Analyse ad-remover

ci- dessous rapport ZHPDiag


Rapport de ZHPDiag v1.27.1630 par Nicolas Coolman, Update du 08/03/2011
Run by ACMF at 09/03/2011 08:43:56
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Contact : nicolascoolman@yahoo.fr

---\\ Web Browser
MSIE: Internet Explorer v8.0.6001.19019
MFIE: Mozilla Firefox v3.6.15 (fr) (Defaut)

---\\ System Information
Windows Vista Business Edition, 32-bit Service Pack 2 (Build 6002)
Processor: x86 Family 15 Model 95 Stepping 2, AuthenticAMD
Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 958 MB (16% free)
System Restore: Activé (Enable)
System drive C: has 95 GB (67%) free of 141 GB

---\\ Logged in mode
Computer Name: PC-DE-ACMF
User Name: ACMF
All Users Names: ASPNET, Administrateur, ACMF,
Unselected Option: O45,O61,O62,O65,O66,O82
Logged in as Administrator

---\\ Environnement Variables
%AppData%=C:\Users\ACMF\AppData\Roaming
%LocalAppData%=C:\Users\ACMF\AppData\Local
%StartMenu%=C:\Users\ACMF\AppData\Roaming\Microsoft\Windows\Start Menu

---\\ DOS/Devices
A:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
C:\ Hard drive, Flash drive, Thumb drive (Free 95 Go of 141 Go)
D:\ CD-ROM drive (Not Inserted)


---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableTaskMgr: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableRegistryTools: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] NoDispScrSavPage: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK


---\\ Recherche particulière de fichiers génériques
[MD5.D07D4C3038F3578FFCE1C0237F2A1253] - (.Microsoft Corporation - Explorateur Windows.) (.11/04/2009 07:27:36.) -- C:\Windows\Explorer.exe [2926592]
[MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) (.19/01/2008 08:33:37.) -- C:\Windows\System32\Wininit.exe [96768]
[MD5.74BCC23D622F32DA0450D164735ACAB1] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.18/12/2010 07:27:04.) -- C:\Windows\System32\wininet.dll [916480]
[MD5.898E7C06A350D4A1A64A9EA264D55452] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.11/04/2009 07:28:13.) -- C:\Windows\System32\Winlogon.exe [314368]
[MD5.1F05B78AB91C9075565A9D8A4B880BC4] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.11/04/2009 07:32:26.) -- C:\Windows\System32\drivers\atapi.sys [19944]
[MD5.6A4A98CEE84CF9E99564510DDA4BAA47] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.11/04/2009 07:32:49.) -- C:\Windows\System32\drivers\ntfs.sys [1083880]


---\\ Processus lancés
[MD5.0D392EDE3B97E0B3131B2F63EF1DB94E] - (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe [1008184]
[MD5.32E4E820EDBD675009605F90DD97EE6C] - (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe [4186112]
[MD5.98EDF615B5F784E18EDF3B3079E2246E] - (.Sonic Solutions - RoxMMTrayApp Module.) -- C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe [225280]
[MD5.D735F8857B9E0913BD63C3E1FD72F8DF] - (.Goto Software - Vaderetro Manager.) -- C:\Program Files\Goto Software\Vade Retro\Vaderetro_mgr.exe [1054208]
[MD5.1A66A1E359495117C2A8CE5E059A39BE] - (.Trusteer Ltd. - RapportService.) -- C:\Program Files\Trusteer\Rapport\bin\RapportService.exe [1509176]
[MD5.9D5E8B45BD348DF0882C69EED0E83111] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [281768]
[MD5.2E5212A0BFB98FE0167C92C76C87AFE3] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [249064]
[MD5.43D083268A0919F3527A2837390BAF63] - (.Macrovision Corporation - Macrovision Software Manager.) -- C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [218032]
[MD5.4B555106290BD117334E9A08761C035A] - (...) -- C:\Windows\System32\rundll32.exe [44544]
[MD5.08B7896C6D0FF197318FC9C395503B8D] - (.Sonic Solutions - ROXHelpRunner Module.) -- C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe [10752]
[MD5.62BB79160F86CD962F312C68C6239BFD] - (.Microsoft Corporation - Windows Update.) -- C:\Windows\system32\wuauclt.exe [53472]
[MD5.82496FC05D85C9C3B9ABBC66B3A97F11] - (.Microsoft Corporation - Microsoft Office Outlook.) -- C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE [196440]
[MD5.19DD1387B85BB9D5CA49976A4E71E81F] - (.Microsoft Corporation - Microsoft Office Word.) -- C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE [12317016]
[MD5.2F881390B9BBD912D790A4875CB33A34] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [912344]
[MD5.0AF80338BAD26049974531322857A42E] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files\Mozilla Firefox\plugin-container.exe [16856]
[MD5.1511EDDDFEF3A0E2122711AA15D0322C] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [632320]
[MD5.1E5B9201721D9B687546A982323C030E] - (.Macrovision Corporation - Macrovision Software Manager Agent.) -- C:\Program Files\Common Files\InstallShield\UpdateService\agent.exe [992176]


---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
M3 - MFPP: Plugins - [ACMF] -- C:\Users\ACMF\AppData\Roaming\Mozilla\Firefox\Profiles\npb12n8z.default\searchplugins\bing.xml
M3 - MFPP: Plugins - [ACMF] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [ACMF] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [ACMF] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [ACMF] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [ACMF] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [ACMF] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeployJava1.dll
P2 - FPN:Firefox Plugin Navigator . (.LizardTech - DjVu Plug-In(external version 6.1.4.2013).) -- C:\Program Files\Mozilla Firefox\Plugins\npdjvu.dll
P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins\npnul32.dll
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - Office Plugin for Netscape Navigator.) -- C:\Program Files\Mozilla Firefox\Plugins\NPOFFICE.DLL
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape.) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin2.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin3.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin4.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin5.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin6.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin7.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\Macromed\Flash\NPSWF32.dll
P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_24 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
P2 - FPN: [HKLM] [@ma-config.com/HardwareDetection] - (.Cybelsoft - Plugin NPAPI Ma-Config.com.) -- C:\Program Files\ma-config.com\nphardwaredetection.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.51204.0.) -- c:\Program Files\Microsoft Silverlight\4.0.51204.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=8] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.2.183.39\npGoogleOneClick8.dll
M0 - MFSP: prefs.js [ACMF - npb12n8z.default] http:/free.fr
M2 - MFEP: prefs.js [ACMF - npb12n8z.default\contact@petitscailloux.com] [] Petitscailloux v2.2 (.Cotcot.)
M2 - MFEP: prefs.js [ACMF - npb12n8z.default\{20a82645-c095-46ed-80e3-08825760534b}] [MicrosoftCG] Microsoft .NET Framework Assistant v1.2.1 (.Microsoft.)
M2 - MFEP: prefs.js [ACMF - npb12n8z.default\{635abd67-4fe9-1b23-4f01-e679fa7484c1}] [yahoo.ytff] Yahoo! Toolbar v2.1.3.20100310105313 (.Yahoo!.)
M2 - MFEP: prefs.js [ACMF - npb12n8z.default\{b9d63c58-90cc-428b-8d3b-cbb88eb07e7e}] [] Elf 1.15 Community Toolbar v3.2.5.2 (.Conduit Ltd..)


