Rapport Malware AU SECOURS SVP

Résolu
Bonjour, j'ai fait un scan rapide avec Malware antimalware et il a trouvé ceci :Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Version de la base de données: 5884

Windows 6.0.6002 Service Pack 2
Internet Explorer 7.0.6002.18005

26/02/2011 17:42:28
mbam-log-2011-02-26 (17-41-23).txt

Type d'examen: Examen rapide
Elément(s) analysé(s): 161084
Temps écoulé: 11 minute(s), 35 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 12
Valeur(s) du Registre infectée(s): 7
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 2
Fichier(s) infecté(s): 29

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\CLSID\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} (PUP.Dealio) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} (PUP.Dealio) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} (PUP.Dealio) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} (PUP.Dealio) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D} (PUP.Dealio) -> No action taken.
HKEY_CLASSES_ROOT\TypeLib\{CD082CCA-086F-4FD8-8FD7-247A0DBBD1CC} (PUP.Dealio) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{D5A1EF9A-7948-435D-8B87-D6A598317288} (PUP.Dealio) -> No action taken.
HKEY_CLASSES_ROOT\SearchSettings.BHO.1 (PUP.Dealio) -> No action taken.
HKEY_CLASSES_ROOT\SearchSettings.BHO (PUP.Dealio) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D} (PUP.Dealio) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{E312764E-7706-43F1-8DAB-FCDD2B1E416D} (PUP.Dealio) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Dealio (PUP.Dealio) -> No action taken.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\PROGRAM FILES\SEARCH SETTINGS\SEARCHSETTINGS.EXE (PUP.Dealio) -> Value: SEARCHSETTINGS.EXE -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\SearchSettings (PUP.Dealio) -> Value: SearchSettings -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} (PUP.Dealio) -> Value: {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\{E312764E-7706-43F1-8DAB-FCDD2B1E416D} (PUP.Dealio) -> Value: {E312764E-7706-43F1-8DAB-FCDD2B1E416D} -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\PROGRAM FILES\SEARCH SETTINGS\KB128\SEARCHSETTINGS.DLL (PUP.Dealio) -> Value: SEARCHSETTINGS.DLL -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\{E312764E-7706-43F1-8DAB-FCDD2B1E416D} (PUP.Dealio) -> Value: {E312764E-7706-43F1-8DAB-FCDD2B1E416D} -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} (PUP.Dealio) -> Value: {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} -> No action taken.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
c:\program files\dealio toolbar (PUP.Dealio) -> No action taken.
c:\program files\dealio toolbar\Res (PUP.Dealio) -> No action taken.

Fichier(s) infecté(s):
c:\program files\search settings\searchsettings.exe (PUP.Dealio) -> No action taken.
c:\program files\dealio toolbar\dealiotoolbarie.dll (PUP.Dealio) -> No action taken.
c:\program files\search settings\kb128\searchsettings.dll (PUP.Dealio) -> No action taken.
c:\program files\dealio toolbar\config.ini (PUP.Dealio) -> No action taken.
c:\program files\dealio toolbar\searchsettingskit.exe (PUP.Dealio) -> No action taken.
c:\program files\dealio toolbar\widgihelper.exe (PUP.Dealio) -> No action taken.
c:\program files\dealio toolbar\Res\amazon.gif (PUP.Dealio) -> No action taken.
c:\program files\dealio toolbar\Res\apple.gif (PUP.Dealio) -> No action taken.
c:\program files\dealio toolbar\Res\barnes.gif (PUP.Dealio) -> No action taken.
c:\program files\dealio toolbar\Res\bestbuy.gif (PUP.Dealio) -> No action taken.
c:\program files\dealio toolbar\Res\dealio_logo.gif (PUP.Dealio) -> No action taken.
c:\program files\dealio toolbar\Res\dealio_logo_hover.gif (PUP.Dealio) -> No action taken.
c:\program files\dealio toolbar\Res\ebay.gif (PUP.Dealio) -> No action taken.
c:\program files\dealio toolbar\Res\icon_settings.gif (PUP.Dealio) -> No action taken.
c:\program files\dealio toolbar\Res\macys.gif (PUP.Dealio) -> No action taken.
c:\program files\dealio toolbar\Res\newegg.gif (PUP.Dealio) -> No action taken.
c:\program files\dealio toolbar\Res\overstock.gif (PUP.Dealio) -> No action taken.
c:\program files\dealio toolbar\Res\search-button-hover.gif (PUP.Dealio) -> No action taken.
c:\program files\dealio toolbar\Res\search-button.gif (PUP.Dealio) -> No action taken.
c:\program files\dealio toolbar\Res\search-chevron-hover.gif (PUP.Dealio) -> No action taken.
c:\program files\dealio toolbar\Res\search-chevron.gif (PUP.Dealio) -> No action taken.
c:\program files\dealio toolbar\Res\search_amazon.gif (PUP.Dealio) -> No action taken.
c:\program files\dealio toolbar\Res\search_dealio.gif (PUP.Dealio) -> No action taken.
c:\program files\dealio toolbar\Res\search_ebay.gif (PUP.Dealio) -> No action taken.
c:\program files\dealio toolbar\Res\search_yahoo.gif (PUP.Dealio) -> No action taken.
c:\program files\dealio toolbar\Res\separator.gif (PUP.Dealio) -> No action taken.
c:\program files\dealio toolbar\Res\target.gif (PUP.Dealio) -> No action taken.
c:\program files\dealio toolbar\Res\walmart.gif (PUP.Dealio) -> No action taken.
c:\program files\dealio toolbar\Res\widgets.xml (PUP.Dealio) -> No action taken.

AU SECOURS MERCI ...!

<config>Windows Vista / Firefox 3.5.16</config

50 réponses

Résumé de la discussion

Une détection de PUP.Dealio par Malwarebytes' Anti-Malware sur Windows Vista (SP2) signale des éléments indésirables dans le registre, des dossiers et des fichiers liés à la barre d'outils Dealio. Suite à l'intervention, UsbFix 7.041 a supprimé de nombreux éléments, notamment des dossiers et fichiers liés à Dealio, et a effacé plusieurs entrées du registre et des éléments de points de restauration. Le post-suppression affiche zéro menace détectée par MBAM et des résultats positifs après l'intervention par UsbFix, soulignant l'efficacité de la procédure et la nécessité de vérifier les éléments restants.

Bobot (l’IA à votre service)
  1. Contributeur
    Hello,

    Repasse le en supprimant tous les éléments trouvés.
    1. bonjour, voici le rapport aprés avoir supprimé les éléments trouvés :Malwarebytes' Anti-Malware 1.50.1.1100
      www.malwarebytes.org

      Version de la base de données: 5884

      Windows 6.0.6002 Service Pack 2
      Internet Explorer 7.0.6002.18005

      26/02/2011 18:35:02
      mbam-log-2011-02-26 (18-35-02).txt

      Type d'examen: Examen rapide
      Elément(s) analysé(s): 161176
      Temps écoulé: 9 minute(s), 56 seconde(s)

      Processus mémoire infecté(s): 0
      Module(s) mémoire infecté(s): 0
      Clé(s) du Registre infectée(s): 0
      Valeur(s) du Registre infectée(s): 0
      Elément(s) de données du Registre infecté(s): 0
      Dossier(s) infecté(s): 0
      Fichier(s) infecté(s): 0

      Processus mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Module(s) mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Clé(s) du Registre infectée(s):
      (Aucun élément nuisible détecté)

      Valeur(s) du Registre infectée(s):
      (Aucun élément nuisible détecté)

      Elément(s) de données du Registre infecté(s):
      (Aucun élément nuisible détecté)

      Dossier(s) infecté(s):
      (Aucun élément nuisible détecté)

      Fichier(s) infecté(s):
      (Aucun élément nuisible détecté)
      QUE dois-je faire ensuite ?
      Y-a-t-il encore une manip à faire ou je n'ai plus de soucis ? Merci...
      1. Contributeur
        Bien, on peut regarder si il reste des infections si tu veux.
        Utilise ce logiciel de diagnostic :

        * Télécharge ZHPDiag (de Nicolas Coolman)
        * Laisse toi guider lors de l'installation, il se lancera automatiquement à la fin.
        * Clique sur l'icône représentant une loupe (« Lancer le diagnostic »)
        * Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette
        * Héberge le rapport ZHPDiag.txt sur ce site, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum.
        1. bonjour voici donc le rapport :
          Rapport de ZHPDiag v1.27.1624 par Nicolas Coolman, Update du 25/02/2011
          Run by utilisateur at 26/02/2011 18:55:35
          Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
          Contact : nicolascoolman@yahoo.fr

          ---\\ Web Browser
          MSIE: Internet Explorer v7.0.6002.18005
          MFIE: Mozilla Firefox v3.5.16 (fr) (Defaut)

          ---\\ System Information
          Windows Vista Home Premium Edition, 32-bit Service Pack 2 (Build 6002)
          Processor: x86 Family 15 Model 6 Stepping 4, GenuineIntel
          Operating System: 32 Bits
          Boot mode: Normal (Normal boot)
          Total RAM: 2046 MB (60% free)
          System Restore: Activé (Enable)
          System drive C: has 79 GB (35%) free of 225 GB

          ---\\ Logged in mode
          Computer Name: KRYSLOW
          User Name: utilisateur
          All Users Names: utilisateur, Administrateur,
          Unselected Option: O45,O61,O62,O65,O66,O82
          Logged in as Administrator

          ---\\ Environnement Variables
          %AppData%=C:\Users\utilisateur\AppData\Roaming
          %LocalAppData%=C:\Users\utilisateur\AppData\Local
          %StartMenu%=C:\Users\utilisateur\AppData\Roaming\Microsoft\Windows\Start Menu

          ---\\ DOS/Devices
          C:\ Hard drive, Flash drive, Thumb drive (Free 79 Go of 225 Go)
          D:\ CD-ROM drive (Not Inserted)
          E:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
          F:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
          G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
          H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

          ---\\ Security Center & Tools Informations
          [HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
          [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
          [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
          [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
          [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
          [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
          [HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
          [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
          [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
          [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
          [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
          [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
          [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
          [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
          [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
          [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK
          [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
          [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK
          [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
          [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK

          ---\\ Recherche particulière de fichiers génériques
          [MD5.D07D4C3038F3578FFCE1C0237F2A1253] - (.Microsoft Corporation - Explorateur Windows.) (.11/04/2009 07:27:36.) -- C:\Windows\Explorer.exe [2926592]
          [MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) (.21/01/2008 03:23:42.) -- C:\Windows\System32\Wininit.exe [96768]
          [MD5.072213E1604D843D3230EE61663466A4] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.20/12/2010 17:36:20.) -- C:\Windows\System32\wininet.dll [834048]
          [MD5.898E7C06A350D4A1A64A9EA264D55452] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.11/04/2009 07:28:13.) -- C:\Windows\System32\Winlogon.exe [314368]
          [MD5.1F05B78AB91C9075565A9D8A4B880BC4] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.11/04/2009 07:32:26.) -- C:\Windows\System32\drivers\atapi.sys [19944]
          [MD5.6A4A98CEE84CF9E99564510DDA4BAA47] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.11/04/2009 07:32:49.) -- C:\Windows\System32\drivers\ntfs.sys [1083880]

          ---\\ Processus lancés
          [MD5.0D392EDE3B97E0B3131B2F63EF1DB94E] - (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe [1008184]
          [MD5.98C9D8B03A6DEC5975A0E19EE2685CF5] - (.ScanSoft, Inc. - OCR Aware.) -- C:\Program Files\ScanSoft\OmniPageSE4.0\OpWareSE4.exe [69632]
          [MD5.4AB05041D5C922B9A7A5D9059F5538CD] - (.Microsoft Corporation - User session Windows Mobile device handler.) -- C:\Windows\WindowsMobile\wmdSync.exe [215552]
          [MD5.12FD7C1EADDDA10A67B1D6F905B3CC1E] - (.Sony Corporation - Content Transfer Walkman Detector.) -- C:\Program Files\Sony\Content Transfer\ContentTransferWMDetector.exe [583016]
          [MD5.946D70667B0119F2BEEAE0849E1D46A2] - (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe [352976]
          [MD5.E7704CBF568815C1CAA6E513387BD3F2] - (.Advanced Micro Devices Inc. - Catalyst Control Center: Monitoring program.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe [65536]
          [MD5.BF08674925F151BD4537B89A493E3E0C] - (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe [125952]
          [MD5.A817E54AEDEE3CC84956B82C9F1727B0] - (.Samsung Electronics Co., Ltd. - NPSAgent.) -- C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe [102400]
          [MD5.0F4195B9B348DE5CF9B822F81704B20E] - (.Microsoft Corporation - Media Center Media Status Aggregator Servic.) -- C:\Windows\ehome\ehmsas.exe [37376]
          [MD5.74EF310FAC89341CE2897B7F2C4A7B0F] - (.ATI Technologies Inc. - Catalyst Control Centre: Host application.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe [65536]
          [MD5.488F497576D1076E9C9698D3F91A98C9] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [631808]

          ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
          M3 - MFPP: Plugins - [utilisateur] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
          M3 - MFPP: Plugins - [utilisateur] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
          M3 - MFPP: Plugins - [utilisateur] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
          M3 - MFPP: Plugins - [utilisateur] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
          M3 - MFPP: Plugins - [utilisateur] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
          M3 - MFPP: Plugins - [utilisateur] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
          P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeployJava1.dll
          P2 - FPN:Firefox Plugin Navigator . (.Midasplayer Ltd - Plays games at king.com.) -- C:\Program Files\Mozilla Firefox\Plugins\npmidas.dll
          P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins\npnul32.dll
          P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.4.2".) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll
          P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\Macromed\Flash\NPSWF32.dll
          P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.5.) -- C:\Windows\system32\Adobe\Director\np32dsw.dll
          P2 - FPN: [HKLM] [@canon.com/EPPEX] - (.CANON INC. - CANON iMAGE GATEWAY Album Plugin Utility Module.) -- C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.dll
          P2 - FPN: [HKLM] [@google.com/npPicasa3,version=3.0.0] - (.Google, Inc. - Picasa plugin.) -- C:\Program Files\Google\Picasa3\npPicasa3.dll
          P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.60129.0.) -- c:\Program Files\Microsoft Silverlight\4.0.60129.0\npctrl.dll
          P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
          M2 - MFEP: prefs.js [utilisateur - ciah3zwb.default\{20a82645-c095-46ed-80e3-08825760534b}] [MicrosoftCG] Microsoft .NET Framework Assistant v1.2.1 (.Microsoft.)

          ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
          R0 - HKUS\S-1-5-21-3066592945-1698148639-3071286611-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/?gws_rd=ssl
          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.google.com/?gws_rd=ssl
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.durable.com
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
          R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.google.com/?gws_rd=ssl
          R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.durable.com
          R1 - HKUS\S-1-5-21-3066592945-1698148639-3071286611-1000\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = durable.com
          R1 - HKUS\S-1-5-21-3066592945-1698148639-3071286611-1000\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.durable.com
          R1 - HKUS\S-1-5-21-3066592945-1698148639-3071286611-1000\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/?gws_rd=ssl
          R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (7.00.6000.16386 (vista_rtm.061101-2205)) -- C:\Windows\system32\ieframe.dll

          ---\\ Internet Explorer, Proxy Management (R5)
          R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
          R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
          R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
          R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
          R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

          ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
          F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
          F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

          ---\\ Browser Helper Objects de navigateur (O2)
          O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
          O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} . (.CANON INC. - Easy-WebPrint EX.) -- C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll
          O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} . (.Kaspersky Lab ZAO - IE Virtual Keyboard.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\ievkbd.dll
          O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} . (...) -- C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll (.not file.)
          O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
          O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
          O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
          O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} . (.Google Inc. - Fast Search.) -- C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
          O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
          O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} . (.Kaspersky Lab ZAO - WebToolBar component.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\klwtbbho.dll

          ---\\ Internet Explorer Toolbars (O3)
          O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
          O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
          O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} . (.CANON INC. - Easy-WebPrint EX.) -- C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll

          ---\\ Applications démarrées par registre & par dossier (O4)
          O4 - HKLM\..\Run: [Windows Defender] . (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe
          O4 - HKLM\..\Run: [SSBkgdUpdate] . (.Scansoft, Inc. - SSBkgdUpdate.) -- C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe
          O4 - HKLM\..\Run: [OpwareSE4] . (.ScanSoft, Inc. - OCR Aware.) -- C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
          O4 - HKLM\..\Run: [Windows Mobile-based device management] . (.Microsoft Corporation - User session Windows Mobile device handler.) -- C:\Windows\WindowsMobile\wmdSync.exe
          O4 - HKLM\..\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
          O4 - HKLM\..\Run: [NPSStartup] Clé orpheline
          O4 - HKLM\..\Run: [ContentTransferWMDetector.exe] . (.Sony Corporation - Content Transfer Walkman Detector.) -- C:\Program Files\Sony\Content Transfer\ContentTransferWMDetector.exe
          O4 - HKLM\..\Run: [AVP] . (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe
          O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
          O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
          O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware (reboot)] . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
          O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
          O4 - HKCU\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
          O4 - HKCU\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe
          O4 - HKCU\..\Run: [AutoStartNPSAgent] . (.Samsung Electronics Co., Ltd. - NPSAgent.) -- C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
          O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
          O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] oobefldr.dll
          O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
          O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] oobefldr.dll
          O4 - HKUS\S-1-5-21-3066592945-1698148639-3071286611-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
          O4 - HKUS\S-1-5-21-3066592945-1698148639-3071286611-1000\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
          O4 - HKUS\S-1-5-21-3066592945-1698148639-3071286611-1000\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe
          O4 - HKUS\S-1-5-21-3066592945-1698148639-3071286611-1000\..\Run: [AutoStartNPSAgent] . (.Samsung Electronics Co., Ltd. - NPSAgent.) -- C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe

