REDIRECTION VERS ASK DANS MOZILLA

Rapport de ZHPDiag v1.27.181 par Nicolas Coolman, Update du 21/03/2011
Run by SGOUGOU at 22/03/2011 11:37:21
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Contact : nicolascoolman@yahoo.fr


---\\ Web Browser
MSIE: Internet Explorer v7.0.6002.18005
MFIE: Mozilla Firefox v3.6.15 (fr) (Defaut)
GCIE: Google Chrome

---\\ System Information
Windows Vista Home Premium Edition, 32-bit Service Pack 2 (Build 6002)
Processor: x86 Family 6 Model 15 Stepping 13, GenuineIntel
Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 2045 MB (72% free)
System Restore: Activé (Enable)
System drive C: has 377 GB (40%) free of 924 GB

---\\ Logged in mode
Computer Name: HAL
User Name: SGOUGOU
All Users Names: SGOUGOU, Administrateur,
Unselected Option: O45,O61,O62,O65,O66,O82
Logged in as Administrator

---\\ Environnement Variables
%AppData%=C:\Users\SGOUGOU\AppData\Roaming
%LocalAppData%=C:\Users\SGOUGOU\AppData\Local
%StartMenu%=C:\Users\SGOUGOU\AppData\Roaming\Microsoft\Windows\Start Menu

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 377 Go of 924 Go)
D:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
E:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
F:\ CD-ROM drive (Not Inserted)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableTaskMgr: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableRegistryTools: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] NoDispScrSavPage: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified



---\\ Recherche particulière de fichiers génériques
[MD5.D07D4C3038F3578FFCE1C0237F2A1253] - (.Microsoft Corporation - Explorateur Windows.) (.11/04/2009 07:27:36.) -- C:\Windows\Explorer.exe [2926592]
[MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) (.21/01/2008 03:23:42.) -- C:\Windows\System32\Wininit.exe [96768]
[MD5.072213E1604D843D3230EE61663466A4] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.20/12/2010 17:36:20.) -- C:\Windows\System32\wininet.dll [834048]
[MD5.898E7C06A350D4A1A64A9EA264D55452] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.11/04/2009 07:28:13.) -- C:\Windows\System32\Winlogon.exe [314368]
[MD5.1F05B78AB91C9075565A9D8A4B880BC4] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.11/04/2009 07:32:26.) -- C:\Windows\System32\drivers\atapi.sys [19944]
[MD5.6A4A98CEE84CF9E99564510DDA4BAA47] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.11/04/2009 07:32:49.) -- C:\Windows\System32\drivers\ntfs.sys [1083880]



---\\ Processus lancés
[MD5.9BEBDD08ABCB9B098785E48E54B83CE7] - (.Sony Corporation - VAIO Update.) -- C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe [1459568]
[MD5.AF334CA84536E743D6AEF32548223403] - (.Sony Corporation - Wireless Switch Setting Utility.) -- C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe [469112]
[MD5.5CE6D96C5210D5B0145EE39C0B8E7C8A] - (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [835584]
[MD5.598DAA6F3B34C8F523AC1AE1AB483799] - (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe [4718592]
[MD5.29680A793F690EEF4AAA68479D2A6DF8] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [209153]
[MD5.D3804513FC9C11A4637392B4F0F43BC5] - (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe [182808]
[MD5.4B555106290BD117334E9A08761C035A] - (...) -- C:\Windows\System32\rundll32.exe [44544]
[MD5.52DB6CDAC5BC7A1FC884E97C41C91213] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [248040]
[MD5.E2724029D3648C2EB226D16678727FA9] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe [202256]
[MD5.147B4118AF983AC5454BD3FAF006A525] - (.Broadcom Corporation. - Bluetooth Tray Application.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [748072]
[MD5.53CB2DEB7D474FDEF32FD0E86A0E735E] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Users\SGOUGOU\Desktop\ZHPDiag\ZHPDiag.exe [642048]



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
M3 - MFPP: Plugins - [SGOUGOU] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [SGOUGOU] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [SGOUGOU] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [SGOUGOU] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [SGOUGOU] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [SGOUGOU] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeployJava1.dll
P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins\npnul32.dll
P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- C:\Program Files\Mozilla Firefox\Plugins\nppl3260.dll
P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- C:\Program Files\Mozilla Firefox\Plugins\nprjplug.dll
P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - 6.0.12.732.) -- C:\Program Files\Mozilla Firefox\Plugins\nprpjplug.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\Macromed\Flash\NPSWF32.dll
P2 - FPN: [HKLM] [@divx.com/DivX Player Plugin,version=1.0.0] - (.DivX, Inc - npdivxplayerplugin.) -- C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@real.com/nppl3260;version=6.0.12.732] - (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- c:\program files\real\realplayer\Netscape6\nppl3260.dll
P2 - FPN: [HKLM] [@real.com/nprjplug;version=1.0.3.732] - (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- c:\program files\real\realplayer\Netscape6\nprjplug.dll
P2 - FPN: [HKLM] [@real.com/nprphtml5videoshim;version=1.0.0.0] - (.RealNetworks, Inc. - RealPlayer(tm) HTML5VideoShim Plug-In.) -- C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
P2 - FPN: [HKLM] [@real.com/nprpjplug;version=6.0.12.732] - (.RealNetworks, Inc. - 6.0.12.732.) -- c:\program files\real\realplayer\Netscape6\nprpjplug.dll
M2 - MFEP: prefs.js [SGOUGOU - qz2wsf46.default\{20a82645-c095-46ed-80e3-08825760534b}] [MicrosoftCG] Microsoft .NET Framework Assistant v1.2.1 (.Microsoft.)
M2 - MFEP: prefs.js [SGOUGOU - qz2wsf46.default\{4daac69c-cba7-45e2-9bc8-1044483d3352}] [] Softonic_France Community Toolbar v3.2.5.2 (.Conduit Ltd..)



