Encore ... fissa impossible a enlever

Résolu
Bonjour,

je crois que j'ai tenté toutes les solutions du forum pour virer fissa, supprimer mozilla, malwarebytes bref tout ce qui est proposé comme solution
tjs au meme point cette saleté est ENCORE la je pense que je l'ai chopé en voulant voir un film en streaming (plus jamais !!)

bref encore une fois AU SECOURS !!

merci les geeks

48 réponses

Résumé de la discussion

Une infection malware persiste malgré plusieurs tentatives de suppression sur Windows 7 et Internet Explorer 8, nécessitant une analyse plus approfondie des rapports de diagnostic et des outils spécialisés. Des outils de diagnostic, notamment ZHPDiag et ZHPFix, signalent des entrées douteuses dans le registre et des modifications de paramètres réseau, guidant l'identification de composants potentiellement indésirables et de programmes démarrant automatiquement. D'autres solutions utiles incluent l'examen des éléments démarrés par registres et dossiers, et la suppression manuelle des valeurs problématiques, en veillant à sauvegarder le système et à éviter les erreurs. En cas d'échec, un nettoyage hors ligne ou une réinitialisation des paramètres réseau et du navigateur peut devenir nécessaire, tout en évaluant les risques et les données affectées.

Bobot (l’IA à votre service)
  1. bonsoir,
    je ne te promets rien, mais je m'y lance:-)

    * Télécharge ZHPDiag sur ton bureau :

    https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html
    ou
    http://www.premiumorange.com/zeb-help-process/zhpdiag.html
    ou
    https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/

    * Laisse toi guider lors de l'installation, il se lancera automatiquement à la fin.

    /!\Utilisateur de Vista et Seven : Clique droit sur le logo de ZHPdiag, « exécuter en tant qu'Administrateur »

    * Clique sur l'icône représentant une loupe (« Lancer le diagnostic »)
    * Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette
    * Héberge le rapport ZHPDiag.txt sur Cijoint, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum :
    http://www.cijoint.fr/
    ou :
    http://ww38.toofiles.com/fr/documents-upload.html
    ou :
    https://www.terafiles.net/

    tuto zhpdiag :
    http://www.premiumorange.com/zeb-help-process/zhpdiag.html

    0
    1. mon dieu lol

      Rapport de ZHPDiag v1.27.1504 par Nicolas Coolman, Update du 20/01/2011
      Run by anne so at 22/01/2011 19:10:37
      Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
      Contact : nicolascoolman@yahoo.fr

      ---\\ Web Browser
      MSIE: Internet Explorer v8.0.7600.16385

      ---\\ System Information
      Windows 7 Home Premium Edition, 64-bit (Build 7600)
      Processor: Intel64 Family 6 Model 23 Stepping 10, GenuineIntel
      Operating System: 64 Bits
      Boot mode: Normal (Normal boot)
      Total RAM: 3932 MB (56% free)
      System Restore: Activé (Enable)
      System drive C: has 41 GB (27%) free of 149 GB

      ---\\ Logged in mode
      Computer Name: ANNESO-TOSH
      User Name: anne so
      All Users Names: HomeGroupUser$, anne so, Administrateur,
      Unselected Option: O45,O61,O62,O65,O66,O82
      Logged in as Administrator

      ---\\ Environnement Variables
      %AppData%=%USERPROFILE%\AppData\Roaming
      %LocalAppData%=%USERPROFILE%\AppData\Local
      %StartMenu%=%USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu

      ---\\ DOS/Devices
      C:\ Hard drive, Flash drive, Thumb drive (Free 41 Go of 149 Go)
      D:\ Hard drive, Flash drive, Thumb drive (Free 44 Go of 149 Go)
      E:\ CD-ROM drive (Not Inserted)

      ---\\ Security Center & Tools Informations
      [HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
      [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
      [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
      [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
      [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
      [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
      [HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
      [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
      [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
      [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
      [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
      [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
      [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
      [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
      [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK

      ---\\ Recherche particulière de fichiers génériques
      [MD5.9AAAEC8DAC27AA17B053E6352AD233AE] - (.Microsoft Corporation - Explorateur Windows.) (.31/10/2009 07:34:59.) -- C:\Windows\Explorer.exe [2870272]
      [MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 02:14:45.) -- C:\Windows\System32\Wininit.exe [96256]

      ---\\ Processus lancés
      [MD5.BBFED9378719CF8E0C3DEDC979B5D649] - (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\TOPI.exe [6203296]
      [MD5.AECBBD99F06C11302B0C53758F89ACDB] - (.Shareaza Development Team - Shareaza Ultimate File Sharing.) -- C:\Program Files (x86)\Shareaza\Shareaza.exe [4574208]
      [MD5.C5B2679B0AE204FDD0415199B7AFEF20] - (.TOSHIBA CORPORATION - KeNotify MFC Application.) -- C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe [34088]
      [MD5.1079D6DA23EEE32E846BADEED77B4E9C] - (.TOSHIBA CORPORATION. - Pas de description.) -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe [2446648]
      [MD5.7B878518590E826F1F3A5B1D61D405F8] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe [3396624]
      [MD5.9D77E8A2EE92E9DAFAC88DEFCF6D777D] - (.TOSHIBA CORPORATION - ConfigFree Task Tray Menu.) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe [304496]
      [MD5.8A07221789D46B2EA7DFCA2BC807572A] - (.TOSHIBA CORPORATION - ConfigFree Switch Manager Process.) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe [62848]
      [MD5.0E20A3213ED010FC4997D1EF48082ABC] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [912344]
      [MD5.BA9A09CF1B9503C363617F3748F6D791] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe [16856]
      [MD5.D9AEA3215FDA8F0F9E5AEAEFCF8534B7] - (.Shareaza Development Team - Windows Thumbnail plugin for Shareaza.) -- C:\Program Files (x86)\Shareaza\WindowsThumbnail.exe [78336]
      [MD5.711FD53E441255983C0AB014E2F107F4] - (.Adobe Systems, Inc. - Adobe® Flash® Player Installer/Uninstaller.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10l_ActiveX.exe [233936]
      [MD5.58CF468D3FF4CF830339FE5E45356355] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe [673040]
      [MD5.E7FE442C78A688422AE3FFEAAEAB7553] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\anne so\AppData\Local\Temp\Temp1_ZHPDiag2[1].zip\ZHPDiag2.exe [2293264]
      [MD5.8C86190BAE1CE44913EE4C7108CD12FC] - (.Pas de propriétaire - Setup/Uninstall.) -- C:\Users\ANNESO~1\AppData\Local\Temp\is-V2P5F.tmp\ZHPDiag2.tmp [715264]
      [MD5.8C86190BAE1CE44913EE4C7108CD12FC] - (.Pas de propriétaire - Setup/Uninstall.) -- C:\Users\ANNESO~1\AppData\Local\Temp\is-00TM5.tmp\ZHPDiag2.tmp [715264]
      [MD5.8C86190BAE1CE44913EE4C7108CD12FC] - (.Pas de propriétaire - Setup/Uninstall.) -- C:\Users\ANNESO~1\AppData\Local\Temp\is-1SK7T.tmp\ZHPDiag2.tmp [715264]
      [MD5.8C86190BAE1CE44913EE4C7108CD12FC] - (.Pas de propriétaire - Setup/Uninstall.) -- C:\Users\ANNESO~1\AppData\Local\Temp\is-I1DKA.tmp\ZHPDiag2.tmp [715264]
      [MD5.A5D013EA68F0CECC29952E3C5AB7814C] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [623616]

      ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
      G1 - GCS: Preference [User Data\Default] None
      G0 - GCSP: Preference [User Data\Default][HomePage] https://home.sweetim.com/

      ---\\ Internet Explorer, Démarrage,Recherche,URSearchHook (R0,R1,R3)
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/webhp?gws_rd=ssl
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.com/webhp?gws_rd=ssl
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
      R3 - URLSearchHook: (no name) - {EEE6C35D-6118-11DC-9C72-001320C79847} Clé orpheline

      ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
      F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
      F2 - REG:system.ini: VMApplet=C:\WINDOWS\system32\SystemPropertiesPerformance.exe

      ---\\ Browser Helper Objects de navigateur (O2)
      O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} . (.Shareaza Development Team - Shareaza Web Download Hook.) -- C:\Program Files (x86)\Shareaza\RazaWebHook64.dll
      O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} . (.Pas de propriétaire - Pas de description.) -- c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll

      ---\\ Internet Explorer Toolbars (O3)
      O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} . (.Pas de propriétaire - Pas de description.) -- c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll

      ---\\ Applications démarrées par registre & par dossier (O4)
      O4 - HKLM\..\Run: [TosSENotify] . (.TOSHIBA Corporation - Pas de description.) -- C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe
      O4 - HKLM\..\Run: [Toshiba TEMPRO] . (.Toshiba Europe GmbH - Toshiba TEMPRO.) -- C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe
      O4 - HKLM\..\Run: [TosNC] . (.TOSHIBA Corporation - Message Center.) -- C:\Program Files\Toshiba\BulletinBoard\TosNcCore.exe
      O4 - HKLM\..\Run: [TosReelTimeMonitor] . (.TOSHIBA Corporation - Monitor of TOSHIBA ReelTime.) -- C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe
      O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe (.not file.)
      O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe (.not file.)
      O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe (.not file.)
      O4 - HKLM\..\Run: [SmoothView] . (.TOSHIBA Corporation - SmoothView.) -- C:\Program Files\Toshiba\SmoothView\SmoothView.exe
      O4 - HKLM\..\Run: [TPwrMain] . (.TOSHIBA Corporation - TOSHIBA Power Saver.) -- C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
      O4 - HKLM\..\Run: [HSON] . (.TOSHIBA Corporation - HotStartOn.) -- C:\Program Files\TOSHIBA\TBS\HSON.exe
      O4 - HKLM\..\Run: [00TCrdMain] . (.TOSHIBA Corporation - TOSHIBA Flash Cards.) -- C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
      O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      O4 - HKLM\..\Run: [SmartFaceVWatcher] . (.TOSHIBA Corporation - SmartFaceVWatcher.) -- C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatcher.exe
      O4 - HKLM\..\Run: [Teco] . (.TOSHIBA Corporation - TOSHIBA eco Utility.) -- C:\Program Files\TOSHIBA\TECO\Teco.exe
      O4 - HKLM\..\Run: [TosWaitSrv] . (.TOSHIBA Corporation - Pas de description.) -- C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe
      O4 - HKLM\..\Run: [Toshiba Registration] . (.Toshiba Europe GmbH - Toshiba Notebook Registration Reminder.) -- C:\Program Files\Toshiba\Registration\ToshibaReminder.exe
      O4 - HKCU\..\Run: [TOSHIBA Online Product Information] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\topi.exe
      O4 - HKCU\..\Run: [Shareaza] . (.Shareaza Development Team - Shareaza Ultimate File Sharing.) -- C:\Program Files (x86)\Shareaza\Shareaza.exe
      O4 - HKLM\..\Wow6432Node\Run: [SVPWUTIL] . (.TOSHIBA - SVPWUTIL Application.) -- C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe
      O4 - HKLM\..\Wow6432Node\Run: [HWSetup] . (.TOSHIBA Electronics, Inc. - HWSetup.) -- C:\Program Files\TOSHIBA\Utilities\HWSetup.exe
      O4 - HKLM\..\Wow6432Node\Run: [KeNotify] . (.TOSHIBA CORPORATION - KeNotify MFC Application.) -- C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe
      O4 - HKLM\..\Wow6432Node\Run: [TWebCamera] C:\Program Files\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe (.not file.)
      O4 - HKLM\..\Wow6432Node\Run: [avast5] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\avastUI.exe
      O4 - HKLM\..\Wow6432Node\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe
      O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
      O4 - HKLM\..\Wow6432Node\RunOnce: [Malwarebytes' Anti-Malware] . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
      O4 - HKUS\S-1-5-18\..\Run: [TOSHIBA Online Product Information] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\topi.exe
      O4 - HKUS\S-1-5-18\..\Run: [TOSHIBA Online Product Information] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\topi.exe
      O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
      O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
      O4 - HKUS\S-1-5-21-2030544128-1871575060-3465723408-1000\..\Run: [TOSHIBA Online Product Information] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\topi.exe
      O4 - HKUS\S-1-5-21-2030544128-1871575060-3465723408-1000\..\Run: [Shareaza] . (.Shareaza Development Team - Shareaza Ultimate File Sharing.) -- C:\Program Files (x86)\Shareaza\Shareaza.exe
      O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (.not file.)
      O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (.not file.)

      ---\\ Autres liens utilisateurs (O4)
      O4 - Global Startup: C:\Documents And Settings\anne so\Desktop\Bridge Base Online.lnk . (.Pas de propriétaire.) -- C:\Bridge Base Online\NetBridgeVu.exe
      O4 - Global Startup: C:\Documents And Settings\anne so\Desktop\PDF Editeur 3.0.lnk . (.Pas de propriétaire.) -- C:\Program Files (x86)\PDF Editeur 3\PDFEdit.exe
      O4 - Global Startup: C:\Users\anne so\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
      O4 - Global Startup: C:\Users\anne so\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
      O4 - Global Startup: C:\Users\anne so\Desktop\Bridge Base Online.lnk . (.Pas de propriétaire.) -- C:\Bridge Base Online\NetBridgeVu.exe
      O4 - Global Startup: C:\Users\anne so\Desktop\PDF Editeur 3.0.lnk . (.Pas de propriétaire.) -- C:\Program Files (x86)\PDF Editeur 3\PDFEdit.exe
      O4 - Global Startup: C:\Users\anne so\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      O4 - Global Startup: C:\Users\anne so\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
      O4 - Global Startup: C:\Users\anne so\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
      O4 - Global Startup: C:\Users\anne so\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shareaza.lnk . (.Shareaza Development Team.) -- C:\Program Files (x86)\Shareaza\Shareaza.exe
      O4 - Global Startup: C:\Users\anne so\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - Clé orpheline
      O4 - Global Startup: C:\Users\anne so\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - Clé orpheline

      ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
      O8 - Extra context menu item: Download with &Shareaza . (.Shareaza Development Team - Shareaza Web Download Hook.) -- C:\Program Files (x86)\Shareaza\RazaWebHook32.dll
      O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~2\MICROS~2\Office12\EXCEL.exe
      O8 - Extra context menu item: Google Sidewiki... - (.not file.) - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll

      ---\\ Winsock hijacker (Layered Service Provider) (O10)
      O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
      O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
      O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
      O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
      O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
      O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
      O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL
      O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL

      ---\\ Modification Domaine/Adresses DNS (O17)
      O17 - HKLM\System\CCS\Services\Tcpip\..\{309B5F37-2FF6-4CFF-BCE4-1EFE63300E2E}: DhcpNameServer = 89.2.0.1 89.2.0.2
      O17 - HKLM\System\CCS\Services\Tcpip\..\{3AE34777-6EE3-4F5E-8C3F-3F7E0822D1A5}: DhcpNameServer = 89.2.0.1 89.2.0.2
      O17 - HKLM\System\CS1\Services\Tcpip\..\{309B5F37-2FF6-4CFF-BCE4-1EFE63300E2E}: DhcpNameServer = 89.2.0.1 89.2.0.2
      O17 - HKLM\System\CS1\Services\Tcpip\..\{3AE34777-6EE3-4F5E-8C3F-3F7E0822D1A5}: DhcpNameServer = 89.2.0.1 89.2.0.2
      O17 - HKLM\System\CS2\Services\Tcpip\..\{309B5F37-2FF6-4CFF-BCE4-1EFE63300E2E}: DhcpNameServer = 89.2.0.1 89.2.0.2
      O17 - HKLM\System\CS2\Services\Tcpip\..\{3AE34777-6EE3-4F5E-8C3F-3F7E0822D1A5}: DhcpNameServer = 89.2.0.1 89.2.0.2
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 89.2.0.1 89.2.0.2

      ---\\ Protocole additionnel et piratage de protocole (O18)
      O18 - Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} . (.Pas de propriétaire - Pas de description.) -- c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll

      ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
      O20 - Winlogon Notify: igfxcui . (.Pas de propriétaire - Pas de description.) -- igfxdev.dll

      ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
      O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.

      ---\\ Liste des services NT non Microsoft et non désactivés (O23)
      O23 - Service: (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
      O23 - Service: (cfWiMAXService) . (.TOSHIBA CORPORATION - ConfigFree Service Process.) - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe
      O23 - Service: (ConfigFree Gadget Service) . (.TOSHIBA CORPORATION - ConfigFree Gadget Process Service.) - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exe
      O23 - Service: (ConfigFree Service) . (.TOSHIBA CORPORATION - ConfigFree Service Process.) - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe
      O23 - Service: (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
      O23 - Service: (McAfee SiteAdvisor Service) . (.Pas de propriétaire - Pas de description.) - C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe
      O23 - Service: (TODDSrv) - Clé orpheline
      O23 - Service: (TosCoSrv) . (.TOSHIBA Corporation - TOSHIBA Power Saver.) - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
      O23 - Service: (TOSHIBA eco Utility Service) . (.TOSHIBA Corporation - TOSHIBA eco Utility Service.) - C:\Program Files\TOSHIBA\TECO\TecoService.exe

      ---\\ Enumération Active Desktop & MHTML Editor (O24)
      O24 - Default MHTML Editor: Last - .(.Pas de propriétaire - Pas de description.) - (.not file.)

      ---\\ Tâches planifiées en automatique (O39)
      O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
      O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
      [MD5.9D77E8A2EE92E9DAFAC88DEFCF6D777D] [APT] [ConfigFree Startup Programs] (.TOSHIBA CORPORATION.) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe
      [MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
      [MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
      [MD5.AB96046A9C27886BD39E191BE6372A88] [APT] [{BB8C6AED-3999-4667-9D7D-017842677FC1}] (.Pas de propriétaire.) -- C:\Program Files\Alwil Software\Avast5\aswRundll.exe

      ---\\ Pilotes lancés au démarrage (O41)
      O41 - Driver: C:\Windows\system32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
      O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\system32\DRIVERS\blbdrive.sys
      O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
      O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
      O41 - Driver: C:\Windows\system32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
      O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\DRIVERS\mssmbios.sys
      O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
      O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
      O41 - Driver: C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
      O41 - Driver: C:\Windows\system32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
      O41 - Driver: C:\Windows\system32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
      O41 - Driver: C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
      O41 - Driver: C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
      O41 - Driver: C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
      O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Tcpip) . (.Microsoft Corporation - Pilote TCP/IP.) - C:\Windows\System32\drivers\tcpip.sys
      O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
      O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\DRIVERS\termdd.sys
      O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
      O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys
      O41 - Driver: C:\Windows\system32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
      O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys

      ---\\ Logiciels installés (O42)
      O42 - Logiciel: 3nity CD DVD BURNER 2.0.1 - (.3nity Softwares.) [HKLM][64Bits] -- {70E0BA9E-5978-4E83-A269-77BDB7A79F23}_is1
      O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM][64Bits] -- Adobe AIR
      O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM][64Bits] -- {46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}
      O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX
      O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
      O42 - Logiciel: Adobe Reader 9.4.1 - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-A94000000001}
      O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM][64Bits] -- Adobe Shockwave Player
      O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
      O42 - Logiciel: CDBurnerXP - (.CDBurnerXP.) [HKLM] -- {7E265513-8CDA-4631-B696-F40D983F3B07}_is1
      O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
      O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM][64Bits] -- {488F0347-C4A7-4374-91A7-30818BEDA710}
      O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome
      O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
      O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Intel Corporation.) [HKLM] -- HDMI
      O42 - Logiciel: Intel® Matrix Storage Manager - (.Intel Corporation.) [HKLM] -- {9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}
      O42 - Logiciel: Java(TM) 6 Update 14 - (.Sun Microsystems, Inc..) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83216014FF}
      O42 - Logiciel: Jeux WildTangent - (.WildTangent.) [HKLM][64Bits] -- WildTangent toshiba Master Uninstall
      O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
      O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
      O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9}
      O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes' Anti-Malware_is1
      O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile
      O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}
      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0016-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0018-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001B-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{E64BA721-2310-4B55-BE5A-2925F9706192}
      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-002A-040C-1000-0000000FF1CE}_HOMESTUDENTR_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-006E-040C-0000-0000000FF1CE}_HOMESTUDENTR_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-00A1-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
      O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0016-040C-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- HOMESTUDENTR
      O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Office 64-bit Components 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002A-0000-1000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office OneNote MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-00A1-040C-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0018-040C-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office PowerPoint Viewer 2007 (French) - (.Microsoft Corporation.) [HKLM][64Bits] -- {95120000-00AF-040C-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-0401-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-0413-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-0409-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-040C-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-0407-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-0C0A-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-002C-040C-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-0401-0000-0000000FF1CE}_HOMESTUDENTR_{14809F99-C601-4D4A-9391-F1E8FAA964C5}
      O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}
      O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
      O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}
      O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-0413-0000-0000000FF1CE}_HOMESTUDENTR_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
      O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}
      O42 - Logiciel: Microsoft Office Shared 64-bit MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002A-040C-1000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-006E-040C-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Suite Activation Assistant - (.Microsoft Corporation.) [HKLM][64Bits] -- {E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}
      O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001B-040C-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM][64Bits] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
      O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
      O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM][64Bits] -- {770657D0-A123-3C07-8E44-1C83EC895118}
      O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM][64Bits] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c}
      O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {EE936C7A-EA40-31D5-9B65-8E3E089C3828}
      O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {8220EEFE-38CD-377E-8595-13398D740ACE}
      O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
      O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM][64Bits] -- {3B160861-7250-451E-B5EE-8B92BF30A710}
      O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0020-040C-0000-0000000FF1CE}
      O42 - Logiciel: Mozilla Firefox (3.6.13) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox (3.6.13)
      O42 - Logiciel: PDF Editeur 3 - (.Pas de propriétaire.) [HKLM][64Bits] -- PDF Editeur 3
      O42 - Logiciel: PlayReady PC Runtime amd64 - (.Microsoft Corporation.) [HKLM] -- {BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}
      O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
      O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {96AE7E41-E34E-47D0-AC07-1091A8127911}
      O42 - Logiciel: Realtek WLAN Driver - (.Realtek.) [HKLM][64Bits] -- {0FB630AB-7BD8-40AE-B223-60397D57C3C9}
      O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288621) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{5C497F0B-2061-4CC9-A61C-6B45B867354D}
      O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288931) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CD769337-C8AC-46DB-A7DC-643E50089263}
      O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2289158) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{210B16C0-CEBD-4DE9-B474-04A7E8735E16}
      O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2344875) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6FC5C4C1-D7AE-44C3-94B7-6424FC3E752F}
      O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2345043) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{536FB502-775F-4494-BACE-C02CC90B7A5B}
      O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB969559) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
      O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB976321) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{7F207DCA-3399-40CB-A968-6E5991B1421A}
      O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2160841
      O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB2345035) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{B23002DD-34EC-4988-B810-A5E2A0BF04F1}
      O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB979441) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{8CCB781A-CF6B-4FCB-B6D8-59C64DF5C6DB}
      O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB982158) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{F5B70033-E79C-4569-90BF-BC9B4E4F3F46}
      O42 - Logiciel: Security Update for Microsoft Office PowerPoint Viewer (KB2413381) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3DED0A62-44C8-4E00-A785-5212F297A9D9}
      O42 - Logiciel: Security Update for Microsoft Office Visio Viewer 2007 (KB973709) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
      O42 - Logiciel: Security Update for Microsoft Office Word 2007 (KB2344993) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{7A5B74FA-7A92-4FC9-821A-2DD5D4E73E48}
      O42 - Logiciel: Security Update for Microsoft Office system 2007 (972581) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}
      O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB974234) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{FCD742B9-7A55-44BC-A776-F795F21FEDDC}
      O42 - Logiciel: Shareaza 2.5.3.0 - (.Shareaza Development Team.) [HKLM][64Bits] -- Shareaza_is1
      O42 - Logiciel: Skype(TM) Launcher - (.Skype Technologies S.A..) [HKLM][64Bits] -- {26D8DF7E-DBF8-43A6-8D42-F37497CE603D}
      O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM] -- SynTPDeinstKey
      O42 - Logiciel: TOSHIBA Bulletin Board - (.TOSHIBA Corporation.) [HKLM] -- {1E9E8BA6-FD0B-465D-AFA2-ECE10BF095F9}
      O42 - Logiciel: TOSHIBA Bulletin Board - (.TOSHIBA Corporation.) [HKLM][64Bits] -- InstallShield_{1E9E8BA6-FD0B-465D-AFA2-ECE10BF095F9}
      O42 - Logiciel: TOSHIBA ConfigFree - (.TOSHIBA Corporation.) [HKLM][64Bits] -- {F3529665-D75E-4D6D-98F0-745C78C68E9B}
      O42 - Logiciel: TOSHIBA DVD PLAYER - (.TOSHIBA Corporation.) [HKLM][64Bits] -- {6C5F3BDC-0A1B-4436-A696-5939629D5C31}
      O42 - Logiciel: TOSHIBA Disc Creator - (.TOSHIBA Corporation.) [HKLM] -- {5DA0E02F-970B-424B-BF41-513A5018E4C0}
      O42 - Logiciel: TOSHIBA Extended Tiles for Windows Mobility Center - (.Pas de propriétaire.) [HKLM][64Bits] -- InstallShield_{617C36FD-0CBE-4600-84B2-441CEB12FADF}
      O42 - Logiciel: TOSHIBA Face Recognition - (.TOSHIBA Corporation.) [HKLM] -- {F67FA545-D8E5-4209-86B1-AEE045D1003F}
      O42 - Logiciel: TOSHIBA Face Recognition - (.TOSHIBA Corporation.) [HKLM][64Bits] -- InstallShield_{F67FA545-D8E5-4209-86B1-AEE045D1003F}
      O42 - Logiciel: TOSHIBA Flash Cards Support Utility - (.TOSHIBA CORPORATION.) [HKLM][64Bits] -- InstallShield_{620BBA5E-F848-4D56-8BDA-584E44584C5E}
      O42 - Logiciel: TOSHIBA Flash Cards Support Utility - (.TOSHIBA CORPORATION.) [HKLM][64Bits] -- {620BBA5E-F848-4D56-8BDA-584E44584C5E}
      O42 - Logiciel: TOSHIBA HDD/SSD Alert - (.TOSHIBA Corporation.) [HKLM] -- {D4322448-B6AF-4316-B859-D8A0E84DCB38}
      O42 - Logiciel: TOSHIBA HDD/SSD Alert - (.TOSHIBA Corporation.) [HKLM][64Bits] -- InstallShield_{D4322448-B6AF-4316-B859-D8A0E84DCB38}
      O42 - Logiciel: TOSHIBA Hardware Setup - (.TOSHIBA CORPORATION.) [HKLM][64Bits] -- InstallShield_{5279374D-87FE-4879-9385-F17278EBB9D3}
      O42 - Logiciel: TOSHIBA Hardware Setup - (.TOSHIBA CORPORATION.) [HKLM][64Bits] -- {5279374D-87FE-4879-9385-F17278EBB9D3}
      O42 - Logiciel: TOSHIBA Mot de passe responsable - (.TOSHIBA CORPORATION.) [HKLM][64Bits] -- InstallShield_{51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}
      O42 - Logiciel: TOSHIBA PC Health Monitor - (.TOSHIBA Corporation.) [HKLM] -- {9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}
      O42 - Logiciel: TOSHIBA Recovery Media Creator - (.TOSHIBA Corporation.) [HKLM] -- {B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}
      O42 - Logiciel: TOSHIBA Recovery Media Creator Reminder - (.TOSHIBA.) [HKLM][64Bits] -- InstallShield_{773970F1-5EBA-4474-ADEE-1EA3B0A59492}
      O42 - Logiciel: TOSHIBA ReelTime - (.TOSHIBA Corporation.) [HKLM] -- {C2DDF845-7107-40E8-8D2A-8719F1799570}
      O42 - Logiciel: TOSHIBA ReelTime - (.TOSHIBA Corporation.) [HKLM][64Bits] -- InstallShield_{C2DDF845-7107-40E8-8D2A-8719F1799570}
      O42 - Logiciel: TOSHIBA SD Memory Utilities - (.TOSHIBA.) [HKLM] -- {EBFF48F5-3CFA-436F-8FD5-94FB01D3A0A7}
      O42 - Logiciel: TOSHIBA Service Station - (.TOSHIBA.) [HKLM][64Bits] -- {AC6569FA-6919-442A-8552-073BE69E247A}
      O42 - Logiciel: TOSHIBA Supervisor Password - (.TOSHIBA CORPORATION.) [HKLM][64Bits] -- {51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}
      O42 - Logiciel: TOSHIBA Value Added Package - (.TOSHIBA Corporation.) [HKLM][64Bits] -- InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}
      O42 - Logiciel: TOSHIBA Web Camera Application - (.TOSHIBA Corporation.) [HKLM][64Bits] -- {5E6F6CF3-BACC-4144-868C-E14622C658F3}
      O42 - Logiciel: TOSHIBA eco Utility - (.TOSHIBA Corporation.) [HKLM] -- {B3FF1CD9-B2F0-4D71-BB55-5F580401C48E}
      O42 - Logiciel: TOSHIBA eco Utility - (.TOSHIBA Corporation.) [HKLM][64Bits] -- InstallShield_{B3FF1CD9-B2F0-4D71-BB55-5F580401C48E}
      O42 - Logiciel: TRORMCLauncher - (.Pas de propriétaire.) [HKLM][64Bits] -- InstallShield_{E65C7D8E-186D-484B-BEA8-DEF0331CE600}
      O42 - Logiciel: Toshiba Assist - (.TOSHIBA.) [HKLM][64Bits] -- {1B87C40B-A60B-4EF3-9A68-706CF4B69978}
      O42 - Logiciel: Toshiba Manuals - (.TOSHIBA.) [HKLM][64Bits] -- {90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}
      O42 - Logiciel: Toshiba Online Product Information - (.TOSHIBA.) [HKLM][64Bits] -- {2290A680-4083-410A-ADCC-7092C67FC052}
      O42 - Logiciel: Toshiba Photo Service - powered by myphotobook - (.myphotobook GmbH.) [HKLM][64Bits] -- eu.myphotobook.001F9DF2D0BAABEB11F42CCEE43224607B61109C.1
      O42 - Logiciel: Toshiba Photo Service - powered by myphotobook - (.myphotobook GmbH.) [HKLM][64Bits] -- {0823A2E3-69DD-A37A-7CD9-1CBEB037545C}
      O42 - Logiciel: Toshiba TEMPRO - (.Toshiba Europe GmbH.) [HKLM][64Bits] -- {DBB7021A-3437-446F-ACE5-7261644A972C}
      O42 - Logiciel: Update for 2007 Microsoft Office System (KB2284654) - (.Microsoft.) [HKLM][64Bits] -- {90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{FB166E7C-8AA6-48C8-B726-1F25BEE7825A}
      O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}
      O42 - Logiciel: Update for Microsoft Office OneNote 2007 (KB980729) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{329050A9-EF80-40F9-B633-74508F54C1FF}
      O42 - Logiciel: VLC media player 1.1.4 - (.VideoLAN.) [HKLM][64Bits] -- VLC media player
      O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM][64Bits] -- WinLiveSuite
      O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM][64Bits] -- {34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}
      O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM][64Bits] -- {D45240D3-B6B3-4FF9-B243-54ECE3E10066}
      O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM][64Bits] -- {2075CB0A-D26F-4DAA-B424-5079296B43BA}
      O42 - Logiciel: Windows Live ID Sign-in Assistant - (.Microsoft Corporation.) [HKLM] -- {1B8ABA62-74F0-47ED-B18C-A43128E591B8}
      O42 - Logiciel: Windows Live Installer - (.Microsoft Corporation.) [HKLM][64Bits] -- {0B0F231F-CE6A-483D-AA23-77B364F75917}
      O42 - Logiciel: Windows Live Language Selector - (.Microsoft Corporation.) [HKLM] -- {5EB6F3CB-46F4-451F-A028-7F6D8D35D7D0}
      O42 - Logiciel: Windows Live MIME IFilter - (.Microsoft Corporation.) [HKLM] -- {DA54F80E-261C-41A2-A855-549A144F2F59}
      O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM][64Bits] -- {9D56775A-93F3-44A3-8092-840E3826DE30}
      O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM][64Bits] -- {9FAE6E8D-E686-49F5-A574-0A58DFD9580C}
      O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {6057E21C-ABE9-4059-AE3E-3BEB9925E660}
      O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {EB4DF488-AAEF-406F-A341-CB2AAA315B90}
      O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM][64Bits] -- {6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}
      O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM][64Bits] -- {92EA4134-10D1-418A-91E1-5A0453131A38}
      O42 - Logiciel: Windows Live PIMT Platform - (.Microsoft Corporation.) [HKLM][64Bits] -- {4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}
      O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM][64Bits] -- {A9BDCA6B-3653-467B-AC83-94367DA3BFE3}
      O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM][64Bits] -- {C893D8C0-1BA0-4517-B11C-E89B65E72F70}
      O42 - Logiciel: Windows Live Photo Gallery - (.Microsoft Corporation.) [HKLM][64Bits] -- {3336F667-9049-4D46-98B6-4C743EEBC5B1}
      O42 - Logiciel: Windows Live SOXE - (.Microsoft Corporation.) [HKLM][64Bits] -- {682B3E4F-696A-42DE-A41C-4C07EA1678B4}
      O42 - Logiciel: Windows Live SOXE Definitions - (.Microsoft Corporation.) [HKLM][64Bits] -- {200FEC62-3C34-4D60-9CE8-EC372E01C08F}
      O42 - Logiciel: Windows Live UX Platform - (.Microsoft Corporation.) [HKLM][64Bits] -- {CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}
      O42 - Logiciel: Windows Live UX Platform Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {09F56A49-A7B1-4AAB-95B9-D13094254AD1}
      O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM][64Bits] -- {3B9A92DA-6374-4872-B646-253F18624D5F}
      O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM][64Bits] -- {A726AE06-AAA3-43D1-87E3-70F510314F04}
      O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM][64Bits] -- {AAAFC670-569B-4A2F-82B4-42945E0DE3EF}
      O42 - Logiciel: Windows Live Writer Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {62687B11-58B5-4A18-9BC3-9DF4CE03F194}
      O42 - Logiciel: [HKLM\Software\avast5] - (.Pas de propriétaire.) [HKLM][64Bits] -- Bridge_Base_Online
      O42 - Logiciel: avast! Free Antivirus - (.Alwil Software.) [HKLM][64Bits] -- avast5
      O42 - Logiciel: eBay - (.eBay Inc..) [HKLM][64Bits] -- {E83BA61A-5D77-4DD5-9C92-A3447F11E27D}