          ---\\ Autres liens utilisateurs (O4)
          O4 - Global Startup: C:\Users\utilisateur\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
          O4 - Global Startup: C:\Users\utilisateur\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Mail\WinMail.exe
          O4 - Global Startup: C:\Users\utilisateur\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
          O4 - Global Startup: C:\Users\utilisateur\Desktop\CCleaner.lnk . (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe
          O4 - Global Startup: C:\Users\utilisateur\Desktop\Defraggler.lnk . (.Piriform Ltd.) -- C:\Program Files\Defraggler\Defraggler.exe
          O4 - Global Startup: C:\Users\utilisateur\Desktop\EasyCleaner.lnk . (.ToniArts.) -- C:\Program Files\ToniArts\EasyCleaner\EasyClea.exe
          O4 - Global Startup: C:\Users\utilisateur\Desktop\Free Video Converter.lnk . (.Koyote Soft.) -- C:\Program Files\Free Video Converter\FreeVideoConverter.exe
          O4 - Global Startup: C:\Users\utilisateur\Desktop\PhotoFiltre.lnk . (.Antonio Da Cruz.) -- C:\Users\utilisateur\Pictures\PhotoFiltre\PhotoFiltre.exe
          O4 - Global Startup: C:\Users\utilisateur\Desktop\Revo Uninstaller.lnk . (.VS Revo Group.) -- C:\Program Files\VS Revo Group\Revo Uninstaller\revouninstaller.exe
          O4 - Global Startup: C:\Users\utilisateur\Desktop\Sauvegarde anciens comptes.lnk . (...) -- C:\Windows.old\Users (.not file.)
          O4 - Global Startup: C:\Users\utilisateur\Desktop\WordBiz.lnk . (...) -- C:\Program Files\WordBiz\WordBiz.exe
          O4 - Global Startup: C:\Users\utilisateur\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Free Video Converter.lnk . (.Koyote Soft.) -- C:\Program Files\Free Video Converter\FreeVideoConverter.exe
          O4 - Global Startup: C:\Users\utilisateur\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
          O4 - Global Startup: C:\Users\utilisateur\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe
          O4 - Global Startup: C:\Users\utilisateur\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Nero Home Essentials SE.lnk . (.Nero AG.) -- C:\Program Files\Nero\Nero 7\Nero Home\NeroHome.exe
          O4 - Global Startup: C:\Users\utilisateur\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Nero StartSmart Essentials.lnk . (.Nero AG.) -- C:\Program Files\Nero\Nero 7\Nero StartSmart\NeroStartSmart.exe
          O4 - Global Startup: C:\Users\utilisateur\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Picasa 3.lnk . (.Google Inc..) -- C:\Program Files\Google\Picasa3\Picasa3.exe
          O4 - Global Startup: C:\Users\utilisateur\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Samsung New PC Studio.lnk . (.Samsung Electronics Co., Ltd..) -- C:\Program Files\Samsung\Samsung New PC Studio\NPSGuide.exe
          O4 - Global Startup: C:\Users\utilisateur\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - Clé orpheline
          O4 - Global Startup: C:\Users\utilisateur\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - Clé orpheline
          O4 - Global Startup: C:\Users\utilisateur\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

          ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
          O8 - Extra context menu item: Add to Google Photos Screensa&ver . (.Google Inc. - Google Photos Screensaver.) -- C:\Windows\system32\GPhotos.scr

          ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
          O9 - Extra button: Clavier &virtuel - {4248FE82-7FCB-46AC-B270-339F08212110} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\kbrd.ico
          O9 - Extra button: Clavier &virtuel - {CCF151D8-D089-449F-A5A4-D9909053F20F} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\logo.ico

          ---\\ Winsock hijacker (Layered Service Provider) (O10)
          O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
          O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
          O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
          O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
          O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
          O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll

          ---\\ Objets ActiveX (Downloaded Program Files)(O16)
          O16 - DPF: Microsoft XML Parser for Java - (Microsoft XML Parser for Java) - (.not file.) - C:\Windows\Java\classes\xmldso.cab
          O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
          O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} () - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
          O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

          ---\\ Modification Domaine/Adresses DNS (O17)
          O17 - HKLM\System\CCS\Services\Tcpip\..\{002985E9-7B7D-46E7-B405-BAC5AD87DC6F}: NameServer = 212.27.40.241,212.27.40.240
          O17 - HKLM\System\CS1\Services\Tcpip\..\{002985E9-7B7D-46E7-B405-BAC5AD87DC6F}: NameServer = 212.27.40.241,212.27.40.240
          O17 - HKLM\System\CS2\Services\Tcpip\..\{002985E9-7B7D-46E7-B405-BAC5AD87DC6F}: NameServer = 212.27.40.241,212.27.40.240
          O17 - HKLM\System\CS3\Services\Tcpip\..\{002985E9-7B7D-46E7-B405-BAC5AD87DC6F}: NameServer = 212.27.40.241,212.27.40.240

          ---\\ Protocole additionnel et piratage de protocole (O18)
          O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} . (.Google Inc. - Fast Search.) -- C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll

          ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
          O20 - Winlogon Notify: klogon . (.Kaspersky Lab ZAO - Logon Visualizer.) -- C:\Windows\system32\klogon.dll

          ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
          O20 - AppInit_DLLs: . (.Kaspersky Lab ZAO - Mozilla 3 Virtual Keyboard.) - C:\PROGRA~1\KASPER~1\KASPER~2\mzvkbd3.dll

          ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
          O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\System32\webcheck.dll

          ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
          O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll

          ---\\ Liste des services NT non Microsoft et non désactivés (O23)
          O23 - Service: C:\Windows\system32\Alg.exe (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\system32\atiesrxx.exe
          O23 - Service: (AVP) . (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe
          O23 - Service: (FsUsbExService) . (.Teruten - FsUsbDevice.) - C:\Windows\system32\FsUsbExService.exe
          O23 - Service: (gusvc) . (.Google - gusvc.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
          O23 - Service: (IDriverT) . (.Macrovision Corporation - IDriverT Module.) - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
          O23 - Service: (LVPrcSrv) . (.Logitech Inc. - Logitech LVPrcSrv Module..) - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
          O23 - Service: (NBService) . (.Nero AG - Nero BackItUp.) - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
          O23 - Service: (NMIndexingService) . (.Nero AG - Nero Home.) - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
          O23 - Service: (NMSAccessU) . (.Pas de propriétaire - Pas de description.) - C:\Program Files\CDBurnerXP\NMSAccessU.exe
          O23 - Service: (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 191.0.) - C:\Windows\system32\nvvsvc.exe
          O23 - Service: (OMSI download service) . (.Pas de propriétaire - Pas de description.) - C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
          O23 - Service: (ServiceLayer) . (.Nokia. - ServiceLayer Module.) - C:\Program Files\Nokia\PC Connectivity Solution\ServiceLayer.exe
          O23 - Service: (wlidsvc) . (.Microsoft Corp. - Microsoft® Windows Live ID Service.) - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.exe

          ---\\ Enumération Active Desktop & MHTML Editor (O24)
          O24 - Default MHTML Editor: Last - .(.Pas de propriétaire - Pas de description.) - (.not file.)

          ---\\ Tâches planifiées en automatique (O39)
          O39 - APT:Automatic Planified Task - C:\Windows\Tasks\EasyShare Registration Task.job
          O39 - APT:Automatic Planified Task - C:\Windows\Tasks\User_Feed_Synchronization-{D7851F04-7A7B-42AB-B539-A199BD6EB625}.job

          ---\\ Pilotes lancés au démarrage (O41)
          O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
          O41 - Driver: (AsIO) . (.Pas de propriétaire - Pas de description.) - C:\Windows\System32\drivers\AsIO.sys
          O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
          O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
          O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\System32\DRIVERS\i8042prt.sys
          O41 - Driver: (kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\System32\DRIVERS\kbdclass.sys
          O41 - Driver: (kl2) . (.Kaspersky Lab ZAO - Kaspersky Unified Driver.) - C:\Windows\System32\DRIVERS\kl2.sys
          O41 - Driver: (KLIF) . (.Kaspersky Lab - Klif Mini-Filter [fre_wlh_x86].) - C:\Windows\System32\DRIVERS\klif.sys
          O41 - Driver: (KLIM6) . (.Kaspersky Lab ZAO - Kaspersky Lab Intermediate Network Driver.) - C:\Windows\System32\DRIVERS\klim6.sys
          O41 - Driver: (mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\System32\DRIVERS\mouclass.sys
          O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
          O41 - Driver: (netbt) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
          O41 - Driver: (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
          O41 - Driver: C:\Windows\system32\drivers\pacer.sys (PSched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
          O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\System32\DRIVERS\rasacd.sys
          O41 - Driver: (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys
          O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
          O41 - Driver: (RDPENCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
          O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\Windows\System32\DRIVERS\serial.sys
          O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Smb) . (.Microsoft Corporation - SMB Transport driver.) - C:\Windows\System32\DRIVERS\smb.sys
          O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
          O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys
          O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
          O41 - Driver: (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys

          ---\\ Logiciels installés (O42)
          O42 - Logiciel: 7-Zip 4.65 - (.Pas de propriétaire.) [HKLM] -- 7-Zip
          O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
          O42 - Logiciel: Adobe Reader 9.4.2 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A94000000001}
          O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player
          O42 - Logiciel: ArcSoft PhotoStudio 5.5 - (.ArcSoft.) [HKLM] -- {85309D89-7BE9-4094-BB17-24999C6118FC}
          O42 - Logiciel: Avanquest update - (.Avanquest Software.) [HKLM] -- {76E41F43-59D2-4F30-BA42-9A762EE1E8DE}
          O42 - Logiciel: CCScore - (.EASTMAN KODAK Company.) [HKLM] -- {B4B44FE7-41FF-4DAD-8C0A-E406DDA72992}
          O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
          O42 - Logiciel: CDBurnerXP - (.Canneverbe Limited.) [HKLM] -- {5932A5C4-BB44-4CFB-AD66-1B826F4D788B}
          O42 - Logiciel: Canon Easy-WebPrint EX - (.Pas de propriétaire.) [HKLM] -- Easy-WebPrint EX
          O42 - Logiciel: Canon MP Navigator EX 3.0 - (.Pas de propriétaire.) [HKLM] -- MP Navigator EX 3.0
          O42 - Logiciel: Canon MP550 series MP Drivers - (.Pas de propriétaire.) [HKLM] -- {1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP550_series
          O42 - Logiciel: Canon Utilities Easy-PhotoPrint EX - (.Pas de propriétaire.) [HKLM] -- Easy-PhotoPrint EX
          O42 - Logiciel: Canon Utilities My Printer - (.Pas de propriétaire.) [HKLM] -- CanonMyPrinter
          O42 - Logiciel: Canon Utilities Solution Menu - (.Pas de propriétaire.) [HKLM] -- CanonSolutionMenu
          O42 - Logiciel: Catalyst Control Center - Branding - (.ATI.) [HKLM] -- {8D7133DE-27D2-47E5-B248-4180278D32AA}
          O42 - Logiciel: Content Transfer - (.Sony Corporation.) [HKLM] -- {CFADE4AF-C0CF-4A04-A776-741318F1658F}
          O42 - Logiciel: Cool & Quiet - (.Pas de propriétaire.) [HKLM] -- {1ADE1AA0-7F82-4BB1-B1BD-727DE438057B}
          O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
          O42 - Logiciel: Dealio Toolbar v4.0.1 - (.Spigot, Inc..) [HKLM] -- {94C3BB3A-56A1-43DE-A242-8B41F46E97EF}
          O42 - Logiciel: Defraggler - (.Piriform.) [HKLM] -- Defraggler
          O42 - Logiciel: EA Download Manager - (.Electronic Arts, Inc..) [HKLM] -- EADM
          O42 - Logiciel: ESSBrwr - (.EASTMAN KODAK Company.) [HKLM] -- {643EAE81-920C-4931-9F0B-4B343B225CA6}
          O42 - Logiciel: ESSCDBK - (.EASTMAN KODAK Company.) [HKLM] -- {AE1FA02D-E6A4-4EA0-8E58-6483CAC016DD}
          O42 - Logiciel: ESSPCD - (.EASTMAN KODAK Company.) [HKLM] -- {14D4ED84-6A9A-45A0-96F6-1753768C3CB5}
          O42 - Logiciel: ESSPDock - (.Nom de votre société.) [HKLM] -- {FCDB1C92-03C6-4C76-8625-371224256091}
          O42 - Logiciel: ESSSONIC - (.EASTMAN KODAK Company.) [HKLM] -- {073F22CE-9A5B-4A40-A604-C7270AC6BF34}
          O42 - Logiciel: ESSTOOLS - (.EASTMAN KODAK Company.) [HKLM] -- {8A502E38-29C9-49FA-BCFA-D727CA062589}
          O42 - Logiciel: ESScore - (.Nom de votre société.) [HKLM] -- {42938595-0D83-404D-9F73-F8177FDD531A}
          O42 - Logiciel: ESSgui - (.EASTMAN KODAK Company.) [HKLM] -- {91517631-A9F3-4B7C-B482-43E0068FD55A}
          O42 - Logiciel: ESSini - (.Nom de votre société.) [HKLM] -- {8E92D746-CD9F-4B90-9668-42B74C14F765}
          O42 - Logiciel: Easy-WebPrint - (.Pas de propriétaire.) [HKLM] -- Easy-WebPrint
          O42 - Logiciel: EasyCleaner - (.ToniArts.) [HKLM] -- {F5346614-B7C4-4E94-826A-E2363155233D}
          O42 - Logiciel: Enregistrement utilisateur de Canon MP160 - (.Pas de propriétaire.) [HKLM] -- Enregistrement utilisateur de Canon MP160
          O42 - Logiciel: Enregistrement utilisateur de Canon MP550 series - (.Pas de propriétaire.) [HKLM] -- Enregistrement utilisateur de Canon MP550 series
          O42 - Logiciel: Free Video Converter V 2.5 - (.Koyote Soft.) [HKLM] -- Free Video Converter_is1
          O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
          O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
          O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
          O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
          O42 - Logiciel: Java(TM) 6 Update 20 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216016FF}
          O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
          O42 - Logiciel: Kaspersky Anti-Virus 2011 - (.Kaspersky Lab.) [HKLM] -- InstallWIX_{66F1F013-008F-4875-B283-5A814B820347}
          O42 - Logiciel: Kaspersky Anti-Virus 2011 - (.Kaspersky Lab.) [HKLM] -- {66F1F013-008F-4875-B283-5A814B820347}
          O42 - Logiciel: Les Sims(TM) 3 - (.Electronic Arts.) [HKLM] -- {C05D8CDB-417D-4335-A38C-A0659EDFD6B8}
          O42 - Logiciel: Logiciel Kodak EasyShare - (.Eastman Kodak Company.) [HKLM] -- {D32470A1-B10C-4059-BA53-CF0486F68EBC}
          O42 - Logiciel: Logitech Vid - (.Logitech Inc..) [HKLM] -- {4FBCEA31-5D18-4212-9231-DE7CF1BE7DBB}
          O42 - Logiciel: Logitech Webcam Software - (.Logitech Inc..) [HKLM] -- {AC96671C-2001-432C-9826-5266D84EF1DC}
          O42 - Logiciel: MCE Software Encoder 1.1 - (.CyberLink Corporation.) [HKLM] -- {7655E113-C306-11D9-A373-0050BAE317E1}
          O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
          O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
          O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
          O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
          O42 - Logiciel: Micro Application - MediaDICO Les 4 Dictionnaires Utiles - (.Pas de propriétaire.) [HKLM] -- MediaDICO 4 Dictionnaires Utiles
          O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) [HKLM] -- {3E31821C-7917-367E-938E-E65FC413EA31}
          O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
          O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
          O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile
          O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}
          O42 - Logiciel: Microsoft .NET Framework 4 Client Profile FRA Language Pack - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}
          O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
          O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}
          O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c}
          O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
          O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 - (.Microsoft Corporation.) [HKLM] -- {FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}
          O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 - (.Microsoft Corporation.) [HKLM] -- {E503B4BF-F7BB-3D5F-8BC8-F694B1CFF942}
          O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
          O42 - Logiciel: Microsoft WSE 3.0 Runtime - (.Microsoft Corp..) [HKLM] -- {E3E71D07-CD27-46CB-8448-16D4FB29AA13}
          O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 Language Pack SP1 - fra
          O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack
          O42 - Logiciel: Mozilla Firefox (3.5.16) - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.5.16)
          O42 - Logiciel: NVIDIA Drivers - (.NVIDIA Corporation.) [HKLM] -- NVIDIA Drivers
          O42 - Logiciel: NWZ-E440 WALKMAN Guide - (.Sony Corporation.) [HKLM] -- {E96FF910-1BC9-4EE5-BC12-0A30D4E20F37}
          O42 - Logiciel: Nero 7 Essentials - (.Nero AG.) [HKLM] -- {BD49141C-188C-4B75-9F46-C2C42F2D1036}
          O42 - Logiciel: Nokia Multimedia Common Components 2.4 - (.Nokia.) [HKLM] -- {6EB6C056-02BB-453E-8448-EC90B9794180}
          O42 - Logiciel: OfotoXMI - (.EASTMAN KODAK Company.) [HKLM] -- {B162D0A6-9A1D-4B7C-91A5-88FB48113C45}
          O42 - Logiciel: OpenOffice.org 3.2 - (.OpenOffice.org.) [HKLM] -- {4EE2EF4B-25D3-4D44-8384-A2B96F811F55}
          O42 - Logiciel: PC Connectivity Solution - (.Nokia.) [HKLM] -- {0C973594-7DDF-4BD0-84ED-3517F7622037}
          O42 - Logiciel: PVSonyDll - (.NVIDIA Corporation.) [HKLM] -- {3D3E663D-4E7E-4577-A560-7ECDDD45548A}
          O42 - Logiciel: Package de pilotes Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0) - (.Nokia.) [HKLM] -- 504244733D18C8F63FF584AEB290E3904E791693
          O42 - Logiciel: PhotoFiltre - (.Pas de propriétaire.) [HKLM] -- PhotoFiltre
          O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM] -- Picasa 3
          O42 - Logiciel: Programme de gestion Camera de Logitech® - (.Pas de propriétaire.) [HKLM] -- QcDrv
          O42 - Logiciel: Realtek 8169 8168 8101E 8102E Ethernet Driver - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
          O42 - Logiciel: Revo Uninstaller 1.88 - (.VS Revo Group.) [HKLM] -- Revo Uninstaller
          O42 - Logiciel: SAMSUNG Mobile Composite Device Software - (.Pas de propriétaire.) [HKLM] -- SAMSUNG Mobile Composite Device
          O42 - Logiciel: SAMSUNG Mobile Modem Driver Set - (.Pas de propriétaire.) [HKLM] -- SAMSUNG Mobile Modem
          O42 - Logiciel: SAMSUNG Mobile USB Modem 1.0 Software - (.Pas de propriétaire.) [HKLM] -- SAMSUNG Mobile USB Modem 1.0
          O42 - Logiciel: SAMSUNG Mobile USB Modem Software - (.Pas de propriétaire.) [HKLM] -- SAMSUNG Mobile USB Modem
          O42 - Logiciel: SAMSUNG USB Mobile Device Software - (.Pas de propriétaire.) [HKLM] -- SAMSUNG USB Mobile Device
          O42 - Logiciel: SFR - (.Eastman Kodak Company.) [HKLM] -- {DB02F716-6275-42E9-B8D2-83BA2BF5100B}
          O42 - Logiciel: SHASTA - (.EASTMAN KODAK Company.) [HKLM] -- {605A4E39-613C-4A12-B56F-DEFBE6757237}
          O42 - Logiciel: SKINXSDK - (.EASTMAN KODAK Company.) [HKLM] -- {F4A2E7CC-60CA-4AFA-B67F-AD5E58173C3F}
          O42 - Logiciel: Samsung Mobile Modem Device Software - (.Pas de propriétaire.) [HKLM] -- Samsung Mobile Modem Device
          O42 - Logiciel: Samsung Mobile phone USB driver Software - (.Pas de propriétaire.) [HKLM] -- Samsung Mobile phone USB driver
          O42 - Logiciel: Samsung New PC Studio - (.Samsung Electronics Co., Ltd..) [HKLM] -- InstallShield_{F193FC0E-9E18-40FC-A974-509A1BDD240A}
          O42 - Logiciel: Samsung New PC Studio - (.Samsung Electronics Co., Ltd..) [HKLM] -- {F193FC0E-9E18-40FC-A974-509A1BDD240A}
          O42 - Logiciel: Samsung New PC Studio USB Driver Installer - (.Samsung Electronics Co., Ltd..) [HKLM] -- InstallShield_{AF7E85DC-317C-47F5-810E-B82EE093A612}
          O42 - Logiciel: Samsung New PC Studio USB Driver Installer - (.Samsung Electronics Co., Ltd..) [HKLM] -- {AF7E85DC-317C-47F5-810E-B82EE093A612}
          O42 - Logiciel: SamsungConnectivityCableDriver - (.Samsung.) [HKLM] -- {7E84FAC8-C518-40F9-9807-7455301D6D25}
          O42 - Logiciel: ScanSoft OmniPage SE 4.0 - (.ScanSoft, Inc..) [HKLM] -- {29D851C2-048C-4B5E-8D1F-25D473342BB5}
          O42 - Logiciel: Search Settings 1.2.2 - (.Spigot, Inc..) [HKLM] -- {0B1AAC97-8563-41D9-AE47-58E6A222F0E1}
          O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906
          O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
          O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473
          O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}
          O42 - Logiciel: Sony Ericsson PC Suite 6.009.00 - (.Sony Ericsson.) [HKLM] -- {2FFE93F0-BB72-4E52-8761-354D1AAA9387}
          O42 - Logiciel: Spelling Dictionaries Support For Adobe Reader 9 - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-5464-3428-900000000004}
          O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
          O42 - Logiciel: Utilitaire d'enregistrement du connecteur Wi-Fi USB Nintendo - (.Pas de propriétaire.) [HKLM] -- WiFiConnector
          O42 - Logiciel: VIA Gestionnaire de périphériques de plate-forme - (.VIA Technologies, Inc..) [HKLM] -- InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}
          O42 - Logiciel: VLC media player 0.9.4 - (.VideoLAN Team.) [HKLM] -- VLC media player
          O42 - Logiciel: VPRINTOL - (.EASTMAN KODAK Company.) [HKLM] -- {999D43F4-9709-4887-9B1A-83EBB15A8370}
          O42 - Logiciel: WIRELESS - (.EASTMAN KODAK Company.) [HKLM] -- {F9593CFB-D836-49BC-BFF1-0E669A411D9F}
          O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite
          O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM] -- {34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}
          O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {D45240D3-B6B3-4FF9-B243-54ECE3E10066}
          O42 - Logiciel: Windows Live ID Sign-in Assistant - (.Microsoft Corporation.) [HKLM] -- {61AD15B2-50DB-4686-A739-14FE180D4429}
          O42 - Logiciel: Windows Live Installer - (.Microsoft Corporation.) [HKLM] -- {0B0F231F-CE6A-483D-AA23-77B364F75917}
          O42 - Logiciel: Windows Live MIME IFilter - (.Microsoft Corporation.) [HKLM] -- {AF844339-2F8A-4593-81B3-9F4C54038C4E}
          O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {9D56775A-93F3-44A3-8092-840E3826DE30}
          O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {9FAE6E8D-E686-49F5-A574-0A58DFD9580C}
          O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {6057E21C-ABE9-4059-AE3E-3BEB9925E660}
          O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {EB4DF488-AAEF-406F-A341-CB2AAA315B90}
          O42 - Logiciel: Windows Live PIMT Platform - (.Microsoft Corporation.) [HKLM] -- {4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}
          O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM] -- {A9BDCA6B-3653-467B-AC83-94367DA3BFE3}
          O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM] -- {C893D8C0-1BA0-4517-B11C-E89B65E72F70}
          O42 - Logiciel: Windows Live SOXE - (.Microsoft Corporation.) [HKLM] -- {682B3E4F-696A-42DE-A41C-4C07EA1678B4}
          O42 - Logiciel: Windows Live SOXE Definitions - (.Microsoft Corporation.) [HKLM] -- {200FEC62-3C34-4D60-9CE8-EC372E01C08F}
          O42 - Logiciel: Windows Live UX Platform - (.Microsoft Corporation.) [HKLM] -- {CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}
          O42 - Logiciel: Windows Live UX Platform Language Pack - (.Microsoft Corporation.) [HKLM] -- {09F56A49-A7B1-4AAB-95B9-D13094254AD1}
          O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {AAAFC670-569B-4A2F-82B4-42945E0DE3EF}
          O42 - Logiciel: Windows Live Writer Resources - (.Microsoft Corporation.) [HKLM] -- {62687B11-58B5-4A18-9BC3-9DF4CE03F194}
          O42 - Logiciel: WordBiz version 1.8 - (.Internet Scrabble Club.) [HKLM] -- Internet Scrabble Club_is1
          O42 - Logiciel: eMule - (.Pas de propriétaire.) [HKLM] -- eMule
          O42 - Logiciel: essvatgt - (.EASTMAN KODAK Company.) [HKLM] -- {2D03B6F8-DF36-4980-B7B6-5B93D5BA3A8F}
          O42 - Logiciel: fflink - (.EASTMAN KODAK Company.) [HKLM] -- {608D2A3C-6889-4C11-9B54-A42F45ACBFDB}
          O42 - Logiciel: kgcbaby - (.EASTMAN KODAK Company.) [HKLM] -- {E18B549C-5D15-45DA-8D8F-8FD2BD946344}
          O42 - Logiciel: kgcbase - (.EASTMAN KODAK Company.) [HKLM] -- {F22C222C-3CE2-4A4B-A83F-AF4681371ABE}
          O42 - Logiciel: kgchday - (.EASTMAN KODAK Company.) [HKLM] -- {11F3F858-4131-4FFA-A560-3FE282933B6E}
          O42 - Logiciel: kgchlwn - (.EASTMAN KODAK Company.) [HKLM] -- {03EDED24-8375-407D-A721-4643D9768BE1}
          O42 - Logiciel: kgcinvt - (.EASTMAN KODAK Company.) [HKLM] -- {9BD54685-1496-46A5-AB62-357CD140ED8B}
          O42 - Logiciel: kgckids - (.EASTMAN KODAK Company.) [HKLM] -- {693C08A7-9E76-43FF-B11E-9A58175474C4}
          O42 - Logiciel: kgcmove - (.EASTMAN KODAK Company.) [HKLM] -- {A1588373-1D86-4D44-86C9-78ABD190F9CC}
          O42 - Logiciel: kgcvday - (.EASTMAN KODAK Company.) [HKLM] -- {8A8664E1-84C8-4936-891C-BC1F07797549}
          O42 - Logiciel: king.com (remove only) - (.Midasplayer Ltd (king.com).) [HKLM] -- king.com
          O42 - Logiciel: neroxml - (.Nero AG.) [HKLM] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B}
          O42 - Logiciel: netbrdg - (.EASTMAN KODAK Company.) [HKLM] -- {4537EA4B-F603-4181-89FB-2953FC695AB1}
          O42 - Logiciel: skin0001 - (.EASTMAN KODAK Company.) [HKLM] -- {5316DFC9-CE99-4458-9AB3-E8726EDE0210}
          O42 - Logiciel: staticcr - (.EASTMAN KODAK Company.) [HKLM] -- {8943CE61-53BD-475E-90E1-A580869E98A2}
          O42 - Logiciel: tooltips - (.EASTMAN KODAK Company.) [HKLM] -- {E79987F0-0E34-42CC-B8FF-6C860AEEB26A}

