -- InfoCentre
      O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3
      O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {133742BA-6F46-4D3E-85AF-78631D9AD8B8}
      O42 - Logiciel: JMCAssemblageGsm Ver 1.0.0.9 - (.JMC 2009.) [HKLM] -- JMCAssemblageGsm_is1
      O42 - Logiciel: Java(TM) 6 Update 20 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216019FF}
      O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {8E5233E1-7495-44FB-8DEB-4BE906D59619}
      O42 - Logiciel: Launch Manager - (.Packard Bell.) [HKLM] -- LManager
      O42 - Logiciel: Logiciel d'archivage WinRAR - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver
      O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
      O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
      O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
      O42 - Logiciel: MSXML 4.0 SP2 Parser and SDK - (.Microsoft Corporation.) [HKLM] -- {716E0306-8318-4364-8B8F-0CC4E9376BAC}
      O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
      O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) [HKLM] -- {3E31821C-7917-367E-938E-E65FC413EA31}
      O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
      O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
      O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
      O42 - Logiciel: Microsoft Office PowerPoint Viewer 2007 (French) - (.Microsoft Corporation.) [HKLM] -- {95120000-00AF-040C-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
      O42 - Logiciel: Microsoft SQL Server Compact 3.5 SP1 English - (.Microsoft Corporation.) [HKLM] -- {E59113EB-0285-4BFD-A37A-B79EAC6B8F4B}
      O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}
      O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {7299052b-02a4-4627-81f2-1818da5d550d}
      O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c}
      O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
      O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 - (.Microsoft Corporation.) [HKLM] -- {FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}
      O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 - (.Microsoft Corporation.) [HKLM] -- {E503B4BF-F7BB-3D5F-8BC8-F694B1CFF942}
      O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}
      O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
      O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {3B160861-7250-451E-B5EE-8B92BF30A710}
      O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-040C-0000-0000000FF1CE}
      O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 Language Pack SP1 - fra
      O42 - Logiciel: Nero 8 Essentials - (.Nero AG.) [HKLM] -- {5C1BF3AC-B19D-4C26-B0A0-90833A521036}
      O42 - Logiciel: Nero 9 - (.Nero AG.) [HKLM] -- {397e20b0-fb43-4a61-aaf4-78578079b1a9}
      O42 - Logiciel: OpenOffice.org 3.2 - (.OpenOffice.org.) [HKLM] -- {69B040CC-E9B1-4769-950E-87786C9E16AD}
      O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}
      O42 - Logiciel: PHOTOfunSTUDIO 5.0 - (.Panasonic Corporation.) [HKLM] -- {959282E3-55A9-49D8-B885-D27CF8A2FD82}
      O42 - Logiciel: Packard Bell Customer Registration - (.Packard Bell.) [HKLM] -- Packard Bell Customer Registration
      O42 - Logiciel: Packard Bell MyBackup - (.NewTech Infosystems.) [HKLM] -- InstallShield_{72B776E5-4530-4C4B-9453-751DF87D9D93}
      O42 - Logiciel: Packard Bell PowerSave Solution - (.Acer Incorporated.) [HKLM] -- {3DB0448D-AD82-4923-B305-D001E521A964}
      O42 - Logiciel: Packard Bell Recovery Management - (.Acer Incorporated.) [HKLM] -- {7F811A54-5A09-4579-90E1-C93498E230D9}
      O42 - Logiciel: PackardBell ScreenSaver - (.PackardBell.) [HKLM] -- PackardBell Screensaver
      O42 - Logiciel: Photorécit 3 pour Windows - (.Microsoft Corporation.) [HKLM] -- {4F41AD68-89F2-4262-A32C-2F70B01FCE9E}
      O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM] -- Picasa 3
      O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
      O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM] -- {DC24971E-1946-445D-8A82-CE685433FA7D}
      O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473
      O42 - Logiciel: SetUpMyPC - (.Packard Bell.) [HKLM] -- SetUpMyPC
      O42 - Logiciel: Spelling Dictionaries Support For Adobe Reader 9 - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-5464-3428-900000000004}
      O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1
      O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM] -- SynTPDeinstKey
      O42 - Logiciel: TomTom HOME 2.7.6.2056 - (.TomTom.) [HKLM] -- TomTom HOME
      O42 - Logiciel: TomTom HOME Visual Studio Merge Modules - (.TomTom International B.V..) [HKLM] -- {8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}
      O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
      O42 - Logiciel: Updator - (.Packard Bell.) [HKLM] -- Updator
      O42 - Logiciel: VC80CRTRedist - 8.0.50727.4053 - (.DivX, Inc.) [HKLM] -- {5EE7D259-D137-4438-9A5F-42F432EC0421}
      O42 - Logiciel: VLC media player 1.0.5 - (.VideoLAN Team.) [HKLM] -- VLC media player
      O42 - Logiciel: Video Web Camera - (.Chicony Electronics Co.,Ltd..) [HKLM] -- {12A1B519-5934-4508-ADBD-335347B0DC87}
      O42 - Logiciel: Virtual DJ - Atomix Productions - (.Pas de propriétaire.) [HKLM] -- Virtual DJ - Atomix Productions
      O42 - Logiciel: WIDCOMM Bluetooth Software - (.Broadcom Corporation.) [HKLM] -- {9E9D49A4-1DF4-4138-B7DB-5D87A893088E}
      O42 - Logiciel: WahOO - (.Pas de propriétaire.) [HKLM] -- {0271A4CB-D48C-4CDF-826F-62EE8D91663F}_is1
      O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {B3B487E7-6171-4376-9074-B28082CEB504}
      O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3175E049-F9A9-4A3D-8F19-AC9FB04514D1}
      O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM] -- {76810709-A7D3-468D-9167-A1780C1E766C}
      O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {5DD76286-9BE7-4894-A990-E905E91AC818}
      O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {445B183D-F4F1-45C8-B9DB-F11355CA657B}
      O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {4634B21A-CC07-4396-890C-2B8168661FEA}
      O42 - Logiciel: XnView 1.96 - (.Gougelet Pierre-e.) [HKLM] -- XnView_is1
      O42 - Logiciel: Zuma Deluxe RA - (.Pas de propriétaire.) [HKLM] -- Zuma Deluxe RA
      O42 - Logiciel: Zuma's Revenge! - (.AllSmartGames.) [HKLM] -- Zuma's Revenge!1.0
      O42 - Logiciel: Zylom puzzles Deluxe - (.Zylom Games.) [HKCU] -- Zylom puzzles Deluxe
      O42 - Logiciel: eMule - (.Pas de propriétaire.) [HKLM] -- eMule
      O42 - Logiciel: neroxml - (.Nero AG.) [HKLM] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B}