      ---\\ HKCU & HKLM Software Keys
      [HKCU\Software\ALWIL Software]
      [HKCU\Software\Adobe]
      [HKCU\Software\AppDataLow\Software\Adobe]
      [HKCU\Software\AppDataLow\Software\Google]
      [HKCU\Software\AppDataLow\Software\Macromedia]
      [HKCU\Software\AppDataLow\Software\Microsoft]
      [HKCU\Software\AppDataLow\Software]
      [HKCU\Software\AppDataLow]
      [HKCU\Software\Canneverbe Limited]
      [HKCU\Software\Classes]
      [HKCU\Software\Clients]
      [HKCU\Software\FIXIO PC Utilities]
      [HKCU\Software\FissaSearch]
      [HKCU\Software\FreeCompressor]
      [HKCU\Software\Google]
      [HKCU\Software\IM Providers]
      [HKCU\Software\Intel]
      [HKCU\Software\JavaSoft]
      [HKCU\Software\Local AppWizard-Generated Applications]
      [HKCU\Software\Macromedia]
      [HKCU\Software\Magnet]
      [HKCU\Software\Malwarebytes' Anti-Malware]
      [HKCU\Software\MozillaPlugins]
      [HKCU\Software\Nero]
      [HKCU\Software\Netscape]
      [HKCU\Software\ODBC]
      [HKCU\Software\OfferBox]
      [HKCU\Software\PDFEdit]
      [HKCU\Software\Piriform]
      [HKCU\Software\Policies]
      [HKCU\Software\Shareaza]
      [HKCU\Software\Softonic]
      [HKCU\Software\Spointer]
      [HKCU\Software\SweetIM]
      [HKCU\Software\Synaptics]
      [HKCU\Software\TOSHIBA]
      [HKCU\Software\Wow6432Node]
      [HKLM\Software\AMD]
      [HKLM\Software\ATI Technologies]
      [HKLM\Software\Canneverbe Limited]
      [HKLM\Software\Classes]
      [HKLM\Software\Clients]
      [HKLM\Software\DTS]
      [HKLM\Software\Google]
      [HKLM\Software\InstalledOptions]
      [HKLM\Software\Intel]
      [HKLM\Software\McAfee]
      [HKLM\Software\MozillaPlugins]
      [HKLM\Software\ODBC]
      [HKLM\Software\Piriform]
      [HKLM\Software\Policies]
      [HKLM\Software\RTLSetup]
      [HKLM\Software\Realtek Semiconductor Corp.]
      [HKLM\Software\Realtek]
      [HKLM\Software\RegisteredApplications]
      [HKLM\Software\SOFTWARE]
      [HKLM\Software\SRS Labs]
      [HKLM\Software\SonicFocus]
      [HKLM\Software\Sonic]
      [HKLM\Software\Synaptics]
      [HKLM\Software\TOSHIBA]
      [HKLM\Software\Toshiba Tempro]
      [HKLM\Software\WildTangent]
      [HKLM\Software\Wow6432Node]

      ---\\ Contenu des dossiers ProgramFiles/ProgramData/AppData (O43)
      O43 - CFD: 09/09/2010 - 18:50:28 ----D- C:\Program Files\Alwil Software
      O43 - CFD: 02/01/2011 - 22:59:58 ----D- C:\Program Files\CCleaner
      O43 - CFD: 27/12/2010 - 15:33:46 ----D- C:\Program Files\CDBurnerXP
      O43 - CFD: 02/11/2010 - 22:36:38 ----D- C:\Program Files\Common Files
      O43 - CFD: 14/07/2009 - 16:35:28 ----D- C:\Program Files\DVD Maker
      O43 - CFD: 09/09/2010 - 17:47:06 -SH-D- C:\Program Files\Fichiers communs
      O43 - CFD: 20/11/2010 - 18:56:16 ----D- C:\Program Files\Google
      O43 - CFD: 15/12/2010 - 18:20:46 ----D- C:\Program Files\Internet Explorer
      O43 - CFD: 04/09/2009 - 14:43:18 ----D- C:\Program Files\Microsoft Games
      O43 - CFD: 04/09/2009 - 14:49:42 ----D- C:\Program Files\Microsoft Office
      O43 - CFD: 14/07/2009 - 06:32:40 ----D- C:\Program Files\MSBuild
      O43 - CFD: 04/09/2009 - 14:23:24 ----D- C:\Program Files\PlayReady
      O43 - CFD: 20/11/2010 - 19:42:28 ----D- C:\Program Files\Realtek
      O43 - CFD: 14/07/2009 - 06:32:40 ----D- C:\Program Files\Reference Assemblies
      O43 - CFD: 04/09/2009 - 14:39:28 ----D- C:\Program Files\Skype-Launcher
      O43 - CFD: 14/05/2010 - 05:52:26 ----D- C:\Program Files\Synaptics
      O43 - CFD: 14/05/2010 - 05:55:44 ----D- C:\Program Files\TOSHIBA
      O43 - CFD: 14/07/2009 - 06:09:28 --H-D- C:\Program Files\Uninstall Information
      O43 - CFD: 14/07/2009 - 16:24:10 ----D- C:\Program Files\Windows Defender
      O43 - CFD: 14/07/2009 - 16:35:28 ----D- C:\Program Files\Windows Journal
      O43 - CFD: 02/11/2010 - 17:56:10 ----D- C:\Program Files\Windows Live
      O43 - CFD: 16/12/2010 - 09:52:42 ----D- C:\Program Files\Windows Mail
      O43 - CFD: 13/10/2010 - 02:19:26 ----D- C:\Program Files\Windows Media Player
      O43 - CFD: 09/09/2010 - 17:47:06 ----D- C:\Program Files\Windows NT
      O43 - CFD: 14/07/2009 - 16:24:10 ----D- C:\Program Files\Windows Photo Viewer
      O43 - CFD: 14/07/2009 - 06:32:40 ----D- C:\Program Files\Windows Portable Devices
      O43 - CFD: 14/07/2009 - 16:24:10 ----D- C:\Program Files\Windows Sidebar
      O43 - CFD: 02/11/2010 - 17:56:02 ----D- C:\Program Files\Common Files\Microsoft Shared
      O43 - CFD: 14/07/2009 - 04:20:10 ----D- C:\Program Files\Common Files\Services
      O43 - CFD: 14/07/2009 - 04:20:10 ----D- C:\Program Files\Common Files\SpeechEngines
      O43 - CFD: 14/07/2009 - 16:24:10 ----D- C:\Program Files\Common Files\System
      O43 - CFD: 02/11/2010 - 14:35:46 ----D- C:\ProgramData\Adobe
      O43 - CFD: 09/09/2010 - 18:50:28 ----D- C:\ProgramData\Alwil Software
      O43 - CFD: 14/07/2009 - 06:08:58 -SH-D- C:\ProgramData\Application Data
      O43 - CFD: 09/09/2010 - 17:47:06 -SH-D- C:\ProgramData\Bureau
      O43 - CFD: 20/11/2010 - 18:10:40 ----D- C:\ProgramData\Canneverbe Limited
      O43 - CFD: 14/07/2009 - 06:08:58 -SH-D- C:\ProgramData\Desktop
      O43 - CFD: 14/07/2009 - 06:08:58 -SH-D- C:\ProgramData\Documents
      O43 - CFD: 20/11/2010 - 21:13:48 ----D- C:\ProgramData\Driver Whiz
      O43 - CFD: 20/11/2010 - 20:06:50 ----D- C:\ProgramData\DriverBoost
      O43 - CFD: 09/09/2010 - 17:47:06 -SH-D- C:\ProgramData\Favoris
      O43 - CFD: 14/07/2009 - 06:08:58 -SH-D- C:\ProgramData\Favorites
      O43 - CFD: 22/01/2011 - 16:44:22 ----D- C:\ProgramData\Google
      O43 - CFD: 04/09/2009 - 14:40:54 ----D- C:\ProgramData\IsolatedStorage
      O43 - CFD: 22/01/2011 - 18:00:42 ----D- C:\ProgramData\Malwarebytes
      O43 - CFD: 05/11/2010 - 08:37:52 ----D- C:\ProgramData\McAfee
      O43 - CFD: 09/09/2010 - 17:47:06 -SH-D- C:\ProgramData\Menu Démarrer
      O43 - CFD: 20/11/2010 - 20:10:02 -S--D- C:\ProgramData\Microsoft
      O43 - CFD: 15/12/2010 - 18:01:40 ----D- C:\ProgramData\Microsoft Help
      O43 - CFD: 09/09/2010 - 17:47:06 -SH-D- C:\ProgramData\Modèles
      O43 - CFD: 20/11/2010 - 17:57:40 ----D- C:\ProgramData\Nero
      O43 - CFD: 13/10/2010 - 02:20:48 ----D- C:\ProgramData\Partner
      O43 - CFD: 04/09/2009 - 14:46:02 ----D- C:\ProgramData\SiteAdvisor
      O43 - CFD: 14/07/2009 - 06:08:58 -SH-D- C:\ProgramData\Start Menu
      O43 - CFD: 14/07/2009 - 06:08:58 -SH-D- C:\ProgramData\Templates
      O43 - CFD: 14/05/2010 - 05:58:00 ----D- C:\ProgramData\TOSHIBA
      O43 - CFD: 09/09/2010 - 17:47:22 ----D- C:\ProgramData\ToshibaEurope
      O43 - CFD: 04/09/2009 - 14:27:32 ----D- C:\ProgramData\Vista32
      O43 - CFD: 04/09/2009 - 14:27:32 ----D- C:\ProgramData\Vista64
      O43 - CFD: 04/09/2009 - 14:43:10 ----D- C:\ProgramData\WildTangent
      O43 - CFD: 04/09/2009 - 14:31:30 ----D- C:\ProgramData\win7_32
      O43 - CFD: 04/09/2009 - 14:31:30 ----D- C:\ProgramData\win7_64
      O43 - CFD: 04/09/2009 - 14:27:32 ----D- C:\ProgramData\XP
      O43 - CFD: 02/11/2010 - 14:35:02 ----D- C:\Users\anne so\AppData\Roaming\Adobe
      O43 - CFD: 20/11/2010 - 18:10:40 ----D- C:\Users\anne so\AppData\Roaming\Canneverbe Limited
      O43 - CFD: 22/01/2011 - 13:50:28 ----D- C:\Users\anne so\AppData\Roaming\freeCompressor
      O43 - CFD: 09/09/2010 - 17:56:46 ----D- C:\Users\anne so\AppData\Roaming\Google
      O43 - CFD: 09/09/2010 - 17:55:44 ----D- C:\Users\anne so\AppData\Roaming\Identities
      O43 - CFD: 02/11/2010 - 14:35:44 ----D- C:\Users\anne so\AppData\Roaming\Klok2.DD7F2188B985C2439837C76B42A187050457E61B.1
      O43 - CFD: 04/09/2009 - 14:39:22 ----D- C:\Users\anne so\AppData\Roaming\Macromedia
      O43 - CFD: 22/01/2011 - 18:00:46 ----D- C:\Users\anne so\AppData\Roaming\Malwarebytes
      O43 - CFD: 14/07/2009 - 16:35:06 ----D- C:\Users\anne so\AppData\Roaming\Media Center Programs
      O43 - CFD: 22/01/2011 - 13:51:36 -S--D- C:\Users\anne so\AppData\Roaming\Microsoft
      O43 - CFD: 09/09/2010 - 18:16:10 ----D- C:\Users\anne so\AppData\Roaming\Mozilla
      O43 - CFD: 20/11/2010 - 17:53:16 ----D- C:\Users\anne so\AppData\Roaming\Nero
      O43 - CFD: 22/01/2011 - 13:51:46 ----D- C:\Users\anne so\AppData\Roaming\OfferBox
      O43 - CFD: 20/11/2010 - 18:10:20 ----D- C:\Users\anne so\AppData\Roaming\OpenCandy
      O43 - CFD: 26/11/2010 - 18:06:00 ----D- C:\Users\anne so\AppData\Roaming\Shareaza
      O43 - CFD: 22/11/2010 - 09:03:04 ----D- C:\Users\anne so\AppData\Roaming\Toshiba
      O43 - CFD: 20/11/2010 - 18:12:54 ----D- C:\Users\anne so\AppData\Roaming\Uniblue
      O43 - CFD: 02/11/2010 - 22:58:06 ----D- C:\Users\anne so\AppData\Roaming\vlc
      O43 - CFD: 21/11/2010 - 00:24:52 ----D- C:\Users\anne so\AppData\Roaming\WinBatch
      O43 - CFD: 27/12/2010 - 14:50:54 ----D- C:\Program Files (x86)\3nity CD DVD BURNER
      O43 - CFD: 02/11/2010 - 14:35:36 ----D- C:\Program Files (x86)\Adobe
      O43 - CFD: 20/11/2010 - 17:57:44 ----D- C:\Program Files (x86)\Common Files
      O43 - CFD: 04/09/2009 - 14:37:38 ----D- C:\Program Files (x86)\eBay
      O43 - CFD: 20/11/2010 - 18:56:16 ----D- C:\Program Files (x86)\Google
      O43 - CFD: 21/11/2010 - 00:44:54 --H-D- C:\Program Files (x86)\InstallShield Installation Information
      O43 - CFD: 04/09/2009 - 14:25:40 ----D- C:\Program Files (x86)\Intel
      O43 - CFD: 15/12/2010 - 18:20:46 ----D- C:\Program Files (x86)\Internet Explorer
      O43 - CFD: 04/09/2009 - 14:30:12 ----D- C:\Program Files (x86)\Java
      O43 - CFD: 22/01/2011 - 18:00:44 ----D- C:\Program Files (x86)\Malwarebytes' Anti-Malware
      O43 - CFD: 02/11/2010 - 22:36:38 ----D- C:\Program Files (x86)\McAfee
      O43 - CFD: 04/09/2009 - 14:50:56 ----D- C:\Program Files (x86)\Microsoft Office
      O43 - CFD: 04/09/2009 - 14:51:46 ----D- C:\Program Files (x86)\Microsoft Office Suite Activation Assistant
      O43 - CFD: 02/01/2011 - 22:03:58 ----D- C:\Program Files (x86)\Microsoft Silverlight
      O43 - CFD: 04/09/2009 - 14:54:02 ----D- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
      O43 - CFD: 15/12/2010 - 18:02:24 ----D- C:\Program Files (x86)\Microsoft Works
      O43 - CFD: 18/10/2010 - 23:30:12 ----D- C:\Program Files (x86)\Microsoft.NET
      O43 - CFD: 22/01/2011 - 16:59:22 ----D- C:\Program Files (x86)\Mozilla Firefox
      O43 - CFD: 14/07/2009 - 06:32:40 ----D- C:\Program Files (x86)\MSBuild
      O43 - CFD: 15/09/2010 - 07:31:36 ----D- C:\Program Files (x86)\PDF Editeur 3
      O43 - CFD: 04/09/2009 - 14:39:22 ----D- C:\Program Files (x86)\Photo-Service
      O43 - CFD: 21/11/2010 - 00:44:54 ----D- C:\Program Files (x86)\Realtek
      O43 - CFD: 21/11/2010 - 00:25:30 ----D- C:\Program Files (x86)\Realtek WLAN Driver
      O43 - CFD: 14/07/2009 - 06:32:40 ----D- C:\Program Files (x86)\Reference Assemblies
      O43 - CFD: 26/11/2010 - 18:06:00 ----D- C:\Program Files (x86)\Shareaza
      O43 - CFD: 21/11/2010 - 00:14:28 --H-D- C:\Program Files (x86)\Temp
      O43 - CFD: 14/05/2010 - 05:57:56 ----D- C:\Program Files (x86)\TOSHIBA
      O43 - CFD: 04/09/2009 - 14:43:12 ----D- C:\Program Files (x86)\TOSHIBA Games
      O43 - CFD: 22/11/2010 - 08:50:10 ----D- C:\Program Files (x86)\Toshiba TEMPRO
      O43 - CFD: 14/07/2009 - 05:57:08 --H-D- C:\Program Files (x86)\Uninstall Information
      O43 - CFD: 09/09/2010 - 18:22:30 ----D- C:\Program Files (x86)\VideoLAN
      O43 - CFD: 22/01/2011 - 16:39:26 ----D- C:\Program Files (x86)\VS Revo Group
      O43 - CFD: 14/07/2009 - 16:24:10 ----D- C:\Program Files (x86)\Windows Defender
      O43 - CFD: 02/11/2010 - 17:57:32 ----D- C:\Program Files (x86)\Windows Live
      O43 - CFD: 16/12/2010 - 09:52:42 ----D- C:\Program Files (x86)\Windows Mail
      O43 - CFD: 13/10/2010 - 02:19:26 ----D- C:\Program Files (x86)\Windows Media Player
      O43 - CFD: 14/07/2009 - 06:32:40 ----D- C:\Program Files (x86)\Windows NT
      O43 - CFD: 14/07/2009 - 16:24:10 ----D- C:\Program Files (x86)\Windows Photo Viewer
      O43 - CFD: 14/07/2009 - 06:32:42 ----D- C:\Program Files (x86)\Windows Portable Devices
      O43 - CFD: 14/07/2009 - 16:24:10 ----D- C:\Program Files (x86)\Windows Sidebar
      O43 - CFD: 22/01/2011 - 19:10:44 ----D- C:\Program Files (x86)\ZHPDiag
      O43 - CFD: 02/11/2010 - 17:56:02 ----D- C:\Program Files\Common Files\Microsoft Shared
      O43 - CFD: 14/07/2009 - 04:20:10 ----D- C:\Program Files\Common Files\Services
      O43 - CFD: 14/07/2009 - 04:20:10 ----D- C:\Program Files\Common Files\SpeechEngines
      O43 - CFD: 14/07/2009 - 16:24:10 ----D- C:\Program Files\Common Files\System

      ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
      O44 - LFC:[MD5.00000000000000000000000078EE1800] - 22/01/2011 - 19:03:30 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\WindowsUpdate.log [1132163]
      O44 - LFC:[MD5.C58B8CACFEC2F72AD135A734F3D4C7EC] - 22/01/2011 - 18:00:14 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [16304]
      O44 - LFC:[MD5.C58B8CACFEC2F72AD135A734F3D4C7EC] - 22/01/2011 - 18:00:14 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [16304]
      O44 - LFC:[MD5.B5AC4212FC2790EB8E8DEB5ECF96C1ED] - 22/01/2011 - 17:57:10 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysNative\PerfStringBackup.INI [1549700]
      O44 - LFC:[MD5.F9ADCDA96174EB54A97D04DCBF16DE20] - 22/01/2011 - 17:57:10 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysNative\perfc009.dat [106388]
      O44 - LFC:[MD5.B79F759915F11EF9024123526B1125C9] - 22/01/2011 - 17:57:10 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysNative\perfc00C.dat [130754]
      O44 - LFC:[MD5.B53154B16005035756AAB6C5F768CB99] - 22/01/2011 - 17:57:10 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysNative\perfh009.dat [616008]
      O44 - LFC:[MD5.1644213AB7D2C4DB6B29CBE2140FC6BE] - 22/01/2011 - 17:57:10 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysNative\perfh00C.dat [704480]
      O44 - LFC:[MD5.9982DE5B241F4776F71698EB4D4FC7E9] - 22/01/2011 - 17:52:40 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\setupact.log [168]
      O44 - LFC:[MD5.8F75EFDEE870173A47F8D356336DD3AB] - 22/01/2011 - 17:52:39 -S-A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\bootstat.dat [67584]
      O44 - LFC:[MD5.8D0FF5C2E0B3A508C44619D667723EEE] - 22/01/2011 - 17:24:15 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\PFRO.log [586]
      O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 22/01/2011 - 16:35:45 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\setuperr.log [0]
      O44 - LFC:[MD5.50F6C017223B985398D4B68107338ECB] - 13/01/2011 - 09:47:35 ---A- . (.AVAST Software - avast! Screen Saver stub.) -- C:\Windows\avastSS.scr [38848]
      O44 - LFC:[MD5.0AAF681770781C346A388B03FC421688] - 13/01/2011 - 09:47:32 ---A- . (.AVAST Software - avast! start-up scanner.) -- C:\Windows\System32\aswBoot.exe [188216]
      O44 - LFC:[MD5.0AAF681770781C346A388B03FC421688] - 13/01/2011 - 09:47:23 ---A- . (.AVAST Software - avast! start-up scanner.) -- C:\Windows\SysNative\aswBoot.exe [237168]
      O44 - LFC:[MD5.376F14DCD409160260FDF98B20FB12DC] - 27/12/2010 - 14:50:55 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\VB6.OLB [295514]