          ---\\ HKCU & HKLM Software Keys
          [HKCU\Software\7-Zip]
          [HKCU\Software\ASUS]
          [HKCU\Software\ATI]
          [HKCU\Software\Adobe]
          [HKCU\Software\Ahead]
          [HKCU\Software\AppDataLow\Software\Adobe]
          [HKCU\Software\AppDataLow\Software\Canon]
          [HKCU\Software\AppDataLow\Software\Dealio]
          [HKCU\Software\AppDataLow\Software\Google]
          [HKCU\Software\AppDataLow\Software\Microsoft]
          [HKCU\Software\AppDataLow\Software]
          [HKCU\Software\AppDataLow]
          [HKCU\Software\Apple Computer, Inc.]
          [HKCU\Software\CDBurnerXP]
          [HKCU\Software\Canneverbe Limited]
          [HKCU\Software\Canon]
          [HKCU\Software\Classes]
          [HKCU\Software\Clients]
          [HKCU\Software\Electronic Arts]
          [HKCU\Software\Google]
          [HKCU\Software\HookNetwork]
          [HKCU\Software\IM Providers]
          [HKCU\Software\JEDI-VCL]
          [HKCU\Software\JavaSoft]
          [HKCU\Software\KasperskyLab]
          [HKCU\Software\Kodak]
          [HKCU\Software\Laventure]
          [HKCU\Software\Local AppWizard-Generated Applications]
          [HKCU\Software\LogiShrd]
          [HKCU\Software\Logitech]
          [HKCU\Software\MIDASPLAYER.COM]
          [HKCU\Software\Macromedia]
          [HKCU\Software\Malwarebytes' Anti-Malware]
          [HKCU\Software\Mobileleader]
          [HKCU\Software\Mozilla]
          [HKCU\Software\NDAS]
          [HKCU\Software\NOS]
          [HKCU\Software\NVIDIA Corporation]
          [HKCU\Software\Netscape]
          [HKCU\Software\Nintendo]
          [HKCU\Software\Nokia]
          [HKCU\Software\ODBC]
          [HKCU\Software\OpenOffice.org]
          [HKCU\Software\Piriform]
          [HKCU\Software\Policies]
          [HKCU\Software\Samsung]
          [HKCU\Software\ScanSoft]
          [HKCU\Software\Softonic]
          [HKCU\Software\Sony Corporation]
          [HKCU\Software\Sony Ericsson]
          [HKCU\Software\Trolltech]
          [HKCU\Software\VS Revo Group]
          [HKCU\Software\VSRevoGroup]
          [HKCU\Software\YahooPartnerToolbar]
          [HKCU\Software\eMule]
          [HKLM\Software\AMD]
          [HKLM\Software\ASUS]
          [HKLM\Software\ATI Technologies]
          [HKLM\Software\ATI]
          [HKLM\Software\Adobe]
          [HKLM\Software\Ahead]
          [HKLM\Software\America Online]
          [HKLM\Software\AppDataLow]
          [HKLM\Software\ArcSoft]
          [HKLM\Software\Audible]
          [HKLM\Software\BVRP Software]
          [HKLM\Software\CDDB]
          [HKLM\Software\Canon]
          [HKLM\Software\Caphyon]
          [HKLM\Software\Classes]
          [HKLM\Software\Clients]
          [HKLM\Software\CyberLink]
          [HKLM\Software\DivXNetworks]
          [HKLM\Software\Electronic Arts]
          [HKLM\Software\Google]
          [HKLM\Software\InstallShield]
          [HKLM\Software\Intel]
          [HKLM\Software\JavaSoft]
          [HKLM\Software\JreMetrics]
          [HKLM\Software\KasperskyLab]
          [HKLM\Software\Kodak]
          [HKLM\Software\LogiShrd]
          [HKLM\Software\Logitech]
          [HKLM\Software\MCCI]
          [HKLM\Software\Macromedia]
          [HKLM\Software\Malwarebytes' Anti-Malware]
          [HKLM\Software\MarkAny]
          [HKLM\Software\Micro Application]
          [HKLM\Software\MozillaPlugins]
          [HKLM\Software\Mozilla]
          [HKLM\Software\NDAS]
          [HKLM\Software\NINTENDO]
          [HKLM\Software\NVIDIA Corporation]
          [HKLM\Software\Nero]
          [HKLM\Software\Nokia]
          [HKLM\Software\ODBC]
          [HKLM\Software\OpenOffice.org]
          [HKLM\Software\PC Connectivity Solution]
          [HKLM\Software\PCSuite]
          [HKLM\Software\Piriform]
          [HKLM\Software\Policies]
          [HKLM\Software\QSound Labs, Inc.]
          [HKLM\Software\RTLSetup]
          [HKLM\Software\Realtek]
          [HKLM\Software\RegisteredApplications]
          [HKLM\Software\Samsung]
          [HKLM\Software\ScanSoft]
          [HKLM\Software\Search Settings]
          [HKLM\Software\Sims]
          [HKLM\Software\Sonic]
          [HKLM\Software\Sony Corporation]
          [HKLM\Software\Sony Ericsson]
          [HKLM\Software\Sun Microsystems]
          [HKLM\Software\ToniArts]
          [HKLM\Software\TwonkyMedia]
          [HKLM\Software\VIA Technologies, Inc]
          [HKLM\Software\VideoLAN]
          [HKLM\Software\Volatile]
          [HKLM\Software\WOW6432Node]
          [HKLM\Software\Windows]
          [HKLM\Software\ZSMC]
          [HKLM\Software\lameme]
          [HKLM\Software\mozilla.org]

          ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
          O43 - CFD: 15/10/2010 - 14:28:44 - [3094515] ----D- C:\Program Files\7-Zip
          O43 - CFD: 14/02/2010 - 17:22:50 - [212958901] ----D- C:\Program Files\Adobe
          O43 - CFD: 07/09/2009 - 13:25:18 - [25499645] ----D- C:\Program Files\ArcSoft
          O43 - CFD: 15/09/2009 - 17:51:40 - [2765048] ----D- C:\Program Files\ASUS
          O43 - CFD: 08/02/2010 - 16:50:26 - [17064058] ----D- C:\Program Files\ATI
          O43 - CFD: 08/02/2010 - 16:41:22 - [58008835] ----D- C:\Program Files\ATI Technologies
          O43 - CFD: 10/07/2010 - 10:47:40 - [2587907] ----D- C:\Program Files\Avanquest update
          O43 - CFD: 03/12/2009 - 16:59:54 - [340515239] ----D- C:\Program Files\Canon
          O43 - CFD: 03/12/2009 - 16:45:16 - [15903487] --H-D- C:\Program Files\CanonBJ
          O43 - CFD: 19/04/2010 - 14:38:56 - [2812120] ----D- C:\Program Files\CCleaner
          O43 - CFD: 01/05/2010 - 16:05:26 - [13616832] ----D- C:\Program Files\CDBurnerXP
          O43 - CFD: 12/07/2010 - 17:17:16 - [736484963] ----D- C:\Program Files\Common Files
          O43 - CFD: 04/09/2009 - 13:50:40 - [1659740] ----D- C:\Program Files\CyberLink
          O43 - CFD: 27/04/2010 - 14:12:54 - [3316888] ----D- C:\Program Files\Defraggler
          O43 - CFD: 14/10/2009 - 16:55:32 - [1595928] ----D- C:\Program Files\DIFX
          O43 - CFD: 26/12/2009 - 18:07:36 - [6033599401] ----D- C:\Program Files\Electronic Arts
          O43 - CFD: 01/02/2010 - 10:21:40 - [12445969] ----D- C:\Program Files\eMule
          O43 - CFD: 04/09/2009 - 13:43:48 - [0] -SH-D- C:\Program Files\Fichiers communs
          O43 - CFD: 15/02/2010 - 17:35:08 - [12959058] ----D- C:\Program Files\Free Video Converter
          O43 - CFD: 09/09/2009 - 11:14:14 - [76647513] ----D- C:\Program Files\Google
          O43 - CFD: 10/07/2010 - 10:48:52 - [182900960] --H-D- C:\Program Files\InstallShield Installation Information
          O43 - CFD: 24/09/2009 - 16:39:32 - [1686526] ----D- C:\Program Files\Internet Explorer
          O43 - CFD: 04/05/2010 - 13:40:14 - [87743142] ----D- C:\Program Files\Java
          O43 - CFD: 19/04/2010 - 18:07:14 - [16254752] ----D- C:\Program Files\JRE
          O43 - CFD: 20/08/2010 - 13:49:44 - [60196271] ----D- C:\Program Files\Kaspersky Lab
          O43 - CFD: 24/09/2009 - 16:35:26 - [93373648] ----D- C:\Program Files\Kodak
          O43 - CFD: 08/09/2009 - 14:31:24 - [62807635] ----D- C:\Program Files\Logitech
          O43 - CFD: 26/02/2011 - 18:18:30 - [4931104] ----D- C:\Program Files\Malwarebytes' Anti-Malware
          O43 - CFD: 21/05/2010 - 17:31:52 - [221184] ----D- C:\Program Files\MarkAny
          O43 - CFD: 25/05/2010 - 14:06:58 - [221184] ----D- C:\Program Files\MarkAnyContentSAFER
          O43 - CFD: 16/10/2009 - 16:06:32 - [73852985] ----D- C:\Program Files\Micro Application
          O43 - CFD: 08/09/2009 - 14:16:08 - [800662] ----D- C:\Program Files\Microsoft CAPICOM 2.1.0.2
          O43 - CFD: 02/11/2006 - 13:37:36 - [93446071] ----D- C:\Program Files\Microsoft Games
          O43 - CFD: 26/02/2011 - 16:27:34 - [38371963] ----D- C:\Program Files\Microsoft Silverlight
          O43 - CFD: 26/12/2009 - 18:06:56 - [979309] ----D- C:\Program Files\Microsoft WSE
          O43 - CFD: 25/06/2010 - 10:12:50 - [15715] ----D- C:\Program Files\Microsoft.NET
          O43 - CFD: 19/08/2010 - 11:51:18 - [99342446] ----D- C:\Program Files\Movie Maker
          O43 - CFD: 11/12/2010 - 09:53:30 - [30638063] ----D- C:\Program Files\Mozilla Firefox
          O43 - CFD: 02/11/2006 - 13:37:36 - [25757] ----D- C:\Program Files\MSBuild
          O43 - CFD: 06/09/2009 - 09:21:54 - [0] ----D- C:\Program Files\MSXML 4.0
          O43 - CFD: 22/01/2010 - 15:12:58 - [0] ----D- C:\Program Files\NDAS
          O43 - CFD: 04/09/2009 - 14:11:18 - [435001506] ----D- C:\Program Files\Nero
          O43 - CFD: 16/10/2009 - 13:21:04 - [12732418] ----D- C:\Program Files\Nokia
          O43 - CFD: 19/04/2010 - 18:15:10 - [377813208] ----D- C:\Program Files\OpenOffice.org 3
          O43 - CFD: 21/05/2010 - 17:31:40 - [31060] ----D- C:\Program Files\PC Connectivity Solution
          O43 - CFD: 04/09/2009 - 13:58:24 - [1651134] ----D- C:\Program Files\Realtek
          O43 - CFD: 02/11/2006 - 13:37:36 - [38694657] ----D- C:\Program Files\Reference Assemblies
          O43 - CFD: 21/05/2010 - 17:41:34 - [186893711] ----D- C:\Program Files\Samsung
          O43 - CFD: 07/09/2009 - 13:27:20 - [113034912] ----D- C:\Program Files\ScanSoft
          O43 - CFD: 26/02/2011 - 18:16:20 - [45056] ----D- C:\Program Files\Search Settings
          O43 - CFD: 12/07/2010 - 17:17:14 - [154353162] ----D- C:\Program Files\Sony
          O43 - CFD: 10/07/2010 - 10:48:52 - [32094887] ----D- C:\Program Files\Sony Ericsson
          O43 - CFD: 08/09/2009 - 14:52:56 - [3544406] ----D- C:\Program Files\ToniArts
          O43 - CFD: 02/11/2006 - 14:01:56 - [0] --H-D- C:\Program Files\Uninstall Information
          O43 - CFD: 04/09/2009 - 13:57:44 - [19018149] ----D- C:\Program Files\VIA
          O43 - CFD: 17/11/2009 - 15:02:28 - [49922270] ----D- C:\Program Files\VideoLAN
          O43 - CFD: 27/04/2010 - 13:22:50 - [6545331] ----D- C:\Program Files\VS Revo Group
          O43 - CFD: 16/01/2010 - 20:30:36 - [2133262] ----D- C:\Program Files\WiFiConnector
          O43 - CFD: 07/09/2009 - 15:22:32 - [1016832] ----D- C:\Program Files\Windows Calendar
          O43 - CFD: 07/09/2009 - 15:22:32 - [2737152] ----D- C:\Program Files\Windows Collaboration
          O43 - CFD: 07/09/2009 - 15:22:30 - [4490624] ----D- C:\Program Files\Windows Defender
          O43 - CFD: 07/09/2009 - 15:22:32 - [7084664] ----D- C:\Program Files\Windows Journal
          O43 - CFD: 21/10/2010 - 15:53:26 - [93946976] ----D- C:\Program Files\Windows Live
          O43 - CFD: 10/02/2011 - 07:40:48 - [9116344] ----D- C:\Program Files\Windows Mail
          O43 - CFD: 14/10/2010 - 15:38:40 - [4498121] ----D- C:\Program Files\Windows Media Player
          O43 - CFD: 04/09/2009 - 13:43:48 - [7957544] ----D- C:\Program Files\Windows NT
          O43 - CFD: 07/09/2009 - 15:22:32 - [13528738] ----D- C:\Program Files\Windows Photo Gallery
          O43 - CFD: 28/10/2009 - 18:31:50 - [134144] ----D- C:\Program Files\Windows Portable Devices
          O43 - CFD: 07/09/2009 - 15:22:32 - [7249996] ----D- C:\Program Files\Windows Sidebar
          O43 - CFD: 10/10/2009 - 14:04:52 - [1491215] ----D- C:\Program Files\WordBiz
          O43 - CFD: 26/02/2011 - 18:56:00 - [3452346] ----D- C:\Program Files\ZHPDiag
          O43 - CFD: 06/10/2010 - 14:26:40 - [6351602] ----D- C:\Program Files\Common Files\Adobe
          O43 - CFD: 04/09/2009 - 14:13:08 - [119907282] ----D- C:\Program Files\Common Files\Ahead
          O43 - CFD: 03/12/2009 - 16:54:38 - [560] ----D- C:\Program Files\Common Files\CANON
          O43 - CFD: 07/09/2009 - 13:40:12 - [14281558] ----D- C:\Program Files\Common Files\InstallShield
          O43 - CFD: 30/03/2010 - 17:06:02 - [1231815] ----D- C:\Program Files\Common Files\Java
          O43 - CFD: 24/09/2009 - 16:33:36 - [2950039] ----D- C:\Program Files\Common Files\Kodak
          O43 - CFD: 08/09/2009 - 14:31:08 - [87804620] ----D- C:\Program Files\Common Files\LogiShrd
          O43 - CFD: 21/10/2010 - 15:51:24 - [202691993] ----D- C:\Program Files\Common Files\microsoft shared
          O43 - CFD: 24/09/2009 - 16:30:00 - [651776] ----D- C:\Program Files\Common Files\MSSoap
          O43 - CFD: 16/10/2009 - 13:23:06 - [26211896] ----D- C:\Program Files\Common Files\Nokia
          O43 - CFD: 24/09/2009 - 16:32:22 - [3775624] ----D- C:\Program Files\Common Files\PX Storage Engine
          O43 - CFD: 07/09/2009 - 13:27:50 - [155648] ----D- C:\Program Files\Common Files\ScanSoft Shared
          O43 - CFD: 02/11/2006 - 12:18:34 - [2702] ----D- C:\Program Files\Common Files\Services
          O43 - CFD: 12/07/2010 - 17:17:16 - [335872] ----D- C:\Program Files\Common Files\Sony Shared
          O43 - CFD: 02/11/2006 - 12:18:34 - [41101735] ----D- C:\Program Files\Common Files\SpeechEngines
          O43 - CFD: 07/09/2009 - 15:22:32 - [8737810] ----D- C:\Program Files\Common Files\System
          O43 - CFD: 05/09/2009 - 13:37:24 - [220292431] ----D- C:\Program Files\Common Files\Windows Live
          O43 - CFD: 06/10/2010 - 14:26:38 - [763] ----D- C:\ProgramData\Adobe
          O43 - CFD: 04/09/2009 - 14:14:06 - [320] ----D- C:\ProgramData\Ahead
          O43 - CFD: 02/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Application Data
          O43 - CFD: 08/02/2010 - 16:49:42 - [188] ----D- C:\ProgramData\ATI
          O43 - CFD: 04/09/2009 - 13:43:48 - [0] -SH-D- C:\ProgramData\Bureau
          O43 - CFD: 19/09/2009 - 16:15:38 - [0] ----D- C:\ProgramData\BVRP Software
          O43 - CFD: 22/11/2009 - 13:16:44 - [28] ----D- C:\ProgramData\Canneverbe Limited
          O43 - CFD: 03/12/2009 - 16:48:38 - [21337260] --H-D- C:\ProgramData\CanonBJ
          O43 - CFD: 17/12/2009 - 15:48:36 - [115] --H-D- C:\ProgramData\CanonIJEGV
          O43 - CFD: 06/12/2009 - 20:02:42 - [2180] --H-D- C:\ProgramData\CanonIJScan
          O43 - CFD: 02/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Desktop
          O43 - CFD: 02/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Documents
          O43 - CFD: 26/12/2009 - 18:08:26 - [140139981] ----D- C:\ProgramData\Electronic Arts
          O43 - CFD: 30/01/2010 - 16:20:40 - [0] ----D- C:\ProgramData\eMule
          O43 - CFD: 04/09/2009 - 13:43:48 - [0] -SH-D- C:\ProgramData\Favoris
          O43 - CFD: 02/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Favorites
          O43 - CFD: 09/09/2009 - 11:14:18 - [195309] ----D- C:\ProgramData\Google
          O43 - CFD: 07/09/2009 - 13:28:10 - [250] ----D- C:\ProgramData\InstallShield
          O43 - CFD: 26/02/2011 - 18:22:00 - [557255974] ----D- C:\ProgramData\Kaspersky Lab
          O43 - CFD: 20/08/2010 - 13:51:18 - [171527384] ----D- C:\ProgramData\Kaspersky Lab Setup Files
          O43 - CFD: 24/09/2009 - 16:40:22 - [89793905] ----D- C:\ProgramData\Kodak
          O43 - CFD: 10/09/2009 - 12:34:24 - [12913167] ----D- C:\ProgramData\LogiShrd
          O43 - CFD: 07/09/2009 - 13:39:16 - [0] ----D- C:\ProgramData\Logitech
          O43 - CFD: 08/09/2009 - 15:25:46 - [14021000] ----D- C:\ProgramData\Malwarebytes
          O43 - CFD: 04/09/2009 - 13:43:48 - [0] -SH-D- C:\ProgramData\Menu Démarrer
          O43 - CFD: 21/10/2010 - 15:52:08 - [144888606] -S--D- C:\ProgramData\Microsoft
          O43 - CFD: 04/09/2009 - 13:43:48 - [0] -SH-D- C:\ProgramData\Modèles
          O43 - CFD: 04/09/2009 - 14:11:18 - [4943975] ----D- C:\ProgramData\Nero
          O43 - CFD: 21/09/2009 - 13:48:26 - [73276416] ----D- C:\ProgramData\NokiaMusic
          O43 - CFD: 08/11/2009 - 09:40:46 - [252073] ----D- C:\ProgramData\NVIDIA
          O43 - CFD: 24/09/2009 - 09:08:20 - [9783
          1. Contributeur
            Tu n'as pas lu la dernière ligne de la procédure ;)
            * Héberge le rapport ZHPDiag.txt sur ce site, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum.
        2. Contributeur
          Re,

          * Télécharge AD-Remover(de C_XX) sur ton Bureau.
          Déconnecte toi et ferme toutes les applications en cours
          * Double-clique sur l'icône AD-Remover
          * Au menu principal, clique sur Nettoyer
          * Confirme le lancement de l'analyse et laisse l'outil travailler
          * Poste le rapport qui apparait à la fin (il est aussi sauvegardé sous C:\Ad-report-CLEAN.txt )

          * Télécharge UsbFix (créé par El Desaparecido & C_XX) sur ton Bureau. Si ton antivirus affiche une alerte, ignore le et désactive le temporairement.
          * Branche tes sources de données externes à ton PC (clé USB, disque dur externe, etc...) sans les ouvrir
          * Double clique sur le raccourci UsbFix sur ton Bureau, l'installation se fera automatiquement
          * Clique sur "Recherche"
          * Laisse travailler l'outil
          * A la fin, le rapport va s'afficher : poste le dans ta prochaine réponse (il est aussi sauvegardé a la racine du disque dur)

          Aide en images : Tutoriel "Recherche"
          1. voici le rapport de AD-R:
            C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 19:22:52 le 26/02/2011, Mode normal

            Microsoft® Windows Vista(TM) Édition Familiale Premium Service Pack 2 (X86)
            utilisateur@KRYSLOW (System manufacturer System Product Name)

            ============== ACTION(S) ==============

            Dossier supprimé: C:\Program Files\Mozilla FireFox\extensions\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
            Dossier supprimé: C:\Program Files\Mozilla FireFox\extensions\search@searchsettings.com
            Dossier supprimé: C:\Users\utilisateur\AppData\LocalLow\Dealio
            Dossier supprimé: C:\Users\utilisateur\AppData\LocalLow\Search Settings
            Dossier supprimé: C:\Program Files\Search Settings

            (!) -- Fichiers temporaires supprimés.

            -- Fichier ouvert: C:\Users\utilisateur\AppData\Roaming\Mozilla\FireFox\Profiles\ciah3zwb.default\Prefs.js --
            Ligne supprimée: user_pref("extensions.enabledItems", "{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}:4.0.1,{CAFEEFAC-0016-00...
            -- Fichier Fermé --

            Clé supprimée: HKLM\Software\Search Settings
            Clé supprimée: HKCU\Software\AppDataLow\Software\Dealio
            Clé supprimée: HKLM\Software\Classes\Installer\Products\79CAA1B036589D14EA74856E2A220F1E
            Clé supprimée: HKLM\Software\Classes\Installer\Products\A3BB3C491A65ED342A24B8144FE679FE
            Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Products\79CAA1B036589D14EA74856E2A220F1E
            Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Products\A3BB3C491A65ED342A24B8144FE679FE
            Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{0B1AAC97-8563-41D9-AE47-58E6A222F0E1}
            Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{94C3BB3A-56A1-43DE-A242-8B41F46E97EF}
            Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{0B1AAC97-8563-41D9-AE47-58E6A222F0E1}
            Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{94C3BB3A-56A1-43DE-A242-8B41F46E97EF}
            Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Search Settings

            ============== SCAN ADDITIONNEL ==============

            **** Mozilla Firefox Version [3.5.16 (fr)] ****

            Plugins\npmidas.dll (Midasplayer Ltd)
            Components\aboutCertError.js
            Components\aboutPrivateBrowsing.js
            Components\aboutRights.js
            Components\aboutRobots.js
            Components\aboutSessionRestore.js
            Components\nsPostUpdateWin.js

            -- C:\Users\utilisateur\AppData\Roaming\Mozilla\FireFox\Profiles\ciah3zwb.default --
            Prefs.js - browser.download.lastDir, C:\\Users\\utilisateur\\Pictures\\PhotoFiltre\\masques
            Prefs.js - browser.startup.homepage_override.mstone, rv:1.9.1.16

            ========================================

            **** Internet Explorer Version [7.0.6002.18005] ****

            HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
            HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
            HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
            HKCU_Main|Start Page - hxxp://fr.msn.com/
            HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
            HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
            HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
            HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
            HKLM_Main|Start Page - hxxp://fr.msn.com/
            HKCU_SearchScopes\{77297BEA-71F9-44B8-B12F-9783FF3D4455} - "Durable.com" (hxxp://www.durable.com/result?cx=partner-pub-7902900401080901%3Azbljezwsgul&cof=...)
            HKCU_Toolbar\WebBrowser|{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} (C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll)
            HKLM_Toolbar|{327C2873-E90D-4c37-AA9D-10AC9BABA46C} (C:\Program Files\Canon\Easy-WebPrint\Toolband.dll) (x)
            HKLM_Toolbar|{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} (C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll)
            BHO\{68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - "EWPBrowseObject Class" (C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll) (x)
            BHO\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - "Google Dictionary Compression sdch" (C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll)

            ========================================

            C:\Program Files\Ad-Remover\Quarantine: 70 Fichier(s)
            C:\Program Files\Ad-Remover\Backup: 16 Fichier(s)

            C:\Ad-Report-CLEAN[1].txt - 26/02/2011 19:23:06 (4568 Octet(s))

            Fin à: 19:25:54, 26/02/2011

            ============== E.O.F ==============
            1. voici le rapport de UsbFix (sans arreter kaspersky il ne s'est pas manifesté) :
              ############################## | UsbFix 7.041 | [Recherche]

              Utilisateur: utilisateur (Administrateur) # KRYSLOW [System manufacturer System Product Name]
              Mis à jour le 24/02/2011 par TeamXscript
              Lancé à 19:52:05 | 26/02/2011
              Site Web: http://www.teamxscript.org
              Un fichier non reconnu ? : http://www.teamxscript.org/Upload.php
              Contact: TeamXscript.ElDesaparecido@gmail.com

              CPU: Intel(R) Pentium(R) D CPU 2.80GHz
              CPU 2: Intel(R) Pentium(R) D CPU 2.80GHz
              Microsoft® Windows Vista(TM) Édition Familiale Premium (6.0.6002 32-Bit) # Service Pack 2
              Internet Explorer 7.0.6002.18005

              Pare-feu Windows: Activé
              RAM -> 2046 Mo
              C:\ (%systemdrive%) -> Disque fixe # 225 Go (79 Go libre(s) - 35%) [HDD] # NTFS
              D:\ -> CD-ROM

              ################## | Éléments infectieux |

              ################## | Registre |

              Présent! HKLM\software\microsoft\windows nt\currentversion\winlogon|Taskman

              ################## | Mountpoints2 |

              HKCU\.\.\.\.\Explorer\MountPoints2\{1da0e8cc-38c1-11df-9785-0026180ed3b2}
              Shell\AutoRun\Command = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL raUOyA.EXe

              HKCU\.\.\.\.\Explorer\MountPoints2\{2e1859d8-994d-11de-aad9-806e6f6e6963}
              Shell\AutoRun\Command = D:\Autorun.exe

              HKCU\.\.\.\.\Explorer\MountPoints2\{b4313cc0-f39a-11de-8f34-0026180ed3b2}
              Shell\AutoRun\Command = I:\AutoRunCardDetector.exe

              ################## | Vaccin |

              (!) Cet ordinateur n'est pas vacciné!

              ################## | E.O.F |
              1. REvoici un nouveau rapport (le hdd externe n'était pas reconnu par l'ordi auparavent) :
                ############################## | UsbFix 7.041 | [Recherche]

                Utilisateur: utilisateur (Administrateur) # KRYSLOW [System manufacturer System Product Name]
                Mis à jour le 24/02/2011 par TeamXscript
                Lancé à 20:21:49 | 26/02/2011
                Site Web: http://www.teamxscript.org
                Un fichier non reconnu ? : http://www.teamxscript.org/Upload.php
                Contact: TeamXscript.ElDesaparecido@gmail.com

                CPU: Intel(R) Pentium(R) D CPU 2.80GHz
                CPU 2: Intel(R) Pentium(R) D CPU 2.80GHz
                Microsoft® Windows Vista(TM) Édition Familiale Premium (6.0.6002 32-Bit) # Service Pack 2
                Internet Explorer 7.0.6002.18005

                Pare-feu Windows: Activé
                RAM -> 2046 Mo
                C:\ (%systemdrive%) -> Disque fixe # 225 Go (79 Go libre(s) - 35%) [HDD] # NTFS
                D:\ -> CD-ROM
                I:\ -> Disque fixe # 466 Go (438 Go libre(s) - 94%) [VERBATIM] # FAT32

                ################## | Éléments infectieux |

                ################## | Registre |

                Présent! HKLM\software\microsoft\windows nt\currentversion\winlogon|Taskman

                ################## | Mountpoints2 |

                HKCU\.\.\.\.\Explorer\MountPoints2\{1da0e8cc-38c1-11df-9785-0026180ed3b2}
                Shell\AutoRun\Command = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL raUOyA.EXe

                HKCU\.\.\.\.\Explorer\MountPoints2\{2e1859d8-994d-11de-aad9-806e6f6e6963}
                Shell\AutoRun\Command = D:\Autorun.exe

                HKCU\.\.\.\.\Explorer\MountPoints2\{b4313cc0-f39a-11de-8f34-0026180ed3b2}
                Shell\AutoRun\Command = I:\AutoRunCardDetector.exe

                ################## | Vaccin |

                (!) Cet ordinateur n'est pas vacciné!