---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKUS\S-1-5-21-2071845501-249732227-939305529-1005\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)) -- C:\Windows\system32\ieframe.dll
R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2


---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll


---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"


---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll


---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll


---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [Windows Defender] . (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe
O4 - HKLM\..\Run: [RoxWatchTray] . (.Sonic Solutions - RoxMMTrayApp Module.) -- C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
O4 - HKLM\..\Run: [VadeRetro Outlook] . (...) -- C:\Program Files\Goto Software\Vade Retro\VrMoRegister.exe
O4 - HKLM\..\Run: [VadeRetro Desktop] . (.Goto Software - Vaderetro Manager.) -- C:\Program Files\Goto Software\Vade Retro\Vaderetro_Mgr.exe
O4 - HKLM\..\Run: [MSConfig] . (.Microsoft Corporation - Utilitaire de configuration système.) -- C:\Windows\System32\msconfig.exe
O4 - HKLM\..\Run: [NvSvc] . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 97.34.) -- C:\Windows\system32\nvsvc.dll
O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\Windows\system32\NvCpl.dll
O4 - HKLM\..\Run: [NvMediaCenter] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\Windows\system32\NvMcTray.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe
O4 - HKLM\..\Run: [NPSStartup] Clé orpheline
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
O4 - HKCU\..\Run: [ISUSPM] . (.Macrovision Corporation - Macrovision Software Manager.) -- C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
O4 - HKUS\S-1-5-21-2071845501-249732227-939305529-1005\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKUS\S-1-5-21-2071845501-249732227-939305529-1005\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-21-2071845501-249732227-939305529-1005\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
O4 - HKUS\S-1-5-21-2071845501-249732227-939305529-1005\..\Run: [ISUSPM] . (.Macrovision Corporation - Macrovision Software Manager.) -- C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe


---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\ACMF\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.lnk - Clé orpheline
O4 - Global Startup: C:\Users\ACMF\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\ACMF\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Mail\WinMail.exe
O4 - Global Startup: C:\Users\ACMF\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Users\ACMF\Desktop\AD-R.lnk . (...) -- C:\Program Files\Ad-Remover\main.exe
O4 - Global Startup: C:\Users\ACMF\Desktop\Geoportail.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\ACMF\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Démarrer Microsoft Office Outlook.lnk . (.Microsoft Corporation.) -- C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE
O4 - Global Startup: C:\Users\ACMF\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe


---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: E&xporter vers Microsoft Excel - (.not file.) - C:\PROGRA~1\MICROS~1\Office12\EXCEL.exe
O8 - Extra context menu item: Google Sidewiki... - (.not file.) - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll


---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} . (.not file.) - (.not file.)
O9 - Extra button: Uninstall BitDefender Online Scanner v8 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (.Pas de propriétaire - Pas de description.) -- C:\PROGRA~1\MICROS~1\OFFICE11\REFBARH.ICO


---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll


---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class) - https://bvdee.webex.com/client/T27LB/webex/ieatgpc1.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab


---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{301156D9-E6D3-47CA-9201-B0CD705773BD}: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CS1\Services\Tcpip\..\{301156D9-E6D3-47CA-9201-B0CD705773BD}: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CS2\Services\Tcpip\..\{301156D9-E6D3-47CA-9201-B0CD705773BD}: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CS3\Services\Tcpip\..\{301156D9-E6D3-47CA-9201-B0CD705773BD}: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.240 212.27.40.241


---\\ Protocole additionnel et piratage de protocole (O18)
O18 - Handler: skyline - {3a4f9195-65a8-11d5-85c1-0001023952c1} . (.Skyline software systems Inc. - TerraExplorerX DLL.) -- C:\Program Files\Skyline\TerraExplorer\TerraExplorerX.dll
O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL


---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\System32\webcheck.dll


---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll


---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: (ACS) . (...) - C:\Windows\system32\acs.exe
O23 - Service: (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: (FsUsbExService) . (.Teruten - FsUsbDevice.) - C:\Windows\system32\FsUsbExService.exe
O23 - Service: (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: (gusvc) . (.Google - gusvc.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: (IDriverT) . (.Macrovision Corporation - IDriverT Module.) - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: (maconfservice) . (.CybelSoft - Service de détection matériel.) - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: (PSI_SVC_2) . (.Protexis Inc. - PsiService PsiService.) - c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: (RapportMgmtService) . (.Trusteer Ltd. - RapportMgmtService.) - C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe
O23 - Service: (RichVideo) . (.Pas de propriétaire - RichVideo Module.) - C:\Program Files\Cyberlink\Shared Files\RichVideo.exe
O23 - Service: (RoxMediaDB9) . (.Sonic Solutions - RoxMediaDB9 Module.) - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: (RoxWatch9) . (.Sonic Solutions - RoxSniffer9 Module.) - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: (ServiceLayer) . (.Nokia. - ServiceLayer Module.) - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: (stllssvr) . (.MicroVision Development, Inc. - SureThing Labelflash Disc Printer Service M.) - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe


---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)


---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\User_Feed_Synchronization-{B2854009-1A1B-4D64-9385-2E8DF2FF470B}.job
[MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.1AA23094CE90784854FB1F25BE645AFA] [APT] [{75625F4C-C727-4C5F-A35E-845B3FA79CD0}] (.Skype Technologies S.A..) -- C:\Program Files\Skype\Phone\Skype.exe
[MD5.7B43567B4C32AD7ADED537CD3B1342B9] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe


---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: (95577321) . (.Kaspersky Lab - Kaspersky Unified Driver.) - C:\Windows\System32\DRIVERS\95577321.sys
O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (avipbb) . (.Avira GmbH - Avira Driver for Security Enhancement.) - C:\Windows\System32\DRIVERS\avipbb.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: (CSC) . (.Microsoft Corporation - Windows Client Side Caching Driver.) - C:\Windows\System32\drivers\csc.sys
O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\System32\DRIVERS\i8042prt.sys
O41 - Driver: (kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\System32\DRIVERS\kbdclass.sys
O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre clavier HID.) - C:\Windows\System32\DRIVERS\kbdhid.sys
O41 - Driver: (mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\System32\DRIVERS\mouclass.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: (netbt) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\system32\drivers\pacer.sys (PSched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: (RapportCerberus_23645) . (.Trusteer Ltd. - RapportCerberus.) - C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus_23645.sys
O41 - Driver: (RapportEI) . (.Trusteer Ltd. - RapportEI.) - C:\Program Files\Trusteer\Rapport\bin\RapportEI.sys
O41 - Driver: (RapportPG) . (.Trusteer Ltd. - RapportPG.) - C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys
O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\System32\DRIVERS\rasacd.sys
O41 - Driver: (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: (RDPENCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\Windows\System32\DRIVERS\serial.sys
O41 - Driver: setup_9.0.0.722_18.03.2010_16-45drv (setup_9.0.0.722_18.03.2010_16-45drv) . (.Kaspersky Lab - Klif Mini-Filter [fre_wlh_x86].) - C:\Windows\System32\DRIVERS\9557732.sys
O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Smb) . (.Microsoft Corporation - SMB Transport driver.) - C:\Windows\System32\DRIVERS\smb.sys
O41 - Driver: (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\Windows\System32\DRIVERS\ssmdrv.sys
O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys


---\\ Logiciels installés (O42)
O42 - Logiciel: 32 Bit HP CIO Components Installer - (.Hewlett-Packard.) [HKLM] -- {F1E63043-54FC-429B-AB2C-31AF9FBA4BC7}
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Reader 8 - (.Pas de propriétaire.) [HKLM] -- AdobeReader
O42 - Logiciel: Adobe Reader 9.3 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A93000000001}
O42 - Logiciel: Adobe Shockwave Player - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {DAEAFD68-BB4A-4507-A241-C8804D2EA66D}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {6956856F-B6B3-4BE0-BA0B-8F495BE32033}
O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM] -- Avira AntiVir Desktop
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
O42 - Logiciel: Corel PaintShop Photo Pro X3 - (.Corel Corporation.) [HKLM] -- _{DEAEB5DB-04FA-489D-94EF-8600898B93EE}
O42 - Logiciel: Corel PaintShop Photo Pro X3 - (.Corel Corporation.) [HKLM] -- {DE4BF4BE-3CDC-43B5-BBDA-DDDA73103111}
O42 - Logiciel: Creator 9 - (.Pas de propriétaire.) [HKLM] -- CREATOR9
O42 - Logiciel: Doc Online NEC PowerMate VL360 - (.Pas de propriétaire.) [HKLM] -- DOC
O42 - Logiciel: Fichiers de prise en charge de l'installation de Microsoft SQL Server (Français) - (.Microsoft Corporation.) [HKLM] -- {3380F354-C5F7-4E71-8F51-EEE6C3F06C62}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {4286E640-B5FB-11DF-AC4B-005056C00008}
O42 - Logiciel: HP Customer Participation Program 8.0 - (.HP.) [HKLM] -- HPExtendedCapabilities
O42 - Logiciel: HP Imaging Device Functions 8.0 - (.HP.) [HKLM] -- HP Imaging Device Functions
O42 - Logiciel: HP OCR Software 8.0 - (.HP.) [HKLM] -- HPOCR
O42 - Logiciel: HP Photosmart Essential - (.HP.) [HKLM] -- {EB21A812-671B-4D08-B974-2A347F0D8F70}
O42 - Logiciel: HP Photosmart, Officejet, PSC and Deskjet All-In-One Driver Software 8.0.B - (.HP.) [HKLM] -- {C916D86C-AB76-49c7-B0E4-A946E0FD9BC2}
O42 - Logiciel: HP Solution Center 8.0 - (.HP.) [HKLM] -- HP Solution Center & Imaging Support Tools
O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM] -- {8C6027FD-53DC-446D-BB75-CACD7028A134}
O42 - Logiciel: HPSSupply - (.Nom de votre société.) [HKLM] -- {EB75DE50-5754-4F6F-875D-126EDF8E4CB3}
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
O42 - Logiciel: ICA - (.Corel Corporation.) [HKLM] -- {DEAEB5DB-04FA-489D-94EF-8600898B93EE}
O42 - Logiciel: IPM_PSP_CL - (.Your Company Name.) [HKLM] -- {DE99075E-7D25-4B96-B32E-BFE6FBFAA644}
O42 - Logiciel: IPM_PSP_COM - (.Your Company Name.) [HKLM] -- {DEF8C145-CC4F-4DAA-AD5C-E707C07AEE50}
O42 - Logiciel: Java(TM) 6 Update 24 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216020FF}
O42 - Logiciel: Lizardtech DjVu Control - (.Pas de propriétaire.) [HKLM] -- {105CFC7C-6992-11D5-BD9D-000102C10FD8}
O42 - Logiciel: Logiciel d'archivage WinRAR - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM] -- {7EA6E8DF-37B3-4533-B1A4-45E490C77537}
O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Microsoft.) [HKLM] -- {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Pas de propriétaire.) [HKLM] -- Microsoft .NET Framework 1.1 (1033)
O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB2416447) - (.Pas de propriétaire.) [HKLM] -- M2416447
O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB979906) - (.Pas de propriétaire.) [HKLM] -- M979906
O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) [HKLM] -- {3E31821C-7917-367E-938E-E65FC413EA31}
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile FRA Language Pack - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}
O42 - Logiciel: Microsoft Office Professional Edition 2003 - (.Microsoft Corporation.) [HKLM] -- {9111040C-6000-11D3-8CFE-0150048383C9}
O42 - Logiciel: Microsoft Office Small Business Connectivity Components - (.Microsoft Corporation.) [HKLM] -- {A939D341-5A04-4E0A-BB55-3E65B386432D}
O42 - Logiciel: Microsoft SQL Server Native Client - (.Microsoft Corporation.) [HKLM] -- {90283F22-0731-43B6-81FD-E6DD911A31FB}
O42 - Logiciel: Microsoft SQL Server VSS Writer - (.Microsoft Corporation.) [HKLM] -- {C74B273E-DF20-4955-899B-15205119894C}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {7299052b-02a4-4627-81f2-1818da5d550d}
O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: Microsoft Visual Studio 2005 Tools for Office Runtime - (.Microsoft Corporation.) [HKLM] -- {388E4B09-3E71-4649-8921-F44A3A2954A7}
O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-040C-0000-0000000FF1CE}
O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 Language Pack SP1 - fra
O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack
O42 - Logiciel: Mozilla Firefox (3.6.15) - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.6.15)
O42 - Logiciel: MyVirtualHome - (.MyVirtualHome.) [HKLM] -- {C66FE99D-7C15-40A0-AE4A-A1A3900D9EE3}
O42 - Logiciel: NVIDIA Drivers - (.Pas de propriétaire.) [HKLM] -- NVIDIA Drivers
O42 - Logiciel: PC Connectivity Solution - (.Nokia.) [HKLM] -- {AC599724-5755-48C1-ABE7-ABB857652930}
O42 - Logiciel: PSPPContent - (.Corel Corporation.) [HKLM] -- {DE8B9311-ADE7-4EDE-B121-326CAA3D225D}
O42 - Logiciel: PSPPRO_DCRAW - (.Corel Corporation.) [HKLM] -- {DEF1928A-FC01-48E7-A7E6-4651D42EF6A1}
O42 - Logiciel: Package de pilotes Windows - Nokia pccsmcfd (10/12/2007 6.85.4.0) - (.Nokia.) [HKLM] -- 3A5DEFA413DDE699DBA6EBE0A63534ACA524D30F
O42 - Logiciel: PowerDVD - (.CyberLink Corporation.) [HKLM] -- {6811CAA0-BF12-11D4-9EA1-0050BAE317E1}
O42 - Logiciel: PowerDVD 7 - (.Pas de propriétaire.) [HKLM] -- PDVD
O42 - Logiciel: Programme d'installation OLITEC - (.Pas de propriétaire.) [HKLM] -- {28006915-2739-4EBE-B5E8-49B25D32EB33}
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {E7004147-2CCA-431C-AA05-2AB166B9785D}
O42 - Logiciel: Ralink Wireless LAN Card - (.RALINK.) [HKLM] -- {E91E8912-769D-42F0-8408-0E329443BABC}
O42 - Logiciel: Rapport - (.Trusteer.) [HKLM] -- Rapport_msi
O42 - Logiciel: Rapport - (.Trusteer.) [HKLM] -- {1DD81E7D-0D28-4CEB-87B2-C041A4FCB215}
O42 - Logiciel: Realtek HD Audio V6.0.1.5334 - (.Pas de propriétaire.) [HKLM] -- AUDIO_REALTEK
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Roxio Activation Module - (.Roxio.) [HKLM] -- {35E1EC43-D4FC-4E4A-AAB3-20DDA27E8BB0}
O42 - Logiciel: Roxio Creator 9 LE - (.Roxio.) [HKLM] -- {B7FB0C86-41A4-4402-9A33-912C462042A0}
O42 - Logiciel: SAMSUNG USB Driver for Mobile Phones - (.SAMSUNG Electronics Co., Ltd..) [HKLM] -- {D0795B21-0CDA-4a92-AB9E-6E92D8111E44}
O42 - Logiciel: Samsung New PC Studio - (.Samsung Electronics Co., Ltd..) [HKLM] -- InstallShield_{F193FC0E-9E18-40FC-A974-509A1BDD240A}
O42 - Logiciel: Samsung New PC Studio - (.Samsung Electronics Co., Ltd..) [HKLM] -- {F193FC0E-9E18-40FC-A974-509A1BDD240A}
O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473
O42 - Logiciel: Skype(TM) 5.0 - (.Skype Technologies S.A..) [HKLM] -- {E633D396-5188-4E9D-8F6B-BFB8BF3467E8}
O42 - Logiciel: TerraExplorer - (.Skyline Software Systems, Inc..) [HKLM] -- TerraExplorer
O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
O42 - Logiciel: Vade Retro Outlook, Outlook Express, Windows Mail (Vista) - (.Goto Software.) [HKLM] -- Vade Retro
O42 - Logiciel: Video NVIDIA v97.34 - (.Pas de propriétaire.) [HKLM] -- VIDEO_BOGOTA
O42 - Logiciel: Visual Studio 2005 Tools pour Office Second Edition Runtime - (.Microsoft Corporation.) [HKLM] -- Microsoft Visual Studio 2005 Tools for Office Runtime
O42 - Logiciel: WebEx - (.Cisco WebEx LLC.) [HKLM] -- ActiveTouchMeetingClient
O42 - Logiciel: Wise Registry Cleaner Free 5.32 - (.WiseCleaner.com, Inc..) [HKLM] -- Wise Registry Cleaner_is1