      ---\\ Déni du service (Local Security Authority) (LSA) (O48)
      O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
      O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll
      O48 - LSA:Local Security Authority Secur
      0
      1. please hellllllppppppppppppp me !!!!
        0
        1. le dernier module du rapport est O80 !
          je ne le vois pas du tout !
          le rapport se términe par ceci également :

          EOF

          donc tout n'est pas là :-)

          O.o°*??? Membre, Contributeur Sécurité CCM o°.Oø¤º°'°º¤ø

          O.o°* ??? Réspire à fond, Rédige ton message en bon français et de manière claire. Une fois ton problème passé, coche ton message comme résolu.Ca va bien se passer, tu verras, enfin on essaie !!! o°.Oø¤º°'°º¤ø
          0
          1. Rapport de ZHPDiag v1.27.1504 par Nicolas Coolman, Update du 20/01/2011
            Run by anne so at 22/01/2011 21:07:10
            Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
            Contact : nicolascoolman@yahoo.fr

            ---\\ Web Browser
            MSIE: Internet Explorer v8.0.7600.16385

            ---\\ System Information
            Windows 7 Home Premium Edition, 64-bit (Build 7600)
            Processor: Intel64 Family 6 Model 23 Stepping 10, GenuineIntel
            Operating System: 64 Bits
            Boot mode: Normal (Normal boot)
            Total RAM: 3932 MB (62% free)
            System Restore: Activé (Enable)
            System drive C: has 40 GB (27%) free of 149 GB

            ---\\ Logged in mode
            Computer Name: ANNESO-TOSH
            User Name: anne so
            All Users Names: HomeGroupUser$, anne so, Administrateur,
            Unselected Option: O45,O61,O62,O65,O66,O82
            Logged in as Administrator

            ---\\ Environnement Variables
            %AppData%=%USERPROFILE%\AppData\Roaming
            %LocalAppData%=%USERPROFILE%\AppData\Local
            %StartMenu%=%USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu

            ---\\ DOS/Devices
            C:\ Hard drive, Flash drive, Thumb drive (Free 40 Go of 149 Go)
            D:\ Hard drive, Flash drive, Thumb drive (Free 44 Go of 149 Go)
            E:\ CD-ROM drive (Not Inserted)

            ---\\ Security Center & Tools Informations
            [HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
            [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
            [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
            [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
            [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
            [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
            [HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
            [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
            [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
            [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
            [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
            [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
            [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
            [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
            [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
            [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
            [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK

            ---\\ Recherche particulière de fichiers génériques
            [MD5.9AAAEC8DAC27AA17B053E6352AD233AE] - (.Microsoft Corporation - Explorateur Windows.) (.31/10/2009 07:34:59.) -- C:\Windows\Explorer.exe [2870272]
            [MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 02:14:45.) -- C:\Windows\System32\Wininit.exe [96256]

            ---\\ Processus lancés
            [MD5.BBFED9378719CF8E0C3DEDC979B5D649] - (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\TOPI.exe [6203296]
            [MD5.AECBBD99F06C11302B0C53758F89ACDB] - (.Shareaza Development Team - Shareaza Ultimate File Sharing.) -- C:\Program Files (x86)\Shareaza\Shareaza.exe [4574208]
            [MD5.C5B2679B0AE204FDD0415199B7AFEF20] - (.TOSHIBA CORPORATION - KeNotify MFC Application.) -- C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe [34088]
            [MD5.1079D6DA23EEE32E846BADEED77B4E9C] - (.TOSHIBA CORPORATION. - Pas de description.) -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe [2446648]
            [MD5.7B878518590E826F1F3A5B1D61D405F8] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe [3396624]
            [MD5.0E20A3213ED010FC4997D1EF48082ABC] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [912344]
            [MD5.9D77E8A2EE92E9DAFAC88DEFCF6D777D] - (.TOSHIBA CORPORATION - ConfigFree Task Tray Menu.) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe [304496]
            [MD5.8A07221789D46B2EA7DFCA2BC807572A] - (.TOSHIBA CORPORATION - ConfigFree Switch Manager Process.) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe [62848]
            [MD5.BA9A09CF1B9503C363617F3748F6D791] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe [16856]
            [MD5.58CF468D3FF4CF830339FE5E45356355] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe [673040]
            [MD5.711FD53E441255983C0AB014E2F107F4] - (.Adobe Systems, Inc. - Adobe® Flash® Player Installer/Uninstaller.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10l_ActiveX.exe [233936]
            [MD5.A5D013EA68F0CECC29952E3C5AB7814C] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [623616]

            ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
            G1 - GCS: Preference [User Data\Default] None
            G0 - GCSP: Preference [User Data\Default][HomePage] https://home.sweetim.com/

            ---\\ Internet Explorer, Démarrage,Recherche,URSearchHook (R0,R1,R3)
            R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/webhp?gws_rd=ssl
            R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.com/webhp?gws_rd=ssl
            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
            R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
            R3 - URLSearchHook: (no name) - {EEE6C35D-6118-11DC-9C72-001320C79847} Clé orpheline

            ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
            F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
            F2 - REG:system.ini: VMApplet=C:\WINDOWS\system32\SystemPropertiesPerformance.exe

            ---\\ Browser Helper Objects de navigateur (O2)
            O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} . (.Shareaza Development Team - Shareaza Web Download Hook.) -- C:\Program Files (x86)\Shareaza\RazaWebHook64.dll
            O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
            O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} . (.Pas de propriétaire - Pas de description.) -- c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll

            ---\\ Internet Explorer Toolbars (O3)
            O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} . (.Pas de propriétaire - Pas de description.) -- c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll

            ---\\ Applications démarrées par registre & par dossier (O4)
            O4 - HKLM\..\Run: [TosSENotify] . (.TOSHIBA Corporation - Pas de description.) -- C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe
            O4 - HKLM\..\Run: [Toshiba TEMPRO] . (.Toshiba Europe GmbH - Toshiba TEMPRO.) -- C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe
            O4 - HKLM\..\Run: [TosNC] . (.TOSHIBA Corporation - Message Center.) -- C:\Program Files\Toshiba\BulletinBoard\TosNcCore.exe
            O4 - HKLM\..\Run: [TosReelTimeMonitor] . (.TOSHIBA Corporation - Monitor of TOSHIBA ReelTime.) -- C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe
            O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe (.not file.)
            O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe (.not file.)
            O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe (.not file.)
            O4 - HKLM\..\Run: [SmoothView] . (.TOSHIBA Corporation - SmoothView.) -- C:\Program Files\Toshiba\SmoothView\SmoothView.exe
            O4 - HKLM\..\Run: [TPwrMain] . (.TOSHIBA Corporation - TOSHIBA Power Saver.) -- C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
            O4 - HKLM\..\Run: [HSON] . (.TOSHIBA Corporation - HotStartOn.) -- C:\Program Files\TOSHIBA\TBS\HSON.exe
            O4 - HKLM\..\Run: [00TCrdMain] . (.TOSHIBA Corporation - TOSHIBA Flash Cards.) -- C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
            O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
            O4 - HKLM\..\Run: [SmartFaceVWatcher] . (.TOSHIBA Corporation - SmartFaceVWatcher.) -- C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatcher.exe
            O4 - HKLM\..\Run: [Teco] . (.TOSHIBA Corporation - TOSHIBA eco Utility.) -- C:\Program Files\TOSHIBA\TECO\Teco.exe
            O4 - HKLM\..\Run: [TosWaitSrv] . (.TOSHIBA Corporation - Pas de description.) -- C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe
            O4 - HKLM\..\Run: [Toshiba Registration] . (.Toshiba Europe GmbH - Toshiba Notebook Registration Reminder.) -- C:\Program Files\Toshiba\Registration\ToshibaReminder.exe
            O4 - HKCU\..\Run: [TOSHIBA Online Product Information] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\topi.exe
            O4 - HKCU\..\Run: [Shareaza] . (.Shareaza Development Team - Shareaza Ultimate File Sharing.) -- C:\Program Files (x86)\Shareaza\Shareaza.exe
            O4 - HKLM\..\Wow6432Node\Run: [SVPWUTIL] . (.TOSHIBA - SVPWUTIL Application.) -- C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe
            O4 - HKLM\..\Wow6432Node\Run: [HWSetup] . (.TOSHIBA Electronics, Inc. - HWSetup.) -- C:\Program Files\TOSHIBA\Utilities\HWSetup.exe
            O4 - HKLM\..\Wow6432Node\Run: [KeNotify] . (.TOSHIBA CORPORATION - KeNotify MFC Application.) -- C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe
            O4 - HKLM\..\Wow6432Node\Run: [TWebCamera] C:\Program Files\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe (.not file.)
            O4 - HKLM\..\Wow6432Node\Run: [avast5] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\avastUI.exe
            O4 - HKLM\..\Wow6432Node\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe
            O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
            O4 - HKUS\S-1-5-18\..\Run: [TOSHIBA Online Product Information] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\topi.exe
            O4 - HKUS\S-1-5-18\..\Run: [TOSHIBA Online Product Information] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\topi.exe
            O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
            O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
            O4 - HKUS\S-1-5-21-2030544128-1871575060-3465723408-1000\..\Run: [TOSHIBA Online Product Information] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\topi.exe
            O4 - HKUS\S-1-5-21-2030544128-1871575060-3465723408-1000\..\Run: [Shareaza] . (.Shareaza Development Team - Shareaza Ultimate File Sharing.) -- C:\Program Files (x86)\Shareaza\Shareaza.exe
            O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (.not file.)
            O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (.not file.)

            ---\\ Autres liens utilisateurs (O4)
            O4 - Global Startup: C:\Documents And Settings\anne so\Desktop\Bridge Base Online.lnk . (.Pas de propriétaire.) -- C:\Bridge Base Online\NetBridgeVu.exe
            O4 - Global Startup: C:\Documents And Settings\anne so\Desktop\PDF Editeur 3.0.lnk . (.Pas de propriétaire.) -- C:\Program Files (x86)\PDF Editeur 3\PDFEdit.exe
            O4 - Global Startup: C:\Users\anne so\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
            O4 - Global Startup: C:\Users\anne so\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
            O4 - Global Startup: C:\Users\anne so\Desktop\Bridge Base Online.lnk . (.Pas de propriétaire.) -- C:\Bridge Base Online\NetBridgeVu.exe
            O4 - Global Startup: C:\Users\anne so\Desktop\PDF Editeur 3.0.lnk . (.Pas de propriétaire.) -- C:\Program Files (x86)\PDF Editeur 3\PDFEdit.exe
            O4 - Global Startup: C:\Users\anne so\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
            O4 - Global Startup: C:\Users\anne so\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
            O4 - Global Startup: C:\Users\anne so\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
            O4 - Global Startup: C:\Users\anne so\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shareaza.lnk . (.Shareaza Development Team.) -- C:\Program Files (x86)\Shareaza\Shareaza.exe
            O4 - Global Startup: C:\Users\anne so\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - Clé orpheline
            O4 - Global Startup: C:\Users\anne so\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - Clé orpheline

            ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
            O8 - Extra context menu item: Download with &Shareaza . (.Shareaza Development Team - Shareaza Web Download Hook.) -- C:\Program Files (x86)\Shareaza\RazaWebHook32.dll
            O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~2\MICROS~2\Office12\EXCEL.exe
            O8 - Extra context menu item: Google Sidewiki... - (.not file.) - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll

            ---\\ Winsock hijacker (Layered Service Provider) (O10)
            O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
            O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
            O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
            O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
            O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
            O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
            O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL
            O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL

            ---\\ Modification Domaine/Adresses DNS (O17)
            O17 - HKLM\System\CCS\Services\Tcpip\..\{309B5F37-2FF6-4CFF-BCE4-1EFE63300E2E}: DhcpNameServer = 89.2.0.1 89.2.0.2
            O17 - HKLM\System\CCS\Services\Tcpip\..\{3AE34777-6EE3-4F5E-8C3F-3F7E0822D1A5}: DhcpNameServer = 89.2.0.1 89.2.0.2
            O17 - HKLM\System\CS1\Services\Tcpip\..\{309B5F37-2FF6-4CFF-BCE4-1EFE63300E2E}: DhcpNameServer = 89.2.0.1 89.2.0.2
            O17 - HKLM\System\CS1\Services\Tcpip\..\{3AE34777-6EE3-4F5E-8C3F-3F7E0822D1A5}: DhcpNameServer = 89.2.0.1 89.2.0.2
            O17 - HKLM\System\CS2\Services\Tcpip\..\{309B5F37-2FF6-4CFF-BCE4-1EFE63300E2E}: DhcpNameServer = 89.2.0.1 89.2.0.2
            O17 - HKLM\System\CS2\Services\Tcpip\..\{3AE34777-6EE3-4F5E-8C3F-3F7E0822D1A5}: DhcpNameServer = 89.2.0.1 89.2.0.2
            O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 89.2.0.1 89.2.0.2

            ---\\ Protocole additionnel et piratage de protocole (O18)
            O18 - Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} . (.Pas de propriétaire - Pas de description.) -- c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll

            ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
            O20 - Winlogon Notify: igfxcui . (.Pas de propriétaire - Pas de description.) -- igfxdev.dll

            ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
            O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.

            ---\\ Liste des services NT non Microsoft et non désactivés (O23)
            O23 - Service: (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
            O23 - Service: (cfWiMAXService) . (.TOSHIBA CORPORATION - ConfigFree Service Process.) - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe
            O23 - Service: (ConfigFree Gadget Service) . (.TOSHIBA CORPORATION - ConfigFree Gadget Process Service.) - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exe
            O23 - Service: (ConfigFree Service) . (.TOSHIBA CORPORATION - ConfigFree Service Process.) - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe
            O23 - Service: (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
            O23 - Service: (McAfee SiteAdvisor Service) . (.Pas de propriétaire - Pas de description.) - C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe
            O23 - Service: (TODDSrv) - Clé orpheline
            O23 - Service: (TosCoSrv) . (.TOSHIBA Corporation - TOSHIBA Power Saver.) - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
            O23 - Service: (TOSHIBA eco Utility Service) . (.TOSHIBA Corporation - TOSHIBA eco Utility Service.) - C:\Program Files\TOSHIBA\TECO\TecoService.exe

            ---\\ Enumération Active Desktop & MHTML Editor (O24)
            O24 - Default MHTML Editor: Last - .(.Pas de propriétaire - Pas de description.) - (.not file.)

            ---\\ Tâches planifiées en automatique (O39)
            O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
            O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
            [MD5.9D77E8A2EE92E9DAFAC88DEFCF6D777D] [APT] [ConfigFree Startup Programs] (.TOSHIBA CORPORATION.) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe
            [MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
            [MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
            [MD5.AB96046A9C27886BD39E191BE6372A88] [APT] [{BB8C6AED-3999-4667-9D7D-017842677FC1}] (.Pas de propriétaire.) -- C:\Program Files\Alwil Software\Avast5\aswRundll.exe

            ---\\ Pilotes lancés au démarrage (O41)
            O41 - Driver: C:\Windows\system32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
            O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\system32\DRIVERS\blbdrive.sys
            O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
            O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
            O41 - Driver: C:\Windows\system32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
            O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\DRIVERS\mssmbios.sys
            O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
            O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
            O41 - Driver: C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
            O41 - Driver: C:\Windows\system32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
            O41 - Driver: C:\Windows\system32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
            O41 - Driver: C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
            O41 - Driver: C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
            O41 - Driver: C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
            O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Tcpip) . (.Microsoft Corporation - Pilote TCP/IP.) - C:\Windows\System32\drivers\tcpip.sys
            O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
            O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\DRIVERS\termdd.sys
            O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
            O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys
            O41 - Driver: C:\Windows\system32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
            O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys

            ---\\ Logiciels installés (O42)
            O42 - Logiciel: 3nity CD DVD BURNER 2.0.1 - (.3nity Softwares.) [HKLM][64Bits] -- {70E0BA9E-5978-4E83-A269-77BDB7A79F23}_is1
            O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM][64Bits] -- Adobe AIR
            O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM][64Bits] -- {46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}
            O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX
            O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
            O42 - Logiciel: Adobe Reader 9.4.1 - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-A94000000001}
            O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM][64Bits] -- Adobe Shockwave Player
            O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
            O42 - Logiciel: CDBurnerXP - (.CDBurnerXP.) [HKLM] -- {7E265513-8CDA-4631-B696-F40D983F3B07}_is1
            O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
            O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM][64Bits] -- {488F0347-C4A7-4374-91A7-30818BEDA710}
            O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome
            O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
            O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Intel Corporation.) [HKLM] -- HDMI
            O42 - Logiciel: Intel® Matrix Storage Manager - (.Intel Corporation.) [HKLM] -- {9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}
            O42 - Logiciel: Java(TM) 6 Update 14 - (.Sun Microsystems, Inc..) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83216014FF}
            O42 - Logiciel: Jeux WildTangent - (.WildTangent.) [HKLM][64Bits] -- WildTangent toshiba Master Uninstall
            O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
            O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
            O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9}
            O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes' Anti-Malware_is1
            O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile
            O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}
            O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0016-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
            O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0018-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
            O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001B-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
            O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{E64BA721-2310-4B55-BE5A-2925F9706192}
            O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-002A-040C-1000-0000000FF1CE}_HOMESTUDENTR_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
            O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-006E-040C-0000-0000000FF1CE}_HOMESTUDENTR_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
            O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-00A1-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
            O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
            O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0016-040C-0000-0000000FF1CE}
            O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- HOMESTUDENTR
            O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}
            O42 - Logiciel: Microsoft Office Office 64-bit Components 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002A-0000-1000-0000000FF1CE}
            O42 - Logiciel: Microsoft Office OneNote MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-00A1-040C-0000-0000000FF1CE}
            O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0018-040C-0000-0000000FF1CE}
            O42 - Logiciel: Microsoft Office PowerPoint Viewer 2007 (French) - (.Microsoft Corporation.) [HKLM][64Bits] -- {95120000-00AF-040C-0000-0000000FF1CE}
            O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-0401-0000-0000000FF1CE}
            O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-0413-0000-0000000FF1CE}
            O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-0409-0000-0000000FF1CE}
            O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-040C-0000-0000000FF1CE}
            O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-0407-0000-0000000FF1CE}
            O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-0C0A-0000-0000000FF1CE}
            O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-002C-040C-0000-0000000FF1CE}
            O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-0401-0000-0000000FF1CE}_HOMESTUDENTR_{14809F99-C601-4D4A-9391-F1E8FAA964C5}
            O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}
            O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
            O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}
            O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-0413-0000-0000000FF1CE}_HOMESTUDENTR_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
            O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}
            O42 - Logiciel: Microsoft Office Shared 64-bit MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002A-040C-1000-0000000FF1CE}
            O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-006E-040C-0000-0000000FF1CE}
            O42 - Logiciel: Microsoft Office Suite Activation Assistant - (.Microsoft Corporation.) [HKLM][64Bits] -- {E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}
            O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001B-040C-0000-0000000FF1CE}
            O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM][64Bits] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
            O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
            O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM][64Bits] -- {770657D0-A123-3C07-8E44-1C83EC895118}
            O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM][64Bits] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c}
            O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {EE936C7A-EA40-31D5-9B65-8E3E089C3828}
            O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {8220EEFE-38CD-377E-8595-13398D740ACE}
            O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
            O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM][64Bits] -- {3B160861-7250-451E-B5EE-8B92BF30A710}
            O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0020-040C-0000-0000000FF1CE}
            O42 - Logiciel: Mozilla Firefox (3.6.13) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox (3.6.13)
            O42 - Logiciel: PDF Editeur 3 - (.Pas de propriétaire.) [HKLM][64Bits] -- PDF Editeur 3
            O42 - Logiciel: PlayReady PC Runtime amd64 - (.Microsoft Corporation.) [HKLM] -- {BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}
            O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
            O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {96AE7E41-E34E-47D0-AC07-1091A8127911}
            O42 - Logiciel: Realtek WLAN Driver - (.Realtek.) [HKLM][64Bits] -- {0FB630AB-7BD8-40AE-B223-60397D57C3C9}
            O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288621) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{5C497F0B-2061-4CC9-A61C-6B45B867354D}
            O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288931) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CD769337-C8AC-46DB-A7DC-643E50089263}
            O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2289158) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{210B16C0-CEBD-4DE9-B474-04A7E8735E16}
            O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2344875) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6FC5C4C1-D7AE-44C3-94B7-6424FC3E752F}
            O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2345043) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{536FB502-775F-4494-BACE-C02CC90B7A5B}
            O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB969559) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
            O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB976321) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{7F207DCA-3399-40CB-A968-6E5991B1421A}
            O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2160841
            O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB2345035) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{B23002DD-34EC-4988-B810-A5E2A0BF04F1}
            O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB979441) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{8CCB781A-CF6B-4FCB-B6D8-59C64DF5C6DB}
            O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB982158) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{F5B70033-E79C-4569-90BF-BC9B4E4F3F46}
            O42 - Logiciel: Security Update for Microsoft Office PowerPoint Viewer (KB2413381) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3DED0A62-44C8-4E00-A785-5212F297A9D9}
            O42 - Logiciel: Security Update for Microsoft Office Visio Viewer 2007 (KB973709) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
            O42 - Logiciel: Security Update for Microsoft Office Word 2007 (KB2344993) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{7A5B74FA-7A92-4FC9-821A-2DD5D4E73E48}
            O42 - Logiciel: Security Update for Microsoft Office system 2007 (972581) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}
            O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB974234) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{FCD742B9-7A55-44BC-A776-F795F21FEDDC}
            O42 - Logiciel: Shareaza 2.5.3.0 - (.Shareaza Development Team.) [HKLM][64Bits] -- Shareaza_is1
            O42 - Logiciel: Skype(TM) Launcher - (.Skype Technologies S.A..) [HKLM][64Bits] -- {26D8DF7E-DBF8-43A6-8D42-F37497CE603D}
            O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM] -- SynTPDeinstKey
            O42 - Logiciel: TOSHIBA Bulletin Board - (.TOSHIBA Corporation.) [HKLM] -- {1E9E8BA6-FD0B-465D-AFA2-ECE10BF095F9}
            O42 - Logiciel: TOSHIBA Bulletin Board - (.TOSHIBA Corporation.) [HKLM][64Bits] -- InstallShield_{1E9E8BA6-FD0B-465D-AFA2-ECE10BF095F9}
            O42 - Logiciel: TOSHIBA ConfigFree - (.TOSHIBA Corporation.) [HKLM][64Bits] -- {F3529665-D75E-4D6D-98F0-745C78C68E9B}
            O42 - Logiciel: TOSHIBA DVD PLAYER - (.TOSHIBA Corporation.) [HKLM][64Bits] -- {6C5F3BDC-0A1B-4436-A696-5939629D5C31}
            O42 - Logiciel: TOSHIBA Disc Creator - (.TOSHIBA Corporation.) [HKLM] -- {5DA0E02F-970B-424B-BF41-513A5018E4C0}
            O42 - Logiciel: TOSHIBA Extended Tiles for Windows Mobility Center - (.Pas de propriétaire.) [HKLM][64Bits] -- InstallShield_{617C36FD-0CBE-4600-84B2-441CEB12FADF}
            O42 - Logiciel: TOSHIBA Face Recognition - (.TOSHIBA Corporation.) [HKLM] -- {F67FA545-D8E5-4209-86B1-AEE045D1003F}
            O42 - Logiciel: TOSHIBA Face Recognition - (.TOSHIBA Corporation.) [HKLM][64Bits] -- InstallShield_{F67FA545-D8E5-4209-86B1-AEE045D1003F}
            O42 - Logiciel: TOSHIBA Flash Cards Support Utility - (.TOSHIBA CORPORATION.) [HKLM][64Bits] -- InstallShield_{620BBA5E-F848-4D56-8BDA-584E44584C5E}
            O42 - Logiciel: TOSHIBA Flash Cards Support Utility - (.TOSHIBA CORPORATION.) [HKLM][64Bits] -- {620BBA5E-F848-4D56-8BDA-584E44584C5E}
            O42 - Logiciel: TOSHIBA HDD/SSD Alert - (.TOSHIBA Corporation.) [HKLM] -- {D4322448-B6AF-4316-B859-D8A0E84DCB38}
            O42 - Logiciel: TOSHIBA HDD/SSD Alert - (.TOSHIBA Corporation.) [HKLM][64Bits] -- InstallShield_{D4322448-B6AF-4316-B859-D8A0E84DCB38}
            O42 - Logiciel: TOSHIBA Hardware Setup - (.TOSHIBA CORPORATION.) [HKLM][64Bits] -- InstallShield_{5279374D-87FE-4879-9385-F17278EBB9D3}
            O42 - Logiciel: TOSHIBA Hardware Setup - (.TOSHIBA CORPORATION.) [HKLM][64Bits] -- {5279374D-87FE-4879-9385-F17278EBB9D3}
            O42 - Logiciel: TOSHIBA Mot de passe responsable - (.TOSHIBA CORPORATION.) [HKLM][64Bits] -- InstallShield_{51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}
            O42 - Logiciel: TOSHIBA PC Health Monitor - (.TOSHIBA Corporation.) [HKLM] -- {9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}
            O42 - Logiciel: TOSHIBA Recovery Media Creator - (.TOSHIBA Corporation.) [HKLM] -- {B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}
            O42 - Logiciel: TOSHIBA Recovery Media Creator Reminder - (.TOSHIBA.) [HKLM][64Bits] -- InstallShield_{773970F1-5EBA-4474-ADEE-1EA3B0A59492}
            O42 - Logiciel: TOSHIBA ReelTime - (.TOSHIBA Corporation.) [HKLM] -- {C2DDF845-7107-40E8-8D2A-8719F1799570}
            O42 - Logiciel: TOSHIBA ReelTime - (.TOSHIBA Corporation.) [HKLM][64Bits] -- InstallShield_{C2DDF845-7107-40E8-8D2A-8719F1799570}
            O42 - Logiciel: TOSHIBA SD Memory Utilities - (.TOSHIBA.) [HKLM] -- {EBFF48F5-3CFA-436F-8FD5-94FB01D3A0A7}
            O42 - Logiciel: TOSHIBA Service Station - (.TOSHIBA.) [HKLM][64Bits] -- {AC6569FA-6919-442A-8552-073BE69E247A}
            O42 - Logiciel: TOSHIBA Supervisor Password - (.TOSHIBA CORPORATION.) [HKLM][64Bits] -- {51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}
            O42 - Logiciel: TOSHIBA Value Added Package - (.TOSHIBA Corporation.) [HKLM][64Bits] -- InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}
            O42 - Logiciel: TOSHIBA Web Camera Application - (.TOSHIBA Corporation.) [HKLM][64Bits] -- {5E6F6CF3-BACC-4144-868C-E14622C658F3}
            O42 - Logiciel: TOSHIBA eco Utility - (.TOSHIBA Corporation.) [HKLM] -- {B3FF1CD9-B2F0-4D71-BB55-5F580401C48E}
            O42 - Logiciel: TOSHIBA eco Utility - (.TOSHIBA Corporation.) [HKLM][64Bits] -- InstallShield_{B3FF1CD9-B2F0-4D71-BB55-5F580401C48E}
            O42 - Logiciel: TRORMCLauncher - (.Pas de propriétaire.) [HKLM][64Bits] -- InstallShield_{E65C7D8E-186D-484B-BEA8-DEF0331CE600}
            O42 - Logiciel: Toshiba Assist - (.TOSHIBA.) [HKLM][64Bits] -- {1B87C40B-A60B-4EF3-9A68-706CF4B69978}
            O42 - Logiciel: Toshiba Manuals - (.TOSHIBA.) [HKLM][64Bits] -- {90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}
            O42 - Logiciel: Toshiba Online Product Information - (.TOSHIBA.) [HKLM][64Bits] -- {2290A680-4083-410A-ADCC-7092C67FC052}
            O42 - Logiciel: Toshiba Photo Service - powered by myphotobook - (.myphotobook GmbH.) [HKLM][64Bits] -- eu.myphotobook.001F9DF2D0BAABEB11F42CCEE43224607B61109C.1
            O42 - Logiciel: Toshiba Photo Service - powered by myphotobook - (.myphotobook GmbH.) [HKLM][64Bits] -- {0823A2E3-69DD-A37A-7CD9-1CBEB037545C}
            O42 - Logiciel: Toshiba TEMPRO - (.Toshiba Europe GmbH.) [HKLM][64Bits] -- {DBB7021A-3437-446F-ACE5-7261644A972C}
            O42 - Logiciel: Update for 2007 Microsoft Office System (KB2284654) - (.Microsoft.) [HKLM][64Bits] -- {90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{FB166E7C-8AA6-48C8-B726-1F25BEE7825A}
            O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}
            O42 - Logiciel: Update for Microsoft Office OneNote 2007 (KB980729) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{329050A9-EF80-40F9-B633-74508F54C1FF}
            O42 - Logiciel: VLC media player 1.1.4 - (.VideoLAN.) [HKLM][64Bits] -- VLC media player
            O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM][64Bits] -- WinLiveSuite
            O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM][64Bits] -- {34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}
            O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM][64Bits] -- {D45240D3-B6B3-4FF9-B243-54ECE3E10066}
            O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM][64Bits] -- {2075CB0A-D26F-4DAA-B424-5079296B43BA}
            O42 - Logiciel: Windows Live ID Sign-in Assistant - (.Microsoft Corporation.) [HKLM] -- {1B8ABA62-74F0-47ED-B18C-A43128E591B8}
            O42 - Logiciel: Windows Live Installer - (.Microsoft Corporation.) [HKLM][64Bits] -- {0B0F231F-CE6A-483D-AA23-77B364F75917}
            O42 - Logiciel: Windows Live Language Selector - (.Microsoft Corporation.) [HKLM] -- {5EB6F3CB-46F4-451F-A028-7F6D8D35D7D0}
            O42 - Logiciel: Windows Live MIME IFilter - (.Microsoft Corporation.) [HKLM] -- {DA54F80E-261C-41A2-A855-549A144F2F59}
            O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM][64Bits] -- {9D56775A-93F3-44A3-8092-840E3826DE30}
            O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM][64Bits] -- {9FAE6E8D-E686-49F5-A574-0A58DFD9580C}
            O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {6057E21C-ABE9-4059-AE3E-3BEB9925E660}
            O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {EB4DF488-AAEF-406F-A341-CB2AAA315B90}
            O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM][64Bits] -- {6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}
            O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM][64Bits] -- {92EA4134-10D1-418A-91E1-5A0453131A38}
            O42 - Logiciel: Windows Live PIMT Platform - (.Microsoft Corporation.) [HKLM][64Bits] -- {4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}
            O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM][64Bits] -- {A9BDCA6B-3653-467B-AC83-94367DA3BFE3}
            O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM][64Bits] -- {C893D8C0-1BA0-4517-B11C-E89B65E72F70}
            O42 - Logiciel: Windows Live Photo Gallery - (.Microsoft Corporation.) [HKLM][64Bits] -- {3336F667-9049-4D46-98B6-4C743EEBC5B1}
            O42 - Logiciel: Windows Live SOXE - (.Microsoft Corporation.) [HKLM][64Bits] -- {682B3E4F-696A-42DE-A41C-4C07EA1678B4}
            O42 - Logiciel: Windows Live SOXE Definitions - (.Microsoft Corporation.) [HKLM][64Bits] -- {200FEC62-3C34-4D60-9CE8-EC372E01C08F}
            O42 - Logiciel: Windows Live UX Platform - (.Microsoft Corporation.) [HKLM][64Bits] -- {CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}
            O42 - Logiciel: Windows Live UX Platform Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {09F56A49-A7B1-4AAB-95B9-D13094254AD1}
            O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM][64Bits] -- {3B9A92DA-6374-4872-B646-253F18624D5F}
            O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM][64Bits] -- {A726AE06-AAA3-43D1-87E3-70F510314F04}
            O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM][64Bits] -- {AAAFC670-569B-4A2F-82B4-42945E0DE3EF}
            O42 - Logiciel: Windows Live Writer Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {62687B11-58B5-4A18-9BC3-9DF4CE03F194}
            O42 - Logiciel: [HKLM\Software\avast5] - (.Pas de propriétaire.) [HKLM][64Bits] -- Bridge_Base_Online
            O42 - Logiciel: avast! Free Antivirus - (.Alwil Software.) [HKLM][64Bits] -- avast5
            O42 - Logiciel: eBay - (.eBay Inc..) [HKLM][64Bits] -- {E83BA61A-5D77-4DD5-9C92-A3447F11E27D}

            ---\\ HKCU & HKLM Software Keys
            [HKCU\Software\ALWIL Software]
            [HKCU\Software\Adobe]
            [HKCU\Software\AppDataLow\Software\Adobe]
            [HKCU\Software\AppDataLow\Software\Google]
            [HKCU\Software\AppDataLow\Software\Macromedia]
            [HKCU\Software\AppDataLow\Software\Microsoft]
            [HKCU\Software\AppDataLow\Software]
            [HKCU\Software\AppDataLow]
            [HKCU\Software\Canneverbe Limited]
            [HKCU\Software\Classes]
            [HKCU\Software\Clients]
            [HKCU\Software\FIXIO PC Utilities]
            [HKCU\Software\FissaSearch]
            [HKCU\Software\FreeCompressor]
            [HKCU\Software\Google]
            [HKCU\Software\IM Providers]
            [HKCU\Software\Intel]
            [HKCU\Software\JavaSoft]
            [HKCU\Software\Local AppWizard-Generated Applications]
            [HKCU\Software\Macromedia]
            [HKCU\Software\Magnet]
            [HKCU\Software\Malwarebytes' Anti-Malware]
            [HKCU\Software\MozillaPlugins]
            [HKCU\Software\Nero]
            [HKCU\Software\Netscape]
            [HKCU\Software\ODBC]
            [HKCU\Software\OfferBox]
            [HKCU\Software\PDFEdit]
            [HKCU\Software\Piriform]
            [HKCU\Software\Policies]
            [HKCU\Software\Shareaza]
            [HKCU\Software\Softonic]
            [HKCU\Software\Spointer]
            [HKCU\Software\SweetIM]
            [HKCU\Software\Synaptics]
            [HKCU\Software\TOSHIBA]
            [HKCU\Software\Wow6432Node]
            [HKLM\Software\AMD]
            [HKLM\Software\ATI Technologies]
            [HKLM\Software\Canneverbe Limited]
            [HKLM\Software\Classes]
            [HKLM\Software\Clients]
            [HKLM\Software\DTS]
            [HKLM\Software\Google]
            [HKLM\Software\InstalledOptions]
            [HKLM\Software\Intel]
            [HKLM\Software\McAfee]
            [HKLM\Software\MozillaPlugins]
            [HKLM\Software\ODBC]
            [HKLM\Software\Piriform]
            [HKLM\Software\Policies]
            [HKLM\Software\RTLSetup]
            [HKLM\Software\Realtek Semiconductor Corp.]
            [HKLM\Software\Realtek]
            [HKLM\Software\RegisteredApplications]
            [HKLM\Software\SOFTWARE]
            [HKLM\Software\SRS Labs]
            [HKLM\Software\SonicFocus]
            [HKLM\Software\Sonic]
            [HKLM\Software\Synaptics]
            [HKLM\Software\TOSHIBA]
            [HKLM\Software\Toshiba Tempro]
            [HKLM\Software\WildTangent]
            [HKLM\Software\Wow6432Node]

            ---\\ Contenu des dossiers ProgramFiles/ProgramData/AppData (O43)
            O43 - CFD: 09/09/2010 - 18:50:28 ----D- C:\Program Files\Alwil Software
            O43 - CFD: 02/01/2011 - 22:59:58 ----D- C:\Program Files\CCleaner
            O43 - CFD: 27/12/2010 - 15:33:46 ----D- C:\Program Files\CDBurnerXP
            O43 - CFD: 02/11/2010 - 22:36:38 ----D- C:\Program Files\Common Files
            O43 - CFD: 14/07/2009 - 16:35:28 ----D- C:\Program Files\DVD Maker
            O43 - CFD: 09/09/2010 - 17:47:06 -SH-D- C:\Program Files\Fichiers communs
            O43 - CFD: 20/11/2010 - 18:56:16 ----D- C:\Program Files\Google
            O43 - CFD: 15/12/2010 - 18:20:46 ----D- C:\Program Files\Internet Explorer
            O43 - CFD: 04/09/2009 - 14:43:18 ----D- C:\Program Files\Microsoft Games
            O43 - CFD: 04/09/2009 - 14:49:42 ----D- C:\Program Files\Microsoft Office
            O43 - CFD: 14/07/2009 - 06:32:40 ----D- C:\Program Files\MSBuild
            O43 - CFD: 04/09/2009 - 14:23:24 ----D- C:\Program Files\PlayReady
            O43 - CFD: 20/11/2010 - 19:42:28 ----D- C:\Program Files\Realtek
            O43 - CFD: 14/07/2009 - 06:32:40 ----D- C:\Program Files\Reference Assemblies
            O43 - CFD: 04/09/2009 - 14:39:28 ----D- C:\Program Files\Skype-Launcher
            O43 - CFD: 14/05/2010 - 05:52:26 ----D- C:\Program Files\Synaptics
            O43 - CFD: 14/05/2010 - 05:55:44 ----D- C:\Program Files\TOSHIBA
            O43 - CFD: 14/07/2009 - 06:09:28 --H-D- C:\Program Files\Uninstall Information
            O43 - CFD: 14/07/2009 - 16:24:10 ----D- C:\Program Files\Windows Defender
            O43 - CFD: 14/07/2009 - 16:35:28 ----D- C:\Program Files\Windows Journal
            O43 - CFD: 02/11/2010 - 17:56:10 ----D- C:\Program Files\Windows Live
            O43 - CFD: 16/12/2010 - 09:52:42 ----D- C:\Program Files\Windows Mail
            O43 - CFD: 13/10/2010 - 02:19:26 ----D- C:\Program Files\Windows Media Player
            O43 - CFD: 09/09/2010 - 17:47:06 ----D- C:\Program Files\Windows NT
            O43 - CFD: 14/07/2009 - 16:24:10 ----D- C:\Program Files\Windows Photo Viewer
            O43 - CFD: 14/07/2009 - 06:32:40 ----D- C:\Program Files\Windows Portable Devices
            O43 - CFD: 14/07/2009 - 16:24:10 ----D- C:\Program Files\Windows Sidebar
            O43 - CFD: 02/11/2010 - 17:56:02 ----D- C:\Program Files\Common Files\Microsoft Shared
            O43 - CFD: 14/07/2009 - 04:20:10 ----D- C:\Program Files\Common Files\Services
            O43 - CFD: 14/07/2009 - 04:20:10 ----D- C:\Program Files\Common Files\SpeechEngines
            O43 - CFD: 14/07/2009 - 16:24:10 ----D- C:\Program Files\Common Files\System
            O43 - CFD: 02/11/2010 - 14:35:46 ----D- C:\ProgramData\Adobe
            O43 - CFD: 09/09/2010 - 18:50:28 ----D- C:\ProgramData\Alwil Software
            O43 - CFD: 14/07/2009 - 06:08:58 -SH-D- C:\ProgramData\Application Data
            O43 - CFD: 09/09/2010 - 17:47:06 -SH-D- C:\ProgramData\Bureau
            O43 - CFD: 20/11/2010 - 18:10:40 ----D- C:\ProgramData\Canneverbe Limited
            O43 - CFD: 14/07/2009 - 06:08:58 -SH-D- C:\ProgramData\Desktop
            O43 - CFD: 14/07/2009 - 06:08:58 -SH-D- C:\ProgramData\Documents
            O43 - CFD: 20/11/2010 - 21:13:48 ----D- C:\ProgramData\Driver Whiz
            O43 - CFD: 20/11/2010 - 20:06:50 ----D- C:\ProgramData\DriverBoost
            O43 - CFD: 09/09/2010 - 17:47:06 -SH-D- C:\ProgramData\Favoris
            O43 - CFD: 14/07/2009 - 06:08:58 -SH-D- C:\ProgramData\Favorites
            O43 - CFD: 22/01/2011 - 16:44:22 ----D- C:\ProgramData\Google
            O43 - CFD: 04/09/2009 - 14:40:54 ----D- C:\ProgramData\IsolatedStorage
            O43 - CFD: 22/01/2011 - 18:00:42 ----D- C:\ProgramData\Malwarebytes
            O43 - CFD: 05/11/2010 - 08:37:52 ----D- C:\ProgramData\McAfee
            O43 - CFD: 09/09/2010 - 17:47:06 -SH-D- C:\ProgramData\Menu Démarrer
            O43 - CFD: 20/11/2010 - 20:10:02 -S--D- C:\ProgramData\Microsoft
            O43 - CFD: 15/12/2010 - 18:01:40 ----D- C:\ProgramData\Microsoft Help
            O43 - CFD: 09/09/2010 - 17:47:06 -SH-D- C:\ProgramData\Modèles
            O43 - CFD: 20/11/2010 - 17:57:40 ----D- C:\ProgramData\Nero
            O43 - CFD: 13/10/2010 - 02:20:48 ----D- C:\ProgramData\Partner
            O43 - CFD: 04/09/2009 - 14:46:02 ----D- C:\ProgramData\SiteAdvisor
            O43 - CFD: 14/07/2009 - 06:08:58 -SH-D- C:\ProgramData\Start Menu
            O43 - CFD: 14/07/2009 - 06:08:58 -SH-D- C:\ProgramData\Templates
            O43 - CFD: 14/05/2010 - 05:58:00 ----D- C:\ProgramData\TOSHIBA
            O43 - CFD: 09/09/2010 - 17:47:22 ----D- C:\ProgramData\ToshibaEurope
            O43 - CFD: 04/09/2009 - 14:27:32 ----D- C:\ProgramData\Vista32
            O43 - CFD: 04/09/2009 - 14:27:32 ----D- C:\ProgramData\Vista64
            O43 - CFD: 04/09/2009 - 14:43:10 ----D- C:\ProgramData\WildTangent
            O43 - CFD: 04/09/2009 - 14:31:30 ----D- C:\ProgramData\win7_32
            O43 - CFD: 04/09/2009 - 14:31:30 ----D- C:\ProgramData\win7_64
            O43 - CFD: 04/09/2009 - 14:27:32 ----D- C:\ProgramData\XP
            O43 - CFD: 02/11/2010 - 14:35:02 ----D- C:\Users\anne so\AppData\Roaming\Adobe
            O43 - CFD: 20/11/2010 - 18:10:40 ----D- C:\Users\anne so\AppData\Roaming\Canneverbe Limited
            O43 - CFD: 22/01/2011 - 13:50:28 ----D- C:\Users\anne so\AppData\Roaming\freeCompressor
            O43 - CFD: 09/09/2010 - 17:56:46 ----D- C:\Users\anne so\AppData\Roaming\Google
            O43 - CFD: 09/09/2010 - 17:55:44 ----D- C:\Users\anne so\AppData\Roaming\Identities
            O43 - CFD: 02/11/2010 - 14:35:44 ----D- C:\Users\anne so\AppData\Roaming\Klok2.DD7F2188B985C2439837C76B42A187050457E61B.1
            O43 - CFD: 04/09/2009 - 14:39:22 ----D- C:\Users\anne so\AppData\Roaming\Macromedia
            O43 - CFD: 22/01/2011 - 18:00:46 ----D- C:\Users\anne so\AppData\Roaming\Malwarebytes
            O43 - CFD: 14/07/2009 - 16:35:06 ----D- C:\Users\anne so\AppData\Roaming\Media Center Programs
            O43 - CFD: 22/01/2011 - 13:51:36 -S--D- C:\Users\anne so\AppData\Roaming\Microsoft
            O43 - CFD: 09/09/2010 - 18:16:10 ----D- C:\Users\anne so\AppData\Roaming\Mozilla
            O43 - CFD: 20/11/2010 - 17:53:16 ----D- C:\Users\anne so\AppData\Roaming\Nero
            O43 - CFD: 22/01/2011 - 13:51:46 ----D- C:\Users\anne so\AppData\Roaming\OfferBox
            O43 - CFD: 20/11/2010 - 18:10:20 ----D- C:\Users\anne so\AppData\Roaming\OpenCandy
            O43 - CFD: 26/11/2010 - 18:06:00 ----D- C:\Users\anne so\AppData\Roaming\Shareaza
            O43 - CFD: 22/11/2010 - 09:03:04 ----D- C:\Users\anne so\AppData\Roaming\Toshiba
            O43 - CFD: 20/11/2010 - 18:12:54 ----D- C:\Users\anne so\AppData\Roaming\Uniblue
            O43 - CFD: 02/11/2010 - 22:58:06 ----D- C:\Users\anne so\AppData\Roaming\vlc
            O43 - CFD: 21/11/2010 - 00:24:52 ----D- C:\Users\anne so\AppData\Roaming\WinBatch
            O43 - CFD: 27/12/2010 - 14:50:54 ----D- C:\Program Files (x86)\3nity CD DVD BURNER
            O43 - CFD: 02/11/2010 - 14:35:36 ----D- C:\Program Files (x86)\Adobe
            O43 - CFD: 22/01/2011 - 20:27:46 ----D- C:\Program Files (x86)\Common Files
            O43 - CFD: 04/09/2009 - 14:37:38 ----D- C:\Program Files (x86)\eBay
            O43 - CFD: 20/11/2010 - 18:56:16 ----D- C:\Program Files (x86)\Google
            O43 - CFD: 21/11/2010 - 00:44:54 --H-D- C:\Program Files (x86)\InstallShield Installation Information
            O43 - CFD: 04/09/2009 - 14:25:40 ----D- C:\Program Files (x86)\Intel
            O43 - CFD: 15/12/2010 - 18:20:46 ----D- C:\Program Files (x86)\Internet Explorer
            O43 - CFD: 04/09/2009 - 14:30:12 ----D- C:\Program Files (x86)\Java
            O43 - CFD: 22/01/2011 - 18:00:44 ----D- C:\Program Files (x86)\Malwarebytes' Anti-Malware
            O43 - CFD: 02/11/2010 - 22:36:38 ----D- C:\Program Files (x86)\McAfee
            O43 - CFD: 04/09/2009 - 14:50:56 ----D- C:\Program Files (x86)\Microsoft Office
            O43 - CFD: 04/09/2009 - 14:51:46 ----D- C:\Program Files (x86)\Microsoft Office Suite Activation Assistant
            O43 - CFD: 02/01/2011 - 22:03:58 ----D- C:\Program Files (x86)\Microsoft Silverlight
            O43 - CFD: 04/09/2009 - 14:54:02 ----D- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
            O43 - CFD: 15/12/2010 - 18:02:24 ----D- C:\Program Files (x86)\Microsoft Works
            O43 - CFD: 18/10/2010 - 23:30:12 ----D- C:\Program Files (x86)\Microsoft.NET
            O43 - CFD: 22/01/2011 - 16:59:22 ----D- C:\Program Files (x86)\Mozilla Firefox
            O43 - CFD: 14/07/2009 - 06:32:40 ----D- C:\Program Files (x86)\MSBuild
            O43 - CFD: 15/09/2010 - 07:31:36 ----D- C:\Program Files (x86)\PDF Editeur 3
            O43 - CFD: 04/09/2009 - 14:39:22 ----D- C:\Program Files (x86)\Photo-Service
            O43 - CFD: 21/11/2010 - 00:44:54 ----D- C:\Program Files (x86)\Realtek
            O43 - CFD: 21/11/2010 - 00:25:30 ----D- C:\Program Files (x86)\Realtek WLAN Driver
            O43 - CFD: 14/07/2009 - 06:32:40 ----D- C:\Program Files (x86)\Reference Assemblies
            O43 - CFD: 26/11/2010 - 18:06:00 ----D- C:\Program Files (x86)\Shareaza
            O43 - CFD: 21/11/2010 - 00:14:28 --H-D- C:\Program Files (x86)\Temp
            O43 - CFD: 14/05/2010 - 05:57:56 ----D- C:\Program Files (x86)\TOSHIBA
            O43 - CFD: 04/09/2009 - 14:43:12 ----D- C:\Program Files (x86)\TOSHIBA Games
            O43 - CFD: 22/11/2010 - 08:50:10 ----D- C:\Program Files (x86)\Toshiba TEMPRO
            O43 - CFD: 14/07/2009 - 05:57:08 --H-D- C:\Program Files (x86)\Uninstall Information
            O43 - CFD: 09/09/2010 - 18:22:30 ----D- C:\Program Files (x86)\VideoLAN
            O43 - CFD: 22/01/2011 - 16:39:26 ----D- C:\Program Files (x86)\VS Revo Group
            O43 - CFD: 14/07/2009 - 16:24:10 ----D- C:\Program Files (x86)\Windows Defender
            O43 - CFD: 02/11/2010 - 17:57:32 ----D- C:\Program Files (x86)\Windows Live
            O43 - CFD: 16/12/2010 - 09:52:42 ----D- C:\Program Files (x86)\Windows Mail
            O43 - CFD: 13/10/2010 - 02:19:26 ----D- C:\Program Files (x86)\Windows Media Player
            O43 - CFD: 14/07/2009 - 06:32:40 ----D- C:\Program Files (x86)\Windows NT
            O43 - CFD: 14/07/2009 - 16:24:10 ----D- C:\Program Files (x86)\Windows Photo Viewer
            O43 - CFD: 14/07/2009 - 06:32:42 ----D- C:\Program Files (x86)\Windows Portable Devices
            O43 - CFD: 14/07/2009 - 16:24:10 ----D- C:\Program Files (x86)\Windows Sidebar
            O43 - CFD: 22/01/2011 - 21:07:16 ----D- C:\Program Files (x86)\ZHPDiag
            O43 - CFD: 02/11/2010 - 17:56:02 ----D- C:\Program Files\Common Files\Microsoft Shared
            O43 - CFD: 14/07/2009 - 04:20:10 ----D- C:\Program Files\Common Files\Services
            O43 - CFD: 14/07/2009 - 04:20:10 ----D- C:\Program Files\Common Files\SpeechEngines
            O43 - CFD: 14/07/2009 - 16:24:10 ----D- C:\Program Files\Common Files\System

            ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
            O44 - LFC:[MD5.E1D3C89DB2BC776CFE7691219F82F7C1] - 22/01/2011 - 20:54:16 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [16304]
            O44 - LFC:[MD5.E1D3C89DB2BC776CFE7691219F82F7C1] - 22/01/2011 - 20:54:16 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [16304]
            O44 - LFC:[MD5.B5AC4212FC2790EB8E8DEB5ECF96C1ED] - 22/01/2011 - 20:51:16 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysNative\PerfStringBackup.INI [1549700]
            O44 - LFC:[MD5.F9ADCDA96174EB54A97D04DCBF16DE20] - 22/01/2011 - 20:51:16 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysNative\perfc009.dat [106388]
            O44 - LFC:[MD5.B79F759915F11EF9024123526B1125C9] - 22/01/2011 - 20:51:16 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysNative\perfc00C.dat [130754]
            O44 - LFC:[MD5.B53154B16005035756AAB6C5F768CB99] - 22/01/2011 - 20:51:16 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysNative\perfh009.dat [616008]
            O44 - LFC:[MD5.1644213AB7D2C4DB6B29CBE2140FC6BE] - 22/01/2011 - 20:51:16 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysNative\perfh00C.dat [704480]
            O44 - LFC:[MD5.07000000000000000000000078EE1800] - 22/01/2011 - 20:50:17 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\WindowsUpdate.log [1139892]
            O44 - LFC:[MD5.640DAD2C12AB9C0D0D3070666B6CCF80] - 22/01/2011 - 20:46:46 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\setupact.log [224]
            O44 - LFC:[MD5.BD14BA49B198890EAD306EB7CC157E5C] - 22/01/2011 - 20:46:45 -S-A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\bootstat.dat [67584]
            O44 - LFC:[MD5.293C350B444C15A207B4DE99914DA9D1] - 22/01/2011 - 19:48:33 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\ntbtlog.txt [246678]
            O44 - LFC:[MD5.8D0FF5C2E0B3A508C44619D667723EEE] - 22/01/2011 - 17:24:15 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\PFRO.log [586]
            O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 22/01/2011 - 16:35:45 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\setuperr.log [0]
            O44 - LFC:[MD5.50F6C017223B985398D4B68107338ECB] - 13/01/2011 - 09:47:35 ---A- . (.AVAST Software - avast! Screen Saver stub.) -- C:\Windows\avastSS.scr [38848]
            O44 - LFC:[MD5.0AAF681770781C346A388B03FC421688] - 13/01/2011 - 09:47:32 ---A- . (.AVAST Software - avast! start-up scanner.) -- C:\Windows\System32\aswBoot.exe [188216]
            O44 - LFC:[MD5.0AAF681770781C346A388B03FC421688] - 13/01/2011 - 09:47:23 ---A- . (.AVAST Software - avast! start-up scanner.) -- C:\Windows\SysNative\aswBoot.exe [237168]
            O44 - LFC:[MD5.376F14DCD409160260FDF98B20FB12DC] - 27/12/2010 - 14:50:55 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\VB6.OLB [295514]

            ---\\ Déni du service (Local Security Authority) (LSA) (O48)
            O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
            O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll
            O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll

            ---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52)
            O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
            O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
            O52 - TDSD: \drivers.desc\"wdmaud.drv"="Pilote de fonction UAA 1.1 Microsoft pour High Definition Audio" . (.Pas de propriétaire - Pas de description.) -- (.not file.)