                ################## | E.O.F |
                1. Contributeur
                  * Branche tes sources de données externes à ton PC (clé USB, disque dur externe, etc...) sans les ouvrir
                  * Double clique sur le raccourci UsbFix sur ton Bureau
                  * Clique sur "Suppression"
                  * Laisse travailler l'outil
                  * Ton Bureau va disparaitre puis l'ordinateur va redémarrer : c'est normal
                  * A la fin, le rapport va s'afficher : poste le dans ta prochaine réponse (il est aussi sauvegardé a la racine du disque dur)

                  :!: UsbFix te proposera d'envoyer un dossier compressé à cette adresse. Ce dossier a été créé par UsbFix sur ton Bureau. Merci de l'envoyer à l'adresse indiquée afin d'aider l'auteur de UsbFix dans ses recherches. Une fois sur le site, il faut sélectionner "UsbFix" dans le menu déroulant. Merci d'avance pour ta contribution !

                  Aide en images : Tutoriel "Nettoyage"
                  1. voici le rapport apres suppression:
                    ############################## | UsbFix 7.041 | [Suppression]

                    Utilisateur: utilisateur (Administrateur) # KRYSLOW [System manufacturer System Product Name]
                    Mis à jour le 24/02/2011 par TeamXscript
                    Lancé à 21:36:12 | 26/02/2011
                    Site Web: http://www.teamxscript.org
                    Un fichier non reconnu ? : http://www.teamxscript.org/Upload.php
                    Contact: TeamXscript.ElDesaparecido@gmail.com

                    CPU: Intel(R) Pentium(R) D CPU 2.80GHz
                    CPU 2: Intel(R) Pentium(R) D CPU 2.80GHz
                    Microsoft® Windows Vista(TM) Édition Familiale Premium (6.0.6002 32-Bit) # Service Pack 2
                    Internet Explorer 7.0.6002.18005

                    Pare-feu Windows: Activé
                    RAM -> 2046 Mo
                    C:\ (%systemdrive%) -> Disque fixe # 225 Go (79 Go libre(s) - 35%) [HDD] # NTFS
                    D:\ -> CD-ROM
                    I:\ -> Disque fixe # 466 Go (438 Go libre(s) - 94%) [VERBATIM] # FAT32

                    ################## | Éléments infectieux |

                    Supprimé! C:\$RECYCLE.BIN\S-1-5-21-3066592945-1698148639-3071286611-1000
                    Supprimé! C:\$RECYCLE.BIN\S-1-5-21-3066592945-1698148639-3071286611-501
                    Supprimé! C:\Recycler\S-1-5-21-1060284298-861567501-725345543-1003

                    ################## | Registre |

                    Supprimé! HKLM\software\microsoft\windows nt\currentversion\winlogon|Taskman

                    ################## | Mountpoints2 |

                    Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{1da0e8cc-38c1-11df-9785-0026180ed3b2}
                    Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{2e1859d8-994d-11de-aad9-806e6f6e6963}
                    Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{b4313cc0-f39a-11de-8f34-0026180ed3b2}

                    ################## | Listing |

                    [26/02/2011 - 21:38:39 | SHD ] C:\$Recycle.Bin
                    [26/02/2011 - 19:25:54 | N | 4707] C:\Ad-Report-CLEAN[1].txt
                    [23/07/2009 - 18:34:18 | D ] C:\assembly
                    [08/02/2010 - 16:30:28 | D ] C:\ATI
                    [18/09/2006 - 22:43:36 | N | 24] C:\autoexec.bat
                    [07/09/2009 - 15:30:34 | D ] C:\boot
                    [11/04/2009 - 07:36:36 | RASH | 333257] C:\bootmgr
                    [04/09/2009 - 14:18:27 | N | 8192] C:\BOOTSECT.BAK
                    [22/01/2009 - 11:04:01 | N | 3780] C:\cleannavi.txt
                    [18/09/2006 - 22:43:37 | N | 10] C:\config.sys
                    [02/11/2006 - 14:02:03 | SHD ] C:\Documents and Settings
                    [28/05/2007 - 08:56:16 | D ] C:\Données Ciel
                    [05/01/2007 - 16:59:55 | D ] C:\drivers
                    [07/11/2007 - 07:00:40 | N | 17734] C:\eula.1028.txt
                    [07/11/2007 - 07:00:40 | N | 17734] C:\eula.1031.txt
                    [07/11/2007 - 07:00:40 | N | 10134] C:\eula.1033.txt
                    [07/11/2007 - 07:00:40 | N | 17734] C:\eula.1036.txt
                    [07/11/2007 - 07:00:40 | N | 17734] C:\eula.1040.txt
                    [07/11/2007 - 07:00:40 | N | 118] C:\eula.1041.txt
                    [07/11/2007 - 07:00:40 | N | 17734] C:\eula.1042.txt
                    [07/11/2007 - 07:00:40 | N | 17734] C:\eula.2052.txt
                    [07/11/2007 - 07:00:40 | N | 17734] C:\eula.3082.txt
                    [21/01/2009 - 19:00:52 | N | 3465] C:\fixnavi.txt
                    [09/07/2009 - 08:56:20 | D ] C:\found.000
                    [07/11/2007 - 07:00:40 | N | 1110] C:\globdata.ini
                    [26/02/2011 - 19:27:32 | ASH | 2146623488] C:\hiberfil.sys
                    [01/06/2007 - 17:56:55 | N | 40960] C:\HTGD0003.exe
                    [07/11/2007 - 07:03:18 | N | 562688] C:\install.exe
                    [07/11/2007 - 07:00:40 | N | 843] C:\install.ini
                    [07/11/2007 - 07:03:18 | N | 76304] C:\install.res.1028.dll
                    [07/11/2007 - 07:03:18 | N | 96272] C:\install.res.1031.dll
                    [07/11/2007 - 07:03:18 | N | 91152] C:\install.res.1033.dll
                    [07/11/2007 - 07:03:18 | N | 97296] C:\install.res.1036.dll
                    [07/11/2007 - 07:03:18 | N | 95248] C:\install.res.1040.dll
                    [07/11/2007 - 07:03:18 | N | 81424] C:\install.res.1041.dll
                    [07/11/2007 - 07:03:18 | N | 79888] C:\install.res.1042.dll
                    [07/11/2007 - 07:03:18 | N | 75792] C:\install.res.2052.dll
                    [07/11/2007 - 07:03:18 | N | 96272] C:\install.res.3082.dll
                    [09/05/2007 - 15:38:27 | N | 0] C:\IO.SYS
                    [05/01/2007 - 08:40:32 | N | 1804] C:\IPH.PH
                    [24/09/2009 - 09:18:30 | D ] C:\LBSync
                    [09/05/2007 - 15:38:27 | N | 0] C:\MSDOS.SYS
                    [24/05/2007 - 17:26:10 | D ] C:\My Music
                    [26/02/2011 - 19:27:30 | ASH | 2460422144] C:\pagefile.sys
                    [21/01/2008 - 03:32:31 | D ] C:\PerfLogs
                    [26/02/2011 - 19:24:59 | D ] C:\Program Files
                    [25/08/2010 - 10:18:26 | HD ] C:\ProgramData
                    [26/02/2011 - 21:38:38 | SHD ] C:\RECYCLER
                    [28/01/2010 - 15:21:02 | D ] C:\rsit
                    [26/02/2011 - 11:36:52 | SHD ] C:\System Volume Information
                    [26/02/2011 - 21:38:39 | D ] C:\UsbFix
                    [26/02/2011 - 21:36:20 | A | 4184] C:\UsbFix.txt
                    [21/05/2010 - 07:41:23 | D ] C:\Users
                    [07/11/2007 - 07:00:40 | N | 5686] C:\vcredist.bmp
                    [07/11/2007 - 07:09:22 | N | 1442522] C:\VC_RED.cab
                    [07/11/2007 - 07:12:28 | N | 232960] C:\VC_RED.MSI
                    [26/02/2011 - 19:27:22 | D ] C:\Windows
                    [28/01/2010 - 15:14:22 | D ] C:\Windows.ancien compte
                    [04/12/2008 - 07:31:44 | N | 4096] I:\._.Trashes
                    [31/03/2010 - 13:25:52 | D ] I:\FOUND.000
                    [03/12/2008 - 10:21:52 | SHD ] I:\System Volume Information
                    [10/03/2010 - 09:28:24 | D ] I:\music
                    [04/12/2008 - 07:31:44 | D ] I:\.Trashes
                    [03/12/2008 - 10:22:08 | D ] I:\films
                    [04/12/2008 - 07:31:44 | D ] I:\.Spotlight-V100
                    [04/12/2008 - 07:31:44 | D ] I:\.fseventsd
                    [21/01/2010 - 17:58:26 | SHD ] I:\$RECYCLE.BIN
                    [20/09/2009 - 10:23:20 | D ] I:\fonds d'écran
                    [27/01/2010 - 11:02:44 | D ] I:\Videos
                    [26/02/2011 - 16:33:42 | D ] I:\dessins animés

                    ################## | Vaccin |

                    C:\Autorun.inf -> Vaccin créé par UsbFix (TeamXscript)
                    I:\Autorun.inf -> Vaccin créé par UsbFix (TeamXscript)

                    ################## | E.O.F |
                    1. Contributeur
                      Refais-moi un scan avec ZHPDiag stp.
                      Toujours des problèmes ?
                      1. voici le new rapport du scan ZHPdiag et je pense ne plus avoir de soucis.Merci beaucoup.
                        Rapport de ZHPDiag v1.27.1624 par Nicolas Coolman, Update du 25/02/2011
                        Run by utilisateur at 26/02/2011 22:06:11
                        Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
                        Contact : nicolascoolman@yahoo.fr

                        ---\\ Web Browser
                        MSIE: Internet Explorer v7.0.6002.18005
                        MFIE: Mozilla Firefox v3.5.16 (fr) (Defaut)

                        ---\\ System Information
                        Windows Vista Home Premium Edition, 32-bit Service Pack 2 (Build 6002)
                        Processor: x86 Family 15 Model 6 Stepping 4, GenuineIntel
                        Operating System: 32 Bits
                        Boot mode: Normal (Normal boot)
                        Total RAM: 2046 MB (60% free)
                        System Restore: Activé (Enable)
                        System drive C: has 85 GB (37%) free of 225 GB

                        ---\\ Logged in mode
                        Computer Name: KRYSLOW
                        User Name: utilisateur
                        All Users Names: utilisateur, Administrateur,
                        Unselected Option: O45,O61,O62,O65,O66,O82
                        Logged in as Administrator

                        ---\\ Environnement Variables
                        %AppData%=C:\Users\utilisateur\AppData\Roaming
                        %LocalAppData%=C:\Users\utilisateur\AppData\Local
                        %StartMenu%=C:\Users\utilisateur\AppData\Roaming\Microsoft\Windows\Start Menu

                        ---\\ DOS/Devices
                        C:\ Hard drive, Flash drive, Thumb drive (Free 85 Go of 225 Go)
                        D:\ CD-ROM drive (Not Inserted)
                        E:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
                        F:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
                        G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
                        H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
                        I:\ Hard drive, Flash drive, Thumb drive (Free 432 Go of 466 Go)

                        ---\\ Security Center & Tools Informations
                        [HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
                        [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
                        [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
                        [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
                        [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
                        [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
                        [HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
                        [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
                        [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
                        [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
                        [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
                        [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
                        [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
                        [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
                        [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
                        [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK
                        [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK
                        [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
                        [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK
                        [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
                        [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK

                        ---\\ Recherche particulière de fichiers génériques
                        [MD5.D07D4C3038F3578FFCE1C0237F2A1253] - (.Microsoft Corporation - Explorateur Windows.) (.11/04/2009 07:27:36.) -- C:\Windows\Explorer.exe [2926592]
                        [MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) (.21/01/2008 03:23:42.) -- C:\Windows\System32\Wininit.exe [96768]
                        [MD5.072213E1604D843D3230EE61663466A4] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.20/12/2010 17:36:20.) -- C:\Windows\System32\wininet.dll [834048]
                        [MD5.898E7C06A350D4A1A64A9EA264D55452] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.11/04/2009 07:28:13.) -- C:\Windows\System32\Winlogon.exe [314368]
                        [MD5.1F05B78AB91C9075565A9D8A4B880BC4] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.11/04/2009 07:32:26.) -- C:\Windows\System32\drivers\atapi.sys [19944]
                        [MD5.6A4A98CEE84CF9E99564510DDA4BAA47] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.11/04/2009 07:32:49.) -- C:\Windows\System32\drivers\ntfs.sys [1083880]

                        ---\\ Processus lancés
                        [MD5.0D392EDE3B97E0B3131B2F63EF1DB94E] - (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe [1008184]
                        [MD5.98C9D8B03A6DEC5975A0E19EE2685CF5] - (.ScanSoft, Inc. - OCR Aware.) -- C:\Program Files\ScanSoft\OmniPageSE4.0\OpWareSE4.exe [69632]
                        [MD5.4AB05041D5C922B9A7A5D9059F5538CD] - (.Microsoft Corporation - User session Windows Mobile device handler.) -- C:\Windows\WindowsMobile\wmdSync.exe [215552]
                        [MD5.12FD7C1EADDDA10A67B1D6F905B3CC1E] - (.Sony Corporation - Content Transfer Walkman Detector.) -- C:\Program Files\Sony\Content Transfer\ContentTransferWMDetector.exe [583016]
                        [MD5.946D70667B0119F2BEEAE0849E1D46A2] - (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe [352976]
                        [MD5.E7704CBF568815C1CAA6E513387BD3F2] - (.Advanced Micro Devices Inc. - Catalyst Control Center: Monitoring program.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe [65536]
                        [MD5.BF08674925F151BD4537B89A493E3E0C] - (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe [125952]
                        [MD5.A817E54AEDEE3CC84956B82C9F1727B0] - (.Samsung Electronics Co., Ltd. - NPSAgent.) -- C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe [102400]
                        [MD5.0F4195B9B348DE5CF9B822F81704B20E] - (.Microsoft Corporation - Media Center Media Status Aggregator Servic.) -- C:\Windows\ehome\ehmsas.exe [37376]
                        [MD5.74EF310FAC89341CE2897B7F2C4A7B0F] - (.ATI Technologies Inc. - Catalyst Control Centre: Host application.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe [65536]
                        [MD5.488F497576D1076E9C9698D3F91A98C9] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [631808]

                        ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
                        M3 - MFPP: Plugins - [utilisateur] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
                        M3 - MFPP: Plugins - [utilisateur] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
                        M3 - MFPP: Plugins - [utilisateur] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
                        M3 - MFPP: Plugins - [utilisateur] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
                        M3 - MFPP: Plugins - [utilisateur] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
                        M3 - MFPP: Plugins - [utilisateur] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
                        P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeployJava1.dll
                        P2 - FPN:Firefox Plugin Navigator . (.Midasplayer Ltd - Plays games at king.com.) -- C:\Program Files\Mozilla Firefox\Plugins\npmidas.dll
                        P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins\npnul32.dll
                        P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.4.2".) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll
                        P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\Macromed\Flash\NPSWF32.dll
                        P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.5.) -- C:\Windows\system32\Adobe\Director\np32dsw.dll
                        P2 - FPN: [HKLM] [@canon.com/EPPEX] - (.CANON INC. - CANON iMAGE GATEWAY Album Plugin Utility Module.) -- C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.dll
                        P2 - FPN: [HKLM] [@google.com/npPicasa3,version=3.0.0] - (.Google, Inc. - Picasa plugin.) -- C:\Program Files\Google\Picasa3\npPicasa3.dll
                        P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.60129.0.) -- c:\Program Files\Microsoft Silverlight\4.0.60129.0\npctrl.dll
                        P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
                        M2 - MFEP: prefs.js [utilisateur - ciah3zwb.default\{20a82645-c095-46ed-80e3-08825760534b}] [MicrosoftCG] Microsoft .NET Framework Assistant v1.2.1 (.Microsoft.)

                        ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
                        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                        R0 - HKUS\S-1-5-21-3066592945-1698148639-3071286611-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
                        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
                        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
                        R1 - HKUS\S-1-5-21-3066592945-1698148639-3071286611-1000\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
                        R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (7.00.6000.16386 (vista_rtm.061101-2205)) -- C:\Windows\system32\ieframe.dll

                        ---\\ Internet Explorer, Proxy Management (R5)
                        R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
                        R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
                        R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
                        R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
                        R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

                        ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
                        F2 - REG:system.ini: UserInit=C:\Windows\system32\Userinit.exe,
                        F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

                        ---\\ Browser Helper Objects de navigateur (O2)
                        O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                        O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} . (.CANON INC. - Easy-WebPrint EX.) -- C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll
                        O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} . (.Kaspersky Lab ZAO - IE Virtual Keyboard.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\ievkbd.dll
                        O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} . (...) -- C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll (.not file.)
                        O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                        O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
                        O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
                        O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} . (.Google Inc. - Fast Search.) -- C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
                        O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
                        O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} . (.Kaspersky Lab ZAO - WebToolBar component.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\klwtbbho.dll

                        ---\\ Internet Explorer Toolbars (O3)
                        O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
                        O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
                        O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} . (.CANON INC. - Easy-WebPrint EX.) -- C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll

                        ---\\ Applications démarrées par registre & par dossier (O4)
                        O4 - HKLM\..\Run: [Windows Defender] . (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe
                        O4 - HKLM\..\Run: [SSBkgdUpdate] . (.Scansoft, Inc. - SSBkgdUpdate.) -- C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe
                        O4 - HKLM\..\Run: [OpwareSE4] . (.ScanSoft, Inc. - OCR Aware.) -- C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
                        O4 - HKLM\..\Run: [Windows Mobile-based device management] . (.Microsoft Corporation - User session Windows Mobile device handler.) -- C:\Windows\WindowsMobile\wmdSync.exe
                        O4 - HKLM\..\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
                        O4 - HKLM\..\Run: [NPSStartup] Clé orpheline
                        O4 - HKLM\..\Run: [ContentTransferWMDetector.exe] . (.Sony Corporation - Content Transfer Walkman Detector.) -- C:\Program Files\Sony\Content Transfer\ContentTransferWMDetector.exe
                        O4 - HKLM\..\Run: [AVP] . (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe
                        O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
                        O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
                        O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware (reboot)] . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
                        O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
                        O4 - HKCU\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                        O4 - HKCU\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe
                        O4 - HKCU\..\Run: [AutoStartNPSAgent] . (.Samsung Electronics Co., Ltd. - NPSAgent.) -- C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
                        O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
                        O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] oobefldr.dll
                        O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
                        O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] oobefldr.dll
                        O4 - HKUS\S-1-5-21-3066592945-1698148639-3071286611-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
                        O4 - HKUS\S-1-5-21-3066592945-1698148639-3071286611-1000\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                        O4 - HKUS\S-1-5-21-3066592945-1698148639-3071286611-1000\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe
                        O4 - HKUS\S-1-5-21-3066592945-1698148639-3071286611-1000\..\Run: [AutoStartNPSAgent] . (.Samsung Electronics Co., Ltd. - NPSAgent.) -- C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe

                        ---\\ Autres liens utilisateurs (O4)
                        O4 - Global Startup: C:\Users\utilisateur\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
                        O4 - Global Startup: C:\Users\utilisateur\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Mail\WinMail.exe
                        O4 - Global Startup: C:\Users\utilisateur\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
                        O4 - Global Startup: C:\Users\utilisateur\Desktop\AD-R.lnk . (...) -- C:\Program Files\Ad-Remover\main.exe
                        O4 - Global Startup: C:\Users\utilisateur\Desktop\CCleaner.lnk . (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe
                        O4 - Global Startup: C:\Users\utilisateur\Desktop\Defraggler.lnk . (.Piriform Ltd.) -- C:\Program Files\Defraggler\Defraggler.exe
                        O4 - Global Startup: C:\Users\utilisateur\Desktop\EasyCleaner.lnk . (.ToniArts.) -- C:\Program Files\ToniArts\EasyCleaner\EasyClea.exe
                        O4 - Global Startup: C:\Users\utilisateur\Desktop\Free Video Converter.lnk . (.Koyote Soft.) -- C:\Program Files\Free Video Converter\FreeVideoConverter.exe
                        O4 - Global Startup: C:\Users\utilisateur\Desktop\PhotoFiltre.lnk . (.Antonio Da Cruz.) -- C:\Users\utilisateur\Pictures\PhotoFiltre\PhotoFiltre.exe
                        O4 - Global Startup: C:\Users\utilisateur\Desktop\Revo Uninstaller.lnk . (.VS Revo Group.) -- C:\Program Files\VS Revo Group\Revo Uninstaller\revouninstaller.exe
                        O4 - Global Startup: C:\Users\utilisateur\Desktop\Sauvegarde anciens comptes.lnk . (...) -- C:\Windows.old\Users (.not file.)
                        O4 - Global Startup: C:\Users\utilisateur\Desktop\WordBiz.lnk . (...) -- C:\Program Files\WordBiz\WordBiz.exe
                        O4 - Global Startup: C:\Users\utilisateur\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Free Video Converter.lnk . (.Koyote Soft.) -- C:\Program Files\Free Video Converter\FreeVideoConverter.exe
                        O4 - Global Startup: C:\Users\utilisateur\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
                        O4 - Global Startup: C:\Users\utilisateur\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe
                        O4 - Global Startup: C:\Users\utilisateur\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Nero Home Essentials SE.lnk . (.Nero AG.) -- C:\Program Files\Nero\Nero 7\Nero Home\NeroHome.exe
                        O4 - Global Startup: C:\Users\utilisateur\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Nero StartSmart Essentials.lnk . (.Nero AG.) -- C:\Program Files\Nero\Nero 7\Nero StartSmart\NeroStartSmart.exe
                        O4 - Global Startup: C:\Users\utilisateur\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Picasa 3.lnk . (.Google Inc..) -- C:\Program Files\Google\Picasa3\Picasa3.exe
                        O4 - Global Startup: C:\Users\utilisateur\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Samsung New PC Studio.lnk . (.Samsung Electronics Co., Ltd..) -- C:\Program Files\Samsung\Samsung New PC Studio\NPSGuide.exe
                        O4 - Global Startup: C:\Users\utilisateur\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - Clé orpheline
                        O4 - Global Startup: C:\Users\utilisateur\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - Clé orpheline
                        O4 - Global Startup: C:\Users\utilisateur\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

                        ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
                        O8 - Extra context menu item: Add to Google Photos Screensa&ver . (.Google Inc. - Google Photos Screensaver.) -- C:\Windows\system32\GPhotos.scr

                        ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
                        O9 - Extra button: Clavier &virtuel - {4248FE82-7FCB-46AC-B270-339F08212110} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\kbrd.ico
                        O9 - Extra button: Clavier &virtuel - {CCF151D8-D089-449F-A5A4-D9909053F20F} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\logo.ico

                        ---\\ Winsock hijacker (Layered Service Provider) (O10)
                        O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
                        O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
                        O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
                        O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
                        O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
                        O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll

                        ---\\ Objets ActiveX (Downloaded Program Files)(O16)
                        O16 - DPF: Microsoft XML Parser for Java - (Microsoft XML Parser for Java) - (.not file.) - C:\Windows\Java\classes\xmldso.cab
                        O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
                        O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} () - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                        O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

                        ---\\ Modification Domaine/Adresses DNS (O17)
                        O17 - HKLM\System\CCS\Services\Tcpip\..\{002985E9-7B7D-46E7-B405-BAC5AD87DC6F}: NameServer = 212.27.40.241,212.27.40.240
                        O17 - HKLM\System\CS1\Services\Tcpip\..\{002985E9-7B7D-46E7-B405-BAC5AD87DC6F}: NameServer = 212.27.40.241,212.27.40.240
                        O17 - HKLM\System\CS2\Services\Tcpip\..\{002985E9-7B7D-46E7-B405-BAC5AD87DC6F}: NameServer = 212.27.40.241,212.27.40.240
                        O17 - HKLM\System\CS3\Services\Tcpip\..\{002985E9-7B7D-46E7-B405-BAC5AD87DC6F}: NameServer = 212.27.40.241,212.27.40.240

                        ---\\ Protocole additionnel et piratage de protocole (O18)
                        O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} . (.Google Inc. - Fast Search.) -- C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll

                        ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
                        O20 - Winlogon Notify: klogon . (.Kaspersky Lab ZAO - Logon Visualizer.) -- C:\Windows\system32\klogon.dll

                        ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
                        O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\System32\webcheck.dll

                        ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
                        O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll

                        ---\\ Liste des services NT non Microsoft et non désactivés (O23)
                        O23 - Service: C:\Windows\system32\Alg.exe (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\system32\atiesrxx.exe
                        O23 - Service: (AVP) . (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe
                        O23 - Service: (FsUsbExService) . (.Teruten - FsUsbDevice.) - C:\Windows\system32\FsUsbExService.exe
                        O23 - Service: (gusvc) . (.Google - gusvc.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                        O23 - Service: (IDriverT) . (.Macrovision Corporation - IDriverT Module.) - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
                        O23 - Service: (LVPrcSrv) . (.Logitech Inc. - Logitech LVPrcSrv Module..) - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
                        O23 - Service: (NBService) . (.Nero AG - Nero BackItUp.) - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
                        O23 - Service: (NMIndexingService) . (.Nero AG - Nero Home.) - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
                        O23 - Service: (NMSAccessU) . (.Pas de propriétaire - Pas de description.) - C:\Program Files\CDBurnerXP\NMSAccessU.exe
                        O23 - Service: (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 191.0.) - C:\Windows\system32\nvvsvc.exe
                        O23 - Service: (OMSI download service) . (.Pas de propriétaire - Pas de description.) - C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
                        O23 - Service: (ServiceLayer) . (.Nokia. - ServiceLayer Module.) - C:\Program Files\Nokia\PC Connectivity Solution\ServiceLayer.exe
                        O23 - Service: (wlidsvc) . (.Microsoft Corp. - Microsoft® Windows Live ID Service.) - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.exe

                        ---\\ Enumération Active Desktop & MHTML Editor (O24)
                        O24 - Default MHTML Editor: Last - .(.Pas de propriétaire - Pas de description.) - (.not file.)

                        ---\\ Tâches planifiées en automatique (O39)
                        O39 - APT:Automatic Planified Task - C:\Windows\Tasks\EasyShare Registration Task.job
                        O39 - APT:Automatic Planified Task - C:\Windows\Tasks\User_Feed_Synchronization-{D7851F04-7A7B-42AB-B539-A199BD6EB625}.job

                        ---\\ Pilotes lancés au démarrage (O41)
                        O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
                        O41 - Driver: (AsIO) . (.Pas de propriétaire - Pas de description.) - C:\Windows\System32\drivers\AsIO.sys
                        O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
                        O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
                        O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\System32\DRIVERS\i8042prt.sys
                        O41 - Driver: (kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\System32\DRIVERS\kbdclass.sys
                        O41 - Driver: (kl2) . (.Kaspersky Lab ZAO - Kaspersky Unified Driver.) - C:\Windows\System32\DRIVERS\kl2.sys
                        O41 - Driver: (KLIF) . (.Kaspersky Lab - Klif Mini-Filter [fre_wlh_x86].) - C:\Windows\System32\DRIVERS\klif.sys
                        O41 - Driver: (KLIM6) . (.Kaspersky Lab ZAO - Kaspersky Lab Intermediate Network Driver.) - C:\Windows\System32\DRIVERS\klim6.sys
                        O41 - Driver: (mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\System32\DRIVERS\mouclass.sys
                        O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
                        O41 - Driver: (netbt) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
                        O41 - Driver: (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
                        O41 - Driver: C:\Windows\system32\drivers\pacer.sys (PSched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
                        O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\System32\DRIVERS\rasacd.sys
                        O41 - Driver: (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys
                        O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
                        O41 - Driver: (RDPENCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
                        O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\Windows\System32\DRIVERS\serial.sys
                        O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Smb) . (.Microsoft Corporation - SMB Transport driver.) - C:\Windows\System32\DRIVERS\smb.sys
                        O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
                        O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys
                        O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
                        O41 - Driver: (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys

                        ---\\ Logiciels installés (O42)
                        O42 - Logiciel: 7-Zip 4.65 - (.Pas de propriétaire.) [HKLM] -- 7-Zip
                        O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
                        O42 - Logiciel: Adobe Reader 9.4.2 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A94000000001}
                        O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player
                        O42 - Logiciel: ArcSoft PhotoStudio 5.5 - (.ArcSoft.) [HKLM] -- {85309D89-7BE9-4094-BB17-24999C6118FC}
                        O42 - Logiciel: Avanquest update - (.Avanquest Software.) [HKLM] -- {76E41F43-59D2-4F30-BA42-9A762EE1E8DE}
                        O42 - Logiciel: CCScore - (.EASTMAN KODAK Company.) [HKLM] -- {B4B44FE7-41FF-4DAD-8C0A-E406DDA72992}
                        O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
                        O42 - Logiciel: CDBurnerXP - (.Canneverbe Limited.) [HKLM] -- {5932A5C4-BB44-4CFB-AD66-1B826F4D788B}
                        O42 - Logiciel: Canon Easy-WebPrint EX - (.Pas de propriétaire.) [HKLM] -- Easy-WebPrint EX
                        O42 - Logiciel: Canon MP Navigator EX 3.0 - (.Pas de propriétaire.) [HKLM] -- MP Navigator EX 3.0
                        O42 - Logiciel: Canon MP550 series MP Drivers - (.Pas de propriétaire.) [HKLM] -- {1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP550_series
                        O42 - Logiciel: Canon Utilities Easy-PhotoPrint EX - (.Pas de propriétaire.) [HKLM] -- Easy-PhotoPrint EX
                        O42 - Logiciel: Canon Utilities My Printer - (.Pas de propriétaire.) [HKLM] -- CanonMyPrinter
                        O42 - Logiciel: Canon Utilities Solution Menu - (.Pas de propriétaire.) [HKLM] -- CanonSolutionMenu
                        O42 - Logiciel: Catalyst Control Center - Branding - (.ATI.) [HKLM] -- {8D7133DE-27D2-47E5-B248-4180278D32AA}
                        O42 - Logiciel: Content Transfer - (.Sony Corporation.) [HKLM] -- {CFADE4AF-C0CF-4A04-A776-741318F1658F}
                        O42 - Logiciel: Cool & Quiet - (.Pas de propriétaire.) [HKLM] -- {1ADE1AA0-7F82-4BB1-B1BD-727DE438057B}
                        O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
                        O42 - Logiciel: Defraggler - (.Piriform.) [HKLM] -- Defraggler
                        O42 - Logiciel: EA Download Manager - (.Electronic Arts, Inc..) [HKLM] -- EADM
                        O42 - Logiciel: ESSBrwr - (.EASTMAN KODAK Company.) [HKLM] -- {643EAE81-920C-4931-9F0B-4B343B225CA6}
                        O42 - Logiciel: ESSCDBK - (.EASTMAN KODAK Company.) [HKLM] -- {AE1FA02D-E6A4-4EA0-8E58-6483CAC016DD}
                        O42 - Logiciel: ESSPCD - (.EASTMAN KODAK Company.) [HKLM] -- {14D4ED84-6A9A-45A0-96F6-1753768C3CB5}
                        O42 - Logiciel: ESSPDock - (.Nom de votre société.) [HKLM] -- {FCDB1C92-03C6-4C76-8625-371224256091}
                        O42 - Logiciel: ESSSONIC - (.EASTMAN KODAK Company.) [HKLM] -- {073F22CE-9A5B-4A40-A604-C7270AC6BF34}
                        O42 - Logiciel: ESSTOOLS - (.EASTMAN KODAK Company.) [HKLM] -- {8A502E38-29C9-49FA-BCFA-D727CA062589}
                        O42 - Logiciel: ESScore - (.Nom de votre société.) [HKLM] -- {42938595-0D83-404D-9F73-F8177FDD531A}
                        O42 - Logiciel: ESSgui - (.EASTMAN KODAK Company.) [HKLM] -- {91517631-A9F3-4B7C-B482-43E0068FD55A}
                        O42 - Logiciel: ESSini - (.Nom de votre société.) [HKLM] -- {8E92D746-CD9F-4B90-9668-42B74C14F765}
                        O42 - Logiciel: Easy-WebPrint - (.Pas de propriétaire.) [HKLM] -- Easy-WebPrint
                        O42 - Logiciel: EasyCleaner - (.ToniArts.) [HKLM] -- {F5346614-B7C4-4E94-826A-E2363155233D}
                        O42 - Logiciel: Enregistrement utilisateur de Canon MP160 - (.Pas de propriétaire.) [HKLM] -- Enregistrement utilisateur de Canon MP160
                        O42 - Logiciel: Enregistrement utilisateur de Canon MP550 series - (.Pas de propriétaire.) [HKLM] -- Enregistrement utilisateur de Canon MP550 series
                        O42 - Logiciel: Free Video Converter V 2.5 - (.Koyote Soft.) [HKLM] -- Free Video Converter_is1
                        O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
                        O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
                        O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
                        O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
                        O42 - Logiciel: Java(TM) 6 Update 20 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216016FF}
                        O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
                        O42 - Logiciel: Kaspersky Anti-Virus 2011 - (.Kaspersky Lab.) [HKLM] -- InstallWIX_{66F1F013-008F-4875-B283-5A814B820347}
                        O42 - Logiciel: Kaspersky Anti-Virus 2011 - (.Kaspersky Lab.) [HKLM] -- {66F1F013-008F-4875-B283-5A814B820347}
                        O42 - Logiciel: Les Sims(TM) 3 - (.Electronic Arts.) [HKLM] -- {C05D8CDB-417D-4335-A38C-A0659EDFD6B8}
                        O42 - Logiciel: Logiciel Kodak EasyShare - (.Eastman Kodak Company.) [HKLM] -- {D32470A1-B10C-4059-BA53-CF0486F68EBC}
                        O42 - Logiciel: Logitech Vid - (.Logitech Inc..) [HKLM] -- {4FBCEA31-5D18-4212-9231-DE7CF1BE7DBB}
                        O42 - Logiciel: Logitech Webcam Software - (.Logitech Inc..) [HKLM] -- {AC96671C-2001-432C-9826-5266D84EF1DC}
                        O42 - Logiciel: MCE Software Encoder 1.1 - (.CyberLink Corporation.) [HKLM] -- {7655E113-C306-11D9-A373-0050BAE317E1}
                        O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
                        O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
                        O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
                        O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
                        O42 - Logiciel: Micro Application - MediaDICO Les 4 Dictionnaires Utiles - (.Pas de propriétaire.) [HKLM] -- MediaDICO 4 Dictionnaires Utiles
                        O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) [HKLM] -- {3E31821C-7917-367E-938E-E65FC413EA31}
                        O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
                        O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
                        O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile
                        O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}
                        O42 - Logiciel: Microsoft .NET Framework 4 Client Profile FRA Language Pack - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}
                        O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
                        O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}
                        O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c}
                        O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
                        O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 - (.Microsoft Corporation.) [HKLM] -- {FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}
                        O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 - (.Microsoft Corporation.) [HKLM] -- {E503B4BF-F7BB-3D5F-8BC8-F694B1CFF942}
                        O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
                        O42 - Logiciel: Microsoft WSE 3.0 Runtime - (.Microsoft Corp..) [HKLM] -- {E3E71D07-CD27-46CB-8448-16D4FB29AA13}
                        O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 Language Pack SP1 - fra
                        O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack
                        O42 - Logiciel: Mozilla Firefox (3.5.16) - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.5.16)
                        O42 - Logiciel: NVIDIA Drivers - (.NVIDIA Corporation.) [HKLM] -- NVIDIA Drivers
                        O42 - Logiciel: NWZ-E440 WALKMAN Guide - (.Sony Corporation.) [HKLM] -- {E96FF910-1BC9-4EE5-BC12-0A30D4E20F37}
                        O42 - Logiciel: Nero 7 Essentials - (.Nero AG.) [HKLM] -- {BD49141C-188C-4B75-9F46-C2C42F2D1036}
                        O42 - Logiciel: Nokia Multimedia Common Components 2.4 - (.Nokia.) [HKLM] -- {6EB6C056-02BB-453E-8448-EC90B9794180}
                        O42 - Logiciel: OfotoXMI - (.EASTMAN KODAK Company.) [HKLM] -- {B162D0A6-9A1D-4B7C-91A5-88FB48113C45}
                        O42 - Logiciel: OpenOffice.org 3.2 - (.OpenOffice.org.) [HKLM] -- {4EE2EF4B-25D3-4D44-8384-A2B96F811F55}
                        O42 - Logiciel: PC Connectivity Solution - (.Nokia.) [HKLM] -- {0C973594-7DDF-4BD0-84ED-3517F7622037}
                        O42 - Logiciel: PVSonyDll - (.NVIDIA Corporation.) [HKLM] -- {3D3E663D-4E7E-4577-A560-7ECDDD45548A}
                        O42 - Logiciel: Package de pilotes Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0) - (.Nokia.) [HKLM] -- 504244733D18C8F63FF584AEB290E3904E791693
                        O42 - Logiciel: PhotoFiltre - (.Pas de propriétaire.) [HKLM] -- PhotoFiltre
                        O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM] -- Picasa 3
                        O42 - Logiciel: Programme de gestion Camera de Logitech® - (.Pas de propriétaire.) [HKLM] -- QcDrv
                        O42 - Logiciel: Realtek 8169 8168 8101E 8102E Ethernet Driver - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
                        O42 - Logiciel: Revo Uninstaller 1.88 - (.VS Revo Group.) [HKLM] -- Revo Uninstaller
                        O42 - Logiciel: SAMSUNG Mobile Composite Device Software - (.Pas de propriétaire.) [HKLM] -- SAMSUNG Mobile Composite Device
                        O42 - Logiciel: SAMSUNG Mobile Modem Driver Set - (.Pas de propriétaire.) [HKLM] -- SAMSUNG Mobile Modem
                        O42 - Logiciel: SAMSUNG Mobile USB Modem 1.0 Software - (.Pas de propriétaire.) [HKLM] -- SAMSUNG Mobile USB Modem 1.0
                        O42 - Logiciel: SAMSUNG Mobile USB Modem Software - (.Pas de propriétaire.) [HKLM] -- SAMSUNG Mobile USB Modem
                        O42 - Logiciel: SAMSUNG USB Mobile Device Software - (.Pas de propriétaire.) [HKLM] -- SAMSUNG USB Mobile Device
                        O42 - Logiciel: SFR - (.Eastman Kodak Company.) [HKLM] -- {DB02F716-6275-42E9-B8D2-83BA2BF5100B}
                        O42 - Logiciel: SHASTA - (.EASTMAN KODAK Company.) [HKLM] -- {605A4E39-613C-4A12-B56F-DEFBE6757237}
                        O42 - Logiciel: SKINXSDK - (.EASTMAN KODAK Company.) [HKLM] -- {F4A2E7CC-60CA-4AFA-B67F-AD5E58173C3F}
                        O42 - Logiciel: Samsung Mobile Modem Device Software - (.Pas de propriétaire.) [HKLM] -- Samsung Mobile Modem Device
                        O42 - Logiciel: Samsung Mobile phone USB driver Software - (.Pas de propriétaire.) [HKLM] -- Samsung Mobile phone USB driver
                        O42 - Logiciel: Samsung New PC Studio - (.Samsung Electronics Co., Ltd..) [HKLM] -- InstallShield_{F193FC0E-9E18-40FC-A974-509A1BDD240A}
                        O42 - Logiciel: Samsung New PC Studio - (.Samsung Electronics Co., Ltd..) [HKLM] -- {F193FC0E-9E18-40FC-A974-509A1BDD240A}
                        O42 - Logiciel: Samsung New PC Studio USB Driver Installer - (.Samsung Electronics Co., Ltd..) [HKLM] -- InstallShield_{AF7E85DC-317C-47F5-810E-B82EE093A612}
                        O42 - Logiciel: Samsung New PC Studio USB Driver Installer - (.Samsung Electronics Co., Ltd..) [HKLM] -- {AF7E85DC-317C-47F5-810E-B82EE093A612}
                        O42 - Logiciel: SamsungConnectivityCableDriver - (.Samsung.) [HKLM] -- {7E84FAC8-C518-40F9-9807-7455301D6D25}
                        O42 - Logiciel: ScanSoft OmniPage SE 4.0 - (.ScanSoft, Inc..) [HKLM] -- {29D851C2-048C-4B5E-8D1F-25D473342BB5}
                        O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906
                        O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
                        O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473
                        O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}
                        O42 - Logiciel: Sony Ericsson PC Suite 6.009.00 - (.Sony Ericsson.) [HKLM] -- {2FFE93F0-BB72-4E52-8761-354D1AAA9387}
                        O42 - Logiciel: Spelling Dictionaries Support For Adobe Reader 9 - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-5464-3428-900000000004}
                        O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
                        O42 - Logiciel: Utilitaire d'enregistrement du connecteur Wi-Fi USB Nintendo - (.Pas de propriétaire.) [HKLM] -- WiFiConnector
                        O42 - Logiciel: VIA Gestionnaire de périphériques de plate-forme - (.VIA Technologies, Inc..) [HKLM] -- InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}
                        O42 - Logiciel: VLC media player 0.9.4 - (.VideoLAN Team.) [HKLM] -- VLC media player
                        O42 - Logiciel: VPRINTOL - (.EASTMAN KODAK Company.) [HKLM] -- {999D43F4-9709-4887-9B1A-83EBB15A8370}
                        O42 - Logiciel: WIRELESS - (.EASTMAN KODAK Company.) [HKLM] -- {F9593CFB-D836-49BC-BFF1-0E669A411D9F}
                        O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite
                        O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM] -- {34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}
                        O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {D45240D3-B6B3-4FF9-B243-54ECE3E10066}
                        O42 - Logiciel: Windows Live ID Sign-in Assistant - (.Microsoft Corporation.) [HKLM] -- {61AD15B2-50DB-4686-A739-14FE180D4429}
                        O42 - Logiciel: Windows Live Installer - (.Microsoft Corporation.) [HKLM] -- {0B0F231F-CE6A-483D-AA23-77B364F75917}
                        O42 - Logiciel: Windows Live MIME IFilter - (.Microsoft Corporation.) [HKLM] -- {AF844339-2F8A-4593-81B3-9F4C54038C4E}
                        O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {9D56775A-93F3-44A3-8092-840E3826DE30}
                        O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {9FAE6E8D-E686-49F5-A574-0A58DFD9580C}
                        O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {6057E21C-ABE9-4059-AE3E-3BEB9925E660}
                        O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {EB4DF488-AAEF-406F-A341-CB2AAA315B90}
                        O42 - Logiciel: Windows Live PIMT Platform - (.Microsoft Corporation.) [HKLM] -- {4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}
                        O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM] -- {A9BDCA6B-3653-467B-AC83-94367DA3BFE3}
                        O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM] -- {C893D8C0-1BA0-4517-B11C-E89B65E72F70}
                        O42 - Logiciel: Windows Live SOXE - (.Microsoft Corporation.) [HKLM] -- {682B3E4F-696A-42DE-A41C-4C07EA1678B4}
                        O42 - Logiciel: Windows Live SOXE Definitions - (.Microsoft Corporation.) [HKLM] -- {200FEC62-3C34-4D60-9CE8-EC372E01C08F}
                        O42 - Logiciel: Windows Live UX Platform - (.Microsoft Corporation.) [HKLM] -- {CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}
                        O42 - Logiciel: Windows Live UX Platform Language Pack - (.Microsoft Corporation.) [HKLM] -- {09F56A49-A7B1-4AAB-95B9-D13094254AD1}
                        O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {AAAFC670-569B-4A2F-82B4-42945E0DE3EF}
                        O42 - Logiciel: Windows Live Writer Resources - (.Microsoft Corporation.) [HKLM] -- {62687B11-58B5-4A18-9BC3-9DF4CE03F194}
                        O42 - Logiciel: WordBiz version 1.8 - (.Internet Scrabble Club.) [HKLM] -- Internet Scrabble Club_is1
                        O42 - Logiciel: eMule - (.Pas de propriétaire.) [HKLM] -- eMule
                        O42 - Logiciel: essvatgt - (.EASTMAN KODAK Company.) [HKLM] -- {2D03B6F8-DF36-4980-B7B6-5B93D5BA3A8F}
                        O42 - Logiciel: fflink - (.EASTMAN KODAK Company.) [HKLM] -- {608D2A3C-6889-4C11-9B54-A42F45ACBFDB}
                        O42 - Logiciel: kgcbaby - (.EASTMAN KODAK Company.) [HKLM] -- {E18B549C-5D15-45DA-8D8F-8FD2BD946344}
                        O42 - Logiciel: kgcbase - (.EASTMAN KODAK Company.) [HKLM] -- {F22C222C-3CE2-4A4B-A83F-AF4681371ABE}
                        O42 - Logiciel: kgchday - (.EASTMAN KODAK Company.) [HKLM] -- {11F3F858-4131-4FFA-A560-3FE282933B6E}
                        O42 - Logiciel: kgchlwn - (.EASTMAN KODAK Company.) [HKLM] -- {03EDED24-8375-407D-A721-4643D9768BE1}
                        O42 - Logiciel: kgcinvt - (.EASTMAN KODAK Company.) [HKLM] -- {9BD54685-1496-46A5-AB62-357CD140ED8B}
                        O42 - Logiciel: kgckids - (.EASTMAN KODAK Company.) [HKLM] -- {693C08A7-9E76-43FF-B11E-9A58175474C4}
                        O42 - Logiciel: kgcmove - (.EASTMAN KODAK Company.) [HKLM] -- {A1588373-1D86-4D44-86C9-78ABD190F9CC}
                        O42 - Logiciel: kgcvday - (.EASTMAN KODAK Company.) [HKLM] -- {8A8664E1-84C8-4936-891C-BC1F07797549}
                        O42 - Logiciel: king.com (remove only) - (.Midasplayer Ltd (king.com).) [HKLM] -- king.com
                        O42 - Logiciel: neroxml - (.Nero AG.) [HKLM] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B}
                        O42 - Logiciel: netbrdg - (.EASTMAN KODAK Company.) [HKLM] -- {4537EA4B-F603-4181-89FB-2953FC695AB1}
                        O42 - Logiciel: skin0001 - (.EASTMAN KODAK Company.) [HKLM] -- {5316DFC9-CE99-4458-9AB3-E8726EDE0210}
                        O42 - Logiciel: staticcr - (.EASTMAN KODAK Company.) [HKLM] -- {8943CE61-53BD-475E-90E1-A580869E98A2}
                        O42 - Logiciel: tooltips - (.EASTMAN KODAK Company.) [HKLM] -- {E79987F0-0E34-42CC-B8FF-6C860AEEB26A}

                        ---\\ HKCU & HKLM Software Keys
                        [HKCU\Software\7-Zip]
                        [HKCU\Software\ASUS]
                        [HKCU\Software\ATI]
                        [HKCU\Software\Ad-Remover]
                        [HKCU\Software\Adobe]
                        [HKCU\Software\Ahead]
                        [HKCU\Software\AppDataLow\Software\Adobe]
                        [HKCU\Software\AppDataLow\Software\Canon]
                        [HKCU\Software\AppDataLow\Software\Google]
                        [HKCU\Software\AppDataLow\Software\Microsoft]
                        [HKCU\Software\AppDataLow\Software]
                        [HKCU\Software\AppDataLow]
                        [HKCU\Software\Apple Computer, Inc.]
                        [HKCU\Software\CDBurnerXP]
                        [HKCU\Software\Canneverbe Limited]
                        [HKCU\Software\Canon]
                        [HKCU\Software\Classes]
                        [HKCU\Software\Clients]
                        [HKCU\Software\Electronic Arts]
                        [HKCU\Software\Google]
                        [HKCU\Software\HookNetwork]
                        [HKCU\Software\IM Providers]
                        [HKCU\Software\JEDI-VCL]
                        [HKCU\Software\JavaSoft]
                        [HKCU\Software\KasperskyLab]
                        [HKCU\Software\Kodak]
                        [HKCU\Software\Laventure]
                        [HKCU\Software\Local AppWizard-Generated Applications]
                        [HKCU\Software\LogiShrd]
                        [HKCU\Software\Logitech]
                        [HKCU\Software\MIDASPLAYER.COM]
                        [HKCU\Software\Macromedia]
                        [HKCU\Software\Malwarebytes' Anti-Malware]
                        [HKCU\Software\Mobileleader]
                        [HKCU\Software\Mozilla]
                        [HKCU\Software\NDAS]
                        [HKCU\Software\NOS]
                        [HKCU\Software\NVIDIA Corporation]
                        [HKCU\Software\Netscape]
                        [HKCU\Software\Nintendo]
                        [HKCU\Software\Nokia]
                        [HKCU\Software\ODBC]
                        [HKCU\Software\OpenOffice.org]
                        [HKCU\Software\Piriform]
                        [HKCU\Software\Policies]
                        [HKCU\Software\Samsung]
                        [HKCU\Software\ScanSoft]
                        [HKCU\Software\Softonic]
                        [HKCU\Software\Sony Corporation]
                        [HKCU\Software\Sony Ericsson]
                        [HKCU\Software\Trolltech]
                        [HKCU\Software\Usbfix]
                        [HKCU\Software\VS Revo Group]
                        [HKCU\Software\VSRevoGroup]
                        [HKCU\Software\YahooPartnerToolbar]
                        [HKCU\Software\eMule]
                        [HKLM\Software\AMD]
                        [HKLM\Software\ASUS]
                        [HKLM\Software\ATI Technologies]
                        [HKLM\Software\ATI]
                        [HKLM\Software\Adobe]
                        [HKLM\Software\Ahead]
                        [HKLM\Software\America Online]
                        [HKLM\Software\AppDataLow]
                        [HKLM\Software\ArcSoft]
                        [HKLM\Software\Audible]
                        [HKLM\Software\BVRP Software]
                        [HKLM\Software\CDDB]
                        [HKLM\Software\Canon]
                        [HKLM\Software\Caphyon]
                        [HKLM\Software\Classes]
                        [HKLM\Software\Clients]
                        [HKLM\Software\CyberLink]
                        [HKLM\Software\DivXNetworks]
                        [HKLM\Software\Electronic Arts]
                        [HKLM\Software\Google]
                        [HKLM\Software\InstallShield]
                        [HKLM\Software\Intel]
                        [HKLM\Software\JavaSoft]
                        [HKLM\Software\JreMetrics]
                        [HKLM\Software\KasperskyLab]
                        [HKLM\Software\Kodak]
                        [HKLM\Software\LogiShrd]
                        [HKLM\Software\Logitech]
                        [HKLM\Software\MCCI]
                        [HKLM\Software\Macromedia]
                        [HKLM\Software\Malwarebytes' Anti-Malware]
                        [HKLM\Software\MarkAny]
                        [HKLM\Software\Micro Application]
                        [HKLM\Software\MozillaPlugins]
                        [HKLM\Software\Mozilla]
                        [HKLM\Software\NDAS]
                        [HKLM\Software\NINTENDO]
                        [HKLM\Software\NVIDIA Corporation]
                        [HKLM\Software\Nero]
                        [HKLM\Software\Nokia]
                        [HKLM\Software\ODBC]
                        [HKLM\Software\OpenOffice.org]
                        [HKLM\Software\PC Connectivity Solution]
                        [HKLM\Software\PCSuite]
                        [HKLM\Software\Piriform]
                        [HKLM\Software\Policies]
                        [HKLM\Software\QSound Labs, Inc.]
                        [HKLM\Software\RTLSetup]
                        [HKLM\Software\Realtek]
                        [HKLM\Software\RegisteredApplications]
                        [HKLM\Software\Samsung]
                        [HKLM\Software\ScanSoft]
                        [HKLM\Software\Sims]
                        [HKLM\Software\Sonic]
                        [HKLM\Software\Sony Corporation]
                        [HKLM\Software\Sony Ericsson]
                        [HKLM\Software\Sun Microsystems]
                        [HKLM\Software\ToniArts]
                        [HKLM\Software\TwonkyMedia]
                        [HKLM\Software\VIA Technologies, Inc]
                        [HKLM\Software\VideoLAN]
                        [HKLM\Software\Volatile]
                        [HKLM\Software\WOW6432Node]
                        [HKLM\Software\Windows]
                        [HKLM\Software\ZSMC]
                        [HKLM\Software\lameme]
                        [HKLM\Software\mozilla.org]