---\\ HKCU & HKLM Software Keys
[HKCU\Software\Ad-Remover]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Atheros]
[HKCU\Software\Avira]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Corel]
[HKCU\Software\CyberLink]
[HKCU\Software\Earth Resource Mapping]
[HKCU\Software\Google]
[HKCU\Software\Goto Software]
[HKCU\Software\Goto]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\HookNetwork]
[HKCU\Software\IDAVLab]
[HKCU\Software\InstallShield]
[HKCU\Software\Iris]
[HKCU\Software\JavaSoft]
[HKCU\Software\LizardTech]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\MVHLauncher]
[HKCU\Software\Macromedia]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\MimarSinan]
[HKCU\Software\Mobileleader]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\MyVirtualHome]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\RALINK]
[HKCU\Software\Realtek]
[HKCU\Software\Redemption]
[HKCU\Software\Roxio]
[HKCU\Software\Samsung]
[HKCU\Software\Skyline]
[HKCU\Software\SkypeApps]
[HKCU\Software\Skype]
[HKCU\Software\Sonic]
[HKCU\Software\Sysinternals]
[HKCU\Software\Trusteer]
[HKCU\Software\Ulead Systems]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\WebEx]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\cybelsoft]
[HKCU\Software\keyhole.com]
[HKLM\Software\ActiveTouch]
[HKLM\Software\Adobe]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\Atheros]
[HKLM\Software\Avira]
[HKLM\Software\BrowserChoice]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Corel]
[HKLM\Software\CyberLink]
[HKLM\Software\DEVGURU]
[HKLM\Software\Debug]
[HKLM\Software\Google]
[HKLM\Software\Goto Software]
[HKLM\Software\Goto]
[HKLM\Software\Hewlett-Packard]
[HKLM\Software\IDAVLab]
[HKLM\Software\InstallShield]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\KasperskyLab]
[HKLM\Software\Lake]
[HKLM\Software\Licenses]
[HKLM\Software\LizardTech]
[HKLM\Software\MCCI]
[HKLM\Software\MDC]
[HKLM\Software\Macromedia]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\MarkAny]
[HKLM\Software\MicroVision]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\Nektra]
[HKLM\Software\ODBC]
[HKLM\Software\OLITEC]
[HKLM\Software\PC Connectivity Solution]
[HKLM\Software\PCSuite]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\Preclick]
[HKLM\Software\Protexis]
[HKLM\Software\RALINK]
[HKLM\Software\Realtek]
[HKLM\Software\Redemption]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Roxio]
[HKLM\Software\Samsung]
[HKLM\Software\Skyline]
[HKLM\Software\Skype]
[HKLM\Software\Sonic]
[HKLM\Software\Swearware]
[HKLM\Software\TrendMicro]
[HKLM\Software\Trusteer]
[HKLM\Software\Ulead Systems]
[HKLM\Software\Volatile]
[HKLM\Software\WinRAR]
[HKLM\Software\Windows]
[HKLM\Software\WiseCleaner]
[HKLM\Software\X-AVCSD]
[HKLM\Software\Yahoo]
[HKLM\Software\cybelsoft]
[HKLM\Software\illiminable]
[HKLM\Software\mozilla.org]
[HKLM\Software\webex]