            ---\\ Microsoft Control Security Providers (MCSP) (O54)
            O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.)
            0
        2. ---\\ Microsoft Windows Policies System (MWPS) (O55)
          O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5
          O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
          O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
          O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
          O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
          O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
          O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
          O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
          O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
          O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
          O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=
          O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=
          O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
          O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
          O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
          O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0

          ---\\ Microsoft Windows Policies Explorer (MWPE) (O56)
          O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1
          O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
          O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0

          ---\\ Liste des Drivers Système (SDL) (O58)
          O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys [491088]
          O58 - SDL:[MD5.597F78224EE9224EA1A13D6350CED962] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys [339536]
          O58 - SDL:[MD5.E109549C90F62FB570B9540C4B148E54] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\system32\drivers\adpu320.sys [182864]
          O58 - SDL:[MD5.5812713A477A3AD7363C7438CA2EE038] - 14/07/2009 - 02:52:21 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\system32\drivers\aliide.sys [15440]
          O58 - SDL:[MD5.7A4B413614C055935567CF88A9734D38] - 14/07/2009 - 02:52:21 ---A- . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\system32\drivers\amdsata.sys [106576]
          O58 - SDL:[MD5.F67F933E79241ED32FF46A4F29B5120B] - 14/07/2009 - 02:52:20 ---A- . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller Driver for Windows -.) -- C:\Windows\system32\drivers\amdsbs.sys [194128]
          O58 - SDL:[MD5.B4AD0CACBAB298671DD6F6EF7E20679D] - 14/07/2009 - 02:52:21 ---A- . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\system32\drivers\amdxata.sys [28752]
          O58 - SDL:[MD5.C484F8CEB1717C540242531DB7845C4E] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys [87632]
          O58 - SDL:[MD5.019AF6924AEFE7839F61C830227FE79C] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys [97856]
          O58 - SDL:[MD5.6923740DB573B46FDDA13E1DF412C577] - 13/01/2011 - 09:37:12 ---A- . (.AVAST Software - avast! File System Access Blocking Driver.) -- C:\Windows\system32\drivers\aswFsBlk.sys [20560]
          O58 - SDL:[MD5.DE001B988B58BFD453F667842655B22E] - 13/01/2011 - 09:37:23 ---A- . (.AVAST Software - avast! File System Minifilter for Windows 2003/Vista.) -- C:\Windows\system32\drivers\aswMonFlt.sys [62032]
          O58 - SDL:[MD5.E0D1002D7FA65DD023788B17F714E682] - 13/01/2011 - 09:37:34 ---A- . (.AVAST Software - avast! TDI RDR Driver.) -- C:\Windows\system32\drivers\aswRdr.sys [29264]
          O58 - SDL:[MD5.C3EAFDC0F533425614430A112BA71E9A] - 13/01/2011 - 09:41:44 ---A- . (.AVAST Software - avast! self protection module.) -- C:\Windows\system32\drivers\aswSP.sys [273488]
          O58 - SDL:[MD5.0226FFBC420D8FB67BA3B9DBDD1F2DCA] - 13/01/2011 - 09:40:20 ---A- . (.AVAST Software - avast! TDI Filter Driver.) -- C:\Windows\system32\drivers\aswTdi.sys [51792]
          O58 - SDL:[MD5.E857EEE6B92AAA473EBB3465ADD8F7E7] - 20/06/2009 - 03:09:57 ---A- . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driver.) -- C:\Windows\system32\drivers\athrx.sys [1394688]
          O58 - SDL:[MD5.3EFD964D52221360AF0673CD61C2F4F5] - 13/07/2009 - 22:59:33 ---A- . (.ATI Technologies Inc. - Pilote en mode noyau ATI Radeon.) -- C:\Windows\system32\drivers\atikmdag.sys [5020672]
          O58 - SDL:[MD5.B5ACE6968304A3900EEB1EBFD9622DF2] - 10/06/2009 - 21:34:23 ---A- . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x Unified Driver..) -- C:\Windows\system32\drivers\b57nd60a.sys [270848]
          O58 - SDL:[MD5.F09EEE9EDC320B5E1501F749FDE686C8] - 10/06/2009 - 21:41:06 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys [18432]
          O58 - SDL:[MD5.B114D3098E9BDB8BEA8B053685831BE6] - 10/06/2009 - 21:41:06 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys [8704]
          O58 - SDL:[MD5.43BEA8D483BF1870F018E2D02E06A5BD] - 14/07/2009 - 02:19:07 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys [286720]
          O58 - SDL:[MD5.A6ECA2151B08A09CACECA35C07F05B42] - 10/06/2009 - 21:41:10 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys [47104]
          O58 - SDL:[MD5.B79968002C277E869CF38BD22CD61524] - 10/06/2009 - 21:41:10 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys [14976]
          O58 - SDL:[MD5.A87528880231C54E75EA7A44943B38BF] - 10/06/2009 - 21:41:10 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys [14720]
          O58 - SDL:[MD5.3E5B191307609F7514148C6832BB0842] - 10/06/2009 - 21:34:28 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\system32\drivers\bxvbda.sys [468480]
          O58 - SDL:[MD5.E19D3F095812725D88F9001985B94EDD] - 14/07/2009 - 02:52:31 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\cmdide.sys [17488]
          O58 - SDL:[MD5.0E5DA5369A0FCAEA12456DD852545184] - 14/07/2009 - 02:47:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys [530496]
          O58 - SDL:[MD5.DC5D737F51BE844D8C82C695EB17372F] - 10/06/2009 - 21:34:33 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\system32\drivers\evbda.sys [3286016]
          O58 - SDL:[MD5.F2523EF6460FC42405B12248338AB2F0] - 10/06/2009 - 21:31:59 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\system32\drivers\hcw85cir.sys [31232]
          O58 - SDL:[MD5.0886D440058F203EBA0E1825E4355914] - 14/07/2009 - 02:47:48 ---A- . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Driver.) -- C:\Windows\system32\drivers\HpSAMD.sys [77888]
          O58 - SDL:[MD5.1D004CB1DA6323B1F55CAEF7F94B61D9] - 04/06/2009 - 17:54:36 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\system32\drivers\iaStor.sys [408600]
          O58 - SDL:[MD5.D83EFB6FD45DF9D55E9A1AFC63640D50] - 14/07/2009 - 02:48:04 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\system32\drivers\iaStorV.sys [410688]
          O58 - SDL:[MD5.3C3F27002ABC69C5AFE29CBE6CF7ADDF] - 27/08/2009 - 07:07:06 ---A- . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\system32\drivers\igdkmd64.sys [7369600]
          O58 - SDL:[MD5.5C18831C61933628F5BB0EA2675B9D21] - 14/07/2009 - 02:48:04 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\system32\drivers\iirsp.sys [44112]
          O58 - SDL:[MD5.41E122F6D1448C94CC05196BC41D6BFB] - 30/07/2009 - 20:02:36 ---A- . (.COMPAL ELECTRONIC INC. - LPCFilter.) -- C:\Windows\system32\drivers\LPCFilter.sys [44912]
          O58 - SDL:[MD5.1A93E54EB0ECE102495A51266DCDB6A6] - 14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_fc.sys [114752]
          O58 - SDL:[MD5.1047184A9FDC8BDBFF857175875EE810] - 14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas.sys [106560]
          O58 - SDL:[MD5.30F5C0DE1EE8B5BC9306C1F0E4A75F93] - 14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas2.sys [65600]
          O58 - SDL:[MD5.0504EACAFF0D3C8AED161C4B0D369D4A] - 14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_scsi.sys [115776]
          O58 - SDL:[MD5.DE5D0DD632EE6977979799DE64CE0951] - 29/11/2010 - 17:42:06 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbam.sys [24152]
          O58 - SDL:[MD5.A55805F747C6EDB6A9080D7C633BD0F4] - 14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows 7\Server 2008 R2 for.) -- C:\Windows\system32\drivers\megasas.sys [35392]
          O58 - SDL:[MD5.BAF74CE0072480C3B6B7C13B2A94D6B3] - 14/07/2009 - 02:48:04 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\system32\drivers\MegaSR.sys [284736]
          O58 - SDL:[MD5.77889813BE4D166CDAB78DDBA990DA92] - 14/07/2009 - 02:48:26 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\system32\drivers\nfrd960.sys [51264]
          O58 - SDL:[MD5.3E38712941E9BB4DDBEE00AFFE3FED3D] - 14/07/2009 - 02:48:27 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\system32\drivers\nvraid.sys [149056]
          O58 - SDL:[MD5.477DC4D6DEB99BE37084C9AC6D013DA1] - 14/07/2009 - 02:45:45 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\system32\drivers\nvstor.sys [167488]
          O58 - SDL:[MD5.663962900E7FEA522126BA287715BB4A] - 22/06/2009 - 16:06:38 ---A- . (.TOSHIBA Corporation - TOSHIBA Universal Camera Filter Driver.) -- C:\Windows\system32\drivers\PGEffect.sys [35008]
          O58 - SDL:[MD5.A53A15A11EBFD21077463EE2C7AFEEF0] - 14/07/2009 - 02:45:46 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\system32\drivers\ql2300.sys [1524816]
          O58 - SDL:[MD5.4F6D12B51DE1AAEFF7DC58C4D75423C8] - 14/07/2009 - 02:45:45 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\system32\drivers\ql40xx.sys [128592]
          O58 - SDL:[MD5.F65F171165FBB613F7AA3CC78E8CAB42] - 30/07/2009 - 19:58:42 ---A- . (.Realtek - Realtek 8136/8168/8169 NDIS 6.20 64-bit Driver.) -- C:\Windows\system32\drivers\Rt64win7.sys [236544]
          O58 - SDL:[MD5.A9EDE191B5478D18F0A1BFF3B822F7A5] - 26/08/2009 - 18:11:12 ---A- . (.Realtek Semiconductor Corporation - Realtek RTL81892SE NDIS Driverr.) -- C:\Windows\system32\drivers\rtl8192se.sys [942080]
          O58 - SDL:[MD5.3EA8A16169C26AFBEB544E0E48421186] - 10/06/2009 - 21:37:19 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\system32\drivers\secdrv.sys [23040]
          O58 - SDL:[MD5.843CAF1E5FDE1FFD5FF768F23A51E2E1] - 14/07/2009 - 02:45:45 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\system32\drivers\sisraid2.sys [43584]
          O58 - SDL:[MD5.6A6C106D42E9FFFF8B9FCB4F754F6DA4] - 14/07/2009 - 02:45:46 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\system32\drivers\sisraid4.sys [80464]
          O58 - SDL:[MD5.F3817967ED533D08327DC73BC4D5542A] - 14/07/2009 - 02:45:55 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\system32\drivers\stexstor.sys [24656]
          O58 - SDL:[MD5.BE7311DA9D6833FA69ED04B744A1C8F8] - 20/07/2009 - 16:48:32 ---A- . (.Synaptics Incorporated - Synaptics Touchpad Driver.) -- C:\Windows\system32\drivers\SynTP.sys [274480]
          O58 - SDL:[MD5.FD542B661BD22FA69CA789AD0AC58C29] - 30/07/2009 - 19:22:04 ---A- . (.TOSHIBA Corporation. - TOSHIBA ODD Writing Driver for x64..) -- C:\Windows\system32\drivers\tdcmdpst.sys [27784]
          O58 - SDL:[MD5.09FF7B0B1B5C3D225495CB6F5A9B39F8] - 24/07/2009 - 14:57:08 ---A- . (.TOSHIBA Corporation - tos_sps64.) -- C:\Windows\system32\drivers\tos_sps64.sys [482384]
          O58 - SDL:[MD5.9C7191F4B2E49BFF47A6C1144B5923FA] - 19/06/2009 - 18:15:22 ---A- . (.TOSHIBA Corporation - TOSHIBA TVALZ Filter Driver for x64.) -- C:\Windows\system32\drivers\TVALZFL.sys [14472]
          O58 - SDL:[MD5.550B567F9364D8F7684C3FB3EA665A72] - 14/07/2009 - 14:31:18 ---A- . (.TOSHIBA Corporation - TOSHIBA ACPI-Based Value Added Logical and General Purpose Devi.) -- C:\Windows\system32\drivers\TVALZ_O.SYS [26840]
          O58 - SDL:[MD5.E5689D93FFE4E5D66C0178761240DD54] - 14/07/2009 - 02:45:55 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\viaide.sys [17488]
          O58 - SDL:[MD5.5E2016EA6EBACA03C04FEAC5F330D997] - 14/07/2009 - 02:45:55 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\system32\drivers\vsmraid.sys [161872]
          O58 - SDL:[MD5.E74DC2F3F9675A6025A4AA020EDD4341] - 29/11/2010 - 17:42:18 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\SysWOW64\drivers\mbamswissarmy.sys [38224]

          ---\\ Liste des outils de nettoyage (LATC) (O63)
          O63 - Logiciel: ZHPDiag 1.27 - (.Nicolas Coolman.) [HKLM][64Bits] -- ZHPDiag_is1

          ---\\ Liste des services Legacy (LALS) (O64)
          O64 - Services: CurCS - C:\Windows\system32\drivers\afd.sys (AFD) .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD
          O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWFSBLK.sys - (.not file.) - aswFsBlk (aswFsBlk) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWFSBLK
          O64 - Services: CurCS - C:\Windows\system32\drivers\aswMonFlt.sys - aswMonFlt (aswMonFlt) .(.AVAST Software - avast! File System Minifilter for Windows 2.) - LEGACY_ASWMONFLT
          O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWRDR.sys - (.not file.) - aswRdr (aswRdr) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWRDR
          O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWSP.sys - (.not file.) - aswSP (aswSP) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWSP
          O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWTDI.sys - (.not file.) - avast! Network Shield Support (aswTdi) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWTDI
          O64 - Services: CurCS - C:\Windows\System32\DRIVERS\atapi.sys - IDE Channel (atapi) .(.Microsoft Corporation - ATAPI IDE Miniport Driver.) - LEGACY_ATAPI
          O64 - Services: CurCS - C:\Windows\system32\Drivers\BEEP.sys - (.not file.) - Beep (Beep) .(.Pas de propriétaire - Pas de description.) - LEGACY_BEEP
          O64 - Services: CurCS - C:\Windows\system32\browser.dll (bowser) .(.Microsoft Corporation - DLL du service Explorateur d'ordinateurs.) - LEGACY_BOWSER
          O64 - Services: CurCS - C:\Windows\System32\DRIVERS\cdfs.sys - CD/DVD File System Reader (cdfs) .(.Microsoft Corporation - CD-ROM File System Driver.) - LEGACY_CDFS
          O64 - Services: CurCS - (.not file.) - McAfee Inc. cfwids (cfwids) .(.Pas de propriétaire - Pas de description.) - LEGACY_CFWIDS
          O64 - Services: CurCS - C:\Windows\system32\clfs.sys (CLFS) .(.Microsoft Corporation - Common Log File System Driver.) - LEGACY_CLFS
          O64 - Services: CurCS - C:\Windows\System32\Drivers\cng.sys - CNG (CNG) .(.Microsoft Corporation - Kernel Cryptography, Next Generation.) - LEGACY_CNG
          O64 - Services: CurCS - C:\Windows\system32\drivers\dfsc.sys (DfsC) .(.Microsoft Corporation - DFS Namespace Client Driver.) - LEGACY_DFSC
          O64 - Services: CurCS - C:\Windows\system32\drivers\discache.sys (discache) .(.Microsoft Corporation - System Indexer/Cache Driver.) - LEGACY_DISCACHE
          O64 - Services: CurCS - C:\Windows\system32\drivers\dxgkrnl.sys - LDDM Graphics Subsystem (DXGKrnl) .(.Microsoft Corporation - DirectX Graphics Kernel.) - LEGACY_DXGKRNL
          O64 - Services: CurCS - C:\Windows\system32\Drivers\FASTFAT.sys - (.not file.) - FAT12/16/32 File System Driver (fastfat) .(.Pas de propriétaire - Pas de description.) - LEGACY_FASTFAT
          O64 - Services: CurCS - C:\Windows\system32\drivers\fileinfo.sys (FileInfo) .(.Microsoft Corporation - FileInfo Filter Driver.) - LEGACY_FILEINFO
          O64 - Services: CurCS - C:\Windows\system32\drivers\fltmgr.sys (FltMgr) .(.Microsoft Corporation - Gestionnaire de filtres de système de fichi.) - LEGACY_FLTMGR
          O64 - Services: CurCS - C:\Windows\system32\Drivers\FS_REC.sys - Fs_Rec (Fs_Rec) .(.Pas de propriétaire - Pas de description.) - LEGACY_FS_REC
          O64 - Services: CurCS - C:\Windows\system32\drivers\fvevol.sys (fvevol) .(.Microsoft Corporation - BitLocker Drive Encryption Driver.) - LEGACY_FVEVOL
          O64 - Services: CurCS - C:\Windows\system32\drivers\http.sys (HTTP) .(.Microsoft Corporation - HTTP Pile du protocole.) - LEGACY_HTTP
          O64 - Services: CurCS - C:\Windows\system32\drivers\hwpolicy.sys (hwpolicy) .(.Microsoft Corporation - Hardware Policy Driver.) - LEGACY_HWPOLICY
          O64 - Services: CurCS - C:\Windows\system32\rascfg.dll (IpFilterDriver) .(.Microsoft Corporation - Objets de configuration RAS.) - LEGACY_IPFILTERDRIVER
          O64 - Services: CurCS - C:\Windows\System32\Drivers\ksecdd.sys - KSecDD (KSecDD) .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECDD
          O64 - Services: CurCS - C:\Windows\System32\Drivers\ksecpkg.sys - KSecPkg (KSecPkg) .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECPKG
          O64 - Services: CurCS - C:\Windows\System32\DRIVERS\lltdio.sys - Link-Layer Topology Discovery Mapper I/O Driver (lltdio) .(.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) - LEGACY_LLTDIO
          O64 - Services: CurCS - C:\Windows\system32\drivers\luafv.sys (luafv) .(.Microsoft Corporation - Pilote de filtre de virtualisation de fichi.) - LEGACY_LUAFV
          O64 - Services: CurCS - (.not file.) - McAfee Inc. mfeapfk (mfeapfk) .(.Pas de propriétaire - Pas de description.) - LEGACY_MFEAPFK
          O64 - Services: CurCS - (.not file.) - McAfee Inc. mfeavfk (mfeavfk) .(.Pas de propriétaire - Pas de description.) - LEGACY_MFEAVFK
          O64 - Services: CurCS - (.not file.) - McAfee Inc. (mfeavfk01) .(.Pas de propriétaire - Pas de description.) - LEGACY_MFEAVFK01
          O64 - Services: CurCS - (.not file.) - McAfee Inc. (mfeavfk02) .(.Pas de propriétaire - Pas de description.) - LEGACY_MFEAVFK02
          O64 - Services: CurCS - (.not file.) - McAfee Inc. mfefirek (mfefirek) .(.Pas de propriétaire - Pas de description.) - LEGACY_MFEFIREK
          O64 - Services: CurCS - (.not file.) - McAfee Inc. (mfefirek01) .(.Pas de propriétaire - Pas de description.) - LEGACY_MFEFIREK01
          O64 - Services: CurCS - (.not file.) - McAfee Inc. mfehidk (mfehidk) .(.Pas de propriétaire - Pas de description.) - LEGACY_MFEHIDK
          O64 - Services: CurCS - (.not file.) - McAfee Inc. (mfehidk01) .(.Pas de propriétaire - Pas de description.) - LEGACY_MFEHIDK01
          O64 - Services: CurCS - (.not file.) - McAfee Inc. mferkdet (mferkdet) .(.Pas de propriétaire - Pas de description.) - LEGACY_MFERKDET
          O64 - Services: CurCS - (.not file.) - McAfee Inc. mfesmfk (mfesmfk) .(.Pas de propriétaire - Pas de description.) - LEGACY_MFESMFK
          O64 - Services: CurCS - (.not file.) - McAfee Inc. mfewfpk (mfewfpk) .(.Pas de propriétaire - Pas de description.) - LEGACY_MFEWFPK
          O64 - Services: CurCS - C:\Windows\system32\drivers\mountmgr.sys (mountmgr) .(.Microsoft Corporation - Gestionnaire des points de montage.) - LEGACY_MOUNTMGR
          O64 - Services: CurCS - (.not file.) - MPFP (MPFP) .(.Pas de propriétaire - Pas de description.) - LEGACY_MPFP
          O64 - Services: CurCS - C:\Windows\system32\FirewallAPI.dll (mpsdrv) .(.Microsoft Corporation - API du Pare-feu Windows.) - LEGACY_MPSDRV
          O64 - Services: CurCS - C:\Windows\system32\wkssvc.dll (mrxsmb) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB
          O64 - Services: CurCS - C:\Windows\system32\wkssvc.dll (mrxsmb10) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB10
          O64 - Services: CurCS - C:\Windows\system32\wkssvc.dll (mrxsmb20) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB20
          O64 - Services: CurCS - C:\Windows\system32\DRIVERS\msahci.sys - msahci (msahci) .(.Microsoft Corporation - MS AHCI 1.0 Standard Driver.) - LEGACY_MSAHCI
          O64 - Services: CurCS - C:\Windows\system32\Drivers\MSFS.sys - Msfs (Msfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_MSFS
          O64 - Services: CurCS - C:\Windows\System32\DRIVERS\msisadrv.sys - msisadrv (msisadrv) .(.Microsoft Corporation - ISA Driver.) - LEGACY_MSISADRV
          O64 - Services: CurCS - C:\Windows\system32\drivers\mup.sys (Mup) .(.Microsoft Corporation - Multiple UNC Provider Driver.) - LEGACY_MUP
          O64 - Services: CurCS - C:\Windows\System32\DRIVERS\nwifi.sys - NativeWiFi Filter (NativeWifiP) .(.Microsoft Corporation - Pilote de miniport WiFi natif.) - LEGACY_NATIVEWIFIP
          O64 - Services: CurCS - C:\Windows\system32\drivers\ndis.sys (NDIS) .(.Microsoft Corporation - Pilote NDIS 6.20.) - LEGACY_NDIS
          O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ndisuio.sys - NDIS Usermode I/O Protocol (Ndisuio) .(.Microsoft Corporation - Pilote d'E/S du mode utilisateur NDIS.) - LEGACY_NDISUIO
          O64 - Services: CurCS - C:\Windows\system32\Drivers\NDPROXY.sys - NDProxy (NDProxy) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDPROXY
          O64 - Services: CurCS - C:\Windows\System32\DRIVERS\netbios.sys - NetBIOS Interface (NetBIOS) .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS
          O64 - Services: CurCS - C:\Windows\system32\drivers\netbt.sys (NetBT) .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT
          O64 - Services: CurCS - C:\Windows\system32\Drivers\NPFS.sys - Npfs (Npfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NPFS
          O64 - Services: CurCS - C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy) .(.Microsoft Corporation - NSI Proxy.) - LEGACY_NSIPROXY
          O64 - Services: CurCS - C:\Windows\system32\Drivers\NTFS.sys - Ntfs (Ntfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NTFS
          O64 - Services: CurCS - C:\Windows\system32\Drivers\NULL.sys - Null (Null) .(.Pas de propriétaire - Pas de description.) - LEGACY_NULL
          O64 - Services: CurCS - C:\Windows\System32\DRIVERS\pciide.sys - pciide (pciide) .(.Microsoft Corporation - Generic PCI IDE Bus Driver.) - LEGACY_PCIIDE
          O64 - Services: CurCS - C:\Windows\System32\drivers\pcw.sys - Performance Counters for Windows Driver (pcw) .(.Microsoft Corporation - Performance Counters for Windows Driver.) - LEGACY_PCW
          O64 - Services: CurCS - C:\Windows\System32\drivers\peauth.sys - PEAUTH (PEAUTH) .(.Microsoft Corporation - Protected Environment Authentication and Au.) - LEGACY_PEAUTH
          O64 - Services: CurCS - C:\Windows\system32\drivers\pacer.sys (Psched) .(.Microsoft Corporation - Planificateur de paquets QoS.) - LEGACY_PSCHED
          O64 - Services: CurCS - C:\Windows\system32\wkssvc.dll (rdbss) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_RDBSS
          O64 - Services: CurCS - C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD
          O64 - Services: CurCS - C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD) .(.Microsoft Corporation - RDP Encoder Miniport.) - LEGACY_RDPENCDD
          O64 - Services: CurCS - C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP) .(.Microsoft Corporation - RDP Reflector Driver Miniport.) - LEGACY_RDPREFMP
          O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rspndr.sys - Link-Layer Topology Discovery Responder (rspndr) .(.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) - LEGACY_RSPNDR
          O64 - Services: CurCS - C:\Windows\system32\Drivers\SECDRV.sys - (.not file.) - Security Driver (secdrv) .(.Pas de propriétaire - Pas de description.) - LEGACY_SECDRV
          O64 - Services: CurCS - C:\Windows\system32\Drivers\SPLDR.sys - (.not file.) - Security Processor Loader Driver (spldr) .(.Pas de propriétaire - Pas de description.) - LEGACY_SPLDR
          O64 - Services: CurCS - C:\Windows\system32\srvsvc.dll (srv) .(.Microsoft Corporation - DLL du service Serveur.) - LEGACY_SRV
          O64 - Services: CurCS - C:\Windows\system32\srvsvc.dll (srv2) .(.Microsoft Corporation - DLL du service Serveur.) - LEGACY_SRV2
          O64 - Services: CurCS - C:\Windows\System32\DRIVERS\srvnet.sys - srvnet (srvnet) .(.Microsoft Corporation - Server Network driver.) - LEGACY_SRVNET
          O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (Tcpip) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TCPIP
          O64 - Services: CurCS - C:\Windows\System32\drivers\tcpipreg.sys - TCP/IP Registry Compatibility (tcpipreg) .(.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) - LEGACY_TCPIPREG
          O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (tdx) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TDX
          O64 - Services: CurCS - C:\Windows\System32\DRIVERS\udfs.sys - udfs (udfs) .(.Microsoft Corporation - UDF File System Driver.) - LEGACY_UDFS
          O64 - Services: CurCS - C:\Windows\system32\drivers\vga.sys - VgaSave (VgaSave) .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE
          O64 - Services: CurCS - C:\Windows\system32\drivers\volmgrx.sys (volmgrx) .(.Microsoft Corporation - Pilote d'extension du gestionnaire de volum.) - LEGACY_VOLMGRX
          O64 - Services: CurCS - C:\Windows\System32\DRIVERS\volsnap.sys - Volumes de stockage (volsnap) .(.Microsoft Corporation - Pilote de cliché instantané du volume.) - LEGACY_VOLSNAP
          O64 - Services: CurCS - C:\Windows\System32\DRIVERS\vwififlt.sys - Virtual WiFi Filter Driver (vwififlt) .(.Microsoft Corporation - Virtual WiFi Filter Driver.) - LEGACY_VWIFIFLT
          O64 - Services: CurCS - C:\Windows\system32\rascfg.dll (Wanarpv6) .(.Microsoft Corporation - Objets de configuration RAS.) - LEGACY_WANARPV6
          O64 - Services: CurCS - C:\Windows\System32\drivers\Wdf01000.sys - Kernel Mode Driver Frameworks service (Wdf01000) .(.Microsoft Corporation - Runtime de l'infrastructure de pilotes en m.) - LEGACY_WDF01000
          O64 - Services: CurCS - C:\Windows\System32\DRIVERS\wfplwf.sys - WFP Lightweight Filter (WfpLwf) .(.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - LEGACY_WFPLWF
          O64 - Services: CurCS - C:\Windows\System32\drivers\wimmount.sys - WIMMount (WIMMount) .(.Microsoft Corporation - Wim file system Driver.) - LEGACY_WIMMOUNT
          O64 - Services: CurCS - C:\Windows\System32\drivers\WudfPf.sys - User Mode Driver Frameworks Platform Driver (WudfPf) .(.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) - LEGACY_WUDFPF

          ---\\ File Associations Shell Spawning (O67)
          O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] "%1" %* (.not file.)
          O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
          O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] "%1" %* (.not file.)
          O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] "%1" %* (.not file.)
          O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] "%1" %* (.not file.)
          O67 - Shell Spawning: <.html> <ChromeHTML>[HKLM\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
          O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
          O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
          O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
          O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] "%1" %* (.not file.)
          O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
          O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] "%1" %* (.not file.)
          O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] "%1" %* (.not file.)
          O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] "%1" %* (.not file.)
          O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
          O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
          O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe

          ---\\ Start Menu Internet (SMI) (O68)
          O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
          O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
          O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe

          ---\\ Search Browser Infection (SBI) (O69)
          O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - https://www.bing.com/?toHttps=1&redig=69DA0EF8272048D9864AF4DB37211DE8
          O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} [DefaultScope] - (Google) - https://www.google.com/?gws_rd=ssl
          O69 - SBI: SearchScopes [HKCU] {F97F9472-A071-40FE-93EF-11FF1968621D} - (eBay) - http://rover.ebay.com

          ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
          SR - | Auto 13/01/2011 40384 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
          SR - | Auto 10/08/2009 248688 | (cfWiMAXService) . (.TOSHIBA CORPORATION.) - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe
          SR - | Auto 14/07/2009 42368 | (ConfigFree Gadget Service) . (.TOSHIBA CORPORATION.) - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exe
          SR - | Auto 10/03/2009 46448 | (ConfigFree Service) . (.TOSHIBA CORPORATION.) - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe
          SS - | Demand 22/05/2009 250616 | (GameConsoleService) . (.WildTangent, Inc..) - C:\Program Files (x86)\TOSHIBA Games\TOSHIBA Game Console\GameConsoleService.exe
          SS - | Auto 09/09/2010 135664 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
          SR - | Auto 23/01/2009 203280 | (McAfee SiteAdvisor Service) . (.Pas de propriétaire.) - C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe
          SS - | Demand 11/05/2010 124368 | (TemproMonitoringService) . (.Toshiba Europe GmbH.) - C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe
          SS - | Demand 17/08/2009 51512 | (TMachInfo) . (.TOSHIBA Corporation.) - C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
          SR - | Auto 17/08/2009 0 | (TODDSrv) . (.TOSHIBA Corporation.) - C:\Windows\system32\TODDSrv.exe
          SR - | Auto 05/08/2009 488800 | (TosCoSrv) . (.TOSHIBA Corporation.) - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
          SR - | Auto 27/08/2009 251760 | (TOSHIBA eco Utility Service) . (.TOSHIBA Corporation.) - C:\Program Files\TOSHIBA\TECO\TecoService.exe
          SR - | Demand 03/08/2009 137560 | (TOSHIBA HDD SSD Alert Service) . (.TOSHIBA Corporation.) - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
          SR - | Demand 04/08/2009 826224 | (TPCHSrv) . (.TOSHIBA Corporation.) - C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
          SR - | Auto 14/07/2009 20992 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\system32\svchost.exe

          ---\\ Recherche Master Boot Record Infection (MBR)(O80)
          Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.1 by Gmer, http://www.gmer.net
          Run by anne so at 22/01/2011 21:08:18

          device: opened successfully
          user: error reading MBR

          Disk trace:
          error: Read Descripteur non valide
          kernel: error reading MBR

          ---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)
          Written by ad13, http://ad13.geekstog
          Run by anne so at 22/01/2011 21:08:18
          Use the desktop link 'MBRCheck' to have full report

          End of the scan (892 lines in 01mn 07s)(0)
          0
          1. desolée ca veut pas coller en une fois
            0
            1. il en manque un bout au milieux, mais je sais de quoi ton pc souffre !