      ---\\ HKCU & HKLM Software Keys
      [HKCU\Software\ATI Technologies Inc.]
      [HKCU\Software\ATI]
      [HKCU\Software\AcerUtil]
      [HKCU\Software\Adobe Lightroom]
      [HKCU\Software\Ahead]
      [HKCU\Software\AppDataLow\Aurigma]
      [HKCU\Software\AppDataLow\LastScanTime]
      [HKCU\Software\AppDataLow\Software\DivXNetworks]
      [HKCU\Software\AppDataLow\Software\DivX]
      [HKCU\Software\AppDataLow\Software\Microsoft]
      [HKCU\Software\AppDataLow\Software]
      [HKCU\Software\AppDataLow]
      [HKCU\Software\Audacity]
      [HKCU\Software\Avira]
      [HKCU\Software\CDDB]
      [HKCU\Software\CEC_CM_SW]
      [HKCU\Software\CPUID]
      [HKCU\Software\Canon]
      [HKCU\Software\Canon_Inc_IC]
      [HKCU\Software\Classes]
      [HKCU\Software\Clients]
      [HKCU\Software\CocoonSoftware]
      [HKCU\Software\Compal]
      [HKCU\Software\Cyberlink]
      [HKCU\Software\DivXNetworks]
      [HKCU\Software\DivX]
      [HKCU\Software\EPSON]
      [HKCU\Software\ESET]
      [HKCU\Software\EasyBits]
      [HKCU\Software\ExtraFilmDesignerBE FR]
      [HKCU\Software\FreeTime]
      [HKCU\Software\GNU]
      [HKCU\Software\Gabest]
      [HKCU\Software\Google]
      [HKCU\Software\Haali]
      [HKCU\Software\HotHouse Creations Ltd]
      [HKCU\Software\IM Providers]
      [HKCU\Software\JavaSoft]
      [HKCU\Software\Lake]
      [HKCU\Software\Local AppWizard-Generated Applications]
      [HKCU\Software\Macromedia]
      [HKCU\Software\Mainconcept]
      [HKCU\Software\Malwarebytes' Anti-Malware]
      [HKCU\Software\MozillaPlugins]
      [HKCU\Software\Nero]
      [HKCU\Software\Netscape]
      [HKCU\Software\Norton]
      [HKCU\Software\ODBC]
      [HKCU\Software\OpenOffice.org]
      [HKCU\Software\PC SOFT]
      [HKCU\Software\Packard Bell]
      [HKCU\Software\Panasonic]
      [HKCU\Software\Piriform]
      [HKCU\Software\Policies]
      [HKCU\Software\PopCap]
      [HKCU\Software\Pvm]
      [HKCU\Software\Realtek]
      [HKCU\Software\ReflexiveArcade]
      [HKCU\Software\Safer Networking Limited]
      [HKCU\Software\SoMud]
      [HKCU\Software\Softonic]
      [HKCU\Software\SpinTop]
      [HKCU\Software\Spointer]
      [HKCU\Software\Synaptics]
      [HKCU\Software\Textalk]
      [HKCU\Software\TomTom]
      [HKCU\Software\Trolltech]
      [HKCU\Software\VirtualDJ]
      [HKCU\Software\WahOO]
      [HKCU\Software\Widcomm]
      [HKCU\Software\WinRAR SFX]
      [HKCU\Software\WinRAR]
      [HKCU\Software\Windows Live Writer]
      [HKCU\Software\YahooPartnerToolbar]
      [HKCU\Software\Zylom]
      [HKCU\Software\acer]
      [HKCU\Software\adobe]
      [HKCU\Software\eMule]
      [HKCU\Software\gamescafe.com]
      [HKLM\Software\<company>]
      [HKLM\Software\AGEIA Technologies]