---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 08/03/2011 - 17:06:18 - [109079531] ----D- C:\Program Files\Ad-Remover
O43 - CFD: 29/04/2010 - 08:15:16 - [241773241] ----D- C:\Program Files\Adobe
O43 - CFD: 17/05/2010 - 15:18:56 - [2221118] ----D- C:\Program Files\Apple Software Update
O43 - CFD: 05/05/2010 - 15:32:04 - [115913366] ----D- C:\Program Files\Avira
O43 - CFD: 27/12/2010 - 18:43:34 - [3501304] ----D- C:\Program Files\CCleaner
O43 - CFD: 01/03/2011 - 09:17:52 - [557408728] ----D- C:\Program Files\Common Files
O43 - CFD: 07/08/2010 - 16:21:32 - [584085110] ----D- C:\Program Files\Corel
O43 - CFD: 21/03/2007 - 11:32:02 - [94862728] ----D- C:\Program Files\Cyberlink
O43 - CFD: 29/01/2010 - 15:50:10 - [795104] ----D- C:\Program Files\DIFX
O43 - CFD: 10/12/2009 - 17:24:12 - [0] -SH-D- C:\Program Files\Fichiers communs
O43 - CFD: 27/12/2010 - 19:02:46 - [102653365] ----D- C:\Program Files\Google
O43 - CFD: 11/12/2009 - 09:50:08 - [18347633] ----D- C:\Program Files\Goto Software
O43 - CFD: 12/01/2010 - 14:53:20 - [0] ----D- C:\Program Files\Hewlett-Packard
O43 - CFD: 12/01/2010 - 14:59:10 - [244546782] ----D- C:\Program Files\HP
O43 - CFD: 27/12/2010 - 15:42:40 - [42952387] --H-D- C:\Program Files\InstallShield Installation Information
O43 - CFD: 10/02/2011 - 14:53:18 - [5706952] ----D- C:\Program Files\Internet Explorer
O43 - CFD: 01/03/2011 - 09:14:54 - [89298881] ----D- C:\Program Files\Java
O43 - CFD: 22/01/2010 - 19:16:14 - [7551083] ----D- C:\Program Files\LizardTech
O43 - CFD: 27/12/2010 - 15:11:16 - [5267452] ----D- C:\Program Files\ma-config.com
O43 - CFD: 18/01/2010 - 10:09:02 - [4183649] ----D- C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD: 17/12/2010 - 10:06:48 - [221184] ----D- C:\Program Files\MarkAny
O43 - CFD: 29/01/2010 - 16:39:28 - [221184] ----D- C:\Program Files\MarkAnyContentSAFER
O43 - CFD: 23/02/2010 - 14:54:46 - [293927496] ----D- C:\Program Files\Microsoft Office
O43 - CFD: 09/01/2011 - 20:52:36 - [38361211] ----D- C:\Program Files\Microsoft Silverlight
O43 - CFD: 10/12/2009 - 23:30:14 - [62160] ----D- C:\Program Files\Microsoft Small Business
O43 - CFD: 21/03/2007 - 11:22:38 - [32768333] ----D- C:\Program Files\Microsoft SQL Server
O43 - CFD: 29/06/2010 - 07:55:16 - [331107] ----D- C:\Program Files\Microsoft.NET
O43 - CFD: 14/08/2010 - 02:30:34 - [20470054] ----D- C:\Program Files\Movie Maker
O43 - CFD: 07/03/2011 - 14:12:54 - [33450811] ----D- C:\Program Files\Mozilla Firefox
O43 - CFD: 02/11/2006 - 13:37:42 - [25757] ----D- C:\Program Files\MSBuild
O43 - CFD: 23/02/2010 - 14:53:52 - [45524348] ----D- C:\Program Files\MSECache
O43 - CFD: 11/12/2009 - 00:56:16 - [0] ----D- C:\Program Files\MSXML 4.0
O43 - CFD: 11/02/2010 - 17:15:00 - [54444686] ----D- C:\Program Files\MyVirtualHome
O43 - CFD: 10/12/2009 - 20:29:04 - [20932421] ---AD- C:\Program Files\NEC Computers
O43 - CFD: 27/12/2010 - 17:03:22 - [96156618] ----D- C:\Program Files\NVIDIA Corporation
O43 - CFD: 27/12/2010 - 15:23:08 - [19000396] ----D- C:\Program Files\OLITEC
O43 - CFD: 17/12/2010 - 09:44:22 - [9740904] ----D- C:\Program Files\PC Connectivity Solution
O43 - CFD: 27/12/2010 - 19:01:06 - [445] ----D- C:\Program Files\PVAnalysis
O43 - CFD: 15/11/2010 - 11:33:50 - [76337719] ----D- C:\Program Files\QuickTime
O43 - CFD: 27/12/2010 - 15:42:44 - [3319721] ----D- C:\Program Files\RALINK
O43 - CFD: 21/03/2007 - 11:13:36 - [11456047] ----D- C:\Program Files\Realtek
O43 - CFD: 02/11/2006 - 13:37:42 - [38694657] ----D- C:\Program Files\Reference Assemblies
O43 - CFD: 21/03/2007 - 11:29:52 - [38621018] ----D- C:\Program Files\Roxio
O43 - CFD: 17/12/2010 - 11:30:32 - [318834825] ----D- C:\Program Files\Samsung
O43 - CFD: 16/02/2011 - 10:11:34 - [34891716] ----D- C:\Program Files\Skyline
O43 - CFD: 27/12/2010 - 19:00:38 - [19057007] R---D- C:\Program Files\Skype
O43 - CFD: 17/03/2010 - 21:18:24 - [808250] ----D- C:\Program Files\trend micro
O43 - CFD: 18/02/2011 - 18:08:20 - [21158376] ----D- C:\Program Files\Trusteer
O43 - CFD: 02/11/2006 - 14:01:30 - [0] --H-D- C:\Program Files\Uninstall Information
O43 - CFD: 16/06/2010 - 07:57:00 - [1016832] ----D- C:\Program Files\Windows Calendar
O43 - CFD: 16/06/2010 - 07:56:58 - [2737152] ----D- C:\Program Files\Windows Collaboration
O43 - CFD: 16/06/2010 - 07:56:56 - [4490624] ----D- C:\Program Files\Windows Defender
O43 - CFD: 16/06/2010 - 07:56:58 - [7084664] ----D- C:\Program Files\Windows Journal
O43 - CFD: 10/02/2011 - 14:53:22 - [9116344] ----D- C:\Program Files\Windows Mail
O43 - CFD: 15/10/2010 - 23:47:50 - [4498121] ----D- C:\Program Files\Windows Media Player
O43 - CFD: 10/12/2009 - 17:24:12 - [7957544] ----D- C:\Program Files\Windows NT
O43 - CFD: 16/06/2010 - 07:56:58 - [8228002] ----D- C:\Program Files\Windows Photo Gallery
O43 - CFD: 17/06/2010 - 08:22:06 - [134144] ----D- C:\Program Files\Windows Portable Devices
O43 - CFD: 16/06/2010 - 07:56:58 - [6527558] ----D- C:\Program Files\Windows Sidebar
O43 - CFD: 19/03/2010 - 10:44:46 - [3882468] ----D- C:\Program Files\WinRAR
O43 - CFD: 17/05/2010 - 08:01:46 - [4213964] ----D- C:\Program Files\Wise Registry Cleaner
O43 - CFD: 09/03/2011 - 08:44:36 - [3562435] ----D- C:\Program Files\ZHPDiag
O43 - CFD: 29/04/2010 - 08:16:08 - [4725980] ----D- C:\Program Files\Common Files\Adobe
O43 - CFD: 17/05/2010 - 15:19:52 - [44307712] ----D- C:\Program Files\Common Files\Apple
O43 - CFD: 07/08/2010 - 16:28:32 - [4428143] ----D- C:\Program Files\Common Files\Corel
O43 - CFD: 11/12/2009 - 09:15:12 - [86016] ----D- C:\Program Files\Common Files\DESIGNER
O43 - CFD: 12/01/2010 - 14:53:20 - [457237] ----D- C:\Program Files\Common Files\Hewlett-Packard
O43 - CFD: 12/01/2010 - 14:58:20 - [2165248] ----D- C:\Program Files\Common Files\HP
O43 - CFD: 21/03/2007 - 11:31:42 - [14313321] ----D- C:\Program Files\Common Files\InstallShield
O43 - CFD: 01/03/2011 - 09:17:52 - [1247175] ----D- C:\Program Files\Common Files\Java
O43 - CFD: 21/12/2010 - 09:31:22 - [344551472] ----D- C:\Program Files\Common Files\microsoft shared
O43 - CFD: 07/08/2010 - 16:34:04 - [1677888] ----D- C:\Program Files\Common Files\Protexis