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKUS\S-1-5-21-2508603879-1909622676-3938768959-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) (6.2.3.0) -- C:\Program Files\Softonic_France\tbSoft.dll
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (7.00.6000.16386 (vista_rtm.061101-2205)) -- C:\Windows\system32\ieframe.dll
R3 - URLSearchHook: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) (6.2.3.0) -- C:\Program Files\Softonic_France\tbSoft.dll
R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll



---\\ ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealPlayer - RealPlayer Download and Record Plugin.) -- C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Softonic_France - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Softonic_France\tbSoft.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O3 - Toolbar: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Softonic_France\tbSoft.dll



---\\ ---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] . (.Realtek Semiconductor Corp. - Realtek Voice Manager.) -- C:\Windows\Skytel.exe
O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
O4 - HKLM\..\Run: [IAAnotif] . (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [NvSvc] . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 167.6.) -- C:\Windows\system32\nvsvc.dll
O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\Windows\system32\NvCpl.dll
O4 - HKLM\..\Run: [NvMediaCenter] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\Windows\system32\NvMcTray.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe
O4 - HKLM\..\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe
O4 - HKCU\..\Run: [Phemobe] C:\Users\SGOUGOU\AppData\Local\pxtcml1.dll (.not file.)
O4 - HKCU\..\Run: [Metropolis] C:\Windows\system32\sshnas21.dll (.not file.)
O4 - HKCU\..\Run: [A9YA3MI1CF] C:\Users\SGOUGOU\AppData\Local\Temp\Yz5.exe (.not file.)
O4 - HKCU\..\Run: [NtWqIVLZEWZU] C:\Users\SGOUGOU\AppData\Local\Temp\Yz8.exe (.not file.)
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] oobefldr.dll
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] oobefldr.dll
O4 - HKUS\S-1-5-21-2508603879-1909622676-3938768959-1000\..\Run: [Phemobe] C:\Users\SGOUGOU\AppData\Local\pxtcml1.dll (.not file.)
O4 - HKUS\S-1-5-21-2508603879-1909622676-3938768959-1000\..\Run: [Metropolis] C:\Windows\system32\sshnas21.dll (.not file.)
O4 - HKUS\S-1-5-21-2508603879-1909622676-3938768959-1000\..\Run: [A9YA3MI1CF] C:\Users\SGOUGOU\AppData\Local\Temp\Yz5.exe (.not file.)
O4 - HKUS\S-1-5-21-2508603879-1909622676-3938768959-1000\..\Run: [NtWqIVLZEWZU] C:\Users\SGOUGOU\AppData\Local\Temp\Yz8.exe (.not file.)
O4 - Global Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\BTTray.lnk . (.Broadcom Corporation..) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe



---\\ ---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\SGOUGOU\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\SGOUGOU\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Mail\WinMail.exe
O4 - Global Startup: C:\Users\SGOUGOU\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WINDOWS MEDIA.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Users\SGOUGOU\Desktop\AD-R.lnk . (...) -- C:\Program Files\Ad-Remover\main.exe
O4 - Global Startup: C:\Users\SGOUGOU\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\DVD FAB.lnk . (.Fengtao Software Inc..) -- C:\Program Files\DVDFab HD Decrypter 4\DVDFabHDDecrypter.exe
O4 - Global Startup: C:\Users\SGOUGOU\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\DVD SHRINK.lnk . (.DVD Shrink.) -- C:\Program Files\DVD Shrink\DVD Shrink 3.2.exe
O4 - Global Startup: C:\Users\SGOUGOU\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\DVD SUB EDIT.lnk . (...) -- C:\Program Files\DVD SUB EDIT\DVDSubEdit.exe
O4 - Global Startup: C:\Users\SGOUGOU\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\IFO EDIT.lnk . (.Derrow/Decision Development.) -- C:\Program Files\IFO EDIT\IfoEdit.exe
O4 - Global Startup: C:\Users\SGOUGOU\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\INTERNET.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - Global Startup: C:\Users\SGOUGOU\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\MEDIA PLAYER CLASSIC HOME CINEMA.lnk . (.MPC-HC Team.) -- C:\Program Files\K-Lite Codec Pack\Media Player Classic\mpc-hc.exe
O4 - Global Startup: C:\Users\SGOUGOU\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\VOB EDIT.lnk . (.Derrow/Decision Development.) -- C:\Program Files\IfoEdit\VobEdit.exe
O4 - Global Startup: C:\Users\SGOUGOU\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\VOB MERGE.lnk . (...) -- C:\Program Files\VOB MERGE\vobmerge251.exe



---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: Ajouter au fichier PDF existant . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O8 - Extra context menu item: Convertir en Adobe PDF . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O8 - Extra context menu item: Convertir la sélection en Adobe PDF . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O8 - Extra context menu item: E&xporter vers Microsoft Excel - (.not file.) - C:\PROGRA~1\MICROS~2\Office12\EXCEL.exe
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\WIDCOMM\Bluetooth Software\bt_hot_icon.ico



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{40CBD20D-0872-49C5-8B25-0DDDA1F9BB39}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{40CBD20D-0872-49C5-8B25-0DDDA1F9BB39}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{40CBD20D-0872-49C5-8B25-0DDDA1F9BB39}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: VESWinlogon . (.Sony Corporation - VAIO Event Service (Winlogon Notification M.) -- C:\Windows\System32\VESWinlogon.dll



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\system32\webcheck.dll



---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: (FLEXnet Licensing Service) . (.Macrovision Europe Ltd. - Activation Licensing Service.) - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: (gusvc) . (.Google - gusvc.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: (IAANTMON) . (.Intel Corporation - RAID Monitor.) - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: (MSCSPTISRV) - Clé orpheline
O23 - Service: (PACSPTISVR) . (.Sony Corporation - PACSPTISVR Module.) - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: (RtkHDMIService) . (.Realtek Semiconductor - Realtek Audio Service.) - C:\Windows\RtkAudioService.exe
O23 - Service: (SPTISRV) - Clé orpheline
O23 - Service: (STacSV) . (.IDT, Inc. - STacSV Module.) - C:\Windows\system32\stacsv.exe
O23 - Service: (uCamMonitor) . (.ArcSoft, Inc. - MgiSvr.) - C:\Program Files\ArcSoft\Magic-i Visual Effects\uCamMonitor.exe
O23 - Service: (VcmXmlIfHelper) . (.Sony Corporation - VcmXml Helper Interface.) - C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe
O23 - Service: (VUAgent) . (.Sony Corporation - VUAgent.exe.) - C:\Program Files\Sony\VAIO Update 5\VUAgent.exe
O23 - Service: (XAudioService) . (.Conexant Systems, Inc. - Modem Audio Service.) - C:\Windows\system32\DRIVERS\xaudio.exe