              * Télécharge de AD-Remover sur ton Bureau. (Merci à C_XX)
              http://www.teamxscript.org/adremoverTelechargement.html ( Lien officiel )
              https://www.androidworld.fr/ ( Miroir )
              /!\ Ferme toutes applications en cours /!\

              - Double-clique sur l'icône Ad-remover située sur ton Bureau.
              - Sur la page, clique sur le bouton « Nettoyer »
              - Confirme lancement du scan
              - Laisse travailler l'outil.
              - Poste le rapport qui apparaît à la fin.

              (Le rapport est sauvegardé aussi sous C:\Ad-report(Scan/clean).Txt)

              (CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)
              0
              1. ======= RAPPORT D'AD-REMOVER 2.0.0.2,D | UNIQUEMENT XP/VISTA/7 =======

                Mis à jour par TeamXscript le 20/01/11 à 19:00
                Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
                Site web: http://www.teamxscript.org

                C:\Program Files (x86)\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 21:28:27 le 22/01/2011, Mode normal

                Microsoft Windows 7 Édition Familiale Premium (X64)
                anne so@ANNESO-TOSH (TOSHIBA Satellite L550)

                ============== ACTION(S) ==============

                Dossier supprimé: C:\Users\anne so\AppData\Roaming\OfferBox

                (!) -- Fichiers temporaires supprimés.

                -- Fichier ouvert: C:\Users\anne so\AppData\Roaming\Mozilla\FireFox\Profiles\z4okkiwl.default\Prefs.js --
                Ligne supprimée: user_pref("browser.search.selectedEngine", "Fissa");
                Ligne supprimée: user_pref("extensions.Fissa.lastRunTime", "Sat, 22 Jan 2011 12:58:26 GMT");
                -- Fichier Fermé --

                Clé supprimée: HKLM\Software\OfferBox
                Clé supprimée: HKCU\Software\freeCompressor
                Clé supprimée: HKCU\Software\OfferBox
                Clé supprimée: HKCU\Software\FissaSearch
                Clé supprimée: HKCU\Software\Spointer
                Clé supprimée: HKLM\Software\Google\Chrome\Extensions\bjeikeheijdjdfjbmknpefojickbkmom

                ============== SCAN ADDITIONNEL ==============

                ** Mozilla Firefox Version [3.6.13 (fr)] **

                -- C:\Users\anne so\AppData\Roaming\Mozilla\FireFox\Profiles\z4okkiwl.default\Prefs.js --
                browser.download.lastDir, C:\\Users\\anne so\\Pictures
                browser.search.defaultenginename, SweetIM Search
                browser.search.defaulturl, hxxp://search.sweetim.com/search.asp?src=2&q=
                browser.startup.homepage, hxxp://www.fissa.com/fr/?s=h&c=1101224009&suid=Emm7KRf.U&d=6&pid=30
                browser.startup.homepage_override.mstone, rv:1.9.2.13
                keyword.URL, hxxp://search.sweetim.com/search.asp?src=2&q=
                sweetim.toolbar.previous.browser.search.defaultenginename, chrome://browser-region/locale/region.properties
                sweetim.toolbar.previous.browser.startup.homepage, hxxp://www.fissa.com/fr/?s=h&c=1101224009&suid=Emm7KRf.U&d=6&pid=30
                sweetim.toolbar.previous.keyword.URL, chrome://browser-region/locale/region.properties

                ========================================

                ** Internet Explorer Version [8.0.7600.16385] **

                [HKCU\Software\Microsoft\Internet Explorer\Main]
                Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
                Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                Do404Search: 0x01000000
                Enable Browser Extensions: yes
                Local Page: C:\Windows\system32\blank.htm
                Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
                Show_ToolBar: yes
                Start Page: hxxp://fr.msn.com/

                [HKLM\Software\Microsoft\Internet Explorer\Main]
                AutoHide: yes
                Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
                Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                Delete_Temp_Files_On_Exit: yes
                Local Page: C:\Windows\SysWOW64\blank.htm
                Search bar: hxxp://search.msn.com/spbasic.htm
                Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                Start Page: hxxp://fr.msn.com/

                [HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
                Tabs: res://ieframe.dll/tabswelcome.htm
                Blank: res://mshtml.dll/blank.htm

                ========================================

                C:\Program Files (x86)\Ad-Remover\Quarantine: 2 Fichier(s)
                C:\Program Files (x86)\Ad-Remover\Backup: 15 Fichier(s)

                C:\Ad-Report-CLEAN[1].txt - 22/01/2011 (3329 Octet(s))

                Fin à: 21:29:44, 22/01/2011

                ============== E.O.F ==============
                0
                1. relance ADR, clique sur désistaller,

                  repasse un autre zhpdiag,

                  * Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette
                  * Héberge le rapport ZHPDiag.txt sur Cijoint, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum :
                  http://www.cijoint.fr/
                  ou :
                  http://ww38.toofiles.com/fr/documents-upload.html
                  ou :
                  https://www.terafiles.net/


                  il fat que tu arrives à hébérger le rapport, il est trop long et quand il est coupé, très difficile à déchiffrer :P

                  0
                  1. Delete file: C:\Program Files (x86)\Ad-Remover\Erunt\ERDNT.E_E
                    Delete file: C:\Program Files (x86)\Ad-Remover\Erunt\ERDNTDOS.LOC
                    Delete file: C:\Program Files (x86)\Ad-Remover\Erunt\ERDNTWIN.LOC
                    Delete file: C:\Program Files (x86)\Ad-Remover\Erunt\ERUNT.exe
                    Delete file: C:\Program Files (x86)\Ad-Remover\Erunt\ERUNT.LOC
                    Delete file: C:\Program Files (x86)\Ad-Remover\Erunt\README.TXT
                    Delete file: C:\Program Files (x86)\Ad-Remover\Backup\telech[1].exe
                    Delete file: C:\Program Files (x86)\Ad-Remover\res\Icons\icon.ico
                    Delete file: C:\Program Files (x86)\Ad-Remover\res\Icons\install.ico
                    Delete file: C:\Program Files (x86)\Ad-Remover\res\Icons\ReadMe_Install.ico.txt
                    Delete file: C:\Program Files (x86)\Ad-Remover\res\Icons\uninstall.ico
                    Delete file: C:\Program Files (x86)\Ad-Remover\res\Images\AboutImg.jpg
                    Delete file: C:\Program Files (x86)\Ad-Remover\res\Images\Logo.jpg
                    Delete file: C:\Program Files (x86)\Ad-Remover\res\Images\Paypal-EN.jpg
                    Delete file: C:\Program Files (x86)\Ad-Remover\res\Images\Paypal-FR.jpg
                    Delete file: C:\Program Files (x86)\Ad-Remover\bin\CTbUninstaller.exe
                    Delete file: C:\Program Files (x86)\Ad-Remover\main.exe
                    Delete file: C:\Program Files (x86)\Ad-Remover\Uninstall.exe
                    Delete file: C:\Users\anne so\Desktop\AD-R.lnk
                    Remove folder: C:\Program Files (x86)\Ad-Remover\Backup\
                    Remove folder: C:\Program Files (x86)\Ad-Remover\bin\
                    Remove folder: C:\Program Files (x86)\Ad-Remover\Erunt\
                    Delete file: C:\Program Files (x86)\Ad-Remover\Lang\Lang-EN.ini
                    Delete file: C:\Program Files (x86)\Ad-Remover\Lang\Lang-FR.ini
                    Delete file: C:\Program Files (x86)\Ad-Remover\Lang\Lang-NE.ini
                    Remove folder: C:\Program Files (x86)\Ad-Remover\Lang\
                    Remove folder: C:\Program Files (x86)\Ad-Remover\Quarantine\
                    Remove folder: C:\Program Files (x86)\Ad-Remover\res\Icons\
                    Remove folder: C:\Program Files (x86)\Ad-Remover\res\Images\
                    Remove folder: C:\Program Files (x86)\Ad-Remover\res\
                    Completed

                    desolée eu plein de soucis avec AD
                    0
                    1. Rapport de ZHPDiag v1.27.1421 par Nicolas Coolman, Update du 16/12/2010
                      Run by anne so at 22/01/2011 22:17:29
                      Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
                      Contact : nicolascoolman@yahoo.fr

                      ---\\ Web Browser
                      MSIE: Internet Explorer v8.0.7600.16385
                      MFIE: Mozilla Firefox v3.6.13 (fr) (Defaut)
                      GCIE: Google Chrome v8.0.552.237

                      ---\\ System Information
                      Windows 7 Home Premium Edition, 64-bit (Build 7600)
                      Processor: Intel64 Family 6 Model 23 Stepping 10, GenuineIntel
                      Operating System: 64 Bits
                      Boot mode: Normal (Normal boot)
                      Total RAM: 3932 MB (59% free)
                      System drive C: has 40 GB (27%) free of 149 GB

                      ---\\ Logged in mode
                      Computer Name: ANNESO-TOSH
                      User Name: anne so
                      All Users Names: HomeGroupUser$, anne so, Administrateur,
                      Unselected Option: O1,O45,O61,O62,O65,O82
                      Logged in as Administrator

                      ---\\ DOS/Devices
                      C:\ Hard drive, Flash drive, Thumb drive (Free 40 Go of 149 Go)
                      D:\ Hard drive, Flash drive, Thumb drive (Free 44 Go of 149 Go)
                      E:\ CD-ROM drive (Not Inserted)

                      ---\\ Security Center & Tools Informations
                      [HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
                      [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
                      [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
                      [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
                      [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
                      [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
                      [HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
                      [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
                      [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
                      [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
                      [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
                      [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
                      [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
                      [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
                      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
                      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
                      [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK
                      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
                      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK

                      ---\\ Recherche particulière de fichiers génériques
                      [MD5.9AAAEC8DAC27AA17B053E6352AD233AE] - (.Microsoft Corporation - Explorateur Windows.) (.31/10/2009 07:34:59.) -- C:\Windows\Explorer.exe [2870272]
                      [MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 02:14:45.) -- C:\Windows\System32\Wininit.exe [96256]

                      ---\\ Processus lancés
                      [MD5.9D77E8A2EE92E9DAFAC88DEFCF6D777D] - (.TOSHIBA CORPORATION - ConfigFree Task Tray Menu.) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe [304496]
                      [MD5.BBFED9378719CF8E0C3DEDC979B5D649] - (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\TOPI.exe [6203296]
                      [MD5.C5B2679B0AE204FDD0415199B7AFEF20] - (.TOSHIBA CORPORATION - KeNotify MFC Application.) -- C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe [34088]
                      [MD5.1079D6DA23EEE32E846BADEED77B4E9C] - (.TOSHIBA CORPORATION. - Pas de description.) -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe [2446648]
                      [MD5.7B878518590E826F1F3A5B1D61D405F8] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe [3396624]
                      [MD5.8A07221789D46B2EA7DFCA2BC807572A] - (.TOSHIBA CORPORATION - ConfigFree Switch Manager Process.) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe [62848]
                      [MD5.58CF468D3FF4CF830339FE5E45356355] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe [673040]
                      [MD5.711FD53E441255983C0AB014E2F107F4] - (.Adobe Systems, Inc. - Adobe® Flash® Player Installer/Uninstaller.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10l_ActiveX.exe [233936]
                      [MD5.AECBBD99F06C11302B0C53758F89ACDB] - (.Shareaza Development Team - Shareaza Ultimate File Sharing.) -- C:\Program Files (x86)\Shareaza\Shareaza.exe [4574208]
                      [MD5.D9AEA3215FDA8F0F9E5AEAEFCF8534B7] - (.Shareaza Development Team - Windows Thumbnail plugin for Shareaza.) -- C:\Program Files (x86)\Shareaza\WindowsThumbnail.exe [78336]
                      [MD5.A8DE64E1D60F4EDD24CE1D4AEAD98C87] - (.C_XX - Ad-Remover.) -- C:\Users\ANNESO~1\AppData\Local\Temp\~nsu.tmp\Cu_.exe [45816]
                      [MD5.806A8E35707BEA615B209001E544F0F0] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [620544]

                      ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2)
                      P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npnul32.dll
                      P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
                      P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.5.9.615.) -- C:\Windows\system32\Adobe\Director\np32dsw.dll
                      P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.51204.0.) -- C:\Program Files (x86)\Microsoft Silverlight\4.0.51204.0\npctrl.dll
                      P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3502.0922] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
                      P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=8] - (.Google Inc. - Google Update.) -- C:\Program Files (x86)\Google\Update\1.2.183.39\npGoogleOneClick8.dll
                      M0 - MFSP: prefs.js [anne so - z4okkiwl.default] http://www.fissa.com/fr/?s=h&c=1101224009&suid=Emm7KRf.U&d=6&pid=30
                      M2 - MFEP: prefs.js [anne so - z4okkiwl.default\{EEE6C361-6118-11DC-9C72-001320C79847}] [] SweetIM Toolbar for Firefox v1.1.0.2 (.SweetIM Technologies LTD..)

                      ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
                      G0 - GCSP: Preference [User Data\Default][HomePage] https://home.sweetim.com/

                      ---\\ Internet Explorer, Démarrage,Recherche,URSearchHook (R0,R1,R3)
                      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
                      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
                      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
                      R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} . (.Pas de propriétaire - Pas de description.) (No version) -- C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelper.dll

                      ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
                      F2 - REG:system.ini: UserInit=userinit.exe
                      F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe
                      F2 - REG:system.ini: VMApplet=C:\WINDOWS\system32\SystemPropertiesPerformance.exe

                      ---\\ Browser Helper Objects de navigateur (O2)
                      O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} . (.Shareaza Development Team - Shareaza Web Download Hook.) -- C:\Program Files (x86)\Shareaza\RazaWebHook32.dll
                      O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                      O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} . (.Pas de propriétaire - Pas de description.) -- c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
                      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
                      O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll

                      ---\\ Internet Explorer Toolbars (O3)
                      O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} . (.Pas de propriétaire - Pas de description.) -- c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
                      O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll

                      ---\\ Applications démarrées par registre & par dossier (O4)
                      O4 - HKLM\..\Run: [SVPWUTIL] . (.TOSHIBA - SVPWUTIL Application.) -- C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe
                      O4 - HKLM\..\Run: [HWSetup] . (.TOSHIBA Electronics, Inc. - HWSetup.) -- C:\Program Files\TOSHIBA\Utilities\HWSetup.exe
                      O4 - HKLM\..\Run: [KeNotify] . (.TOSHIBA CORPORATION - KeNotify MFC Application.) -- C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe
                      O4 - HKLM\..\Run: [TWebCamera] C:\Program Files\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe (.not file.)
                      O4 - HKLM\..\Run: [avast5] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\avastUI.exe
                      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe
                      O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
                      O4 - HKCU\..\Run: [TOSHIBA Online Product Information] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\topi.exe
                      O4 - HKCU\..\Run: [Shareaza] . (.Shareaza Development Team - Shareaza Ultimate File Sharing.) -- C:\Program Files (x86)\Shareaza\Shareaza.exe
                      O4 - HKLM\..\Wow6432Node\Run: [SVPWUTIL] . (.TOSHIBA - SVPWUTIL Application.) -- C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe
                      O4 - HKLM\..\Wow6432Node\Run: [HWSetup] . (.TOSHIBA Electronics, Inc. - HWSetup.) -- C:\Program Files\TOSHIBA\Utilities\HWSetup.exe
                      O4 - HKLM\..\Wow6432Node\Run: [KeNotify] . (.TOSHIBA CORPORATION - KeNotify MFC Application.) -- C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe
                      O4 - HKLM\..\Wow6432Node\Run: [TWebCamera] C:\Program Files\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe (.not file.)
                      O4 - HKLM\..\Wow6432Node\Run: [avast5] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\avastUI.exe
                      O4 - HKLM\..\Wow6432Node\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe
                      O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
                      O4 - HKUS\S-1-5-18\..\Run: [TOSHIBA Online Product Information] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\topi.exe
                      O4 - HKUS\S-1-5-18\..\Run: [TOSHIBA Online Product Information] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\topi.exe
                      O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
                      O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
                      O4 - HKUS\S-1-5-21-2030544128-1871575060-3465723408-1000\..\Run: [TOSHIBA Online Product Information] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\topi.exe
                      O4 - HKUS\S-1-5-21-2030544128-1871575060-3465723408-1000\..\Run: [Shareaza] . (.Shareaza Development Team - Shareaza Ultimate File Sharing.) -- C:\Program Files (x86)\Shareaza\Shareaza.exe
                      O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (.not file.)
                      O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (.not file.)

                      ---\\ Autres liens utilisateurs (O4)
                      O4 - Global Startup: C:\Documents And Settings\anne so\Desktop\Bridge Base Online.lnk . (.Pas de propriétaire.) -- C:\Bridge Base Online\NetBridgeVu.exe
                      O4 - Global Startup: C:\Documents And Settings\anne so\Desktop\PDF Editeur 3.0.lnk . (.Pas de propriétaire.) -- C:\Program Files (x86)\PDF Editeur 3\PDFEdit.exe
                      O4 - Global Startup: C:\Users\anne so\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
                      O4 - Global Startup: C:\Users\anne so\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
                      O4 - Global Startup: C:\Users\anne so\Desktop\Bridge Base Online.lnk . (.Pas de propriétaire.) -- C:\Bridge Base Online\NetBridgeVu.exe
                      O4 - Global Startup: C:\Users\anne so\Desktop\PDF Editeur 3.0.lnk . (.Pas de propriétaire.) -- C:\Program Files (x86)\PDF Editeur 3\PDFEdit.exe
                      O4 - Global Startup: C:\Users\anne so\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
                      O4 - Global Startup: C:\Users\anne so\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
                      O4 - Global Startup: C:\Users\anne so\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
                      O4 - Global Startup: C:\Users\anne so\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shareaza.lnk . (.Shareaza Development Team.) -- C:\Program Files (x86)\Shareaza\Shareaza.exe
                      O4 - Global Startup: C:\Users\anne so\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - Clé orpheline
                      O4 - Global Startup: C:\Users\anne so\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - Clé orpheline

                      ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
                      O8 - Extra context menu item: Download with &Shareaza . (.Shareaza Development Team - Shareaza Web Download Hook.) -- C:\Program Files (x86)\Shareaza\RazaWebHook32.dll
                      O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~2\MICROS~2\Office12\EXCEL.exe
                      O8 - Extra context menu item: Google Sidewiki... - (.not file.) - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll

                      ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
                      O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
                      O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft Office OneNote Internet Explorer Add-in.) -- C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
                      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (.Pas de propriétaire - Pas de description.) -- C:\PROGRA~2\MICROS~2\Office12\REFBARH.ICO

                      ---\\ Winsock hijacker (Layered Service Provider) (O10)
                      O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
                      O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
                      O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
                      O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
                      O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
                      O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
                      O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL
                      O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL

                      ---\\ Modification Domaine/Adresses DNS (O17)
                      O17 - HKLM\System\CCS\Services\Tcpip\..\{309B5F37-2FF6-4CFF-BCE4-1EFE63300E2E}: DhcpNameServer = 89.2.0.1 89.2.0.2
                      O17 - HKLM\System\CCS\Services\Tcpip\..\{3AE34777-6EE3-4F5E-8C3F-3F7E0822D1A5}: DhcpNameServer = 89.2.0.1 89.2.0.2
                      O17 - HKLM\System\CS1\Services\Tcpip\..\{309B5F37-2FF6-4CFF-BCE4-1EFE63300E2E}: DhcpNameServer = 89.2.0.1 89.2.0.2
                      O17 - HKLM\System\CS1\Services\Tcpip\..\{3AE34777-6EE3-4F5E-8C3F-3F7E0822D1A5}: DhcpNameServer = 89.2.0.1 89.2.0.2
                      O17 - HKLM\System\CS2\Services\Tcpip\..\{309B5F37-2FF6-4CFF-BCE4-1EFE63300E2E}: DhcpNameServer = 89.2.0.1 89.2.0.2
                      O17 - HKLM\System\CS2\Services\Tcpip\..\{3AE34777-6EE3-4F5E-8C3F-3F7E0822D1A5}: DhcpNameServer = 89.2.0.1 89.2.0.2
                      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 89.2.0.1 89.2.0.2

                      ---\\ Protocole additionnel et piratage de protocole (O18)
                      O18 - Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} . (.Pas de propriétaire - Pas de description.) -- c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll

                      ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
                      O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.

                      ---\\ Liste des services NT non Microsoft et non désactivés (O23)
                      O23 - Service: (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
                      O23 - Service: (cfWiMAXService) . (.TOSHIBA CORPORATION - ConfigFree Service Process.) - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe
                      O23 - Service: (ConfigFree Gadget Service) . (.TOSHIBA CORPORATION - ConfigFree Gadget Process Service.) - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exe
                      O23 - Service: (ConfigFree Service) . (.TOSHIBA CORPORATION - ConfigFree Service Process.) - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe
                      O23 - Service: (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
                      O23 - Service: (McAfee SiteAdvisor Service) . (.Pas de propriétaire - Pas de description.) - C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe
                      O23 - Service: (TODDSrv) - Clé orpheline
                      O23 - Service: (TosCoSrv) . (.TOSHIBA Corporation - TOSHIBA Power Saver.) - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
                      O23 - Service: (TOSHIBA eco Utility Service) . (.TOSHIBA Corporation - TOSHIBA eco Utility Service.) - C:\Program Files\TOSHIBA\TECO\TecoService.exe

                      ---\\ Enumération Active Desktop & MHTML Editor (O24)
                      O24 - Default MHTML Editor: Last - .(.Pas de propriétaire - Pas de description.) - (.not file.)

                      ---\\ Tâches planifiées en automatique (O39)
                      O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
                      O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
                      [MD5.9D77E8A2EE92E9DAFAC88DEFCF6D777D] [APT] [ConfigFree Startup Programs] (.TOSHIBA CORPORATION.) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe
                      [MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
                      [MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
                      [MD5.AB96046A9C27886BD39E191BE6372A88] [APT] [{BB8C6AED-3999-4667-9D7D-017842677FC1}] (.Pas de propriétaire.) -- C:\Program Files\Alwil Software\Avast5\aswRundll.exe

                      ---\\ Composants installés (ActiveSetup Installed Components) (O40)
                      O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre6\bin\regutils.dll

                      ---\\ Pilotes lancés au démarrage (O41)
                      O41 - Driver: C:\Windows\system32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
                      O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\system32\DRIVERS\blbdrive.sys
                      O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
                      O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
                      O41 - Driver: C:\Windows\system32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
                      O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\DRIVERS\mssmbios.sys
                      O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
                      O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
                      O41 - Driver: C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
                      O41 - Driver: C:\Windows\system32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
                      O41 - Driver: C:\Windows\system32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
                      O41 - Driver: C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
                      O41 - Driver: C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
                      O41 - Driver: C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
                      O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Tcpip) . (.Microsoft Corporation - Pilote TCP/IP.) - C:\Windows\System32\drivers\tcpip.sys
                      O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
                      O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\DRIVERS\termdd.sys
                      O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
                      O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys
                      O41 - Driver: C:\Windows\system32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
                      O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys

                      ---\\ Logiciels installés (O42)
                      O42 - Logiciel: 3nity CD DVD BURNER 2.0.1 - (.3nity Softwares.) [HKLM] -- {70E0BA9E-5978-4E83-A269-77BDB7A79F23}_is1
                      O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR
                      O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}
                      O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
                      O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
                      O42 - Logiciel: Adobe Reader 9.4.1 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A94000000001}
                      O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player
                      O42 - Logiciel: Bridge Base Online - (.Pas de propriétaire.) [HKLM] -- Bridge_Base_Online
                      O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
                      O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {488F0347-C4A7-4374-91A7-30818BEDA710}
                      O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome
                      O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
                      O42 - Logiciel: Java(TM) 6 Update 14 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216014FF}
                      O42 - Logiciel: Jeux WildTangent - (.WildTangent.) [HKLM] -- WildTangent toshiba Master Uninstall
                      O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
                      O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
                      O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9}
                      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
                      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
                      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
                      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{E64BA721-2310-4B55-BE5A-2925F9706192}
                      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-002A-040C-1000-0000000FF1CE}_HOMESTUDENTR_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
                      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}_HOMESTUDENTR_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
                      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-00A1-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
                      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
                      O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}
                      O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.) [HKLM] -- HOMESTUDENTR
                      O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}
                      O42 - Logiciel: Microsoft Office OneNote MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-00A1-040C-0000-0000000FF1CE}
                      O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}
                      O42 - Logiciel: Microsoft Office PowerPoint Viewer 2007 (French) - (.Microsoft Corporation.) [HKLM] -- {95120000-00AF-040C-0000-0000000FF1CE}
                      O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}
                      O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}
                      O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}
                      O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}
                      O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}
                      O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}
                      O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE}
                      O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}_HOMESTUDENTR_{14809F99-C601-4D4A-9391-F1E8FAA964C5}
                      O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}
                      O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
                      O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}
                      O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}_HOMESTUDENTR_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
                      O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}
                      O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}
                      O42 - Logiciel: Microsoft Office Suite Activation Assistant - (.Microsoft Corporation.) [HKLM] -- {E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}
                      O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}
                      O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
                      O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
                      O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}
                      O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c}
                      O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
                      O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {3B160861-7250-451E-B5EE-8B92BF30A710}
                      O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-040C-0000-0000000FF1CE}
                      O42 - Logiciel: Mozilla Firefox (3.6.13) - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.6.13)
                      O42 - Logiciel: PDF Editeur 3 - (.Pas de propriétaire.) [HKLM] -- PDF Editeur 3
                      O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
                      O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM] -- {96AE7E41-E34E-47D0-AC07-1091A8127911}
                      O42 - Logiciel: Realtek WLAN Driver - (.Realtek.) [HKLM] -- {0FB630AB-7BD8-40AE-B223-60397D57C3C9}
                      O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288621) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{5C497F0B-2061-4CC9-A61C-6B45B867354D}
                      O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288931) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CD769337-C8AC-46DB-A7DC-643E50089263}
                      O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2289158) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{210B16C0-CEBD-4DE9-B474-04A7E8735E16}
                      O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2344875) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6FC5C4C1-D7AE-44C3-94B7-6424FC3E752F}
                      O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2345043) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{536FB502-775F-4494-BACE-C02CC90B7A5B}
                      O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB969559) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
                      O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB976321) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{7F207DCA-3399-40CB-A968-6E5991B1421A}
                      O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2160841
                      O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB2345035) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{B23002DD-34EC-4988-B810-A5E2A0BF04F1}
                      O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB979441) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{8CCB781A-CF6B-4FCB-B6D8-59C64DF5C6DB}
                      O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB982158) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{F5B70033-E79C-4569-90BF-BC9B4E4F3F46}
                      O42 - Logiciel: Security Update for Microsoft Office PowerPoint Viewer (KB2413381) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3DED0A62-44C8-4E00-A785-5212F297A9D9}
                      O42 - Logiciel: Security Update for Microsoft Office Visio Viewer 2007 (KB973709) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
                      O42 - Logiciel: Security Update for Microsoft Office Word 2007 (KB2344993) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{7A5B74FA-7A92-4FC9-821A-2DD5D4E73E48}
                      O42 - Logiciel: Security Update for Microsoft Office system 2007 (972581) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}
                      O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB974234) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{FCD742B9-7A55-44BC-A776-F795F21FEDDC}
                      O42 - Logiciel: Shareaza 2.5.3.0 - (.Shareaza Development Team.) [HKLM] -- Shareaza_is1
                      O42 - Logiciel: Skype(TM) Launcher - (.Skype Technologies S.A..) [HKLM] -- {26D8DF7E-DBF8-43A6-8D42-F37497CE603D}
                      O42 - Logiciel: TOSHIBA Bulletin Board - (.TOSHIBA Corporation.) [HKLM] -- InstallShield_{1E9E8BA6-FD0B-465D-AFA2-ECE10BF095F9}
                      O42 - Logiciel: TOSHIBA ConfigFree - (.TOSHIBA Corporation.) [HKLM] -- {F3529665-D75E-4D6D-98F0-745C78C68E9B}
                      O42 - Logiciel: TOSHIBA DVD PLAYER - (.TOSHIBA Corporation.) [HKLM] -- {6C5F3BDC-0A1B-4436-A696-5939629D5C31}
                      O42 - Logiciel: TOSHIBA Extended Tiles for Windows Mobility Center - (.Pas de propriétaire.) [HKLM] -- InstallShield_{617C36FD-0CBE-4600-84B2-441CEB12FADF}
                      O42 - Logiciel: TOSHIBA Face Recognition - (.TOSHIBA Corporation.) [HKLM] -- InstallShield_{F67FA545-D8E5-4209-86B1-AEE045D1003F}
                      O42 - Logiciel: TOSHIBA Flash Cards Support Utility - (.TOSHIBA CORPORATION.) [HKLM] -- InstallShield_{620BBA5E-F848-4D56-8BDA-584E44584C5E}
                      O42 - Logiciel: TOSHIBA Flash Cards Support Utility - (.TOSHIBA CORPORATION.) [HKLM] -- {620BBA5E-F848-4D56-8BDA-584E44584C5E}
                      O42 - Logiciel: TOSHIBA HDD/SSD Alert - (.TOSHIBA Corporation.) [HKLM] -- InstallShield_{D4322448-B6AF-4316-B859-D8A0E84DCB38}
                      O42 - Logiciel: TOSHIBA Hardware Setup - (.TOSHIBA CORPORATION.) [HKLM] -- InstallShield_{5279374D-87FE-4879-9385-F17278EBB9D3}
                      O42 - Logiciel: TOSHIBA Hardware Setup - (.TOSHIBA CORPORATION.) [HKLM] -- {5279374D-87FE-4879-9385-F17278EBB9D3}
                      O42 - Logiciel: TOSHIBA Mot de passe responsable - (.TOSHIBA CORPORATION.) [HKLM] -- InstallShield_{51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}
                      O42 - Logiciel: TOSHIBA Recovery Media Creator Reminder - (.TOSHIBA.) [HKLM] -- InstallShield_{773970F1-5EBA-4474-ADEE-1EA3B0A59492}
                      O42 - Logiciel: TOSHIBA ReelTime - (.TOSHIBA Corporation.) [HKLM] -- InstallShield_{C2DDF845-7107-40E8-8D2A-8719F1799570}
                      O42 - Logiciel: TOSHIBA Service Station - (.TOSHIBA.) [HKLM] -- {AC6569FA-6919-442A-8552-073BE69E247A}
                      O42 - Logiciel: TOSHIBA Supervisor Password - (.TOSHIBA CORPORATION.) [HKLM] -- {51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}
                      O42 - Logiciel: TOSHIBA Value Added Package - (.TOSHIBA Corporation.) [HKLM] -- InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}
                      O42 - Logiciel: TOSHIBA Web Camera Application - (.TOSHIBA Corporation.) [HKLM] -- {5E6F6CF3-BACC-4144-868C-E14622C658F3}
                      O42 - Logiciel: TOSHIBA eco Utility - (.TOSHIBA Corporation.) [HKLM] -- InstallShield_{B3FF1CD9-B2F0-4D71-BB55-5F580401C48E}
                      O42 - Logiciel: TRORMCLauncher - (.Pas de propriétaire.) [HKLM] -- InstallShield_{E65C7D8E-186D-484B-BEA8-DEF0331CE600}
                      O42 - Logiciel: Toshiba Assist - (.TOSHIBA.) [HKLM] -- {1B87C40B-A60B-4EF3-9A68-706CF4B69978}
                      O42 - Logiciel: Toshiba Manuals - (.TOSHIBA.) [HKLM] -- {90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}
                      O42 - Logiciel: Toshiba Online Product Information - (.TOSHIBA.) [HKLM] -- {2290A680-4083-410A-ADCC-7092C67FC052}
                      O42 - Logiciel: Toshiba Photo Service - powered by myphotobook - (.myphotobook GmbH.) [HKLM] -- eu.myphotobook.001F9DF2D0BAABEB11F42CCEE43224607B61109C.1
                      O42 - Logiciel: Toshiba Photo Service - powered by myphotobook - (.myphotobook GmbH.) [HKLM] -- {0823A2E3-69DD-A37A-7CD9-1CBEB037545C}
                      O42 - Logiciel: Toshiba TEMPRO - (.Toshiba Europe GmbH.) [HKLM] -- {DBB7021A-3437-446F-ACE5-7261644A972C}
                      O42 - Logiciel: Update for 2007 Microsoft Office System (KB2284654) - (.Microsoft.) [HKLM] -- {90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{FB166E7C-8AA6-48C8-B726-1F25BEE7825A}
                      O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}
                      O42 - Logiciel: Update for Microsoft Office OneNote 2007 (KB980729) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{329050A9-EF80-40F9-B633-74508F54C1FF}
                      O42 - Logiciel: VLC media player 1.1.4 - (.VideoLAN.) [HKLM] -- VLC media player
                      O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite
                      O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM] -- {34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}
                      O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {D45240D3-B6B3-4FF9-B243-54ECE3E10066}
                      O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM] -- {2075CB0A-D26F-4DAA-B424-5079296B43BA}
                      O42 - Logiciel: Windows Live Installer - (.Microsoft Corporation.) [HKLM] -- {0B0F231F-CE6A-483D-AA23-77B364F75917}
                      O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {9D56775A-93F3-44A3-8092-840E3826DE30}
                      O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {9FAE6E8D-E686-49F5-A574-0A58DFD9580C}
                      O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {6057E21C-ABE9-4059-AE3E-3BEB9925E660}
                      O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {EB4DF488-AAEF-406F-A341-CB2AAA315B90}
                      O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM] -- {6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}
                      O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM] -- {92EA4134-10D1-418A-91E1-5A0453131A38}
                      O42 - Logiciel: Windows Live PIMT Platform - (.Microsoft Corporation.) [HKLM] -- {4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}
                      O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM] -- {A9BDCA6B-3653-467B-AC83-94367DA3BFE3}
                      O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM] -- {C893D8C0-1BA0-4517-B11C-E89B65E72F70}
                      O42 - Logiciel: Windows Live Photo Gallery - (.Microsoft Corporation.) [HKLM] -- {3336F667-9049-4D46-98B6-4C743EEBC5B1}
                      O42 - Logiciel: Windows Live SOXE - (.Microsoft Corporation.) [HKLM] -- {682B3E4F-696A-42DE-A41C-4C07EA1678B4}
                      O42 - Logiciel: Windows Live SOXE Definitions - (.Microsoft Corporation.) [HKLM] -- {200FEC62-3C34-4D60-9CE8-EC372E01C08F}
                      O42 - Logiciel: Windows Live UX Platform - (.Microsoft Corporation.) [HKLM] -- {CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}
                      O42 - Logiciel: Windows Live UX Platform Language Pack - (.Microsoft Corporation.) [HKLM] -- {09F56A49-A7B1-4AAB-95B9-D13094254AD1}
                      O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {3B9A92DA-6374-4872-B646-253F18624D5F}
                      O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {A726AE06-AAA3-43D1-87E3-70F510314F04}
                      O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {AAAFC670-569B-4A2F-82B4-42945E0DE3EF}
                      O42 - Logiciel: Windows Live Writer Resources - (.Microsoft Corporation.) [HKLM] -- {62687B11-58B5-4A18-9BC3-9DF4CE03F194}
                      O42 - Logiciel: avast! Free Antivirus - (.Alwil Software.) [HKLM] -- avast5
                      O42 - Logiciel: eBay - (.eBay Inc..) [HKLM] -- {E83BA61A-5D77-4DD5-9C92-A3447F11E27D}

                      ---\\ HKCU & HKLM Software Keys
                      [HKCU\Software\ALWIL Software]
                      [HKCU\Software\Adobe]
                      [HKCU\Software\AppDataLow\Software\Adobe]
                      [HKCU\Software\AppDataLow\Software\Google]
                      [HKCU\Software\AppDataLow\Software\Macromedia]
                      [HKCU\Software\AppDataLow\Software\Microsoft]
                      [HKCU\Software\AppDataLow\Software]
                      [HKCU\Software\AppDataLow]
                      [HKCU\Software\Canneverbe Limited]
                      [HKCU\Software\Classes]
                      [HKCU\Software\Clients]
                      [HKCU\Software\FIXIO PC Utilities]
                      [HKCU\Software\Google]
                      [HKCU\Software\IM Providers]
                      [HKCU\Software\Intel]
                      [HKCU\Software\JavaSoft]
                      [HKCU\Software\Local AppWizard-Generated Applications]
                      [HKCU\Software\Macromedia]
                      [HKCU\Software\Magnet]
                      [HKCU\Software\Malwarebytes' Anti-Malware]
                      [HKCU\Software\MozillaPlugins]
                      [HKCU\Software\Nero]
                      [HKCU\Software\Netscape]
                      [HKCU\Software\ODBC]
                      [HKCU\Software\PDFEdit]
                      [HKCU\Software\Piriform]
                      [HKCU\Software\Policies]
                      [HKCU\Software\Shareaza]
                      [HKCU\Software\Softonic]
                      [HKCU\Software\SweetIM]
                      [HKCU\Software\Synaptics]
                      [HKCU\Software\TOSHIBA]
                      [HKCU\Software\Wow6432Node]
                      [HKLM\Software\ALWIL Software]
                      [HKLM\Software\Adobe]
                      [HKLM\Software\America Online]
                      [HKLM\Software\AppDataLow]
                      [HKLM\Software\Bridge Base]
                      [HKLM\Software\COMPAL]
                      [HKLM\Software\Canneverbe Limited]
                      [HKLM\Software\Classes]
                      [HKLM\Software\Clients]
                      [HKLM\Software\Cyberlink]
                      [HKLM\Software\Digital River]
                      [HKLM\Software\Google]
                      [HKLM\Software\InstallShield]
                      [HKLM\Software\Intel]
                      [HKLM\Software\JavaSoft]
                      [HKLM\Software\Macromedia]
                      [HKLM\Software\Malwarebytes' Anti-Malware]
                      [HKLM\Software\McAfeeInstaller]
                      [HKLM\Software\McAfee]
                      [HKLM\Software\MozillaPlugins]
                      [HKLM\Software\Mozilla]
                      [HKLM\Software\Nero]
                      [HKLM\Software\ODBC]
                      [HKLM\Software\Policies]
                      [HKLM\Software\Realtek Semiconductor Corp.]
                      [HKLM\Software\Realtek]
                      [HKLM\Software\RegisteredApplications]
                      [HKLM\Software\RtWLan]
                      [HKLM\Software\SecureDigitalServices]
                      [HKLM\Software\Shareaza]
                      [HKLM\Software\SiteAdvisor]
                      [HKLM\Software\SweetIM]
                      [HKLM\Software\TOSHIBA Corporation]
                      [HKLM\Software\TOSHIBA]
                      [HKLM\Software\Uniblue]
                      [HKLM\Software\VideoLAN]
                      [HKLM\Software\Volatile]
                      [HKLM\Software\WildTangent]
                      [HKLM\Software\mcafeeupdater]
                      [HKLM\Software\mozilla.org]

                      ---\\ Contenu des dossiers ProgramFiles/ProgramData (O43)
                      O43 - CFD: 09/09/2010 - 18:50:28 ----D- C:\Program Files\Alwil Software
                      O43 - CFD: 02/01/2011 - 22:59:58 ----D- C:\Program Files\CCleaner
                      O43 - CFD: 27/12/2010 - 15:33:46 ----D- C:\Program Files\CDBurnerXP
                      O43 - CFD: 02/11/2010 - 22:36:38 ----D- C:\Program Files\Common Files
                      O43 - CFD: 14/07/2009 - 16:35:28 ----D- C:\Program Files\DVD Maker
                      O43 - CFD: 09/09/2010 - 17:47:06 -SH-D- C:\Program Files\Fichiers communs
                      O43 - CFD: 20/11/2010 - 18:56:16 ----D- C:\Program Files\Google
                      O43 - CFD: 15/12/2010 - 18:20:46 ----D- C:\Program Files\Internet Explorer
                      O43 - CFD: 04/09/2009 - 14:43:18 ----D- C:\Program Files\Microsoft Games
                      O43 - CFD: 04/09/2009 - 14:49:42 ----D- C:\Program Files\Microsoft Office
                      O43 - CFD: 14/07/2009 - 06:32:40 ----D- C:\Program Files\MSBuild
                      O43 - CFD: 04/09/2009 - 14:23:24 ----D- C:\Program Files\PlayReady
                      O43 - CFD: 20/11/2010 - 19:42:28 ----D- C:\Program Files\Realtek
                      O43 - CFD: 14/07/2009 - 06:32:40 ----D- C:\Program Files\Reference Assemblies
                      O43 - CFD: 04/09/2009 - 14:39:28 ----D- C:\Program Files\Skype-Launcher
                      O43 - CFD: 14/05/2010 - 05:52:26 ----D- C:\Program Files\Synaptics
                      O43 - CFD: 14/05/2010 - 05:55:44 ----D- C:\Program Files\TOSHIBA
                      O43 - CFD: 14/07/2009 - 06:09:28 --H-D- C:\Program Files\Uninstall Information
                      O43 - CFD: 14/07/2009 - 16:24:10 ----D- C:\Program Files\Windows Defender
                      O43 - CFD: 14/07/2009 - 16:35:28 ----D- C:\Program Files\Windows Journal
                      O43 - CFD: 02/11/2010 - 17:56:10 ----D- C:\Program Files\Windows Live
                      O43 - CFD: 16/12/2010 - 09:52:42 ----D- C:\Program Files\Windows Mail
                      O43 - CFD: 13/10/2010 - 02:19:26 ----D- C:\Program Files\Windows Media Player
                      O43 - CFD: 09/09/2010 - 17:47:06 ----D- C:\Program Files\Windows NT
                      O43 - CFD: 14/07/2009 - 16:24:10 ----D- C:\Program Files\Windows Photo Viewer
                      O43 - CFD: 14/07/2009 - 06:32:40 ----D- C:\Program Files\Windows Portable Devices
                      O43 - CFD: 14/07/2009 - 16:24:10 ----D- C:\Program Files\Windows Sidebar
                      O43 - CFD: 02/11/2010 - 17:56:02 ----D- C:\Program Files\Common Files\Microsoft Shared
                      O43 - CFD: 14/07/2009 - 04:20:10 ----D- C:\Program Files\Common Files\Services
                      O43 - CFD: 14/07/2009 - 04:20:10 ----D- C:\Program Files\Common Files\SpeechEngines
                      O43 - CFD: 14/07/2009 - 16:24:10 ----D- C:\Program Files\Common Files\System
                      O43 - CFD: 02/11/2010 - 14:35:46 ----D- C:\ProgramData\Adobe
                      O43 - CFD: 09/09/2010 - 18:50:28 ----D- C:\ProgramData\Alwil Software
                      O43 - CFD: 14/07/2009 - 06:08:58 -SH-D- C:\ProgramData\Application Data
                      O43 - CFD: 09/09/2010 - 17:47:06 -SH-D- C:\ProgramData\Bureau
                      O43 - CFD: 20/11/2010 - 18:10:40 ----D- C:\ProgramData\Canneverbe Limited
                      O43 - CFD: 14/07/2009 - 06:08:58 -SH-D- C:\ProgramData\Desktop
                      O43 - CFD: 14/07/2009 - 06:08:58 -SH-D- C:\ProgramData\Documents
                      O43 - CFD: 20/11/2010 - 21:13:48 ----D- C:\ProgramData\Driver Whiz
                      O43 - CFD: 20/11/2010 - 20:06:50 ----D- C:\ProgramData\DriverBoost
                      O43 - CFD: 09/09/2010 - 17:47:06 -SH-D- C:\ProgramData\Favoris
                      O43 - CFD: 14/07/2009 - 06:08:58 -SH-D- C:\ProgramData\Favorites
                      O43 - CFD: 22/01/2011 - 16:44:22 ----D- C:\ProgramData\Google
                      O43 - CFD: 04/09/2009 - 14:40:54 ----D- C:\ProgramData\IsolatedStorage
                      O43 - CFD: 22/01/2011 - 18:00:42 ----D- C:\ProgramData\Malwarebytes
                      O43 - CFD: 05/11/2010 - 08:37:52 ----D- C:\ProgramData\McAfee
                      O43 - CFD: 09/09/2010 - 17:47:06 -SH-D- C:\ProgramData\Menu Démarrer
                      O43 - CFD: 20/11/2010 - 20:10:02 -S--D- C:\ProgramData\Microsoft
                      O43 - CFD: 15/12/2010 - 18:01:40 ----D- C:\ProgramData\Microsoft Help
                      O43 - CFD: 09/09/2010 - 17:47:06 -SH-D- C:\ProgramData\Modèles
                      O43 - CFD: 20/11/2010 - 17:57:40 ----D- C:\ProgramData\Nero
                      O43 - CFD: 13/10/2010 - 02:20:48 ----D- C:\ProgramData\Partner
                      O43 - CFD: 04/09/2009 - 14:46:02 ----D- C:\ProgramData\SiteAdvisor
                      O43 - CFD: 14/07/2009 - 06:08:58 -SH-D- C:\ProgramData\Start Menu
                      O43 - CFD: 14/07/2009 - 06:08:58 -SH-D- C:\ProgramData\Templates
                      O43 - CFD: 14/05/2010 - 05:58:00 ----D- C:\ProgramData\TOSHIBA
                      O43 - CFD: 09/09/2010 - 17:47:22 ----D- C:\ProgramData\ToshibaEurope
                      O43 - CFD: 04/09/2009 - 14:27:32 ----D- C:\ProgramData\Vista32
                      O43 - CFD: 04/09/2009 - 14:27:32 ----D- C:\ProgramData\Vista64
                      O43 - CFD: 04/09/2009 - 14:43:10 ----D- C:\ProgramData\WildTangent
                      O43 - CFD: 04/09/2009 - 14:31:30 ----D- C:\ProgramData\win7_32
                      O43 - CFD: 04/09/2009 - 14:31:30 ----D- C:\ProgramData\win7_64
                      O43 - CFD: 04/09/2009 - 14:27:32 ----D- C:\ProgramData\XP
                      O43 - CFD: 02/11/2010 - 17:56:02 ----D- C:\Program Files\Common Files\Microsoft Shared
                      O43 - CFD: 14/07/2009 - 04:20:10 ----D- C:\Program Files\Common Files\Services
                      O43 - CFD: 14/07/2009 - 04:20:10 ----D- C:\Program Files\Common Files\SpeechEngines
                      O43 - CFD: 14/07/2009 - 16:24:10 ----D- C:\Program Files\Common Files\System
                      O43 - CFD: 27/12/2010 - 14:50:54 ----D- C:\Program Files (x86)\3nity CD DVD BURNER
                      O43 - CFD: 22/01/2011 - 22:02:10 ----D- C:\Program Files (x86)\Ad-Remover
                      O43 - CFD: 02/11/2010 - 14:35:36 ----D- C:\Program Files (x86)\Adobe
                      O43 - CFD: 22/01/2011 - 20:27:46 ----D- C:\Program Files (x86)\Common Files
                      O43 - CFD: 04/09/2009 - 14:37:38 ----D- C:\Program Files (x86)\eBay
                      O43 - CFD: 20/11/2010 - 18:56:16 ----D- C:\Program Files (x86)\Google
                      O43 - CFD: 21/11/2010 - 00:44:54 --H-D- C:\Program Files (x86)\InstallShield Installation Information
                      O43 - CFD: 04/09/2009 - 14:25:40 ----D- C:\Program Files (x86)\Intel
                      O43 - CFD: 15/12/2010 - 18:20:46 ----D- C:\Program Files (x86)\Internet Explorer
                      O43 - CFD: 04/09/2009 - 14:30:12 ----D- C:\Program Files (x86)\Java
                      O43 - CFD: 02/11/2010 - 22:36:38 ----D- C:\Program Files (x86)\McAfee
                      O43 - CFD: 04/09/2009 - 14:50:56 ----D- C:\Program Files (x86)\Microsoft Office
                      O43 - CFD: 04/09/2009 - 14:51:46 ----D- C:\Program Files (x86)\Microsoft Office Suite Activation Assistant
                      O43 - CFD: 02/01/2011 - 22:03:58 ----D- C:\Program Files (x86)\Microsoft Silverlight
                      O43 - CFD: 04/09/2009 - 14:54:02 ----D- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
                      O43 - CFD: 15/12/2010 - 18:02:24 ----D- C:\Program Files (x86)\Microsoft Works
                      O43 - CFD: 18/10/2010 - 23:30:12 ----D- C:\Program Files (x86)\Microsoft.NET
                      O43 - CFD: 22/01/2011 - 16:59:22 ----D- C:\Program Files (x86)\Mozilla Firefox
                      O43 - CFD: 14/07/2009 - 06:32:40 ----D- C:\Program Files (x86)\MSBuild
                      O43 - CFD: 15/09/2010 - 07:31:36 ----D- C:\Program Files (x86)\PDF Editeur 3
                      O43 - CFD: 04/09/2009 - 14:39:22 ----D- C:\Program Files (x86)\Photo-Service
                      O43 - CFD: 21/11/2010 - 00:44:54 ----D- C:\Program Files (x86)\Realtek
                      O43 - CFD: 21/11/2010 - 00:25:30 ----D- C:\Program Files (x86)\Realtek WLAN Driver
                      O43 - CFD: 14/07/2009 - 06:32:40 ----D- C:\Program Files (x86)\Reference Assemblies
                      O43 - CFD: 26/11/2010 - 18:06:00 ----D- C:\Program Files (x86)\Shareaza
                      O43 - CFD: 21/11/2010 - 00:14:28 --H-D- C:\Program Files (x86)\Temp
                      O43 - CFD: 14/05/2010 - 05:57:56 ----D- C:\Program Files (x86)\TOSHIBA
                      O43 - CFD: 04/09/2009 - 14:43:12 ----D- C:\Program Files (x86)\TOSHIBA Games
                      O43 - CFD: 22/11/2010 - 08:50:10 ----D- C:\Program Files (x86)\Toshiba TEMPRO
                      O43 - CFD: 14/07/2009 - 05:57:08 --H-D- C:\Program Files (x86)\Uninstall Information
                      O43 - CFD: 09/09/2010 - 18:22:30 ----D- C:\Program Files (x86)\VideoLAN
                      O43 - CFD: 22/01/2011 - 16:39:26 ----D- C:\Program Files (x86)\VS Revo Group
                      O43 - CFD: 14/07/2009 - 16:24:10 ----D- C:\Program Files (x86)\Windows Defender
                      O43 - CFD: 02/11/2010 - 17:57:32 ----D- C:\Program Files (x86)\Windows Live
                      O43 - CFD: 16/12/2010 - 09:52:42 ----D- C:\Program Files (x86)\Windows Mail
                      O43 - CFD: 13/10/2010 - 02:19:26 ----D- C:\Program Files (x86)\Windows Media Player
                      O43 - CFD: 14/07/2009 - 06:32:40 ----D- C:\Program Files (x86)\Windows NT
                      O43 - CFD: 14/07/2009 - 16:24:10 ----D- C:\Program Files (x86)\Windows Photo Viewer
                      O43 - CFD: 14/07/2009 - 06:32:42 ----D- C:\Program Files (x86)\Windows Portable Devices
                      O43 - CFD: 14/07/2009 - 16:24:10 ----D- C:\Program Files (x86)\Windows Sidebar
                      O43 - CFD: 22/01/2011 - 22:17:34 ----D- C:\Program Files (x86)\ZHPDiag
                      O43 - CFD: 18/10/2010 - 23:01:44 ----D- C:\Program Files (x86)\Common Files\Adobe
                      O43 - CFD: 02/11/2010 - 14:35:34 ----D- C:\Program Files (x86)\Common Files\Adobe AIR
                      O43 - CFD: 04/09/2009 - 14:50:56 ----D- C:\Program Files (x86)\Common Files\DESIGNER
                      O43 - CFD: 14/05/2010 - 05:46:56 ----D- C:\Program Files (x86)\Common Files\InstallShield
                      O43 - CFD: 02/11/2010 - 22:36:38 ----D- C:\Program Files (x86)\Common Files\McAfee
                      O43 - CFD: 02/11/2010 - 17:56:02 ----D- C:\Program Files (x86)\Common Files\microsoft shared
                      O43 - CFD: 14/07/2009 - 04:20:10 ----D- C:\Program Files (x86)\Common Files\Services
                      O43 - CFD: 14/07/2009 - 04:20:10 ----D- C:\Program Files (x86)\Common Files\SpeechEngines
                      O43 - CFD: 14/07/2009 - 16:24:10 ----D- C:\Program Files (x86)\Common Files\System
                      O43 - CFD: 14/05/2010 - 05:58:12 ----D- C:\Program Files (x86)\Common Files\Toshiba Shared
                      O43 - CFD: 04/09/2009 - 14:52:00 ----D- C:\Program Files (x86)\Common Files\Windows Live

                      ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
                      O44 - LFC:[MD5.775D6076736AA5D294ACADA4ED94CC63] - 22/01/2011 - 21:37:57 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [16304]
                      O44 - LFC:[MD5.775D6076736AA5D294ACADA4ED94CC63] - 22/01/2011 - 21:37:57 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [16304]
                      O44 - LFC:[MD5.B5AC4212FC2790EB8E8DEB5ECF96C1ED] - 22/01/2011 - 21:35:20 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysNative\PerfStringBackup.INI [1549700]
                      O44 - LFC:[MD5.F9ADCDA96174EB54A97D04DCBF16DE20] - 22/01/2011 - 21:35:20 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysNative\perfc009.dat [106388]
                      O44 - LFC:[MD5.B79F759915F11EF9024123526B1125C9] - 22/01/2011 - 21:35:20 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysNative\perfc00C.dat [130754]
                      O44 - LFC:[MD5.B53154B16005035756AAB6C5F768CB99] - 22/01/2011 - 21:35:20 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysNative\perfh009.dat [616008]
                      O44 - LFC:[MD5.1644213AB7D2C4DB6B29CBE2140FC6BE] - 22/01/2011 - 21:35:20 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysNative\perfh00C.dat [704480]
                      O44 - LFC:[MD5.070000000000000000000000F4EE1800] - 22/01/2011 - 21:34:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\WindowsUpdate.log [1145980]
                      O44 - LFC:[MD5.B0EC8C6756A84C17ADB89B58786DD8E4] - 22/01/2011 - 21:30:35 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\setupact.log [280]
                      O44 - LFC:[MD5.4A14D0D1AD73030A2EE3F22732CF33FA] - 22/01/2011 - 21:30:33 -S-A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\bootstat.dat [67584]
                      O44 - LFC:[MD5.293C350B444C15A207B4DE99914DA9D1] - 22/01/2011 - 19:48:33 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\ntbtlog.txt [246678]
                      O44 - LFC:[MD5.8D0FF5C2E0B3A508C44619D667723EEE] - 22/01/2011 - 17:24:15 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\PFRO.log [586]
                      O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 22/01/2011 - 16:35:45 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\setuperr.log [0]
                      O44 - LFC:[MD5.50F6C017223B985398D4B68107338ECB] - 13/01/2011 - 09:47:35 ---A- . (.AVAST Software - avast! Screen Saver stub.) -- C:\Windows\avastSS.scr [38848]
                      O44 - LFC:[MD5.0AAF681770781C346A388B03FC421688] - 13/01/2011 - 09:47:32 ---A- . (.AVAST Software - avast! start-up scanner.) -- C:\Windows\System32\aswBoot.exe [188216]
                      O44 - LFC:[MD5.0AAF681770781C346A388B03FC421688] - 13/01/2011 - 09:47:23 ---A- . (.AVAST Software - avast! start-up scanner.) -- C:\Windows\SysNative\aswBoot.exe [237168]
                      O44 - LFC:[MD5.376F14DCD409160260FDF98B20FB12DC] - 27/12/2010 - 14:50:55 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\VB6.OLB [295514]

                      ---\\ Déni du service (Local Security Authority) (LSA) (O48)
                      O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
                      O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll
                      O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll

                      ---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52)
                      O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\SysWOW64\l3codeca.acm" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
                      O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll
                      O52 - TDSD: \drivers.desc\"C:\Windows\SysWOW64\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Pas de propriétaire - Pas de description.) -- (.not file.)