O43 - CFD: 21/03/2007 - 11:29:44 - [69811535] ----D- C:\Program Files\Common Files\Roxio Shared
O43 - CFD: 02/11/2006 - 12:18:34 - [2702] ----D- C:\Program Files\Common Files\Services
O43 - CFD: 10/12/2010 - 14:12:12 - [2164104] ----D- C:\Program Files\Common Files\Skype
O43 - CFD: 21/03/2007 - 11:29:46 - [2994472] ----D- C:\Program Files\Common Files\Sonic Shared
O43 - CFD: 02/11/2006 - 12:18:34 - [41101735] ----D- C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 21/03/2007 - 11:29:52 - [600992] ----D- C:\Program Files\Common Files\SureThing Shared
O43 - CFD: 16/06/2010 - 07:56:58 - [22772996] ----D- C:\Program Files\Common Files\System
O43 - CFD: 29/04/2010 - 08:17:28 - [763] ----D- C:\ProgramData\Adobe
O43 - CFD: 17/05/2010 - 15:18:52 - [31051776] ----D- C:\ProgramData\Apple
O43 - CFD: 15/11/2010 - 11:32:26 - [26921472] ----D- C:\ProgramData\Apple Computer
O43 - CFD: 02/11/2006 - 14:02:26 - [0] -SH-D- C:\ProgramData\Application Data
O43 - CFD: 05/05/2010 - 15:32:04 - [53076152] ----D- C:\ProgramData\Avira
O43 - CFD: 10/12/2009 - 17:24:12 - [0] -SH-D- C:\ProgramData\Bureau
O43 - CFD: 04/01/2011 - 16:00:54 - [117772947] ----D- C:\ProgramData\Corel
O43 - CFD: 22/01/2010 - 19:06:14 - [13569] ----D- C:\ProgramData\CyberLink
O43 - CFD: 02/11/2006 - 14:02:26 - [0] -SH-D- C:\ProgramData\Desktop
O43 - CFD: 02/11/2006 - 14:02:26 - [0] -SH-D- C:\ProgramData\Documents
O43 - CFD: 27/12/2010 - 15:30:36 - [144] ----D- C:\ProgramData\Driver Mender
O43 - CFD: 22/04/2010 - 16:26:20 - [144] ----D- C:\ProgramData\Driver Whiz
O43 - CFD: 10/12/2009 - 17:24:12 - [0] -SH-D- C:\ProgramData\Favoris
O43 - CFD: 02/11/2006 - 14:02:26 - [0] -SH-D- C:\ProgramData\Favorites
O43 - CFD: 29/04/2010 - 08:10:32 - [536138] ----D- C:\ProgramData\Google
O43 - CFD: 12/01/2010 - 15:12:04 - [1413217] ----D- C:\ProgramData\HP
O43 - CFD: 12/01/2010 - 14:59:10 - [0] ----D- C:\ProgramData\HPSSUPPLY
O43 - CFD: 21/03/2007 - 11:30:14 - [782] ----D- C:\ProgramData\InstallShield
O43 - CFD: 19/03/2010 - 08:27:12 - [216022] ----D- C:\ProgramData\Kaspersky Lab
O43 - CFD: 27/12/2010 - 15:11:04 - [1242827] ----D- C:\ProgramData\ma-config.com
O43 - CFD: 18/01/2010 - 10:08:52 - [4361458] ----D- C:\ProgramData\Malwarebytes
O43 - CFD: 20/10/2010 - 11:51:44 - [82210] ----D- C:\ProgramData\McAfee
O43 - CFD: 10/12/2009 - 17:24:12 - [0] -SH-D- C:\ProgramData\Menu Démarrer
O43 - CFD: 06/06/2010 - 07:25:14 - [546244703] -S--D- C:\ProgramData\Microsoft
O43 - CFD: 10/12/2009 - 23:25:28 - [62830] ----D- C:\ProgramData\Microsoft Help
O43 - CFD: 10/12/2009 - 17:24:12 - [0] -SH-D- C:\ProgramData\Modèles
O43 - CFD: 11/02/2010 - 17:15:10 - [15663730] ----D- C:\ProgramData\MyVirtualHome
O43 - CFD: 29/01/2010 - 16:44:36 - [0] ----D- C:\ProgramData\PC Suite
O43 - CFD: 17/12/2010 - 10:10:22 - [522255] ----D- C:\ProgramData\Samsung
O43 - CFD: 16/02/2011 - 10:11:40 - [116440] ----D- C:\ProgramData\Skyline
O43 - CFD: 10/12/2010 - 14:11:38 - [47959858] ----D- C:\ProgramData\Skype
O43 - CFD: 10/12/2009 - 22:33:02 - [923] ----D- C:\ProgramData\Sonic
O43 - CFD: 02/11/2006 - 14:02:26 - [0] -SH-D- C:\ProgramData\Start Menu
O43 - CFD: 07/06/2010 - 09:01:40 - [259] ----D- C:\ProgramData\Sun
O43 - CFD: 10/03/2010 - 18:38:10 - [111] ---AD- C:\ProgramData\TEMP
O43 - CFD: 02/11/2006 - 14:02:26 - [0] -SH-D- C:\ProgramData\Templates
O43 - CFD: 18/02/2011 - 18:05:44 - [7767854] ----D- C:\ProgramData\Trusteer
O43 - CFD: 07/08/2010 - 16:29:32 - [31772] ----D- C:\ProgramData\Ulead Systems
O43 - CFD: 11/12/2009 - 09:50:08 - [785160] ----D- C:\ProgramData\VadeRetro
O43 - CFD: 01/12/2010 - 14:07:58 - [31613284] ----D- C:\ProgramData\WebEx
O43 - CFD: 12/01/2010 - 15:10:08 - [238] ----D- C:\ProgramData\WEBREG
O43 - CFD: 26/04/2010 - 11:25:12 - [0] ----D- C:\ProgramData\WindowsSearch
O43 - CFD: 14/12/2009 - 10:20:42 - [5245959] ----D- C:\Users\ACMF\AppData\Roaming\Adobe
O43 - CFD: 31/08/2010 - 08:46:52 - [688] ----D- C:\Users\ACMF\AppData\Roaming\Ariane Software
O43 - CFD: 05/05/2010 - 15:36:36 - [0] ----D- C:\Users\ACMF\AppData\Roaming\Avira
O43 - CFD: 07/08/2010 - 16:40:32 - [24664646] ----D- C:\Users\ACMF\AppData\Roaming\Corel
O43 - CFD: 22/01/2010 - 19:06:12 - [0] ----D- C:\Users\ACMF\AppData\Roaming\CyberLink
O43 - CFD: 29/04/2010 - 08:35:34 - [156] ----D- C:\Users\ACMF\AppData\Roaming\Google
O43 - CFD: 12/01/2010 - 15:05:02 - [230898] ----D- C:\Users\ACMF\AppData\Roaming\HP
O43 - CFD: 10/12/2009 - 17:28:00 - [0] ----D- C:\Users\ACMF\AppData\Roaming\Identities
O43 - CFD: 07/03/2011 - 15:04:50 - [8909064] ----D- C:\Users\ACMF\AppData\Roaming\Image Zone Express
O43 - CFD: 27/12/2010 - 15:43:02 - [522] ----D- C:\Users\ACMF\AppData\Roaming\InstallShield
O43 - CFD: 10/12/2009 - 19:28:44 - [13048] ----D- C:\Users\ACMF\AppData\Roaming\Macromedia
O43 - CFD: 18/01/2010 - 10:09:04 - [89020] ----D- C:\Users\ACMF\AppData\Roaming\Malwarebytes
O43 - CFD: 27/12/2010 - 19:01:30 - [2802068] -S--D- C:\Users\ACMF\AppData\Roaming\Microsoft
O43 - CFD: 10/12/2009 - 22:28:56 - [13873116] ----D- C:\Users\ACMF\AppData\Roaming\Mozilla
O43 - CFD: 11/02/2010 - 17:15:14 - [1434292] ----D- C:\Users\ACMF\AppData\Roaming\MyVirtualHome
O43 - CFD: 10/12/2009 - 20:28:58 - [6117] ----D- C:\Users\ACMF\AppData\Roaming\NEC Computers
O43 - CFD: 29/01/2010 - 16:44:34 - [354] ----D- C:\Users\ACMF\AppData\Roaming\PC Suite
O43 - CFD: 25/01/2010 - 15:20:10 - [4130] ----D- C:\Users\ACMF\AppData\Roaming\Printer Info Cache
O43 - CFD: 30/01/2010 - 15:00:52 - [724823602] ----D- C:\Users\ACMF\AppData\Roaming\ROUTE 66 Sync
O43 - CFD: 10/12/2009 - 17:28:30 - [20596259] ----D- C:\Users\ACMF\AppData\Roaming\Roxio
O43 - CFD: 29/01/2010 - 15:48:44 - [257733066] ----D- C:\Users\ACMF\AppData\Roaming\Samsung
O43 - CFD: 09/03/2011 - 08:25:24 - [4613904] ----D- C:\Users\ACMF\AppData\Roaming\Skype
O43 - CFD: 09/03/2011 - 08:24:34 - [36016] ----D- C:\Users\ACMF\AppData\Roaming\skypePM
O43 - CFD: 18/02/2011 - 18:08:36 - [2413822] ----D- C:\Users\ACMF\AppData\Roaming\Trusteer
O43 - CFD: 11/12/2009 - 09:52:42 - [880591] ----D- C:\Users\ACMF\AppData\Roaming\VadeRetro
O43 - CFD: 01/12/2010 - 14:38:52 - [0] ----D- C:\Users\ACMF\AppData\Roaming\webex
O43 - CFD: 19/03/2010 - 10:45:18 - [12] ----D- C:\Users\ACMF\AppData\Roaming\WinRAR