      [HKLM\Software\AMD]
      [HKLM\Software\ATI Technologies]
      [HKLM\Software\ATI]
      [HKLM\Software\Acer Incorporated]
      [HKLM\Software\Acer]
      [HKLM\Software\Adobe]
      [HKLM\Software\Ahead]
      [HKLM\Software\Apple Computer, Inc.]
      [HKLM\Software\Audible]
      [HKLM\Software\AviSynth]
      [HKLM\Software\Avira]
      [HKLM\Software\BrowserChoice]
      [HKLM\Software\CXT]
      [HKLM\Software\Canon]
      [HKLM\Software\Canon_Inc_IC]
      [HKLM\Software\Chicony Electronics Co.,Ltd.]
      [HKLM\Software\Classes]
      [HKLM\Software\Clients]
      [HKLM\Software\Codemasters]
      [HKLM\Software\Common Toolkit Suite]
      [HKLM\Software\Compal]
      [HKLM\Software\Conexant]
      [HKLM\Software\CyberLink]
      [HKLM\Software\DivXNetworks]
      [HKLM\Software\DivX]
      [HKLM\Software\EPSON]
      [HKLM\Software\EasyBits]
      [HKLM\Software\Emsi Software GmbH]
      [HKLM\Software\Eset]
      [HKLM\Software\GNU]
      [HKLM\Software\Google]
      [HKLM\Software\HaaliMkx]
      [HKLM\Software\IVT Corporation]
      [HKLM\Software\InstallShield]
      [HKLM\Software\InstalledOptions]
      [HKLM\Software\Intel]
      [HKLM\Software\JavaSoft]
      [HKLM\Software\JreMetrics]
      [HKLM\Software\Lake]
      [HKLM\Software\Lavasoft]
      [HKLM\Software\Macromedia]
      [HKLM\Software\Macrovision]
      [HKLM\Software\Malwarebytes' Anti-Malware]
      [HKLM\Software\McAfee.com]
      [HKLM\Software\MimarSinan]
      [HKLM\Software\MozillaPlugins]
      [HKLM\Software\Mozilla]
      [HKLM\Software\NeroDigital]
      [HKLM\Software\Nero]
      [HKLM\Software\NewTech Infosystems]
      [HKLM\Software\ODBC]
      [HKLM\Software\OEM]
      [HKLM\Software\OemSetup]
      [HKLM\Software\OpenOffice.org]
      [HKLM\Software\Packard Bell]
      [HKLM\Software\Panasonic]
      [HKLM\Software\Policies]
      [HKLM\Software\RECISIO]
      [HKLM\Software\Realtek Semiconductor Corp.]
      [HKLM\Software\Realtek]
      [HKLM\Software\ReflexiveArcade]
      [HKLM\Software\RegisteredApplications]
      [HKLM\Software\SRS Labs]
      [HKLM\Software\Safer Networking Limited]
      [HKLM\Software\Sonic]
      [HKLM\Software\Sun Microsystems]
      [HKLM\Software\SupportSoft]
      [HKLM\Software\SymNRT]
      [HKLM\Software\Symantec]
      [HKLM\Software\Synaptics]
      [HKLM\Software\TQ566808]
      [HKLM\Software\TomTom]
      [HKLM\Software\TrendMicro]
      [HKLM\Software\VideoLAN]
      [HKLM\Software\VirtualDJ]
      [HKLM\Software\WOW6432Node]
      [HKLM\Software\Waves Audio]
      [HKLM\Software\Widcomm]
      [HKLM\Software\WinRAR]
      [HKLM\Software\Windows]
      [HKLM\Software\X-AVCSD]
      [HKLM\Software\XnView]
      [HKLM\Software\instinno]
      [HKLM\Software\mcafeeupdater]