                      ---\\ Microsoft Control Security Providers (MCSP) (O54)
                      O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\system32\credssp.dll
                      O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\system32\credssp.dll

                      ---\\ Microsoft Windows Policies System (MWPS) (O55)
                      O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5
                      O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
                      O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
                      O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
                      O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
                      O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
                      O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
                      O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
                      O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
                      O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
                      O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=
                      O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=
                      O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
                      O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
                      O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
                      O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0

                      ---\\ Microsoft Windows Policies Explorer (MWPE) (O56)
                      O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1
                      O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
                      O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0

                      ---\\ Liste des Drivers Système (SDL) (O58)
                      O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys [491088]
                      O58 - SDL:[MD5.597F78224EE9224EA1A13D6350CED962] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys [339536]
                      O58 - SDL:[MD5.E109549C90F62FB570B9540C4B148E54] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Drive
                      0
                      1. ---\\ Liste des outils de nettoyage (LATC) (O63)
                        O63 - Logiciel: ZHPDiag 1.27 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1

                        ---\\ Liste des services Legacy (LALS) (O64)
                        O64 - Services: CurCS - C:\Windows\system32\drivers\afd.sys (AFD) .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD
                        O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWFSBLK.sys - (.not file.) - aswFsBlk (aswFsBlk) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWFSBLK
                        O64 - Services: CurCS - C:\Windows\system32\drivers\aswMonFlt.sys - aswMonFlt (aswMonFlt) .(.AVAST Software - avast! File System Minifilter for Windows 2.) - LEGACY_ASWMONFLT
                        O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWRDR.sys - (.not file.) - aswRdr (aswRdr) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWRDR
                        O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWSP.sys - (.not file.) - aswSP (aswSP) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWSP
                        O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWTDI.sys - (.not file.) - avast! Network Shield Support (aswTdi) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWTDI
                        O64 - Services: CurCS - C:\Windows\System32\DRIVERS\atapi.sys - IDE Channel (atapi) .(.Microsoft Corporation - ATAPI IDE Miniport Driver.) - LEGACY_ATAPI
                        O64 - Services: CurCS - C:\Windows\system32\Drivers\BEEP.sys - (.not file.) - Beep (Beep) .(.Pas de propriétaire - Pas de description.) - LEGACY_BEEP
                        O64 - Services: CurCS - C:\Windows\system32\browser.dll (bowser) .(.Microsoft Corporation - DLL du service Explorateur d'ordinateurs.) - LEGACY_BOWSER
                        O64 - Services: CurCS - C:\Windows\System32\DRIVERS\cdfs.sys - CD/DVD File System Reader (cdfs) .(.Microsoft Corporation - CD-ROM File System Driver.) - LEGACY_CDFS
                        O64 - Services: CurCS - (.not file.) - McAfee Inc. cfwids (cfwids) .(.Pas de propriétaire - Pas de description.) - LEGACY_CFWIDS
                        O64 - Services: CurCS - C:\Windows\system32\clfs.sys (CLFS) .(.Microsoft Corporation - Common Log File System Driver.) - LEGACY_CLFS
                        O64 - Services: CurCS - C:\Windows\System32\Drivers\cng.sys - CNG (CNG) .(.Microsoft Corporation - Kernel Cryptography, Next Generation.) - LEGACY_CNG
                        O64 - Services: CurCS - C:\Windows\system32\drivers\dfsc.sys (DfsC) .(.Microsoft Corporation - DFS Namespace Client Driver.) - LEGACY_DFSC
                        O64 - Services: CurCS - C:\Windows\system32\drivers\discache.sys (discache) .(.Microsoft Corporation - System Indexer/Cache Driver.) - LEGACY_DISCACHE
                        O64 - Services: CurCS - C:\Windows\system32\drivers\dxgkrnl.sys - LDDM Graphics Subsystem (DXGKrnl) .(.Microsoft Corporation - DirectX Graphics Kernel.) - LEGACY_DXGKRNL
                        O64 - Services: CurCS - C:\Windows\system32\Drivers\FASTFAT.sys - (.not file.) - FAT12/16/32 File System Driver (fastfat) .(.Pas de propriétaire - Pas de description.) - LEGACY_FASTFAT
                        O64 - Services: CurCS - C:\Windows\system32\drivers\fileinfo.sys (FileInfo) .(.Microsoft Corporation - FileInfo Filter Driver.) - LEGACY_FILEINFO
                        O64 - Services: CurCS - C:\Windows\system32\drivers\fltmgr.sys (FltMgr) .(.Microsoft Corporation - Gestionnaire de filtres de système de fichi.) - LEGACY_FLTMGR
                        O64 - Services: CurCS - C:\Windows\system32\Drivers\FS_REC.sys - Fs_Rec (Fs_Rec) .(.Pas de propriétaire - Pas de description.) - LEGACY_FS_REC
                        O64 - Services: CurCS - C:\Windows\system32\drivers\fvevol.sys (fvevol) .(.Microsoft Corporation - BitLocker Drive Encryption Driver.) - LEGACY_FVEVOL
                        O64 - Services: CurCS - C:\Windows\system32\drivers\http.sys (HTTP) .(.Microsoft Corporation - HTTP Pile du protocole.) - LEGACY_HTTP
                        O64 - Services: CurCS - C:\Windows\system32\drivers\hwpolicy.sys (hwpolicy) .(.Microsoft Corporation - Hardware Policy Driver.) - LEGACY_HWPOLICY
                        O64 - Services: CurCS - C:\Windows\system32\rascfg.dll (IpFilterDriver) .(.Microsoft Corporation - Objets de configuration RAS.) - LEGACY_IPFILTERDRIVER
                        O64 - Services: CurCS - C:\Windows\System32\Drivers\ksecdd.sys - KSecDD (KSecDD) .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECDD
                        O64 - Services: CurCS - C:\Windows\System32\Drivers\ksecpkg.sys - KSecPkg (KSecPkg) .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECPKG
                        O64 - Services: CurCS - C:\Windows\System32\DRIVERS\lltdio.sys - Link-Layer Topology Discovery Mapper I/O Driver (lltdio) .(.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) - LEGACY_LLTDIO
                        O64 - Services: CurCS - C:\Windows\system32\drivers\luafv.sys (luafv) .(.Microsoft Corporation - Pilote de filtre de virtualisation de fichi.) - LEGACY_LUAFV
                        O64 - Services: CurCS - (.not file.) - McAfee Inc. mfeapfk (mfeapfk) .(.Pas de propriétaire - Pas de description.) - LEGACY_MFEAPFK
                        O64 - Services: CurCS - (.not file.) - McAfee Inc. mfeavfk (mfeavfk) .(.Pas de propriétaire - Pas de description.) - LEGACY_MFEAVFK
                        O64 - Services: CurCS - (.not file.) - McAfee Inc. (mfeavfk01) .(.Pas de propriétaire - Pas de description.) - LEGACY_MFEAVFK01
                        O64 - Services: CurCS - (.not file.) - McAfee Inc. (mfeavfk02) .(.Pas de propriétaire - Pas de description.) - LEGACY_MFEAVFK02
                        O64 - Services: CurCS - (.not file.) - McAfee Inc. mfefirek (mfefirek) .(.Pas de propriétaire - Pas de description.) - LEGACY_MFEFIREK
                        O64 - Services: CurCS - (.not file.) - McAfee Inc. (mfefirek01) .(.Pas de propriétaire - Pas de description.) - LEGACY_MFEFIREK01
                        O64 - Services: CurCS - (.not file.) - McAfee Inc. mfehidk (mfehidk) .(.Pas de propriétaire - Pas de description.) - LEGACY_MFEHIDK
                        O64 - Services: CurCS - (.not file.) - McAfee Inc. (mfehidk01) .(.Pas de propriétaire - Pas de description.) - LEGACY_MFEHIDK01
                        O64 - Services: CurCS - (.not file.) - McAfee Inc. mferkdet (mferkdet) .(.Pas de propriétaire - Pas de description.) - LEGACY_MFERKDET
                        O64 - Services: CurCS - (.not file.) - McAfee Inc. mfesmfk (mfesmfk) .(.Pas de propriétaire - Pas de description.) - LEGACY_MFESMFK
                        O64 - Services: CurCS - (.not file.) - McAfee Inc. mfewfpk (mfewfpk) .(.Pas de propriétaire - Pas de description.) - LEGACY_MFEWFPK
                        O64 - Services: CurCS - C:\Windows\system32\drivers\mountmgr.sys (mountmgr) .(.Microsoft Corporation - Gestionnaire des points de montage.) - LEGACY_MOUNTMGR
                        O64 - Services: CurCS - (.not file.) - MPFP (MPFP) .(.Pas de propriétaire - Pas de description.) - LEGACY_MPFP
                        O64 - Services: CurCS - C:\Windows\system32\FirewallAPI.dll (mpsdrv) .(.Microsoft Corporation - API du Pare-feu Windows.) - LEGACY_MPSDRV
                        O64 - Services: CurCS - C:\Windows\system32\wkssvc.dll (mrxsmb) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB
                        O64 - Services: CurCS - C:\Windows\system32\wkssvc.dll (mrxsmb10) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB10
                        O64 - Services: CurCS - C:\Windows\system32\wkssvc.dll (mrxsmb20) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB20
                        O64 - Services: CurCS - C:\Windows\system32\DRIVERS\msahci.sys - msahci (msahci) .(.Microsoft Corporation - MS AHCI 1.0 Standard Driver.) - LEGACY_MSAHCI
                        O64 - Services: CurCS - C:\Windows\system32\Drivers\MSFS.sys - Msfs (Msfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_MSFS
                        O64 - Services: CurCS - C:\Windows\System32\DRIVERS\msisadrv.sys - msisadrv (msisadrv) .(.Microsoft Corporation - ISA Driver.) - LEGACY_MSISADRV
                        O64 - Services: CurCS - C:\Windows\system32\drivers\mup.sys (Mup) .(.Microsoft Corporation - Multiple UNC Provider Driver.) - LEGACY_MUP
                        O64 - Services: CurCS - C:\Windows\System32\DRIVERS\nwifi.sys - NativeWiFi Filter (NativeWifiP) .(.Microsoft Corporation - Pilote de miniport WiFi natif.) - LEGACY_NATIVEWIFIP
                        O64 - Services: CurCS - C:\Windows\system32\drivers\ndis.sys (NDIS) .(.Microsoft Corporation - Pilote NDIS 6.20.) - LEGACY_NDIS
                        O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ndisuio.sys - NDIS Usermode I/O Protocol (Ndisuio) .(.Microsoft Corporation - Pilote d'E/S du mode utilisateur NDIS.) - LEGACY_NDISUIO
                        O64 - Services: CurCS - C:\Windows\system32\Drivers\NDPROXY.sys - NDProxy (NDProxy) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDPROXY
                        O64 - Services: CurCS - C:\Windows\System32\DRIVERS\netbios.sys - NetBIOS Interface (NetBIOS) .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS
                        O64 - Services: CurCS - C:\Windows\system32\drivers\netbt.sys (NetBT) .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT
                        O64 - Services: CurCS - C:\Windows\system32\Drivers\NPFS.sys - Npfs (Npfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NPFS
                        O64 - Services: CurCS - C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy) .(.Microsoft Corporation - NSI Proxy.) - LEGACY_NSIPROXY
                        O64 - Services: CurCS - C:\Windows\system32\Drivers\NTFS.sys - Ntfs (Ntfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NTFS
                        O64 - Services: CurCS - C:\Windows\system32\Drivers\NULL.sys - Null (Null) .(.Pas de propriétaire - Pas de description.) - LEGACY_NULL
                        O64 - Services: CurCS - C:\Windows\System32\DRIVERS\pciide.sys - pciide (pciide) .(.Microsoft Corporation - Generic PCI IDE Bus Driver.) - LEGACY_PCIIDE
                        O64 - Services: CurCS - C:\Windows\System32\drivers\pcw.sys - Performance Counters for Windows Driver (pcw) .(.Microsoft Corporation - Performance Counters for Windows Driver.) - LEGACY_PCW
                        O64 - Services: CurCS - C:\Windows\System32\drivers\peauth.sys - PEAUTH (PEAUTH) .(.Microsoft Corporation - Protected Environment Authentication and Au.) - LEGACY_PEAUTH
                        O64 - Services: CurCS - C:\Windows\system32\drivers\pacer.sys (Psched) .(.Microsoft Corporation - Planificateur de paquets QoS.) - LEGACY_PSCHED
                        O64 - Services: CurCS - C:\Windows\system32\wkssvc.dll (rdbss) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_RDBSS
                        O64 - Services: CurCS - C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD
                        O64 - Services: CurCS - C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD) .(.Microsoft Corporation - RDP Encoder Miniport.) - LEGACY_RDPENCDD
                        O64 - Services: CurCS - C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP) .(.Microsoft Corporation - RDP Reflector Driver Miniport.) - LEGACY_RDPREFMP
                        O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rspndr.sys - Link-Layer Topology Discovery Responder (rspndr) .(.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) - LEGACY_RSPNDR
                        O64 - Services: CurCS - C:\Windows\system32\Drivers\SECDRV.sys - (.not file.) - Security Driver (secdrv) .(.Pas de propriétaire - Pas de description.) - LEGACY_SECDRV
                        O64 - Services: CurCS - C:\Windows\system32\Drivers\SPLDR.sys - (.not file.) - Security Processor Loader Driver (spldr) .(.Pas de propriétaire - Pas de description.) - LEGACY_SPLDR
                        O64 - Services: CurCS - C:\Windows\system32\srvsvc.dll (srv) .(.Microsoft Corporation - DLL du service Serveur.) - LEGACY_SRV
                        O64 - Services: CurCS - C:\Windows\system32\srvsvc.dll (srv2) .(.Microsoft Corporation - DLL du service Serveur.) - LEGACY_SRV2
                        O64 - Services: CurCS - C:\Windows\System32\DRIVERS\srvnet.sys - srvnet (srvnet) .(.Microsoft Corporation - Server Network driver.) - LEGACY_SRVNET
                        O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (Tcpip) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TCPIP
                        O64 - Services: CurCS - C:\Windows\System32\drivers\tcpipreg.sys - TCP/IP Registry Compatibility (tcpipreg) .(.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) - LEGACY_TCPIPREG
                        O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (tdx) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TDX
                        O64 - Services: CurCS - C:\Windows\System32\DRIVERS\udfs.sys - udfs (udfs) .(.Microsoft Corporation - UDF File System Driver.) - LEGACY_UDFS
                        O64 - Services: CurCS - C:\Windows\system32\drivers\vga.sys - VgaSave (VgaSave) .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE
                        O64 - Services: CurCS - C:\Windows\system32\drivers\volmgrx.sys (volmgrx) .(.Microsoft Corporation - Pilote d'extension du gestionnaire de volum.) - LEGACY_VOLMGRX
                        O64 - Services: CurCS - C:\Windows\System32\DRIVERS\volsnap.sys - Volumes de stockage (volsnap) .(.Microsoft Corporation - Pilote de cliché instantané du volume.) - LEGACY_VOLSNAP
                        O64 - Services: CurCS - C:\Windows\System32\DRIVERS\vwififlt.sys - Virtual WiFi Filter Driver (vwififlt) .(.Microsoft Corporation - Virtual WiFi Filter Driver.) - LEGACY_VWIFIFLT
                        O64 - Services: CurCS - C:\Windows\system32\rascfg.dll (Wanarpv6) .(.Microsoft Corporation - Objets de configuration RAS.) - LEGACY_WANARPV6
                        O64 - Services: CurCS - C:\Windows\System32\drivers\Wdf01000.sys - Kernel Mode Driver Frameworks service (Wdf01000) .(.Microsoft Corporation - Runtime de l'infrastructure de pilotes en m.) - LEGACY_WDF01000
                        O64 - Services: CurCS - C:\Windows\System32\DRIVERS\wfplwf.sys - WFP Lightweight Filter (WfpLwf) .(.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - LEGACY_WFPLWF
                        O64 - Services: CurCS - C:\Windows\System32\drivers\wimmount.sys - WIMMount (WIMMount) .(.Microsoft Corporation - Wim file system Driver.) - LEGACY_WIMMOUNT
                        O64 - Services: CurCS - C:\Windows\System32\drivers\WudfPf.sys - User Mode Driver Frameworks Platform Driver (WudfPf) .(.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) - LEGACY_WUDFPF

                        ---\\ Observateur d'évènement d'application (OEA) (O66)
                        O66 - EventLog: ID=80 (SideBySide) - (.Pas de propriétaire - Pas de description.) -- C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest
                        O66 - EventLog: ID=1000 (Application Error) - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
                        O66 - EventLog: ID=1000 (Application Error) - (.Microsoft Corporation - WMI Provider Host.) -- C:\Windows\system32\wbem\wmiprvse.exe
                        O66 - EventLog: ID=1000 (Application Error) - (.TOSHIBA Corporation - TosSmartSrv.exe.) -- C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
                        O66 - EventLog: ID=1000 (Application Error) - (.TOSHIBA Corporation - TOSHIBA PC Health Monitor.) -- C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
                        O66 - EventLog: ID=1000 (Application Error) - (.Shareaza Development Team - Shareaza Ultimate File Sharing.) -- C:\Program Files (x86)\Shareaza\Shareaza.exe
                        O66 - EventLog: ID=1000 (Application Error) - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe

                        ---\\ File Associations Shell Spawning (O67)
                        O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] "%1" %* (.not file.)
                        O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
                        O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] "%1" %* (.not file.)
                        O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] "%1" %* (.not file.)
                        O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] "%1" %* (.not file.)
                        O67 - Shell Spawning: <.html> <ChromeHTML>[HKLM\..\open\Command] (.Pas de propriétaire - Pas de description.) -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
                        O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
                        O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
                        O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Pas de propriétaire - Pas de description.) -- "C:\Program Files (x86)\Mozilla Firefox\firefox.exe
                        O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] "%1" %* (.not file.)
                        O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
                        O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] "%1" %* (.not file.)
                        O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] "%1" %* (.not file.)
                        O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] "%1" %* (.not file.)
                        O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Pas de propriétaire - Pas de description.) -- "C:\Program Files (x86)\Mozilla Firefox\firefox.exe
                        O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
                        O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe

                        ---\\ Start Menu Internet (SMI) (O68)
                        O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
                        O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Pas de propriétaire - Pas de description.) -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (.not file.)
                        O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe

                        ---\\ Search Browser Infection (SBI) (O69)
                        O69 - SBI: SearchScopes [HKCU] ${searchCLSID} [DefaultScope] - (@ieframe.dll,-12512) - https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&src={referrer:source?}
                        O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&src=IE-SearchBox&FORM=IE8SRC
                        O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - https://www.google.com/webhp?gws_rd=ssl{searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7TSEH_frFR396FR396
                        O69 - SBI: SearchScopes [HKCU] {F97F9472-A071-40FE-93EF-11FF1968621D} - (eBay) - https://www.ebay.fr{searchTerms}

                        ---\\ Recherche des services démarrés par Svchost (SSS) (O83)
                        O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d'application.) -- C:\Windows\System32\aelupsvc.dll [0]
                        O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [0]
                        O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [0]
                        O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\system32\srvsvc.dll [0]
                        O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [0]
                        O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [0]
                        O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d'accès distant.) -- C:\Windows\System32\rasauto.dll [0]
                        O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d'accès distant.) -- C:\Windows\System32\rasmans.dll [0]
                        O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d'interface dynamique.) -- C:\Windows\System32\mprdim.dll [75264]
                        O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d'événements système (SENS).) -- C:\Windows\System32\sens.dll [49664]
                        O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll [0]
                        O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\Windows\System32\tapisrv.dll [241664]
                        O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur hôte de session Burea.) -- C:\Windows\System32\termsrv.dll [0]
                        O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\system32\wuaueng.dll [0]
                        O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\Windows\System32\qmgr.dll [0]
                        O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [328192]
                        O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll [0]
                        O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\system32\iscsiexe.dll [0]
                        O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\system32\schedsvc.dll [0]
                        O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à distance.) -- C:\Windows\system32\sessenv.dll [99328]
                        O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\system32\wbem\WMIsvc.dll [0]

                        ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
                        SR - | Auto 13/01/2011 40384 | "C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
                        SR - | Auto 10/08/2009 248688 | "C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe (cfWiMAXService) . (.TOSHIBA CORPORATION.) - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe
                        SR - | Auto 14/07/2009 42368 | "C:\Program Files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exe (ConfigFree Gadget Service) . (.TOSHIBA CORPORATION.) - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exe
                        SR - | Auto 10/03/2009 46448 | "C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe (ConfigFree Service) . (.TOSHIBA CORPORATION.) - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe
                        SS - | Demand 22/05/2009 250616 | "C:\Program Files (x86)\TOSHIBA Games\TOSHIBA Game Console\GameConsoleService.exe (GameConsoleService) . (.WildTangent, Inc..) - C:\Program Files (x86)\TOSHIBA Games\TOSHIBA Game Console\GameConsoleService.exe
                        SS - | Auto 09/09/2010 135664 | "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
                        SR - | Auto 23/01/2009 203280 | "C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe (McAfee SiteAdvisor Service) . (.Pas de propriétaire.) - C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe
                        SS - | Demand 11/05/2010 124368 | "C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe (TemproMonitoringService) . (.Toshiba Europe GmbH.) - C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe
                        SS - | Demand 17/08/2009 51512 | C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe (TMachInfo) . (.TOSHIBA Corporation.) - C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
                        SR - | Auto 17/08/2009 0 | C:\Windows\system32\TODDSrv.exe (TODDSrv) . (.TOSHIBA Corporation.) - C:\Windows\system32\TODDSrv.exe
                        SR - | Auto 05/08/2009 488800 | "C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe (TosCoSrv) . (.TOSHIBA Corporation.) - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
                        SR - | Auto 27/08/2009 251760 | "C:\Program Files\TOSHIBA\TECO\TecoService.exe (TOSHIBA eco Utility Service) . (.TOSHIBA Corporation.) - C:\Program Files\TOSHIBA\TECO\TecoService.exe
                        SR - | Demand 03/08/2009 137560 | "C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe (TOSHIBA HDD SSD Alert Service) . (.TOSHIBA Corporation.) - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
                        SR - | Demand 04/08/2009 826224 | "C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe (TPCHSrv) . (.TOSHIBA Corporation.) - C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
                        SR - | Auto 14/07/2009 20992 | C:\Program Files\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
                        SR - | Auto 14/07/2009 20992 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\system32\svchost.exe

                        ---\\ Recherche Master Boot Record Infection (MBR)(O80)
                        Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.1 by Gmer, http://www.gmer.net
                        Run by anne so at 22/01/2011 22:17:55

                        device: opened successfully
                        user: error reading MBR

                        Disk trace:
                        error: Read Descripteur non valide
                        kernel: error reading MBR

                        ---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)
                        Written by ad13, http://ad13.geekstog
                        Run by anne so at 22/01/2011 22:17:55
                        Use the desktop link 'MBRCheck' to have full report

                        End of the scan (913 lines in 00mn 26s)(0)

                        ca veut pas entrer en une fois
                        0
                        1. bonjour,
                          tu n'as pas lu ce message :
                          https://forums.commentcamarche.net/forum/affich-20616947-encore-fissa-impossible-a-enlever#16

                          vas dans le meu demarrer, programmes, trouve java, désinstalle la, puis retélécharge la dernière version ici :

                          https://www.java.com/fr/download/

                          * Lance ZHPFix (soit via le raccourci sur ton Bureau, soit via ZHPDiag en cliquant sur l'écusson vert)
                          Clique sur l'icone représentant la lettre H (« coller les lignes Helper »)
                          Copie/colle les lignes suivantes en gras et place les dans ZHPFix :

                          ----------------------------------------------------------

                          O43 - CFD: 04/09/2009 - 14:27:32 ----D- C:\ProgramData\XP

                          ----------------------------------------------------------

                          - Clique sur « Tous », puis sur « Nettoyer »
                          - Copie/colle la totalité du rapport dans ta prochaine réponse
                          Tuto :
                          http://www.premiumorange.com/zeb-help-process/zhpfix.html

                          0
                          1. bonjour !!

                            voila c'est fait j espere avoir collé le bon truc c'est vraiment pas evident :)
                            0
                            1. Rapport de ZHPFix 1.12.3227 par Nicolas Coolman, Update du 16/12/2010
                              Fichier d'export Registre :
                              Run by anne so at 23/01/2011 11:23:45
                              Windows 7 Home Premium Edition, 64-bit (Build 7600)
                              Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
                              Contact : nicolascoolman@yahoo.fr

                              ========== Dossier(s) ==========
                              C:\ProgramData\XP => Supprimé et mis en quarantaine

                              ========== Récapitulatif ==========
                              1 : Dossier(s)

                              End of the scan
                              0
                              1. copie et colle le contenu du rapport de zhpfix sur ton prochai message

                                0
                                • 1
                                • 2
                                • 3