---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.5CDD61D964CF3D2454E5A42403E6BD9E] - 09/03/2011 - 08:21:49 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]
O44 - LFC:[MD5.70ED12005489247600ECFD7F44EE1200] - 08/03/2011 - 19:47:53 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1088212]
O44 - LFC:[MD5.76A4C1AC571BE2C6AF772B765F153D1D] - 08/03/2011 - 18:49:51 ---A- . (...) -- C:\Ad-Report-SCAN[3].txt [2784]
O44 - LFC:[MD5.5B92B9F5F7BAF3021372A7C933835CC9] - 08/03/2011 - 18:40:32 ---A- . (...) -- C:\Ad-Report-CLEAN[1].txt [9417]
O44 - LFC:[MD5.4456EE00B0A5156BA16967F50D56438A] - 08/03/2011 - 18:37:38 ---A- . (...) -- C:\Ad-Report-SCAN[2].txt [9221]
O44 - LFC:[MD5.267F6624385B718DDE1BE2B708B8C191] - 08/03/2011 - 17:08:42 ---A- . (...) -- C:\Ad-Report-SCAN[1].txt [9156]
O44 - LFC:[MD5.89F7D0E1A359703E621E20B898E2BBFD] - 08/03/2011 - 14:22:17 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin [512]
O44 - LFC:[MD5.87FAEF95E2E18C982EBEC38007E25124] - 08/03/2011 - 08:49:46 ---A- . (...) -- C:\Windows\PFRO.log [3380]
O44 - LFC:[MD5.5BF8BA1B854D7DFCE1F47E58852B3D8F] - 01/03/2011 - 09:16:32 ---A- . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Windows\System32\javaw.exe [145184]
O44 - LFC:[MD5.58DC5CBDC930AF070B177843810F2C85] - 01/03/2011 - 09:16:32 ---A- . (.Sun Microsystems, Inc. - Java(TM) Web Start Launcher.) -- C:\Windows\System32\javaws.exe [157472]
O44 - LFC:[MD5.68288DA42BC798992A42CD59061B199D] - 01/03/2011 - 09:16:31 ---A- . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Windows\System32\java.exe [145184]
O44 - LFC:[MD5.79361C48047BB7276778E775FFC8AD6B] - 01/03/2011 - 09:14:53 ---A- . (...) -- C:\Windows\System32\jupdate-1.6.0_24-b07.log [3199]
O44 - LFC:[MD5.DA39805E2BAD99D37FCE9477DD94E7F2] - 23/02/2011 - 08:41:57 ---A- . (.Avira GmbH - Avira Driver for Security Enhancement.) -- C:\Windows\System32\drivers\avipbb.sys [135096]
O44 - LFC:[MD5.7663D35FE918445552CBA9B554925D3F] - 21/02/2011 - 08:46:26 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [131746]
O44 - LFC:[MD5.0894E3EADFE7A8422F850C6DB7123369] - 21/02/2011 - 08:46:26 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [690950]
O44 - LFC:[MD5.89546796A207330437DFE620C48CB518] - 21/02/2011 - 08:46:25 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1530260]
O44 - LFC:[MD5.3B92ED15FD8B79E5AED694B47DFC66EF] - 21/02/2011 - 08:46:25 ---A- . (...) -- C:\Windows\System32\perfc009.dat [108406]
O44 - LFC:[MD5.DAB854B18CADB9B4EED5C2B0FD22E188] - 21/02/2011 - 08:46:25 ---A- . (...) -- C:\Windows\System32\perfh009.dat [607030]
O44 - LFC:[MD5.C9640522783195B022E598A392D2F768] - 10/02/2011 - 14:56:40 ---A- . (...) -- C:\Windows\System32\FNTCACHE.DAT [418032]
O44 - LFC:[MD5.BE8A26BD07E1D66DC4B097DE157658C2] - 09/02/2011 - 08:41:17 ---A- . (.Adobe Systems Incorporated - Windows NT OpenType/Type 1 Font Driver.) -- C:\Windows\System32\atmfd.dll [292352]
O44 - LFC:[MD5.8E98986925EB7719B3B03CEA11EC8D82] - 09/02/2011 - 08:41:15 ---A- . (.Adobe Systems - Windows NT OpenType/Type 1 API Library..) -- C:\Windows\System32\atmlib.dll [34304]
O44 - LFC:[MD5.F6D48AE1F578493D2E19DD644B153976] - 01/08/2009 - 07:27:37 ---A- . (...) -- C:\Windows\System32\winrm.vbs [201184]
O44 - LFC:[MD5.B2EDF82825D979928AE07CBE9C7