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\{62C40AA6-4406-467a-A5A5-DFDF1B559B7A}.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\{BBAEAEAF-1275-40e2-BD6C-BC8F88BD114A}.job
[MD5.E2724029D3648C2EB226D16678727FA9] [APT] [RealCreateProcessScheduledTask47286492S-1-5-21-2508603879-1909622676-3938768959-1000] (.RealNetworks, Inc..) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe
[MD5.B7EE47B4D960BF55BDD7EC1812373872] [APT] [RealUpgradeLogonTaskS-1-5-21-2508603879-1909622676-3938768959-1000] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
[MD5.B7EE47B4D960BF55BDD7EC1812373872] [APT] [RealUpgradeScheduledTaskS-1-5-21-2508603879-1909622676-3938768959-1000] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
[MD5.00000000000000000000000000000000] [APT] [{22116563-108C-42c0-A7CE-60161B75E508}] (.Pas de propriétaire.) -- C:\Users\SGOUGOU\AppData\Local\Temp\Yz5.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{303F8266-3C98-4ED1-A55F-547DE879F4B4}] (.Pas de propriétaire.) -- C:\Program Files\InstallShield Installation Information\{6B1F20F2-6321-4669-A58C-33DF8E7517FF}\setup.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{53F45566-A54C-4CBF-8C80-010E0AA2C3FF}] (.Pas de propriétaire.) -- C:\Program Files\InstallShield Installation Information\{C7477742-DDB4-43E5-AC8D-0259E1E661B1}\setup.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{62C40AA6-4406-467a-A5A5-DFDF1B559B7A}] (.Pas de propriétaire.) -- C:\Windows\Ybadia.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{8A6FA263-AF95-461B-9E20-153040FEB0F1}] (.Pas de propriétaire.) -- C:\Program Files\InstallShield Installation Information\{DEBA60A3-7CDE-48D7-993D-7C68663AEE68}\setup.exe (.not file.)
[MD5.F2FD250316164AA12F9B6F953D4836F7] [APT] [{A0805FF1-3F26-4300-B18E-6134C19EB141}] (.Nullsoft, Inc..) -- C:\Program Files\Winamp\UninstWA.exe
[MD5.00000000000000000000000000000000] [APT] [{BBAEAEAF-1275-40e2-BD6C-BC8F88BD114A}] (.Pas de propriétaire.) -- C:\Users\SGOUGOU\AppData\Local\Temp\Yz8.exe (.not file.)
[MD5.4DF10107E2C803F1F136872155F957AB] [APT] [Launch Application] (.Sony Corporation.) -- C:\Program Files\Sony\VAIO Update 5\ShellexeProxy.exe
[MD5.9BEBDD08ABCB9B098785E48E54B83CE7] [APT] [VAIO Update 5] (.Sony Corporation.) -- C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe
[MD5.3B619D6CC7D9AE59ECEAA21574AF720C] [APT] [VAIO Wallpaper Setting Tool] (.Sony Corporation.) -- C:\Program Files\Sony\VAIO Wallpaper Setting Tool\VWSet.exe
[MD5.AF334CA84536E743D6AEF32548223403] [APT] [WSSU] (.Sony Corporation.) -- C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe



---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys
O41 - Driver: (avipbb) . (.Avira GmbH - Avira Driver for RootKit Detection.) - C:\Windows\System32\DRIVERS\avipbb.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: (DMICall) . (.Sony Corporation - Windows 2000 DMI Call Kernel Driver.) - C:\Windows\System32\DRIVERS\DMICall.sys
O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\System32\DRIVERS\i8042prt.sys
O41 - Driver: (kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\System32\DRIVERS\kbdclass.sys
O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre clavier HID.) - C:\Windows\System32\DRIVERS\kbdhid.sys
O41 - Driver: (mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\System32\DRIVERS\mouclass.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: (netbt) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\system32\drivers\pacer.sys (PSched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\System32\DRIVERS\rasacd.sys
O41 - Driver: (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: (RDPENCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Smb) . (.Microsoft Corporation - SMB Transport driver.) - C:\Windows\System32\DRIVERS\smb.sys
O41 - Driver: (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\Windows\System32\DRIVERS\ssmdrv.sys
O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys
O41 - Driver: (UimBus) . (.Windows (R) 2000 DDK provider - Image Mounter SCSI Port Driver.) - C:\Windows\System32\DRIVERS\UimBus.sys
O41 - Driver: (Uim_IM) . (.Paragon - Image Mounter.) - C:\Windows\System32\Drivers\Uim_IM.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys



---\\ Logiciels installés (O42)
O42 - Logiciel: Activation Assistant for the 2007 Microsoft Office suites - (.Microsoft Corporation.) [HKLM] -- Activation Assistant for the 2007 Microsoft Office suites
O42 - Logiciel: Adobe Acrobat 8 Standard - English, Français, Deutsch - (.Adobe Systems.) [HKLM] -- Adobe Acrobat 8 Standard - English, Français, Deutsch
O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Flash Player ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Photoshop Elements - (.Adobe Systems, Inc..) [HKLM] -- Adobe Photoshop Elements 1.0
O42 - Logiciel: Adobe SVG Viewer - (.Adobe Systems, Inc..) [HKLM] -- Adobe SVG Viewer
O42 - Logiciel: ArcSoft Magic-i Visual Effects - (.ArcSoft.) [HKLM] -- {7BB90344-0647-468E-925A-7F69F7983421}
O42 - Logiciel: ArcSoft WebCam Companion 2 - (.ArcSoft.) [HKLM] -- {9973498D-EA29-4A68-BE0B-C88D6E03E928}
O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM] -- Avira AntiVir Desktop
O42 - Logiciel: Boilsoft Video Joiner 5.32 - (.Boilsoft, Inc..) [HKLM] -- Boilsoft Video Joiner_is1
O42 - Logiciel: Boilsoft Video Splitter 5.16 - (.Boilsoft, Inc..) [HKLM] -- Boilsoft Video Splitter_is1
O42 - Logiciel: DSD Direct - (.Sony Corporation.) [HKLM] -- {82D5BACA-3619-4D34-99DB-3A65CFB4DA33}
O42 - Logiciel: DSD Playback Plug-in - (.Sony Corporation.) [HKLM] -- {009E7FB7-1775-4D89-8956-F5C9A1C019FC}
O42 - Logiciel: DVD Shrink 3.2 - (.DVD Shrink.) [HKLM] -- DVD Shrink_is1
O42 - Logiciel: DVD-lab PRO 2.51 - (.Mediachance.) [HKLM] -- DVD-lab PRO 2.51_is1
O42 - Logiciel: DVDFab 7.0.4.0 (15/04/2010) - (.Fengtao Software Inc..) [HKLM] -- DVDFab 7_is1
O42 - Logiciel: DVDFab HD Decrypter 4.0.5.0 - (.Fengtao Software Inc..) [HKLM] -- DVDFab HD Decrypter 4_is1
O42 - Logiciel: DivX Codec - (.DivX, Inc..) [HKLM] -- {7B63B2922B174135AFC0E1377DD81EC2}
O42 - Logiciel: DivX Converter - (.DivX, Inc..) [HKLM] -- {B13A7C41581B411290FBC0395694E2A9}
O42 - Logiciel: DivX Player - (.DivXNetworks, Inc..) [HKLM] -- {8ADFC4160D694100B5B8A22DE9DCABD9}
O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {1E04F83B-2AB9-4301-9EF7-E86307F79C72}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
O42 - Logiciel: HDAUDIO SoftV92 Data Fax Modem with SmartCP - (.Pas de propriétaire.) [HKLM] -- CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_104D0200
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
O42 - Logiciel: IDT Audio - (.IDT.) [HKLM] -- {07D8511D-C9FE-4A93-933F-EAA5C8F20095}
O42 - Logiciel: Intel® Matrix Storage Manager - (.Intel Corporation.) [HKLM] -- {9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}
O42 - Logiciel: Java(TM) 6 Update 20 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216020FF}
O42 - Logiciel: Java(TM) 6 Update 4 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160040}
O42 - Logiciel: K-Lite Codec Pack 5.9.0 (Full) - (.Pas de propriétaire.) [HKLM] -- KLiteCodecPack_is1
O42 - Logiciel: Logiciel d'archivage WinRAR - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {A49F249F-0C91-497F-86DF-B2585E8E76B7}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: Mozilla Firefox (3.6.15) - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.6.15)
O42 - Logiciel: Mp3 Cutter and Joiner 1.0 - (.WinMP3Tools Inc..) [HKLM] -- Mp3 Cutter and Joiner_is1
O42 - Logiciel: My Club VAIO - (.Pas de propriétaire.) [HKLM] -- VAIO_My Club VAIO
O42 - Logiciel: NVIDIA Drivers - (.Pas de propriétaire.) [HKLM] -- NVIDIA Drivers
O42 - Logiciel: OpenMG Secure Module 5.4.00 - (.Sony Corporation.) [HKLM] -- InstallShield_{AEA6A4C2-7C4E-48F9-A770-879DE2EDEE1B}
O42 - Logiciel: OpenOffice.org 3.2 - (.OpenOffice.org.) [HKLM] -- {97B3824E-B2D2-4C49-A860-BCA56F10B040}
O42 - Logiciel: Picasa 2 - (.Google, Inc..) [HKLM] -- Picasa2
O42 - Logiciel: RealPlayer - (.RealNetworks.) [HKLM] -- RealPlayer 12.0
O42 - Logiciel: RealUpgrade 1.0 - (.RealNetworks, Inc..) [HKLM] -- {F4F4F84E-804F-4E9A-84D7-C34283F0088F}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473
O42 - Logiciel: Softonic_France Toolbar - (.Softonic_France.) [HKLM] -- Softonic_France Toolbar
O42 - Logiciel: SonicStage Mastering Studio Audio Filter - (.Sony Corporation.) [HKLM] -- {DF7DB916-90E5-40F2-9010-B8125EB5FD6F}
O42 - Logiciel: SonicStage Mastering Studio Plugins - (.Sony Corporation.) [HKLM] -- {9C1C8A04-F8CA-4472-A92D-4288CE32DE86}
O42 - Logiciel: Sony Video Shared Library - (.Sony Corporation.) [HKLM] -- {01FDC9FC-4D4F-4DB0-ACD1-D3E8E1D52902}
O42 - Logiciel: SubRip 1.17.1 (remove only) - (.Pas de propriétaire.) [HKLM] -- SubRip
O42 - Logiciel: Subtitle Workshop 2.51 - (.Pas de propriétaire.) [HKLM] -- SubtitleWorkshop
O42 - Logiciel: SubtitleCreator - (.Erik Vullings.) [HKLM] -- SubtitleCreator
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics.) [HKLM] -- SynTPDeinstKey
O42 - Logiciel: Time Adjuster STANDARD 3.1 - (.IrekSoftware.com.) [HKCU] -- TimeAdjuster
O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
O42 - Logiciel: VAIO Content Folder Setting - (.Sony Corporation.) [HKLM] -- {23825B69-36DF-4DAD-9CFD-118D11D80F16}
O42 - Logiciel: VAIO Content Metadata Manager Settings - (.Sony Corporation.) [HKLM] -- {12D0BE8D-538C-4AB1-86DE-C540308F50DA}
O42 - Logiciel: VAIO Content Metadata XML Interface Library - (.Sony Corporation.) [HKLM] -- {291FB4BF-EEC7-4CF9-8469-F39ED1DBC4D8}
O42 - Logiciel: VAIO Control Center - (.Sony Corporation.) [HKLM] -- {72042FA6-5609-489F-A8EA-3C2DD650F667}
O42 - Logiciel: VAIO Launcher - (.Sony Corporation.) [HKLM] -- {15D5C238-4C2E-4AEA-A66D-D6989A4C586B}
O42 - Logiciel: VAIO Power Management - (.Sony Corporation.) [HKLM] -- {802889F8-6AF5-45A5-9764-CA5B999E50FC}
O42 - Logiciel: VAIO Update - (.Sony Corporation.) [HKLM] -- {5BEE8F1F-BD32-4553-8107-500439E43BD7}
O42 - Logiciel: VLC media player 1.0.5 - (.VideoLAN Team.) [HKLM] -- VLC media player
O42 - Logiciel: Vaio Marketing Tools - (.Sony.) [HKLM] -- MarketingTools
O42 - Logiciel: Visionneuse Microsoft PowerPoint - (.Microsoft Corporation.) [HKLM] -- {95140000-00AF-040C-0000-0000000FF1CE}
O42 - Logiciel: VobEdit 0.6 Fr - (.Pas de propriétaire.) [HKLM] -- VobEdit 0.6 Fr
O42 - Logiciel: WIDCOMM Bluetooth Software 6.1.0.2200 - (.Broadcom Corporation.) [HKLM] -- {03D1988F-469F-4843-8E6E-E5FE9D17889D}
O42 - Logiciel: Winamp - (.Nullsoft, Inc.) [HKLM] -- Winamp
O42 - Logiciel: Wireless Switch Setting Utility - (.Sony Corporation.) [HKLM] -- {2A0F3EF9-68EE-49E9-A05B-ED5B82DF63E5}
O42 - Logiciel: jetAudio Basic VX - (.COWON.) [HKLM] -- {DF8195AF-8E6F-4487-A0EE-196F7E3F4B8A}