      ---\\ Contenu des dossiers ProgramFiles/ProgramData/AppData (O43)
      O43 - CFD: 17/09/2010 - 7:36:22 ----D- C:\Program Files\Adobe
      O43 - CFD: 9/12/2009 - 14:05:46 ----D- C:\Program Files\AGEIA Technologies
      O43 - CFD: 24/03/2009 - 12:25:24 ----D- C:\Program Files\AMD
      O43 - CFD: 11/10/2009 - 15:05:24 ----D- C:\Program Files\ATI
      O43 - CFD: 11/10/2009 - 15:06:26 ----D- C:\Program Files\ATI Technologies
      O43 - CFD: 2/01/2011 - 20:56:20 ----D- C:\Program Files\Atlantis Quest
      O43 - CFD: 15/01/2011 - 12:23:16 ----D- C:\Program Files\Audacity 1.3 Beta (Unicode)
      O43 - CFD: 13/10/2009 - 8:52:02 ----D- C:\Program Files\Avira
      O43 - CFD: 13/10/2009 - 10:19:14 ----D- C:\Program Files\Canon
      O43 - CFD: 14/08/2010 - 9:18:34 ----D- C:\Program Files\CCleaner
      O43 - CFD: 12/09/2010 - 11:32:00 ----D- C:\Program Files\Cluedo
      O43 - CFD: 13/02/2010 - 6:49:44 ----D- C:\Program Files\Codemasters
      O43 - CFD: 20/06/2010 - 9:27:40 ----D- C:\Program Files\Common Files
      O43 - CFD: 24/03/2009 - 12:27:38 ----D- C:\Program Files\CONEXANT
      O43 - CFD: 11/01/2011 - 15:19:00 ----D- C:\Program Files\CrazyLoader
      O43 - CFD: 11/10/2009 - 8:35:02 ----D- C:\Program Files\CyberLink
      O43 - CFD: 24/03/2009 - 12:25:28 ----D- C:\Program Files\DIFX
      O43 - CFD: 11/01/2011 - 11:57:04 ----D- C:\Program Files\DivX
      O43 - CFD: 13/01/2011 - 13:14:48 ----D- C:\Program Files\Emsisoft Anti-Malware
      O43 - CFD: 13/10/2009 - 11:53:04 ----D- C:\Program Files\eMule
      O43 - CFD: 20/10/2009 - 11:30:38 ----D- C:\Program Files\EPSON
      O43 - CFD: 8/11/2010 - 20:51:14 ----D- C:\Program Files\ExtraFilm Designer BE FR
      O43 - CFD: 11/10/2009 - 8:17:06 -SH-D- C:\Program Files\Fichiers communs
      O43 - CFD: 21/08/2010 - 11:12:08 ----D- C:\Program Files\Free FLV Converter
      O43 - CFD: 21/11/2010 - 13:04:32 ----D- C:\Program Files\FreeTime
      O43 - CFD: 15/06/2010 - 11:24:40 ----D- C:\Program Files\Google
      O43 - CFD: 15/01/2011 - 14:13:56 --H-D- C:\Program Files\InstallShield Installation Information
      O43 - CFD: 1/01/2011 - 15:52:00 ----D- C:\Program Files\Internet Explorer
      O43 - CFD: 6/07/2010 - 17:22:46 ----D- C:\Program Files\IVT Corporation
      O43 - CFD: 5/05/2010 - 9:06:06 ----D- C:\Program Files\Java
      O43 - CFD: 8/08/2010 - 19:24:08 ----D- C:\Program Files\JMCAssemblageGsm
      O43 - CFD: 25/05/2010 - 7:35:24 ----D- C:\Program Files\KaraFun
      O43 - CFD: 24/03/2009 - 13:00:58 ----D- C:\Program Files\Launch Manager
      O43 - CFD: 7/05/2010 - 10:52:56 ----D- C:\Program Files\Lavasoft
      O43 - CFD: 16/10/2009 - 15:03:56 ----D- C:\Program Files\Malwarebytes' Anti-Malware
      O43 - CFD: 8/11/2010 - 20:36:24 ----D- C:\Program Files\Micro Application
      O43 - CFD: 20/10/2009 - 12:27:52 ----D- C:\Program Files\Microsoft
      O43 - CFD: 2/11/2006 - 13:35:52 ----D- C:\Program Files\Microsoft Games
      O43 - CFD: 30/07/2010 - 14:36:58 ----D- C:\Program Files\Microsoft Office
      O43 - CFD: 20/06/2010 - 9:27:24 ----D- C:\Program Files\Microsoft SQL Server Compact Edition
      O43 - CFD: 20/06/2010 - 9:27:26 ----D- C:\Program Files\Microsoft Synchronization Services
      O43 - CFD: 1/01/2011 - 15:45:00 ----D- C:\Program Files\Microsoft Works
      O43 - CFD: 16/07/2010 - 12:51:00 ----D- C:\Program Files\Microsoft.NET
      O43 - CFD: 15/09/2010 - 14:34:54 ----D- C:\Program Files\Movie Maker
      O43 - CFD: 2/11/2006 - 13:35:52 ----D- C:\Program Files\MSBuild
      O43 - CFD: 24/03/2009 - 11:57:12 ----D- C:\Program Files\MSXML 4.0
      O43 - CFD: 21/08/2010 - 10:11:50 ----D- C:\Program Files\Nero
      O43 - CFD: 24/03/2009 - 12:48:42 ----D- C:\Program Files\NewTech Infosystems
      O43 - CFD: 23/07/2010 - 11:33:36 ----D- C:\Program Files\OpenOffice.org 3
      O43 - CFD: 11/10/2009 - 8:30:46 ----D- C:\Program Files\PACKARD BELL
      O43 - CFD: 20/06/2010 - 9:27:32 ----D- C:\Program Files\Panasonic
      O43 - CFD: 24/05/2010 - 10:51:04 ----D- C:\Program Files\Photo Story 3 for Windows
      O43 - CFD: 23/05/2010 - 12:08:08 ----D- C:\Program Files\Pvm
      O43 - CFD: 24/03/2009 - 12:28:16 ----D- C:\Program Files\Realtek
      O43 - CFD: 2/11/2006 - 13:35:52 ----D- C:\Program Files\Reference Assemblies
      O43 - CFD: 2/01/2011 - 20:54:40 ----D- C:\Program Files\ReflexiveArcade
      O43 - CFD: 18/05/2010 - 11:06:46 ----D- C:\Program Files\Spybot - Search & Destroy
      O43 - CFD: 11/10/2009 - 8:29:22 ----D- C:\Program Files\Synaptics
      O43 - CFD: 24/03/2009 - 12:29:36 --H-D- C:\Program Files\Temp
      O43 - CFD: 12/03/2010 - 19:04:22 ----D- C:\Program Files\TomTom HOME 2
      O43 - CFD: 12/03/2010 - 19:04:38 ----D- C:\Program Files\TomTom International B.V
      O43 - CFD: 19/01/2011 - 16:51:42 ----D- C:\Program Files\Trend Micro
      O43 - CFD: 7/05/2010 - 11:04:18 ----D- C:\Program Files\Ubisoft
      O43 - CFD: 2/11/2006 - 13:58:20 --H-D- C:\Program Files\Uninstall Information
      O43 - CFD: 11/10/2009 - 8:27:58 ----D- C:\Program Files\Video Web Camera
      O43 - CFD: 23/05/2010 - 10:25:00 ----D- C:\Program Files\VideoLAN
      O43 - CFD: 9/08/2010 - 16:10:52 ----D- C:\Program Files\VirtualDJ
      O43 - CFD: 27/12/2009 - 11:54:44 ----D- C:\Program Files\WIDCOMM
      O43 - CFD: 22/12/2009 - 20:34:54 ----D- C:\Program Files\Windows Calendar
      O43 - CFD: 22/12/2009 - 20:34:52 ----D- C:\Program Files\Windows Collaboration
      O43 - CFD: 22/12/2009 - 20:34:48 ----D- C:\Program Files\Windows Defender
      O43 - CFD: 30/07/2010 - 14:21:34 ----D- C:\Program Files\Windows Live
      O43 - CFD: 24/03/2009 - 12:52:40 ----D- C:\Program Files\Windows Live SkyDrive
      O43 - CFD: 1/01/2011 - 15:52:00 ----D- C:\Program Files\Windows Mail
      O43 - CFD: 23/10/2010 - 10:38:46 ----D- C:\Program Files\Windows Media Player
      O43 - CFD: 11/10/2009 - 8:17:06 ----D- C:\Program Files\Windows NT
      O43 - CFD: 22/12/2009 - 20:34:52 ----D- C:\Program Files\Windows Photo Gallery
      O43 - CFD: 10/01/2010 - 9:36:22 ----D- C:\Program Files\Windows Portable Devices
      O43 - CFD: 22/12/2009 - 20:34:52 ----D- C:\Program Files\Windows Sidebar
      O43 - CFD: 23/11/2009 - 22:06:38 ----D- C:\Program Files\WinRAR
      O43 - CFD: 19/01/2010 - 9:53:08 ----D- C:\Program Files\XnView
      O43 - CFD: 19/01/2011 - 17:17:30 ----D- C:\Program Files\ZHPDiag
      O43 - CFD: 23/12/2010 - 14:44:46 ----D- C:\Program Files\Zuma Deluxe
      O43 - CFD: 19/08/2010 - 7:41:36 ----D- C:\Program Files\Zuma's Revenge
      O43 - CFD: 23/12/2010 - 14:44:14 ----D- C:\Program Files\Zuma's Revenge!
      O43 - CFD: 4/02/2010 - 16:04:42 ----D- C:\Program Files\Common Files\Adobe
      O43 - CFD: 13/10/2009 - 10:15:18 ----D- C:\Program Files\Common Files\Canon
      O43 - CFD: 11/10/2009 - 8:35:02 ----D- C:\Program Files\Common Files\CyberLink
      O43 - CFD: 15/06/2010 - 14:08:52 ----D- C:\Program Files\Common Files\DivX Shared
      O43 - CFD: 7/05/2010 - 12:18:54 ----D- C:\Program Files\Common Files\InstallShield
      O43 - CFD: 8/04/2010 - 12:15:22 ----D- C:\Program Files\Common Files\Java
      O43 - CFD: 24/03/2009 - 12:45:58 ----D- C:\Program Files\Common Files\Macrovision Shared
      O43 - CFD: 20/10/2009 - 12:27:38 ----D- C:\Program Files\Common Files\microsoft shared
      O43 - CFD: 21/08/2010 - 10:28:26 ----D- C:\Program Files\Common Files\Nero
      O43 - CFD: 20/06/2010 - 9:27:48 ----D- C:\Program Files\Common Files\Panasonic
      O43 - CFD: 17/09/2010 - 7:37:20 ----D- C:\Program Files\Common Files\PX Storage Engine
      O43 - CFD: 2/11/2006 - 12:18:34 ----D- C:\Program Files\Common Files\Services
      O43 - CFD: 2/11/2006 - 12:18:34 ----D- C:\Program Files\Common Files\SpeechEngines
      O43 - CFD: 11/10/2009 - 8:54:38 ----D- C:\Program File
      0
  2. anthony5151 Messages postés 10927 Statut Contributeur sécurité 790
     
    Le rapport est trop long pour être posté directement ici, il faut que tu l'héberges : une fois le rapport enregistré, rends toi sur cjoint.com et dépose le fichier sur le site. Fais un copié/collé du lien proposé par le site et dépose le dans ta prochaine réponse ici.
    0
  3. anthony5151 Messages postés 10927 Statut Contributeur sécurité 790
     
    Ce n'est pas le rapport de ZHPDiag ;)

    0
    1. ronadine
       
      bonjour,
      desolée tant pis mais merci
      par contre ma premiere question etait parce que quand je veux ouvrir ma session banquaire j'ai la page du site qui s'ouvre avec en tete de la banque mais le reste est blanc
      en bas de la page il y a un triangle jaune et quand je click dessus il est indiqué
      systemedetection,js
      ligne 352
      code0
      0
  4. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  5. anthony5151 Messages postés 10927 Statut Contributeur sécurité 790
     
    Tu demandais si ton ordinateur était infecté, il me faut un rapport ZHPDiag pour te le dire. Il pourras aussi sans doute montrer la cause des lenteurs de ton ordinateur.

    Avec quel navigateur ouvres-tu le site de ta banque ?

    0
    1. ronadine
       
      bonsoir
      j'etais sur internet explorer et je viens d'installer firefox et plus de soucis pc plus rapide aussi

      merci pour tes conseils
      0
  6. anthony5151 Messages postés 10927 Statut Contributeur sécurité 790
     
    D'accord :)
    Si tu veux quand même faire une vérification de ton ordinateur (et en même temps l'optimiser), n'hésite pas à poster le rapport ZHPDiag. Sinon bonne continuation ;)

    0