                        ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
                        O43 - CFD: 15/10/2010 - 14:28:44 - [3094515] ----D- C:\Program Files\7-Zip
                        O43 - CFD: 26/02/2011 - 19:22:52 - [125601270] ----D- C:\Program Files\Ad-Remover
                        O43 - CFD: 14/02/2010 - 17:22:50 - [212958901] ----D- C:\Program Files\Adobe
                        O43 - CFD: 07/09/2009 - 13:25:18 - [25499645] ----D- C:\Program Files\ArcSoft
                        O43 - CFD: 15/09/2009 - 17:51:40 - [2765048] ----D- C:\Program Files\ASUS
                        O43 - CFD: 08/02/2010 - 16:50:26 - [17064058] ----D- C:\Program Files\ATI
                        O43 - CFD: 08/02/2010 - 16:41:22 - [58008835] ----D- C:\Program Files\ATI Technologies
                        O43 - CFD: 10/07/2010 - 10:47:40 - [2587907] ----D- C:\Program Files\Avanquest update
                        O43 - CFD: 03/12/2009 - 16:59:54 - [340515239] ----D- C:\Program Files\Canon
                        O43 - CFD: 03/12/2009 - 16:45:16 - [15903487] --H-D- C:\Program Files\CanonBJ
                        O43 - CFD: 19/04/2010 - 14:38:56 - [2812120] ----D- C:\Program Files\CCleaner
                        O43 - CFD: 01/05/2010 - 16:05:26 - [13616832] ----D- C:\Program Files\CDBurnerXP
                        O43 - CFD: 12/07/2010 - 17:17:16 - [736486207] ----D- C:\Program Files\Common Files
                        O43 - CFD: 04/09/2009 - 13:50:40 - [1659740] ----D- C:\Program Files\CyberLink
                        O43 - CFD: 27/04/2010 - 14:12:54 - [3316888] ----D- C:\Program Files\Defraggler
                        O43 - CFD: 14/10/2009 - 16:55:32 - [1595928] ----D- C:\Program Files\DIFX
                        O43 - CFD: 26/12/2009 - 18:07:36 - [6033599401] ----D- C:\Program Files\Electronic Arts
                        O43 - CFD: 01/02/2010 - 10:21:40 - [12445969] ----D- C:\Program Files\eMule
                        O43 - CFD: 04/09/2009 - 13:43:48 - [0] -SH-D- C:\Program Files\Fichiers communs
                        O43 - CFD: 15/02/2010 - 17:35:08 - [12959058] ----D- C:\Program Files\Free Video Converter
                        O43 - CFD: 09/09/2009 - 11:14:14 - [76647513] ----D- C:\Program Files\Google
                        O43 - CFD: 10/07/2010 - 10:48:52 - [182900960] --H-D- C:\Program Files\InstallShield Installation Information
                        O43 - CFD: 24/09/2009 - 16:39:32 - [1686526] ----D- C:\Program Files\Internet Explorer
                        O43 - CFD: 04/05/2010 - 13:40:14 - [87743142] ----D- C:\Program Files\Java
                        O43 - CFD: 19/04/2010 - 18:07:14 - [16254752] ----D- C:\Program Files\JRE
                        O43 - CFD: 20/08/2010 - 13:49:44 - [60196271] ----D- C:\Program Files\Kaspersky Lab
                        O43 - CFD: 24/09/2009 - 16:35:26 - [93373648] ----D- C:\Program Files\Kodak
                        O43 - CFD: 08/09/2009 - 14:31:24 - [62807635] ----D- C:\Program Files\Logitech
                        O43 - CFD: 26/02/2011 - 18:18:30 - [4931104] ----D- C:\Program Files\Malwarebytes' Anti-Malware
                        O43 - CFD: 21/05/2010 - 17:31:52 - [221184] ----D- C:\Program Files\MarkAny
                        O43 - CFD: 25/05/2010 - 14:06:58 - [221184] ----D- C:\Program Files\MarkAnyContentSAFER
                        O43 - CFD: 16/10/2009 - 16:06:32 - [73852985] ----D- C:\Program Files\Micro Application
                        O43 - CFD: 08/09/2009 - 14:16:08 - [800662] ----D- C:\Program Files\Microsoft CAPICOM 2.1.0.2
                        O43 - CFD: 02/11/2006 - 13:37:36 - [93446071] ----D- C:\Program Files\Microsoft Games
                        O43 - CFD: 26/02/2011 - 16:27:34 - [38371963] ----D- C:\Program Files\Microsoft Silverlight
                        O43 - CFD: 26/12/2009 - 18:06:56 - [979309] ----D- C:\Program Files\Microsoft WSE
                        O43 - CFD: 25/06/2010 - 10:12:50 - [15715] ----D- C:\Program Files\Microsoft.NET
                        O43 - CFD: 19/08/2010 - 11:51:18 - [99342446] ----D- C:\Program Files\Movie Maker
                        O43 - CFD: 26/02/2011 - 21:41:20 - [28809364] ----D- C:\Program Files\Mozilla Firefox
                        O43 - CFD: 02/11/2006 - 13:37:36 - [25757] ----D- C:\Program Files\MSBuild
                        O43 - CFD: 06/09/2009 - 09:21:54 - [0] ----D- C:\Program Files\MSXML 4.0
                        O43 - CFD: 22/01/2010 - 15:12:58 - [0] ----D- C:\Program Files\NDAS
                        O43 - CFD: 04/09/2009 - 14:11:18 - [435001506] ----D- C:\Program Files\Nero
                        O43 - CFD: 16/10/2009 - 13:21:04 - [12732418] ----D- C:\Program Files\Nokia
                        O43 - CFD: 19/04/2010 - 18:15:10 - [377813208] ----D- C:\Program Files\OpenOffice.org 3
                        O43 - CFD: 21/05/2010 - 17:31:40 - [31060] ----D- C:\Program Files\PC Connectivity Solution
                        O43 - CFD: 04/09/2009 - 13:58:24 - [1651134] ----D- C:\Program Files\Realtek
                        O43 - CFD: 02/11/2006 - 13:37:36 - [38694657] ----D- C:\Program Files\Reference Assemblies
                        O43 - CFD: 21/05/2010 - 17:41:34 - [186893711] ----D- C:\Program Files\Samsung
                        O43 - CFD: 07/09/2009 - 13:27:20 - [113034912] ----D- C:\Program Files\ScanSoft
                        O43 - CFD: 12/07/2010 - 17:17:14 - [154353162] ----D- C:\Program Files\Sony
                        O43 - CFD: 10/07/2010 - 10:48:52 - [32094887] ----D- C:\Program Files\Sony Ericsson
                        O43 - CFD: 08/09/2009 - 14:52:56 - [3544406] ----D- C:\Program Files\ToniArts
                        O43 - CFD: 02/11/2006 - 14:01:56 - [0] --H-D- C:\Program Files\Uninstall Information
                        O43 - CFD: 04/09/2009 - 13:57:44 - [19018149] ----D- C:\Program Files\VIA
                        O43 - CFD: 17/11/2009 - 15:02:28 - [49922270] ----D- C:\Program Files\VideoLAN
                        O43 - CFD: 27/04/2010 - 13:22:50 - [6545331] ----D- C:\Program Files\VS Revo Group
                        O43 - CFD: 16/01/2010 - 20:30:36 - [2133262] ----D- C:\Program Files\WiFiConnector
                        O43 - CFD: 07/09/2009 - 15:22:32 - [1016832] ----D- C:\Program Files\Windows Calendar
                        O43 - CFD: 07/09/2009 - 15:22:32 - [2737152] ----D- C:\Program Files\Windows Collaboration
                        O43 - CFD: 07/09/2009 - 15:22:30 - [4490624] ----D- C:\Program Files\Windows Defender
                        O43 - CFD: 07/09/2009 - 15:22:32 - [7084664] ----D- C:\Program Files\Windows Journal
                        O43 - CFD: 21/10/2010 - 15:53:26 - [93946976] ----D- C:\Program Files\Windows Live
                        O43 - CFD: 10/02/2011 - 07:40:48 - [9116344] ----D- C:\Program Files\Windows Mail
                        O43 - CFD: 14/10/2010 - 15:38:40 - [4498121] ----D- C:\Program Files\Windows Media Player
                        O43 - CFD: 04/09/2009 - 13:43:48 - [7957544] ----D- C:\Program Files\Windows NT
                        O43 - CFD: 07/09/2009 - 15:22:32 - [13528738] ----D- C:\Program Files\Windows Photo Gallery
                        O43 - CFD: 28/10/2009 - 18:31:50 - [134144] ----D- C:\Program Files\Windows Portable Devices
                        O43 - CFD: 07/09/2009 - 15:22:32 - [7249996] ----D- C:\Program Files\Windows Sidebar
                        O43 - CFD: 10/10/2009 - 14:04:52 - [1491215] ----D- C:\Program Files\WordBiz
                        O43 - CFD: 26/02/2011 - 22:06:38 - [3567564] ----D- C:\Program Files\ZHPDiag
                        O43 - CFD: 06/10/2010 - 14:26:40 - [6351602] ----D- C:\Program Files\Common Files\Adobe
                        O43 - CFD: 04/09/2009 - 14:13:08 - [119907282] ----D- C:\Program Files\Common Files\Ahead
                        O43 - CFD: 03/12/2009 - 16:54:38 - [560] ----D- C:\Program Files\Common Files\CANON
                        O43 - CFD: 07/09/2009 - 13:40:12 - [14281558] ----D- C:\Program Files\Common Files\InstallShield
                        O43 - CFD: 30/03/2010 - 17:06:02 - [1231815] ----D- C:\Program Files\Common Files\Java
                        O43 - CFD: 24/09/2009 - 16:33:36 - [2950039] ----D- C:\Program Files\Common Files\Kodak
                        O43 - CFD: 08/09/2009 - 14:31:08 - [87805864] ----D- C:\Program Files\Common Files\LogiShrd
                        O43 - CFD: 21/10/2010 - 15:51:24 - [202691993] ----D- C:\Program Files\Common Files\microsoft shared
                        O43 - CFD: 24/09/2009 - 16:30:00 - [651776] ----D- C:\Program Files\Common Files\MSSoap
                        O43 - CFD: 16/10/2009 - 13:23:06 - [26211896] ----D- C:\Program Files\Common Files\Nokia
                        O43 - CFD: 24/09/2009 - 16:32:22 - [3775624] ----D- C:\Program Files\Common Files\PX Storage Engine
                        O43 - CFD: 07/09/2009 - 13:27:50 - [155648] ----D- C:\Program Files\Common Files\ScanSoft Shared
                        O43 - CFD: 02/11/2006 - 12:18:34 - [2702] ----D- C:\Program Files\Common Files\Services
                        O43 - CFD: 12/07/2010 - 17:17:16 - [335872] ----D- C:\Program Files\Common Files\Sony Shared
                        O43 - CFD: 02/11/2006 - 12:18:34 - [41101735] ----D- C:\Program Files\Common Files\SpeechEngines
                        O43 - CFD: 07/09/2009 - 15:22:32 - [8737810] ----D- C:\Program Files\Common Files\System
                        O43 - CFD: 05/09/2009 - 13:37:24 - [220292431] ----D- C:\Program Files\Common Files\Windows Live
                        O43 - CFD: 06/10/2010 - 14:26:38 - [763] ----D- C:\ProgramData\Adobe
                        O43 - CFD: 04/09/2009 - 14:14:06 - [320] ----D- C:\ProgramData\Ahead
                        O43 - CFD: 02/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Application Data
                        O43 - CFD: 08/02/2010 - 16:49:42 - [188] ----D- C:\ProgramData\ATI
                        O43 - CFD: 04/09/2009 - 13:43:48 - [0] -SH-D- C:\ProgramData\Bureau
                        O43 - CFD: 19/09/2009 - 16:15:38 - [0] ----D- C:\ProgramData\BVRP Software
                        O43 - CFD: 22/11/2009 - 13:16:44 - [28] ----D- C:\ProgramData\Canneverbe Limited
                        O43 - CFD: 03/12/2009 - 16:48:38 - [21337260] --H-D- C:\ProgramData\CanonBJ
                        O43 - CFD: 17/12/2009 - 15:48:36 - [115] --H-D- C:\ProgramData\CanonIJEGV
                        O43 - CFD: 06/12/2009 - 20:02:42 - [2180] --H-D- C:\ProgramData\CanonIJScan
                        O43 - CFD: 02/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Desktop
                        O43 - CFD: 02/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Documents
                        O43 - CFD: 26/12/2009 - 18:08:26 - [140139981] ----D- C:\ProgramData\Electronic Arts
                        O43 - CFD: 30/01/2010 - 16:20:40 - [0] ----D- C:\ProgramData\eMule
                        O43 - CFD: 04/09/2009 - 13:43:48 - [0] -SH-D- C:\ProgramData\Favoris
                        O43 - CFD: 02/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Favorites
                        O43 - CFD: 09/09/2009 - 11:14:18 - [195309] ----D- C:\ProgramData\Google
                        O43 - CFD: 07/09/2009 - 13:28:10 - [250] ----D- C:\ProgramData\InstallShield
                        O43 - CFD: 26/02/2011 - 21:49:56 - [562086280] ----D- C:\ProgramData\Kaspersky Lab
                        O43 - CFD: 20/08/2010 - 13:51:18 - [171527384] ----D- C:\ProgramData\Kaspersky Lab Setup Files
                        O43 - CFD: 24/09/2009 - 16:40:22 - [89793905] ----D- C:\ProgramData\Kodak
                        O43 - CFD: 10/09/2009 - 12:34:24 - [12913167] ----D- C:\ProgramData\LogiShrd
                        O43 - CFD: 07/09/2009 - 13:39:16 - [0] ----D- C:\ProgramData\Logitech
                        O43 - CFD: 08/09/2009 - 15:25:46 - [14021000] ----D- C:\ProgramData\Malwarebytes
                        O43 - CFD: 04/09/2009 - 13:43:48 - [0] -SH-D- C:\ProgramData\Menu Démarrer
                        O43 - CFD: 21/10/2010 - 15:52:08 - [151030128] -S--D- C:\ProgramData\Microsoft
                        O43 - CFD: 04/09/2009 - 13:43:48 - [0] -SH-D- C:\ProgramData\Modèles
                        O43 - CFD: 04/09/2009 - 14:11:18 - [4943975] ----D- C:\ProgramData\Nero
                        O43 - CFD: 21/09/2009 - 13:48:26 - [73276416] ----D- C:\ProgramData\NokiaMusic
                        O43 - CFD: 08/11/2009 - 09:40:46 - [252073] ----D- C:\ProgramData\NVIDIA
                        O43 - CFD: 24/09/2009 - 09:08:20 - [97835] ----D- C:\ProgramData\PC Suite
                        O43 - CFD: 07/09/2009 - 13:28:14 - [113990] ----D- C:\ProgramData\ScanSoft
                        O43 - CFD: 12/07/2010 - 17:18:44 - [60696384] ----D- C:\ProgramData\Sony Corporation
                        O43 - CFD: 19/09/2009 - 16:10:46 - [435528] ----D- C:\ProgramData\Sony Ericsson
                        O43 - CFD: 02/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Start Menu
                        O43 - CFD: 30/03/2010 - 17:06:06 - [154] ----D- C:\ProgramData\Sun
                        O43 - CFD: 0
                        1. Contributeur
                          Héberge le rapport stp...
                          Il est trop long pour être affiché en entier.
                          1. Contributeur
                            * Héberge le rapport ZHPDiag.txt sur ce site, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum.
                            1. Contributeur
                              Hello,
                              On finalise alors :)

                              - WinUpdateFix - Analyse

                              Télécharge WinUpdateFix (d'Xplode) sur ton bureau.

                              Lance le et appuie sur Créer un rapport de diagnostic.

                              Copie/Colle le contenu du rapport qui s'ouvrira dans ta prochaine réponse.

                              Note : Le rapport est également sauvegardé à la racine du disque dur ( C:\WinUpdateFix.txt )

                              * Télécharge la dernière version de Java : https://www.java.com/fr/download/
                              *Puis télécharge JavaRa.zip
                              * Décompresse le fichier sur ton bureau (clique droit > Extraire tout.)
                              * Double-clique sur le répertoire JavaRa obtenu.
                              * Si tu es sous Vista/Seven, Exécute le avec un clic droit / Exécuter en tant qu'administrateur
                              * Puis double-clique sur le fichier JavaRa.exe (le .exe peut ne pas s'afficher)
                              * Clique sur Remove Older Versions.
                              * Clique sur Oui pour confirmer. L'outil va travailler, clique ensuite sur Ok, puis une deuxième fois sur Ok.
                              * Un rapport va s'ouvrir, copie-colle le dans ta prochaine réponse. (Note : le rapport se trouve aussi là : ( C:\JavaRa.log ))

                              * Désinstalle toutes les version de Adobe Reader présentes dans l'ajout/suppression de programme
                              * Télécharge la nouvelle version ici en prenant soin de décocher la case du téléchargement de McAfee ou d'une barre d'outil google.
                              * Installe là

                              * Lance ZHPFix (si tu es sous Windows Vista ou Windows 7, lance le par un clic-droit dessus --> exécuter en temps qu'administrateur).
                              * Copie les lignes suivantes :

                              ---------------------------------------------------
                              SysRestore
                              EmptyTemp
                              FirewallRAZ
                              O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} . (...) -- C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll (.not file.)
                              O4 - HKLM\..\Run: [NPSStartup] Clé orpheline
                              O4 - Global Startup: C:\Users\utilisateur\Desktop\Sauvegarde anciens comptes.lnk . (...) -- C:\Windows.old\Users (.not file.)
                              O4 - Global Startup: C:\Users\utilisateur\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - Clé orpheline
                              O4 - Global Startup: C:\Users\utilisateur\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - Clé orpheline
                              O64 - Services: CurCS - (.not file.) - is-8A5Q0drv (is-8A5Q0drv) .(...) - LEGACY_IS-8A5Q0DRV
                              O64 - Services: CurCS - (.not file.) - is-LVA77drv (is-LVA77drv) .(...) - LEGACY_IS-LVA77DRV
                              O64 - Services: CurCS - (.not file.) - is-O1O3Jdrv (is-O1O3Jdrv) .(...) - LEGACY_IS-O1O3JDRV
                              O64 - Services: CurCS - (.not file.) - Kaspersky Lab Boot Guard Driver (klbg) .(...) - LEGACY_KLBG
                              O64 - Services: CurCS - (.not file.) - Lean File Sharing (lfsfilt) .(...) - LEGACY_LFSFILT
                              O64 - Services: CurCS - (.not file.) - LPX Protocol (lpx) .(...) - LEGACY_LPX
                              ---------------------------------------------------

                              * Clique sur l'icône représentant la lettre H (« coller les lignes Helper »)
                              * Les lignes se collent automatiquement dans ZHPFix.
                              * Clique sur « Ok » puis sur « Tous », puis sur « Nettoyer »
                              * Colle le contenu du rapport dans ta prochaine réponse.

                              Souhaites-tu que l'on optimise le démarrage de ton ordinateur en supprimant les logiciels qui se lancent inutilement ?
                              1. voici le rapport de diag. :WinUpdateFix v1.1 - Rapport créé le 27/02/2011 à 14:45
                                Mis à jour le 16/01/11 à 20h par Xplode
                                Système d'exploitation : Windows Vista (TM) Home Premium (32 bits) [version 6.0.6002] Service Pack 2
                                Nom d'utilisateur : utilisateur - KRYSLOW (Administrateur)
                                Exécuté depuis : C:\Users\utilisateur\Downloads\WinUpdateFix.exe

                                ~~~~~ Windows Update ~~~~~

                                Paramètres du centre de sécurité : Les mises à jour automatiques sont activées et sont installées automatiquement.

                                Dernière recherche effectuée le : 2011-02-27 à 08:57:47
                                Dernier téléchargement effectué le : 2011-02-25 à 09:11:32
                                Dernière installation effectuée le : 2011-02-25 à 09:12:56

                                ~~~~~ Services ~~~~~~

                                [Mises à jour automatiques]

                                Nom du service : Wuauserv
                                Etat : Démarré
                                Statut : Automatique

                                [Service de transfert intelligent en arrière-plan]

                                Nom du service : BITS
                                Etat : Démarré
                                Statut : Automatique

                                [Service de cryptographie]

                                Nom du service : CryptSvc
                                Etat : Démarré
                                Statut : Automatique

                                ~~~~~ Proxy ~~~~~~

                                [HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]

                                ProxyEnable = 0

                                ... OK !

                                ~~~~~ Hijack.NoWindowsUpdate ~~~~~

                                [HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]

                                ... OK !

                                ########## EOF - "\WinUpdateFix.txt" - [1344 octets] ##########
                                • 1
                                • 2
                                • 3