---\\ HKCU & HKLM Software Keys
[HKCU\Software\2SPI9KEA4C]
[HKCU\Software\A9YA3MI1CF]
[HKCU\Software\ABU]
[HKCU\Software\AC3Filter]
[HKCU\Software\ALWIL Software]
[HKCU\Software\ASProtect]
[HKCU\Software\Ad-Remover]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software\Softonic_France]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\Avanquest]
[HKCU\Software\Avira]
[HKCU\Software\Boilsoft]
[HKCU\Software\COWON]
[HKCU\Software\Canal+ Active]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\CoreVorbis]
[HKCU\Software\DVD Shrink]
[HKCU\Software\DVDAuthor2]
[HKCU\Software\DVDAuthorPro]
[HKCU\Software\DVDFab]
[HKCU\Software\DVDVideoSoft]
[HKCU\Software\DivXNetworks]
[HKCU\Software\DivX]
[HKCU\Software\Freeware]
[HKCU\Software\GNU]
[HKCU\Software\Gabest]
[HKCU\Software\Google]
[HKCU\Software\Haali]
[HKCU\Software\IDT]
[HKCU\Software\Intel]
[HKCU\Software\IrekZielinskiSoft]
[HKCU\Software\JavaSoft]
[HKCU\Software\Lake]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\MONOGRAM]
[HKCU\Software\Macromedia]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\MediaInfo]
[HKCU\Software\Mozilla]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Netscape]
[HKCU\Software\NtWqIVLZEWZU]
[HKCU\Software\ODBC]
[HKCU\Software\OpenOffice.org]
[HKCU\Software\Policies]
[HKCU\Software\RealNetworks]
[HKCU\Software\Realtek]
[HKCU\Software\Softonic]
[HKCU\Software\Sony Corporation]
[HKCU\Software\SubRip]
[HKCU\Software\SupRip]
[HKCU\Software\Synaptics]
[HKCU\Software\VFPlugin]
[HKCU\Software\VideoToMp3]
[HKCU\Software\VirtualDub.org]
[HKCU\Software\Widcomm]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\Winamp]
[HKCU\Software\XML]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\madFlac]
[HKLM\Software\ALWIL Software]
[HKLM\Software\ASIO]
[HKLM\Software\Adobe]
[HKLM\Software\America Online]
[HKLM\Software\ArcSoft]
[HKLM\Software\Avanquest software]
[HKLM\Software\Avira]
[HKLM\Software\COWON]
[HKLM\Software\CXT]
[HKLM\Software\Canal+ Active]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Codec Tweak Tool]
[HKLM\Software\Conexant Systems Inc ]
[HKLM\Software\Conexant]
[HKLM\Software\DVDFab]
[HKLM\Software\DVDVIDEOSOFT]
[HKLM\Software\DivXNetworks]
[HKLM\Software\DivX]
[HKLM\Software\GNU]
[HKLM\Software\Gabest]
[HKLM\Software\Google]
[HKLM\Software\HaaliMkx]
[HKLM\Software\IDT]
[HKLM\Software\InstalledOptions]
[HKLM\Software\Intel]
[HKLM\Software\InterVideo]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\KLCodecPack]
[HKLM\Software\Lake]
[HKLM\Software\Licenses]
[HKLM\Software\MAXSOFT-OCRON]
[HKLM\Software\Macromedia]
[HKLM\Software\Macrovision]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\McAfee]
[HKLM\Software\MimarSinan]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\Nullsoft]
[HKLM\Software\ODBC]
[HKLM\Software\OpenOffice.org]
[HKLM\Software\Policies]
[HKLM\Software\RealNetworks]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\RichFX]
[HKLM\Software\S3R521]
[HKLM\Software\SRS Labs]
[HKLM\Software\Sigmatel]
[HKLM\Software\Softonic_France]
[HKLM\Software\Sonic]
[HKLM\Software\Sony Corporation]
[HKLM\Software\Sun Microsystems]
[HKLM\Software\Synaptics]
[HKLM\Software\Trolltech]
[HKLM\Software\URUSoft]
[HKLM\Software\VideoLAN]
[HKLM\Software\VideoToMp3]
[HKLM\Software\WOW6432Node]
[HKLM\Software\Waves Audio]
[HKLM\Software\Widcomm]
[HKLM\Software\WinRAR]
[HKLM\Software\X-AVCSD]
[HKLM\Software\Xing Technology Corp.]
[HKLM\Software\mozilla.org]