ci-joint lien du rapport
mot de passe 1917 ou 1719

pithttps://pjjoint.malekal.com/files.php?id=6ed8d2ee551113

Okey attends le retour de Jawaryinti, elle devrait pas traîner ;)

Salut Juju
C'est bien malékal, mais le fichier est protégé par un mot de passe, donc il m'est pas
accéssible

mot de passe 1917 ou 1719

mot de passe 1719

impossible de supprimer above 8
erreur 20
ci-dessous le rapport

Rapport de ZHPFix 1.12.3257 par Nicolas Coolman, Update du 05/03/2011
Fichier d'export Registre :
Run by ACMF at 09/03/2011 16:09:14
Windows Vista Business Edition, 32-bit Service Pack 2 (Build 6002)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
Contact : nicolascoolman@yahoo.fr

========== Clé(s) du Registre ==========
O42 - Logiciel: Adobe Reader 8 - (.Pas de propriétaire.) [HKLM] -- AdobeReader => Désinstallation logicielle annulée par l'utilisateur ou désinstallation partielle!

========== Valeur(s) du Registre ==========
O4 - HKLM\..\Run: [NPSStartup] Clé orpheline => Valeur absente

========== Fichier(s) ==========
c:\users\acmf\appdata\roaming\microsoft\windows\start menu\programs\.lnk => Fichier absent

========== Logiciel(s) ==========
O42 - Logiciel: Adobe Reader 9.3 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A93000000001} => Logiciel déjà supprimé


========== Récapitulatif ==========
1 : Clé(s) du Registre
1 : Valeur(s) du Registre
1 : Fichier(s)
1 : Logiciel(s)


End of the scan

rapport malwarebytes clean
voir ci-dessous

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Version de la base de données: 5999

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.19019

09/03/2011 16:20:46
mbam-log-2011-03-09 (16-20-46).txt

Type d'examen: Examen rapide
Elément(s) analysé(s): 149853
Temps écoulé: 14 minute(s), 44 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

attends que jawaryinti revienne :)

above 8
C'est Adobe, pas above