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 28/01/2010 - 14:04:10 - [12683101] ----D- C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
O43 - CFD: 22/03/2011 - 11:11:00 - [101561457] ----D- C:\Program Files\Ad-Remover
O43 - CFD: 08/05/2010 - 14:41:14 - [691949429] ----D- C:\Program Files\Adobe
O43 - CFD: 28/01/2010 - 17:32:50 - [0] ----D- C:\Program Files\Alwil Software
O43 - CFD: 28/01/2010 - 14:22:16 - [46334873] ----D- C:\Program Files\ArcSoft
O43 - CFD: 03/05/2010 - 15:33:38 - [80034] ----D- C:\Program Files\Avanquest
O43 - CFD: 03/05/2010 - 15:32:06 - [1027201] ----D- C:\Program Files\Avanquest software
O43 - CFD: 29/04/2010 - 08:54:50 - [144615042] ----D- C:\Program Files\Avira
O43 - CFD: 28/01/2010 - 14:04:18 - [330980] ----D- C:\Program Files\BFG
O43 - CFD: 08/05/2010 - 15:14:38 - [9677402] ----D- C:\Program Files\Boilsoft Video Joiner
O43 - CFD: 08/05/2010 - 15:01:22 - [8501171] ----D- C:\Program Files\Boilsoft Video Splitter
O43 - CFD: 10/06/2010 - 14:56:16 - [594382078] ----D- C:\Program Files\Common Files
O43 - CFD: 28/01/2010 - 13:54:02 - [1061344] ----D- C:\Program Files\CONEXANT
O43 - CFD: 28/01/2010 - 14:08:00 - [47253508] ----D- C:\Program Files\DivX
O43 - CFD: 28/01/2010 - 18:32:32 - [979649] ----D- C:\Program Files\DVD Shrink
O43 - CFD: 08/05/2010 - 10:38:50 - [1216512] ----D- C:\Program Files\DVD SUB EDIT
O43 - CFD: 28/01/2010 - 18:28:42 - [38843522] ----D- C:\Program Files\DVDFab 7
O43 - CFD: 28/01/2010 - 18:35:58 - [4624093] ----D- C:\Program Files\DVDFab HD Decrypter 4
O43 - CFD: 24/05/2010 - 14:08:52 - [50685379] ----D- C:\Program Files\DVDlabPro2
O43 - CFD: 23/04/2008 - 08:48:02 - [0] -SH-D- C:\Program Files\Fichiers communs
O43 - CFD: 04/06/2010 - 17:34:20 - [0] ----D- C:\Program Files\Gabest
O43 - CFD: 21/05/2010 - 17:40:26 - [371] ----D- C:\Program Files\Gandalf Services
O43 - CFD: 08/05/2010 - 17:08:42 - [32916449] ----D- C:\Program Files\Google
O43 - CFD: 28/01/2010 - 14:04:38 - [98346] ----D- C:\Program Files\Google BAE
O43 - CFD: 23/04/2008 - 09:46:02 - [14675995] ----D- C:\Program Files\IDT
O43 - CFD: 08/05/2010 - 10:37:32 - [1208320] ----D- C:\Program Files\IFO EDIT
O43 - CFD: 08/05/2010 - 10:36:38 - [602430] ----D- C:\Program Files\IfoEdit
O43 - CFD: 10/06/2010 - 14:56:10 - [86293527] --H-D- C:\Program Files\InstallShield Installation Information
O43 - CFD: 08/05/2010 - 17:32:56 - [49939400] ----D- C:\Program Files\Intel
O43 - CFD: 08/05/2010 - 18:44:38 - [2144428] ----D- C:\Program Files\Internet Explorer
O43 - CFD: 10/05/2010 - 10:55:56 - [171814008] ----D- C:\Program Files\Java
O43 - CFD: 25/07/2010 - 22:17:24 - [60137250] ----D- C:\Program Files\JetAudio
O43 - CFD: 28/01/2010 - 18:31:34 - [47357113] ----D- C:\Program Files\K-Lite Codec Pack
O43 - CFD: 08/05/2010 - 11:29:22 - [9894] ----D- C:\Program Files\Lecteur CANALPLAY
O43 - CFD: 08/05/2010 - 10:34:46 - [3966091] ----D- C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD: 28/04/2010 - 18:05:28 - [4411392] ----D- C:\Program Files\MEDIA PLAYER CLASSIC
O43 - CFD: 02/11/2006 - 13:37:36 - [93446071] ----D- C:\Program Files\Microsoft Games
O43 - CFD: 04/08/2010 - 21:17:02 - [34205731] ----D- C:\Program Files\Microsoft Office
O43 - CFD: 13/08/2010 - 07:00:34 - [99342446] ----D- C:\Program Files\Movie Maker
O43 - CFD: 05/03/2011 - 22:49:08 - [30486161] ----D- C:\Program Files\Mozilla Firefox
O43 - CFD: 08/05/2010 - 14:13:46 - [3214680] ----D- C:\Program Files\Mp3 Cutter and Joiner
O43 - CFD: 02/11/2006 - 13:37:36 - [25757] ----D- C:\Program Files\MSBuild
O43 - CFD: 04/08/2010 - 21:12:22 - [66562405] ----D- C:\Program Files\MSECache
O43 - CFD: 28/04/2010 - 22:05:30 - [0] ----D- C:\Program Files\MSXML 4.0
O43 - CFD: 08/05/2010 - 10:07:32 - [144887374] ----D- C:\Program Files\OpenOffice
O43 - CFD: 08/05/2010 - 10:09:06 - [371455412] ----D- C:\Program Files\OpenOffice.org 3
O43 - CFD: 28/01/2010 - 14:04:46 - [36249378] ----D- C:\Program Files\Picasa2
O43 - CFD: 16/05/2010 - 12:54:40 - [83003781] ----D- C:\Program Files\Real
O43 - CFD: 23/04/2008 - 09:40:40 - [16481475] ----D- C:\Program Files\Realtek
O43 - CFD: 02/11/2006 - 13:37:36 - [37812993] ----D- C:\Program Files\Reference Assemblies
O43 - CFD: 23/04/2008 - 09:45:52 - [5882826] ----D- C:\Program Files\Sigmatel
O43 - CFD: 28/12/2010 - 18:15:48 - [4136773] ----D- C:\Program Files\Softonic_France
O43 - CFD: 08/05/2010 - 23:00:24 - [173419280] ----D- C:\Program Files\Sony
O43 - CFD: 27/06/2010 - 13:50:20 - [1160333] ----D- C:\Program Files\SubRip
O43 - CFD: 21/05/2010 - 18:26:44 - [5721778] ----D- C:\Program Files\SubtitleCreator
O43 - CFD: 23/04/2008 - 09:32:26 - [13533934] ----D- C:\Program Files\Synaptics
O43 - CFD: 27/06/2010 - 10:32:38 - [2045407] ----D- C:\Program Files\TimeAdjuster
O43 - CFD: 02/11/2006 - 14:01:56 - [0] --H-D- C:\Program Files\Uninstall Information
O43 - CFD: 27/06/2010 - 09:55:06 - [2139520] ----D- C:\Program Files\URUSoft
O43 - CFD: 23/06/2010 - 10:32:28 - [87222489] ----D- C:\Program Files\UsbFix
O43 - CFD: 04/11/2008 - 13:15:34 - [3393984] ----D- C:\Program Files\VAIO Control Center 2.2 (082Q) - 2.2.00.12180
O43 - CFD: 17/02/2011 - 19:28:42 - [177269627] ----D- C:\Program Files\VideoLAN
O43 - CFD: 29/06/2010 - 16:48:56 - [3442774] ----D- C:\Program Files\VIRTUAL DUB
O43 - CFD: 10/06/2010 - 16:04:14 - [1100005] ----D- C:\Program Files\VIRTUAL DUB WMV
O43 - CFD: 08/05/2010 - 13:54:08 - [356352] ----D- C:\Program Files\VOB MERGE
O43 - CFD: 23/04/2008 - 09:50:28 - [9282135] ----D- C:\Program Files\WIDCOMM
O43 - CFD: 08/05/2010 - 10:42:10 - [8350911] ----D- C:\Program Files\Winamp
O43 - CFD: 08/05/2010 - 18:44:46 - [1016832] ----D- C:\Program Files\Windows Calendar
O43 - CFD: 08/05/2010 - 18:44:38 - [2737152] ----D- C:\Program Files\Windows Collaboration
O43 - CFD: 08/05/2010 - 18:44:18 - [4490624] ----D- C:\Program Files\Windows Defender
O43 - CFD: 08/05/2010 - 18:44:38 - [7084664] ----D- C:\Program Files\Windows Journal
O43 - CFD: 17/12/2010 - 10:09:36 - [9116344] ----D- C:\Program Files\Windows Mail
O43 - CFD: 16/10/2010 - 08:09:04 - [4494025] ----D- C:\Program Files\Windows Media Player
O43 - CFD: 23/04/2008 - 08:48:02 - [7957544] ----D- C:\Program Files\Windows NT
O43 - CFD: 08/05/2010 - 18:44:30 - [13528738] ----D- C:\Program Files\Windows Photo Gallery
O43 - CFD: 08/05/2010 - 18:44:38 - [6527606] ----D- C:\Program Files\Windows Sidebar
O43 - CFD: 08/05/2010 - 14:59:54 - [3886175] ----D- C:\Program Files\WinRAR
O43 - CFD: 08/05/2010 - 14:41:18 - [74937818] ----D- C:\Program Files\Common Files\Adobe
O43 - CFD: 28/01/2010 - 14:22:16 - [3983464] ----D- C:\Program Files\Common Files\ArcSoft
O43 - CFD: 10/06/2010 - 14:56:24 - [7623569] ----D- C:\Program Files\Common Files\COWON
O43 - CFD: 03/06/2010 - 12:59:52 - [3256872] ----D- C:\Program Files\Common Files\DVDVIDEOSOFT
O43 - CFD: 28/01/2010 - 14:09:10 - [8505957] ----D- C:\Program Files\Common Files\InstallShield
O43 - CFD: 10/05/2010 - 10:58:18 - [38867549] ----D- C:\Program Files\Common Files\Java
O43 - CFD: 23/04/2008 - 11:36:20 - [655111] ----D- C:\Program Files\Common Files\Macrovision Shared
O43 - CFD: 04/08/2010 - 21:17:00 - [305960993] ----D- C:\Program Files\Common Files\microsoft shared
O43 - CFD: 08/05/2010 - 12:17:16 - [4210744] ----D- C:\Program Files\Common Files\PX Storage Engine
O43 - CFD: 16/05/2010 - 12:56:04 - [21491848] ----D- C:\Program Files\Common Files\Real
O43 - CFD: 02/11/2006 - 12:18:34 - [2702] ----D- C:\Program Files\Common Files\Services
O43 - CFD: 08/05/2010 - 17:30:44 - [68364962] ----D- C:\Program Files\Common Files\Sony Shared
O43 - CFD: 02/11/2006 - 12:18:34 - [41101735] ----D- C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 08/05/2010 - 18:44:32 - [15066498] ----D- C:\Program Files\Common Files\System
O43 - CFD: 16/05/2010 - 12:54:16 - [352256] ----D- C:\Program Files\Common Files\xing shared
O43 - CFD: 23/04/2008 - 11:36:20 - [122679] ----D- C:\ProgramData\Adobe
O43 - CFD: 29/04/2010 - 08:22:20 - [0] ----D- C:\ProgramData\Alwil Software
O43 - CFD: 02/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Application Data
O43 - CFD: 03/05/2010 - 15:31:52 - [28] ----D- C:\ProgramData\Avanquest software
O43 - CFD: 29/04/2010 - 08:54:50 - [46502680] ----D- C:\ProgramData\Avira
O43 - CFD: 23/04/2008 - 08:48:00 - [0] -SH-D- C:\ProgramData\Bureau
O43 - CFD: 03/05/2010 - 15:31:50 - [2367] ----D- C:\ProgramData\BVRP Software
O43 - CFD: 02/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Desktop
O43 - CFD: 16/05/2010 - 11:26:30 - [219782] ----D- C:\ProgramData\DivX
O43 - CFD: 02/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Documents
O43 - CFD: 21/03/2011 - 00:10:58 - [968227] ----D- C:\ProgramData\DVD Shrink
O43 - CFD: 23/04/2008 - 08:48:00 - [0] -SH-D- C:\ProgramData\Favoris
O43 - CFD: 02/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Favorites
O43 - CFD: 23/04/2008 - 11:36:22 - [7018] ----D- C:\ProgramData\FLEXnet
O43 - CFD: 08/05/2010 - 10:10:20 - [37697] ----D- C:\ProgramData\Google
O43 - CFD: 08/05/2010 - 10:34:42 - [4877466] ----D- C:\ProgramData\Malwarebytes
O43 - CFD: 28/01/2010 - 18:26:06 - [6372] ----D- C:\ProgramData\McAfee
O43 - CFD: 23/04/2008 - 08:48:02 - [0] -SH-D- C:\ProgramData\Menu Démarrer
O43 - CFD: 09/05/2010 - 00:01:08 - [707047969] -S--D- C:\ProgramData\Microsoft
O43 - CFD: 08/05/2010 - 09:26:20 - [57028] ----D- C:\ProgramData\Microsoft Help
O43 - CFD: 23/04/2008 - 08:48:02 - [0] -SH-D- C:\ProgramData\Modèles
O43 - CFD: 08/05/2010 - 22:53:44 - [164588] ----D- C:\ProgramData\NVIDIA
O43 - CFD: 08/05/2010 - 13:46:10 - [995473] ----D- C:\ProgramData\Real
O43 - CFD: 28/01/2010 - 18:22:24 - [36] ----D- C:\ProgramData\SiteAdvisor
O43 - CFD: 08/05/2010 - 12:11:52 - [18102563] ----D- C:\ProgramData\Skype
O43 - CFD: 28/01/2010 - 14:15:26 - [625] ----D- C:\ProgramData\Sonic
O43 - CFD: 28/01/2010 - 14:11:10 - [13731160] ----D- C:\ProgramData\Sony
O43 - CFD: 08/05/2010 - 17:29:54 - [4935003] ----D- C:\ProgramData\Sony Corporation
O43 - CFD: 02/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Start Menu
O43 - CFD: 10/05/2010 - 10:58:34 - [119] ----D- C:\ProgramData\Sun
O43 - CFD: 01/03/2011 - 15:55:48 - [0] ---AD- C:\ProgramData\TEMP
O43 - CFD: 02/11/2006 - 14:02:06 - [0] -SH-D- C:\ProgramData\Templates
O43 - CFD: 28/01/2010 - 14:15:32 - [5298672] ----D- C:\ProgramData\Uninstall
O43 - CFD: 08/05/2010 - 14:48:04 - [5454087] ----D- C:\Users\SGOUGOU\AppData\Roaming\Adobe
O43 - CFD: 05/11/2010 - 11:21:52 - [6666] ----D- C:\Users\SGOUGOU\AppData\Roaming\ArcSoft
O43 - CFD: 10/06/2010 - 15:11:54 - [359498] ----D- C:\Users\SGOUGOU\AppData\Roaming\COWON
O43 - CFD: 20/05/2010 - 15:43:34 - [13368] ----D- C:\Users\SGOUGOU\AppData\Roaming\DivX
O43 - CFD: 15/03/2011 - 19:04:56 - [7367] ----D- C:\Users\SGOUGOU\AppData\Roaming\dvdcss
O43 - CFD: 18/05/2010 - 11:15:32 - [1863] ----D- C:\Users\SGOUGOU\AppData\Roaming\DVDFab
O43 - CFD: 03/06/2010 - 12:39:08 - [55] ----D- C:\Users\SGOUGOU\AppData\Roaming\FLV Extract
O43 - CFD: 28/01/2010 - 17:26:02 - [30] ----D- C:\Users\SGOUGOU\AppData\Roaming\Google
O43 - CFD: 23/04/2008 - 08:50:42 - [0] ----D- C:\Users\SGOUGOU\AppData\Roaming\Identities
O43 - CFD: 08/05/2010 - 11:08:04 - [0] ----D- C:\Users\SGOUGOU\AppData\Roaming\InstallShield
O43 - CFD: 28/01/2010 - 17:25:50 - [113514] ----D- C:\Users\SGOUGOU\AppData\Roaming\Macromedia
O43 - CFD: 08/05/2010 - 10:35:38 - [121403] ----D- C:\Users\SGOUGOU\AppData\Roaming\Malwarebytes
O43 - CFD: 02/11/2006 - 13:37:36 - [0] ----D- C:\Users\SGOUGOU\AppData\Roaming\Media Center Programs
O43 - CFD: 28/04/2010 - 18:03:46 - [69] ----D- C:\Users\SGOUGOU\AppData\Roaming\Media Player Classic
O43 - CFD: 09/05/2010 - 00:01:08 - [1364785] -S--D- C:\Users\SGOUGOU\AppData\Roaming\Microsoft
O43 - CFD: 28/01/2010 - 17:28:36 - [10889091] ----D- C:\Users\SGOUGOU\AppData\Roaming\Mozilla
O43 - CFD: 08/05/2010 - 10:22:32 - [2470369] ----D- C:\Users\SGOUGOU\AppData\Roaming\OpenOffice.org
O43 - CFD: 08/05/2010 - 13:46:12 - [2375537] ----D- C:\Users\SGOUGOU\AppData\Roaming\Real
O43 - CFD: 08/05/2010 - 22:28:26 - [104] ----D- C:\Users\SGOUGOU\AppData\Roaming\Sony Corporation
O43 - CFD: 21/03/2011 - 17:38:38 - [38676372] ----D- C:\Users\SGOUGOU\AppData\Roaming\vlc
O43 - CFD: 08/05/2010 - 10:49:02 - [49785] ----D- C:\Users\SGOUGOU\AppData\Roaming\Winamp
O43 - CFD: 08/05/2010 - 15:00:54 - [12] ----D- C:\Users\SGOUGOU\AppData\Roaming\WinRAR



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.18EF120054897B7600FCFD7FECEF1200] - 22/03/2011 - 11:38:06 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1881285]
O44 - LFC:[MD5.8623E9862394315D1DFB05110A260B73] - 22/03/2011 - 11:24:18 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]
O44 - LFC:[MD5.5A012EDB7AE69A02EB1C20B8E76CB4DA] - 20/03/2011 - 21:21:21 ---A- . (...) -- C:\Windows\MEMORY.DMP [257312953]
O44 - LFC:[MD5.AAB3BD1456AFB1C5AF573FC69958CAF3] - 20/03/2011 - 15:46:28 ---A- . (...) -- C:\Windows\srun.log [12]
O44 - LFC:[MD5.4AE18CEF7F93BB62D8ACF7B7470C95F4] - 21/02/2011 - 16:55:08 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1470810]
O44 - LFC:[MD5.8443A0069C0B99F60C153CB265C29139] - 21/02/2011 - 16:55:08 ---A- . (...) -- C:\Windows\System32\perfc009.dat [101250]
O44 - LFC:[MD5.9D12AF16305E7D65EC851B74687E712D] - 21/02/2011 - 16:55:08 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [123556]
O44 - LFC:[MD5.DED341C92892E28E543839C37A86241A] - 21/02/2011 - 16:55:08 ---A- . (...) -- C:\Windows\System32\perfh009.dat [587178]
O44 - LFC:[MD5.5D61FA84CEE63FB782BFD2D0EFC19988] - 21/02/2011 - 16:55:08 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [669566]



---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll
O52 - TDSD: \Drivers32\"vidc.DIVX"="DivX.dll" . (.DivX, Inc. - DivX.) -- C:\Windows\System32\DivX.dll
O52 - TDSD: \Drivers32\"vidc.yv12"="yv12vfw.dll" . (.www.helixcommunity.org - Helix YV12 YUV Codec.) -- C:\Windows\System32\yv12vfw.dll
O52 - TDSD: \Drivers32\"VIDC.dvsd"="C:\Program Files\Common Files\Sony Shared\VideoLib\sonydv.dll" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O52 - TDSD: \Drivers32\"VIDC.XVID"="xvidvfw.dll" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\xvidvfw.dll
O52 - TDSD: \Drivers32\"msacm.ac3acm"="ac3acm.acm" . (.fccHandler - AC-3 ACM Codec.) -- C:\Windows\System32\ac3acm.acm
O52 - TDSD: \Drivers32\"msacm.lameacm"="lameACM.acm" . (.http://www.mp3dev.org/ - Lame MP3 codec engine.) -- C:\Windows\System32\lameACM.acm
O52 - TDSD: \Drivers32\"VIDC.FFDS"="ff_vfw.dll" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\ff_vfw.dll
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"DivX.dll"="DivX 6.6.1 Codec" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O52 - TDSD: \drivers.desc\"xvidvfw.dll"="Xvid MPEG-4 Video Codec 1.2.2" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O52 - TDSD: \drivers.desc\"lameACM.acm"="Lame ACM MP3 CODEC v3.98.2" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O52 - TDSD: \drivers.desc\"ac3acm.acm"="AC-3 ACM Codec" . (.fccHandler - AC-3 ACM Codec.) -- C:\Windows\System32\ac3acm.acm
O52 - TDSD: \drivers.desc\"ff_vfw.dll"="ffdshow video encoder" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\ff_vfw.dll



---\\ ShareTools MSconfig StartupReg (O53)
O53 - SMSR:HKLM\...\startupreg\Acrobat Assistant 8.0 [Key] . (.Adobe Systems Inc. - AcroTray.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
O53 - SMSR:HKLM\...\startupreg\Google Desktop Search [Key] . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O53 - SMSR:HKLM\...\startupreg\ISBMgr.exe [Key] . (.Sony Corporation - Pas de description.) -- C:\Program Files\Sony\ISB Utility\ISBMgr.exe
O53 - SMSR:HKLM\...\startupreg\MarketingTools [Key] . (.Sony NSCE - Marketing Tools.) -- C:\Program Files\Sony\Marketing Tools\MarketingTools.exe
O53 - SMSR:HKLM\...\startupreg\TkBellExe [Key] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe
O53 - SMSR:HKLM\...\startupreg\Windows Defender [Key] . (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe