Pour smart rapport RoguKIller

Résolu
Bonjour, J'ai vraiment besoin de l'aide de quelqu'un , j'ai donc eu le virus windows repair , j'ai effectuer la demarche suivante :

"- Télécharge sur le bureau RogueKiller de Tigzy
- Quitte tous tes programmes en cours
- Sous Vista/Seven , clique droit -> lancer en tant qu'administrateur
- Sinon lance simplement RogueKiller.exe
- Lorsque demandé, tape 2 [DELETE] et valide"

Mais comment on fait pour recuperer tous nos fichiers , je n'ai plus rien :(

34 réponses

Résumé de la discussion

Un utilisateur signale une infection par Windows Repair et cherche à récupérer ses fichiers, décrivant une démarche incluant RogueKiller et l'exécution en administrateur, puis l'invite sur l'outil. Des réponses suivent des conseils de sécurité et des outils de nettoyage, notamment Malwarebytes, AD-Remover et des rapports à publier, tout en indiquant d'afficher les fichiers cachés pour localiser des éléments manquants. D'autres messages recommandent d'analyser les rapports RogueKiller, d'exécuter des nettoyages en mode manuel et de relancer des outils pour obtenir résultats et confirmations sur l'état du système. En cas de nécessité, la procédure peut s'étendre sur plusieurs outils et étapes, avec des conseils pratiques pour restaurer des fichiers, vérifier l'intégrité du système et vérifier les rapports de nettoyage.

Bobot (l’IA à votre service)
  1. Olala je te remercie , j'ai tout recuperer ! :D . Heureusement que des gens doués comme toi en informatique en aide d'autres !

    MERCI ENCORE SMART

    Bonne continuation a toi
    1. Contributeur sécurité
      Bonjour,

      Poste le rapport RogueKiller après avoir fait l'option 2.
      relance RogueKiller et choisis l'option 6 et poste le rapport
      Si certaines fichiers ou dossiers n'ont pas été trouvés, pas de panique.
      Faire comme suit:
      - Activer l'affichage des dossiers cachés:https://www.commentcamarche.net/informatique/windows/185-afficher-les-extensions-et-les-fichiers-caches-sous-windows/
      - Les fichiers manquant apparaissent alors en légère transparence.
      - Clic droit dessus, Propriété. Décoché la case "caché" et valider.

      Smart
      "Si tu n'as pas d'ambitions, tu t'installes au bord de la chute" (Kundera)
      1. Je te remercie de vouloir m'aider , tu assure :) .

        Après option 2 :

        RogueKiller V4.3.6 par Tigzy
        contact sur https://www.luanagames.com/index.fr.html
        mail: tigzyRK<at>gmail<dot>com
        Remontees: https://www.luanagames.com/index.fr.html

        Systeme d'exploitation: Windows 7 (6.1.7600 ) 64 bits version
        Demarrage : Mode normal
        Utilisateur: Charly [Droits d'admin]
        Mode: Suppression -- Date : 31/03/2011 23:03:24

        Processus malicieux: 8
        [APPDT/TMP/DESKTOP] taskmgr.exe -- c:\users\charly\appdata\local\temp\taskmgr.exe -> KILLED
        [APPDT/TMP/DESKTOP] mdm.exe -- c:\users\charly\appdata\local\temp\mdm.exe -> KILLED
        [APPDT/TMP/DESKTOP] win16.exe -- c:\users\charly\appdata\local\temp\win16.exe -> KILLED
        [APPDT/TMP/DESKTOP] cbapbkg3.exe -- c:\users\charly\appdata\local\temp\cbapbkg3.exe -> KILLED
        [APPDT/TMP/DESKTOP] YoopehTnCRAPa.exe -- c:\programdata\yoopehtncrapa.exe -> KILLED
        [APPDT/TMP/DESKTOP] 45604616.exe -- c:\programdata\45604616.exe -> KILLED
        [RESIDUE] slemauns.dll -- C:\Users\Charly\AppData\Local\slemauns.dll -> KILLED
        [RESIDUE] slemauns.dll -- C:\Users\Charly\AppData\Local\slemauns.dll -> KILLED

        Entrees de registre: 42
        [APPDT/TMP/DESKTOP] HKCU\[...]\Run : Yyibafu (rundll32.exe "C:\Users\Charly\AppData\Local\slemauns.dll",Startup) -> DELETED
        [APPDT/TMP/DESKTOP] HKCU\[...]\Run : engel (C:\Users\Charly\AppData\Roaming\updates\updates.exe) -> DELETED
        [APPDT/TMP/DESKTOP] HKCU\[...]\Run : LvasZkfgrrb (C:\Users\Charly\AppData\Local\Temp\taskmgr.exe) -> DELETED
        [APPDT/TMP/DESKTOP] HKCU\[...]\Run : LvasZkfgrta (C:\Users\Charly\AppData\Local\Temp\services.exe) -> DELETED
        [APPDT/TMP/DESKTOP] HKCU\[...]\Run : LvasZkfgpZ (C:\Users\Charly\AppData\Local\Temp\mdm.exe) -> DELETED
        [APPDT/TMP/DESKTOP] HKCU\[...]\Run : LvasZkfgsPc (C:\Users\Charly\AppData\Local\Temp\win16.exe) -> DELETED
        [APPDT/TMP/DESKTOP] HKCU\[...]\Run : LvasZkfgouqc (C:\Users\Charly\AppData\Local\Temp\iexplarer.exe) -> DELETED
        [APPDT/TMP/DESKTOP] HKCU\[...]\Run : LvasZkfgnlM (C:\Users\Charly\AppData\Local\Temp\cbapbkg3.exe) -> DELETED
        [APPDT/TMP/DESKTOP] HKCU\[...]\Run : YoopehTnCRAPa (C:\ProgramData\YoopehTnCRAPa.exe) -> DELETED
        [APPDT/TMP/DESKTOP] HKCU\[...]\Run : Yyibafu (rundll32.exe "C:\Users\Charly\AppData\Local\slemauns.dll",Startup) -> DELETED
        [APPDT/TMP/DESKTOP] HKCU\[...]\Run : Yyibafu (rundll32.exe "C:\Users\Charly\AppData\Local\slemauns.dll",Startup) -> DELETED
        [APPDT/TMP/DESKTOP] HKCU\[...]\Run : Yyibafu (rundll32.exe "C:\Users\Charly\AppData\Local\slemauns.dll",Startup) -> DELETED
        [APPDT/TMP/DESKTOP] HKCU\[...]\Run : Yyibafu (rundll32.exe "C:\Users\Charly\AppData\Local\slemauns.dll",Startup) -> DELETED
        [APPDT/TMP/DESKTOP] HKCU\[...]\Run : Yyibafu (rundll32.exe "C:\Users\Charly\AppData\Local\slemauns.dll",Startup) -> DELETED
        [APPDT/TMP/DESKTOP] HKCU\[...]\Run : Yyibafu (rundll32.exe "C:\Users\Charly\AppData\Local\slemauns.dll",Startup) -> DELETED
        [APPDT/TMP/DESKTOP] HKCU\[...]\Run : Yyibafu (rundll32.exe "C:\Users\Charly\AppData\Local\slemauns.dll",Startup) -> DELETED
        [APPDT/TMP/DESKTOP] HKCU\[...]\Run : Yyibafu (rundll32.exe "C:\Users\Charly\AppData\Local\slemauns.dll",Startup) -> DELETED
        [APPDT/TMP/DESKTOP] HKCU\[...]\Run : Yyibafu (rundll32.exe "C:\Users\Charly\AppData\Local\slemauns.dll",Startup) -> DELETED
        [APPDT/TMP/DESKTOP] HKCU\[...]\Run : Yyibafu (rundll32.exe "C:\Users\Charly\AppData\Local\slemauns.dll",Startup) -> DELETED
        [APPDT/TMP/DESKTOP] HKCU\[...]\Run : Yyibafu (rundll32.exe "C:\Users\Charly\AppData\Local\slemauns.dll",Startup) -> DELETED
        [APPDT/TMP/DESKTOP] HKCU\[...]\Run : Yyibafu (rundll32.exe "C:\Users\Charly\AppData\Local\slemauns.dll",Startup) -> DELETED
        [APPDT/TMP/DESKTOP] HKCU\[...]\Run : Yyibafu (rundll32.exe "C:\Users\Charly\AppData\Local\slemauns.dll",Startup) -> DELETED
        [APPDT/TMP/DESKTOP] HKCU\[...]\Run : Yyibafu (rundll32.exe "C:\Users\Charly\AppData\Local\slemauns.dll",Startup) -> DELETED
        [APPDT/TMP/DESKTOP] HKCU\[...]\Run : Yyibafu (rundll32.exe "C:\Users\Charly\AppData\Local\slemauns.dll",Startup) -> DELETED
        [APPDT/TMP/DESKTOP] HKCU\[...]\Run : Yyibafu (rundll32.exe "C:\Users\Charly\AppData\Local\slemauns.dll",Startup) -> DELETED
        [APPDT/TMP/DESKTOP] HKCU\[...]\Run : Yyibafu (rundll32.exe "C:\Users\Charly\AppData\Local\slemauns.dll",Startup) -> DELETED
        [APPDT/TMP/DESKTOP] HKCU\[...]\Run : Yyibafu (rundll32.exe "C:\Users\Charly\AppData\Local\slemauns.dll",Startup) -> DELETED
        [APPDT/TMP/DESKTOP] HKUS\S-1-5-21-2362854721-1509393665-3421742218-1000[...]\Run : Yyibafu (rundll32.exe "C:\Users\Charly\AppData\Local\slemauns.dll",Startup) -> DELETED
        [APPDT/TMP/DESKTOP] HKUS\S-1-5-21-2362854721-1509393665-3421742218-1000[...]\Run : Yyibafu (rundll32.exe "C:\Users\Charly\AppData\Local\slemauns.dll",Startup) -> DELETED
        [APPDT/TMP/DESKTOP] HKUS\S-1-5-21-2362854721-1509393665-3421742218-1000[...]\Run : Yyibafu (rundll32.exe "C:\Users\Charly\AppData\Local\slemauns.dll",Startup) -> DELETED
        [APPDT/TMP/DESKTOP] HKUS\S-1-5-21-2362854721-1509393665-3421742218-1000[...]\Run : Yyibafu (rundll32.exe "C:\Users\Charly\AppData\Local\slemauns.dll",Startup) -> DELETED
        [APPDT/TMP/DESKTOP] HKUS\S-1-5-21-2362854721-1509393665-3421742218-1000[...]\Run : Yyibafu (rundll32.exe "C:\Users\Charly\AppData\Local\slemauns.dll",Startup) -> DELETED
        [APPDT/TMP/DESKTOP] HKUS\S-1-5-21-2362854721-1509393665-3421742218-1000[...]\Run : Yyibafu (rundll32.exe "C:\Users\Charly\AppData\Local\slemauns.dll",Startup) -> DELETED
        [APPDT/TMP/DESKTOP] HKUS\S-1-5-21-2362854721-1509393665-3421742218-1000[...]\Run : Yyibafu (rundll32.exe "C:\Users\Charly\AppData\Local\slemauns.dll",Startup) -> DELETED
        [APPDT/TMP/DESKTOP] HKUS\S-1-5-21-2362854721-1509393665-3421742218-1000[...]\Run : Yyibafu (rundll32.exe "C:\Users\Charly\AppData\Local\slemauns.dll",Startup) -> DELETED
        [APPDT/TMP/DESKTOP] HKUS\S-1-5-21-2362854721-1509393665-3421742218-1000[...]\Run : Yyibafu (rundll32.exe "C:\Users\Charly\AppData\Local\slemauns.dll",Startup) -> DELETED
        [APPDT/TMP/DESKTOP] HKUS\S-1-5-21-2362854721-1509393665-3421742218-1000[...]\Run : Yyibafu (rundll32.exe "C:\Users\Charly\AppData\Local\slemauns.dll",Startup) -> DELETED
        [APPDT/TMP/DESKTOP] HKUS\S-1-5-21-2362854721-1509393665-3421742218-1000[...]\Run : Yyibafu (rundll32.exe "C:\Users\Charly\AppData\Local\slemauns.dll",Startup) -> DELETED
        [APPDT/TMP/DESKTOP] HKUS\S-1-5-21-2362854721-1509393665-3421742218-1000[...]\Run : Yyibafu (rundll32.exe "C:\Users\Charly\AppData\Local\slemauns.dll",Startup) -> DELETED
        [APPDT/TMP/DESKTOP] HKUS\S-1-5-21-2362854721-1509393665-3421742218-1000[...]\Run : Yyibafu (rundll32.exe "C:\Users\Charly\AppData\Local\slemauns.dll",Startup) -> DELETED
        [APPDT/TMP/DESKTOP] HKUS\S-1-5-21-2362854721-1509393665-3421742218-1000[...]\Run : Yyibafu (rundll32.exe "C:\Users\Charly\AppData\Local\slemauns.dll",Startup) -> DELETED
        [WallPP] HKCU\[...]\Desktop : Wallpaper () -> REPLACED (C:\Users\Charly\AppData\Roaming\Mozilla\Firefox\Fond d'écran.bmp)

        Fichier HOSTS:

        Termine : << RKreport[1].txt >>
        RKreport[1].txt

        Après option 6 :

        RogueKiller V4.3.6 par Tigzy
        contact sur https://www.luanagames.com/index.fr.html
        mail: tigzyRK<at>gmail<dot>com
        Remontees: https://www.luanagames.com/index.fr.html

        Systeme d'exploitation: Windows 7 (6.1.7600 ) 64 bits version
        Demarrage : Mode normal
        Utilisateur: Charly [Droits d'admin]
        Mode: Raccourcis RAZ -- Date : 31/03/2011 23:27:13

        Processus malicieux: 0

        Attributs de fichiers restaures:
        Bureau: Success 36 / Fail 0
        Lancement rapide: Success 19 / Fail 0
        Programmes: Success 1 / Fail 0
        Menu demarrer: Success 36 / Fail 0
        Dossier utilisateur: Success 287 / Fail 0
        Mes documents: Success 3639 / Fail 0
        Mes favoris: Success 46 / Fail 0
        Mes images: Success 1 / Fail 0
        Ma musique: Success 1 / Fail 0
        Mes videos: Success 1 / Fail 0
        Disques locaux: Success 7306 / Fail 0

        Termine : << RKreport[2].txt >>
        RKreport[1].txt ; RKreport[2].txt
        1. Je te derange une derniere fois , est ce que tu sais comment il est possible de remettre un fond d'ecran ? sa ne fonctionne plus , le fond d'ecran reste noir meme en choississant autre chose
          1. Contributeur sécurité
            Ce n'est pas terminé.
            Tu vas faire ceci:

            * Télécharge et installe Malwarebytes
            * A la fin de l'installation, veille à ce que l'option « mettre a jour Malwarebyte's Anti-Malware » soit cochée
            * Lance MBAM et laisse les Mises à jour se télécharger (sinon fais les manuellement au lancement du programme)
            * Puis va dans l'onglet "Recherche", coche "Exécuter un examen complet puis "Rechercher"
            * Ne t'inquiète pas, l'analyse peut durer plusieurs heures en fonction du nombre de fichiers et infections à analyser
            * A la fin de l'analyse, clique sur "Afficher les résultats"
            * Coche tous les éléments détectés puis clique sur "Supprimer la sélection"
            * Enregistre le rapport
            * S'il t'est demandé de redémarrer l'ordinateur, clique sur Yes
            * Un rapport apparait après la suppression : poste le dans ta prochaine réponse.

            Smart
            1. C'est fait , voila le rapport :)

              Malwarebytes' Anti-Malware 1.50.1.1100
              www.malwarebytes.org

              Version de la base de données: 6234

              Windows 6.1.7600
              Internet Explorer 8.0.7600.16385

              01/04/2011 15:27:56
              mbam-log-2011-04-01 (15-27-56).txt

              Type d'examen: Examen complet (C:\|)
              Elément(s) analysé(s): 277872
              Temps écoulé: 27 minute(s), 43 seconde(s)

              Processus mémoire infecté(s): 0
              Module(s) mémoire infecté(s): 0
              Clé(s) du Registre infectée(s): 0
              Valeur(s) du Registre infectée(s): 3
              Elément(s) de données du Registre infecté(s): 0
              Dossier(s) infecté(s): 0
              Fichier(s) infecté(s): 68

              Processus mémoire infecté(s):
              (Aucun élément nuisible détecté)

              Module(s) mémoire infecté(s):
              (Aucun élément nuisible détecté)

              Clé(s) du Registre infectée(s):
              (Aucun élément nuisible détecté)

              Valeur(s) du Registre infectée(s):
              HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Mqsuc (Malware.Packer.Gen) -> Value: Mqsuc -> Quarantined and deleted successfully.
              HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Yyibafu (Trojan.Hiloti) -> Value: Yyibafu -> Quarantined and deleted successfully.
              HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\WINID (Malware.Trace) -> Value: WINID -> Quarantined and deleted successfully.

              Elément(s) de données du Registre infecté(s):
              (Aucun élément nuisible détecté)

              Dossier(s) infecté(s):
              (Aucun élément nuisible détecté)

              Fichier(s) infecté(s):
              c:\Windows\lsass.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\slemauns.dll (Trojan.Hiloti) -> Quarantined and deleted successfully.
              c:\program files (x86)\mozilla firefox\rk_quarantine\45604616.exe.vir (Rogue.FakeHDD) -> Quarantined and deleted successfully.
              c:\program files (x86)\mozilla firefox\rk_quarantine\cbapbkg3.exe.vir (Malware.Packer.Gen) -> Quarantined and deleted successfully.
              c:\program files (x86)\mozilla firefox\rk_quarantine\iexplarer.exe.vir (Malware.Packer.Gen) -> Quarantined and deleted successfully.
              c:\program files (x86)\mozilla firefox\rk_quarantine\mdm.exe.vir (Malware.Packer.Gen) -> Quarantined and deleted successfully.
              c:\program files (x86)\mozilla firefox\rk_quarantine\services.exe.vir (Malware.Packer.Gen) -> Quarantined and deleted successfully.
              c:\program files (x86)\mozilla firefox\rk_quarantine\slemauns.dll.vir (Trojan.Hiloti) -> Quarantined and deleted successfully.
              c:\program files (x86)\mozilla firefox\rk_quarantine\taskmgr.exe.vir (Malware.Packer.Gen) -> Quarantined and deleted successfully.
              c:\program files (x86)\mozilla firefox\rk_quarantine\updates.exe.vir (Trojan.Proxy) -> Quarantined and deleted successfully.
              c:\program files (x86)\mozilla firefox\rk_quarantine\win16.exe.vir (Malware.Packer.Gen) -> Quarantined and deleted successfully.
              c:\program files (x86)\mozilla firefox\rk_quarantine\yoopehtncrapa.exe.vir (Trojan.Downloader) -> Quarantined and deleted successfully.
              c:\programdata\45604616.exe (Rogue.FakeHDD) -> Quarantined and deleted successfully.
              c:\programdata\yoopehtncrapa.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\1CFB.tmp (Rootkit.TDSS) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\C309.tmp (Rootkit.TDSS) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\cbapbkg3.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\cqqa.exe (Trojan.Proxy) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\emnarsxocw.exe (Trojan.Hiloti.Gen) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\err.log181692196 (Trojan.FakeAlert.Gen) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\iexplarer.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\internetexplorerupdate.exe (Trojan.FakeAlert.Gen) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\mdm.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\nmweocaxrs.exe (Adware.Agent) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\nrmaocwxse.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\oacswrmnxe.exe (Trojan.Hiloti) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\ooj4ztg8b33.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\services.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\setup.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\setup1112272876.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\setup1116975344.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\setup1204821712.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\setup1391636004.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\setup1515998528.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\setup1523835184.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\setup1889268844.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\setup191476792.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\setup21049600.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\setup2383250228.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\setup2490122444.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\setup2519466160.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\setup2550614872.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\setup2588533368.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\setup2612298092.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\setup2771453188.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\setup3353334512.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\setup3504727256.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\setup36575616.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\setup3735706404.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\setup3791645464.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\setup3821656912.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\setup400504952.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\setup4026163252.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\setup4265938872.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\setup661977712.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\setup712907032.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\setup716936564.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\setup767247948.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\setup966807860.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\taskmgr.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\tmpAE22.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Local\Temp\win16.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Roaming\Adobe\plugs\kb181695643.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Roaming\microsoft\Windows\start menu\Programs\Startup\mousedriver.exe (Trojan.Proxy) -> Quarantined and deleted successfully.
              c:\Users\Charly\AppData\Roaming\updates\updates.exe (Trojan.Proxy) -> Quarantined and deleted successfully.
              c:\Users\Charly\downloads\vlc-player.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
              c:\Users\Charly\downloads\VLC.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
              c:\Users\Charly\downloads\vlc_setup1.1.4.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
              C'e
              1. Contributeur sécurité
                Relance MBAM et vide la quarantaine.

                Ensuite:

                * Télécharge TDSSKiller (de Kaspersky Labs) sur ton Bureau.
                * Lance le (si tu utilises Windows Vista ou 7 : fais un clic-droit dessus et choisis "Exécuter en tant qu'administrateur")
                * Clique sur [Start Scan] pour démarrer l'analyse.
                * Si des éléments sont trouvés, clique sur [Continue] puis sur [Reboot Now]
                * Un rapport s'ouvrira au redémarrage de l'ordinateur.
                * Copie/colle son contenu dans ta prochaine réponse.
                Note : Le rapport se trouve également sous C:\TDSSKiller.N°deversion_Date_Heure_log.txt

                Smart
                1. Sa doit etre sa :)

                  2011/04/01 23:07:56.0099 2104 TDSS rootkit removing tool 2.4.21.0 Mar 10 2011 12:26:28
                  2011/04/01 23:07:56.0692 2104 ================================================================================
                  2011/04/01 23:07:56.0692 2104 SystemInfo:
                  2011/04/01 23:07:56.0692 2104
                  2011/04/01 23:07:56.0692 2104 OS Version: 6.1.7600 ServicePack: 0.0
                  2011/04/01 23:07:56.0692 2104 Product type: Workstation
                  2011/04/01 23:07:56.0692 2104 ComputerName: CHARLY-PC
                  2011/04/01 23:07:56.0692 2104 UserName: Charly
                  2011/04/01 23:07:56.0692 2104 Windows directory: C:\Windows
                  2011/04/01 23:07:56.0692 2104 System windows directory: C:\Windows
                  2011/04/01 23:07:56.0692 2104 Running under WOW64
                  2011/04/01 23:07:56.0692 2104 Processor architecture: Intel x64
                  2011/04/01 23:07:56.0692 2104 Number of processors: 2
                  2011/04/01 23:07:56.0692 2104 Page size: 0x1000
                  2011/04/01 23:07:56.0692 2104 Boot type: Normal boot
                  2011/04/01 23:07:56.0692 2104 ================================================================================
                  2011/04/01 23:07:57.0066 2104 Initialize success
                  2011/04/01 23:08:01.0387 3872 ================================================================================
                  2011/04/01 23:08:01.0387 3872 Scan started
                  2011/04/01 23:08:01.0387 3872 Mode: Manual;
                  2011/04/01 23:08:01.0387 3872 ================================================================================
                  2011/04/01 23:08:02.0963 3872 1394ohci (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\DRIVERS\1394ohci.sys
                  2011/04/01 23:08:03.0010 3872 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys
                  2011/04/01 23:08:03.0056 3872 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys
                  2011/04/01 23:08:03.0228 3872 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
                  2011/04/01 23:08:03.0275 3872 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
                  2011/04/01 23:08:03.0322 3872 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
                  2011/04/01 23:08:03.0415 3872 AFD (b9384e03479d2506bc924c16a3db87bc) C:\Windows\system32\drivers\afd.sys
                  2011/04/01 23:08:03.0493 3872 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys
                  2011/04/01 23:08:03.0556 3872 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys
                  2011/04/01 23:08:03.0587 3872 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys
                  2011/04/01 23:08:03.0634 3872 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
                  2011/04/01 23:08:03.0649 3872 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
                  2011/04/01 23:08:03.0696 3872 amdsata (7a4b413614c055935567cf88a9734d38) C:\Windows\system32\DRIVERS\amdsata.sys
                  2011/04/01 23:08:03.0743 3872 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
                  2011/04/01 23:08:03.0790 3872 amdxata (b4ad0cacbab298671dd6f6ef7e20679d) C:\Windows\system32\DRIVERS\amdxata.sys
                  2011/04/01 23:08:03.0821 3872 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys
                  2011/04/01 23:08:03.0992 3872 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
                  2011/04/01 23:08:04.0024 3872 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
                  2011/04/01 23:08:04.0070 3872 aswFsBlk (5bab6d80435f9dff95a7e86c69110b32) C:\Windows\system32\DRIVERS\aswFsBlk.sys
                  2011/04/01 23:08:04.0133 3872 aswMonFlt (6067ec1c153f07a9e8e76b45df4d9f8d) C:\Windows\system32\DRIVERS\aswMonFlt.sys
                  2011/04/01 23:08:04.0148 3872 aswRdr (e4928b11d24fc5490c92ed74ecd922d0) C:\Windows\system32\drivers\aswRdr.sys
                  2011/04/01 23:08:04.0273 3872 aswSP (c6c9a87dd1ba5815082cd900ebe0bfb1) C:\Windows\system32\drivers\aswSP.sys
                  2011/04/01 23:08:04.0304 3872 aswTdi (d6cd3f4c869adf746c87b7188743664f) C:\Windows\system32\drivers\aswTdi.sys
                  2011/04/01 23:08:04.0367 3872 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
                  2011/04/01 23:08:04.0398 3872 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys
                  2011/04/01 23:08:04.0554 3872 atikmdag (3efd964d52221360af0673cd61c2f4f5) C:\Windows\system32\DRIVERS\atikmdag.sys
                  2011/04/01 23:08:04.0866 3872 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
                  2011/04/01 23:08:04.0913 3872 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
                  2011/04/01 23:08:04.0975 3872 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
                  2011/04/01 23:08:05.0116 3872 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
                  2011/04/01 23:08:05.0162 3872 bowser (91ce0d3dc57dd377e690a2d324022b08) C:\Windows\system32\DRIVERS\bowser.sys
                  2011/04/01 23:08:05.0194 3872 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
                  2011/04/01 23:08:05.0209 3872 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
                  2011/04/01 23:08:05.0256 3872 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
                  2011/04/01 23:08:05.0287 3872 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
                  2011/04/01 23:08:05.0350 3872 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
                  2011/04/01 23:08:05.0381 3872 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
                  2011/04/01 23:08:05.0459 3872 BthEnum (cf98190a94f62e405c8cb255018b2315) C:\Windows\system32\DRIVERS\BthEnum.sys
                  2011/04/01 23:08:05.0506 3872 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
                  2011/04/01 23:08:05.0568 3872 BthPan (02dd601b708dd0667e1331fa8518e9ff) C:\Windows\system32\DRIVERS\bthpan.sys
                  2011/04/01 23:08:05.0646 3872 BTHPORT (a51fa9d0e85d5adabef72e67f386309c) C:\Windows\system32\Drivers\BTHport.sys
                  2011/04/01 23:08:05.0740 3872 BTHUSB (f740b9a16b2c06700f2130e19986bf3b) C:\Windows\system32\Drivers\BTHUSB.sys
                  2011/04/01 23:08:05.0786 3872 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
                  2011/04/01 23:08:05.0833 3872 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys
                  2011/04/01 23:08:05.0958 3872 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
                  2011/04/01 23:08:06.0005 3872 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
                  2011/04/01 23:08:06.0161 3872 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
                  2011/04/01 23:08:06.0192 3872 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys
                  2011/04/01 23:08:06.0239 3872 CNG (f95fd4cb7da00ba2a63ce9f6b5c053e1) C:\Windows\system32\Drivers\cng.sys
                  2011/04/01 23:08:06.0286 3872 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
                  2011/04/01 23:08:06.0301 3872 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys
                  2011/04/01 23:08:06.0364 3872 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
                  2011/04/01 23:08:06.0442 3872 DfsC (3f1dc527070acb87e40afe46ef6da749) C:\Windows\system32\Drivers\dfsc.sys
                  2011/04/01 23:08:06.0473 3872 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
                  2011/04/01 23:08:06.0520 3872 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
                  2011/04/01 23:08:06.0691 3872 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
                  2011/04/01 23:08:06.0800 3872 DXGKrnl (1633b9abf52784a1331476397a48cbef) C:\Windows\System32\drivers\dxgkrnl.sys
                  2011/04/01 23:08:06.0941 3872 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
                  2011/04/01 23:08:07.0097 3872 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
                  2011/04/01 23:08:07.0144 3872 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys
                  2011/04/01 23:08:07.0222 3872 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
                  2011/04/01 23:08:07.0253 3872 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
                  2011/04/01 23:08:07.0300 3872 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
                  2011/04/01 23:08:07.0362 3872 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
                  2011/04/01 23:08:07.0378 3872 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
                  2011/04/01 23:08:07.0424 3872 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
                  2011/04/01 23:08:07.0471 3872 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys
                  2011/04/01 23:08:07.0534 3872 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
                  2011/04/01 23:08:07.0549 3872 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
                  2011/04/01 23:08:07.0643 3872 fvevol (ae87ba80d0ec3b57126ed2cdc15b24ed) C:\Windows\system32\DRIVERS\fvevol.sys
                  2011/04/01 23:08:07.0674 3872 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
                  2011/04/01 23:08:07.0736 3872 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
                  2011/04/01 23:08:07.0908 3872 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
                  2011/04/01 23:08:07.0955 3872 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys
                  2011/04/01 23:08:08.0002 3872 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys
                  2011/04/01 23:08:08.0033 3872 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
                  2011/04/01 23:08:08.0064 3872 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
                  2011/04/01 23:08:08.0095 3872 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
                  2011/04/01 23:08:08.0470 3872 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys
                  2011/04/01 23:08:08.0516 3872 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys
                  2011/04/01 23:08:08.0594 3872 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys
                  2011/04/01 23:08:08.0688 3872 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys
                  2011/04/01 23:08:08.0735 3872 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys
                  2011/04/01 23:08:08.0797 3872 iaStorV (d83efb6fd45df9d55e9a1afc63640d50) C:\Windows\system32\DRIVERS\iaStorV.sys
                  2011/04/01 23:08:09.0031 3872 igfx (dfeaf0a1d98d397035012c8e28d1520f) C:\Windows\system32\DRIVERS\igdkmd64.sys
                  2011/04/01 23:08:09.0265 3872 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
                  2011/04/01 23:08:09.0374 3872 IntcAzAudAddService (d8bce8176cb1084c6f5830c019d47166) C:\Windows\system32\drivers\RTKVHD64.sys
                  2011/04/01 23:08:09.0437 3872 IntcHdmiAddService (d485d3bd3e2179aa86853a182f70699f) C:\Windows\system32\drivers\IntcHdmi.sys
                  2011/04/01 23:08:09.0468 3872 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys
                  2011/04/01 23:08:09.0530 3872 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
                  2011/04/01 23:08:09.0562 3872 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys
                  2011/04/01 23:08:09.0608 3872 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys
                  2011/04/01 23:08:09.0640 3872 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
                  2011/04/01 23:08:09.0796 3872 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
                  2011/04/01 23:08:09.0827 3872 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys
                  2011/04/01 23:08:09.0874 3872 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys
                  2011/04/01 23:08:09.0920 3872 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
                  2011/04/01 23:08:10.0030 3872 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys
                  2011/04/01 23:08:10.0076 3872 KSecDD (e8b6fcc9c83535c67f835d407620bd27) C:\Windows\system32\Drivers\ksecdd.sys
                  2011/04/01 23:08:10.0139 3872 KSecPkg (a8c63880ef6f4d3fec7b616b9c060215) C:\Windows\system32\Drivers\ksecpkg.sys
                  2011/04/01 23:08:10.0170 3872 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
                  2011/04/01 23:08:10.0295 3872 L1C (2377ec4cc3e356655b996f39b43486b6) C:\Windows\system32\DRIVERS\L1C62x64.sys
                  2011/04/01 23:08:10.0420 3872 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
                  2011/04/01 23:08:10.0482 3872 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
                  2011/04/01 23:08:10.0513 3872 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
                  2011/04/01 23:08:10.0544 3872 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
                  2011/04/01 23:08:10.0700 3872 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
                  2011/04/01 23:08:10.0747 3872 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
                  2011/04/01 23:08:10.0794 3872 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
                  2011/04/01 23:08:10.0856 3872 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
                  2011/04/01 23:08:10.0903 3872 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
                  2011/04/01 23:08:10.0950 3872 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
                  2011/04/01 23:08:11.0028 3872 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
                  2011/04/01 23:08:11.0090 3872 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
                  2011/04/01 23:08:11.0122 3872 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys
                  2011/04/01 23:08:11.0153 3872 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys
                  2011/04/01 23:08:11.0200 3872 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
                  2011/04/01 23:08:11.0246 3872 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys
                  2011/04/01 23:08:11.0309 3872 mrxsmb (767a4c3bcf9410c286ced15a2db17108) C:\Windows\system32\DRIVERS\mrxsmb.sys
                  2011/04/01 23:08:11.0356 3872 mrxsmb10 (920ee0ff995fcfdeb08c41605a959e1c) C:\Windows\system32\DRIVERS\mrxsmb10.sys
                  2011/04/01 23:08:11.0434 3872 mrxsmb20 (740d7ea9d72c981510a5292cf6adc941) C:\Windows\system32\DRIVERS\mrxsmb20.sys
                  2011/04/01 23:08:11.0480 3872 msahci (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS\msahci.sys
                  2011/04/01 23:08:11.0512 3872 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys
                  2011/04/01 23:08:11.0590 3872 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
                  2011/04/01 23:08:11.0605 3872 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
                  2011/04/01 23:08:11.0636 3872 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys
                  2011/04/01 23:08:11.0730 3872 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
                  2011/04/01 23:08:11.0761 3872 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
                  2011/04/01 23:08:11.0792 3872 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
                  2011/04/01 23:08:11.0824 3872 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys
                  2011/04/01 23:08:11.0870 3872 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys
                  2011/04/01 23:08:11.0902 3872 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
                  2011/04/01 23:08:11.0933 3872 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
                  2011/04/01 23:08:11.0995 3872 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
                  2011/04/01 23:08:12.0136 3872 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
                  2011/04/01 23:08:12.0214 3872 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys
                  2011/04/01 23:08:12.0338 3872 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
                  2011/04/01 23:08:12.0370 3872 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
                  2011/04/01 23:08:12.0416 3872 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys
                  2011/04/01 23:08:12.0448 3872 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys
                  2011/04/01 23:08:12.0479 3872 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys
                  2011/04/01 23:08:12.0526 3872 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
                  2011/04/01 23:08:12.0572 3872 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys
                  2011/04/01 23:08:12.0838 3872 NETw1v64 (e72f4522801ffb8f0456924fb0017bff) C:\Windows\system32\DRIVERS\NETw1v64.sys
                  2011/04/01 23:08:13.0196 3872 netw5v64 (705283c02177809ca9fa7cc58a4f1e77) C:\Windows\system32\DRIVERS\netw5v64.sys
                  2011/04/01 23:08:13.0415 3872 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
                  2011/04/01 23:08:13.0462 3872 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
                  2011/04/01 23:08:13.0493 3872 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
                  2011/04/01 23:08:13.0586 3872 Ntfs (356698a13c4630d5b31c37378d469196) C:\Windows\system32\drivers\Ntfs.sys
                  2011/04/01 23:08:13.0680 3872 NTIDrvr (64ddd0dee976302f4bd93e5efcc2f013) C:\Windows\system32\drivers\NTIDrvr.sys
                  2011/04/01 23:08:13.0758 3872 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
                  2011/04/01 23:08:13.0820 3872 nvraid (3e38712941e9bb4ddbee00affe3fed3d) C:\Windows\system32\DRIVERS\nvraid.sys
                  2011/04/01 23:08:13.0869 3872 nvstor (477dc4d6deb99be37084c9ac6d013da1) C:\Windows\system32\DRIVERS\nvstor.sys
                  2011/04/01 23:08:13.0938 3872 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys
                  2011/04/01 23:08:14.0057 3872 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys
                  2011/04/01 23:08:14.0175 3872 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
                  2011/04/01 23:08:14.0242 3872 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\Windows\system32\drivers\partmgr.sys
                  2011/04/01 23:08:14.0295 3872 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys
                  2011/04/01 23:08:14.0324 3872 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys
                  2011/04/01 23:08:14.0374 3872 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
                  2011/04/01 23:08:14.0414 3872 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
                  2011/04/01 23:08:14.0464 3872 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
                  2011/04/01 23:08:14.0634 3872 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys
                  2011/04/01 23:08:14.0674 3872 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
                  2011/04/01 23:08:14.0794 3872 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys
                  2011/04/01 23:08:14.0844 3872 PxHlpa64 (fbf4db6d53585437e41a113300002a2b) C:\Windows\system32\Drivers\PxHlpa64.sys
                  2011/04/01 23:08:14.0934 3872 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
                  2011/04/01 23:08:15.0014 3872 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
                  2011/04/01 23:08:15.0054 3872 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
                  2011/04/01 23:08:15.0094 3872 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
                  2011/04/01 23:08:15.0134 3872 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
                  2011/04/01 23:08:15.0184 3872 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys
                  2011/04/01 23:08:15.0224 3872 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
                  2011/04/01 23:08:15.0249 3872 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
                  2011/04/01 23:08:15.0280 3872 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys
                  2011/04/01 23:08:15.0312 3872 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
                  2011/04/01 23:08:15.0343 3872 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
                  2011/04/01 23:08:15.0390 3872 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
                  2011/04/01 23:08:15.0421 3872 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
                  2011/04/01 23:08:15.0468 3872 RDPWD (8a3e6bea1c53ea6177fe2b6eba2c80d7) C:\Windows\system32\drivers\RDPWD.sys
                  2011/04/01 23:08:15.0499 3872 rdyboost (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys
                  2011/04/01 23:08:15.0592 3872 RFCOMM (3dd798846e2c28102b922c56e71b7932) C:\Windows\system32\DRIVERS\rfcomm.sys
                  2011/04/01 23:08:15.0670 3872 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
                  2011/04/01 23:08:15.0717 3872 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys
                  2011/04/01 23:08:15.0764 3872 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys
                  2011/04/01 23:08:15.0826 3872 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
                  2011/04/01 23:08:15.0873 3872 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
                  2011/04/01 23:08:15.0936 3872 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
                  2011/04/01 23:08:15.0951 3872 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
                  2011/04/01 23:08:16.0014 3872 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys
                  2011/04/01 23:08:16.0045 3872 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys
                  2011/04/01 23:08:16.0107 3872 sffp_sd (5588b8c6193eb1522490c122eb94dffa) C:\Windows\system32\DRIVERS\sffp_sd.sys
                  2011/04/01 23:08:16.0138 3872 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
                  2011/04/01 23:08:16.0185 3872 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
                  2011/04/01 23:08:16.0232 3872 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
                  2011/04/01 23:08:16.0263 3872 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
                  2011/04/01 23:08:16.0310 3872 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
                  2011/04/01 23:08:16.0404 3872 srv (de6f5658da951c4bc8e498570b5b0d5f) C:\Windows\system32\DRIVERS\srv.sys
                  2011/04/01 23:08:16.0497 3872 srv2 (4d33d59c0b930c523d29f9bd40cda9d2) C:\Windows\system32\DRIVERS\srv2.sys
                  2011/04/01 23:08:16.0528 3872 srvnet (5a663fd67049267bc5c3f3279e631ffb) C:\Windows\system32\DRIVERS\srvnet.sys
                  2011/04/01 23:08:16.0731 3872 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
                  2011/04/01 23:08:16.0778 3872 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys
                  2011/04/01 23:08:16.0840 3872 SynTP (bcf305959b53b200ceb2ad25ad22f8a7) C:\Windows\system32\DRIVERS\SynTP.sys
                  2011/04/01 23:08:16.0981 3872 Tcpip (90a2d722cf64d911879d6c4a4f802a4d) C:\Windows\system32\drivers\tcpip.sys
                  2011/04/01 23:08:17.0106 3872 TCPIP6 (90a2d722cf64d911879d6c4a4f802a4d) C:\Windows\system32\DRIVERS\tcpip.sys
                  2011/04/01 23:08:17.0168 3872 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys
                  2011/04/01 23:08:17.0215 3872 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
                  2011/04/01 23:08:17.0246 3872 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
                  2011/04/01 23:08:17.0293 3872 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys
                  2011/04/01 23:08:17.0308 3872 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys
                  2011/04/01 23:08:17.0386 3872 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys
                  2011/04/01 23:08:17.0433 3872 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys
                  2011/04/01 23:08:17.0464 3872 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
                  2011/04/01 23:08:17.0511 3872 UBHelper (2e22c1fd397a5a9ffef55e9d1fc96c00) C:\Windows\system32\drivers\UBHelper.sys
                  2011/04/01 23:08:17.0542 3872 udfs (d47baead86c65d4f4069d7ce0a4edceb) C:\Windows\system32\DRIVERS\udfs.sys
                  2011/04/01 23:08:17.0620 3872 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys
                  2011/04/01 23:08:17.0667 3872 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys
                  2011/04/01 23:08:17.0698 3872 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
                  2011/04/01 23:08:17.0761 3872 USBAAPL64 (9e58997a211c8c9ac9e6cffa53614a73) C:\Windows\system32\Drivers\usbaapl64.sys
                  2011/04/01 23:08:17.0823 3872 usbbus (5fcc71487888589a9244af54cfefab29) C:\Windows\system32\DRIVERS\lgx64bus.sys
                  2011/04/01 23:08:17.0870 3872 usbccgp (b26afb54a534d634523c4fb66765b026) C:\Windows\system32\DRIVERS\usbccgp.sys
                  2011/04/01 23:08:17.0917 3872 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys
                  2011/04/01 23:08:17.0979 3872 UsbDiag (3fb6e423f7567c92c32ea786f5fd0c69) C:\Windows\system32\DRIVERS\lgx64diag.sys
                  2011/04/01 23:08:18.0026 3872 usbehci (2ea4aff7be7eb4632e3aa8595b0803b5) C:\Windows\system32\DRIVERS\usbehci.sys
                  2011/04/01 23:08:18.0120 3872 usbhub (4c9042b8df86c1e8e6240c218b99b39b) C:\Windows\system32\DRIVERS\usbhub.sys
                  2011/04/01 23:08:18.0182 3872 USBModem (78d551f5b93488b4666f5fc8dd4815f3) C:\Windows\system32\DRIVERS\lgx64modem.sys
                  2011/04/01 23:08:18.0229 3872 usbohci (58e546bbaf87664fc57e0f6081e4f609) C:\Windows\system32\DRIVERS\usbohci.sys
                  2011/04/01 23:08:18.0307 3872 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
                  2011/04/01 23:08:18.0385 3872 usbscan (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys
                  2011/04/01 23:08:18.0416 3872 USBSTOR (080d3820da6c046be82fc8b45a893e83) C:\Windows\system32\DRIVERS\USBSTOR.SYS
                  2011/04/01 23:08:18.0666 3872 usbuhci (81fb2216d3a60d1284455d511797db3d) C:\Windows\system32\DRIVERS\usbuhci.sys
                  2011/04/01 23:08:18.0744 3872 usbvideo (7cb8c573c6e4a2714402cc0a36eab4fe) C:\Windows\System32\Drivers\usbvideo.sys
                  2011/04/01 23:08:18.0837 3872 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys
                  2011/04/01 23:08:18.0884 3872 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
                  2011/04/01 23:08:18.0931 3872 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
                  2011/04/01 23:08:18.0978 3872 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys
                  2011/04/01 23:08:19.0009 3872 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys
                  2011/04/01 23:08:19.0040 3872 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys
                  2011/04/01 23:08:19.0087 3872 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys
                  2011/04/01 23:08:19.0118 3872 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys
                  2011/04/01 23:08:19.0180 3872 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
                  2011/04/01 23:08:19.0227 3872 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\System32\drivers\vwifibus.sys
                  2011/04/01 23:08:19.0274 3872 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
                  2011/04/01 23:08:19.0321 3872 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
                  2011/04/01 23:08:19.0368 3872 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
                  2011/04/01 23:08:19.0524 3872 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
                  2011/04/01 23:08:19.0570 3872 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
                  2011/04/01 23:08:19.0664 3872 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
                  2011/04/01 23:08:19.0695 3872 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
                  2011/04/01 23:08:19.0804 3872 WinUsb (817eaff5d38674edd7713b9dfb8e9791) C:\Windows\system32\DRIVERS\WinUsb.sys
                  2011/04/01 23:08:19.0945 3872 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys
                  2011/04/01 23:08:20.0023 3872 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
                  2011/04/01 23:08:20.0101 3872 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys
                  2011/04/01 23:08:20.0132 3872 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys
                  2011/04/01 23:08:20.0226 3872 ================================================================================
                  2011/04/01 23:08:20.0226 3872 Scan finished
                  2011/04/01 23:08:20.0226 3872 ================================================================================
                  1. Contributeur sécurité
                    Est-ce que tu as toujours le fond d'écran noir ?

                    On va faire un diagnostic de ton PC pour voir s'il n'y a pas d'aqutres infections

                    Télécharge ZHPDiag (de Nicolas Coolman) sur ton bureau
                    https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

                    Une fois le téléchargement achevé, double clique sur ZHPDiag.exe et suis les instructions.

                    /!\Utilisateurs de Vista et Windows 7 : Clique droit sur le logo de ZHPDiag.exe, « exécuter en tant qu'Administrateur »

                    N'oublie pas de cocher la case qui permet de mettre un raccourci sur le Bureau.
                    - Double clique sur le raccourci ZHPDiag sur ton Bureau pour le lancer.
                    (/!\L'outil a créé 2 icônes ZHPDiag et ZHPFix)
                    - Clique sur la loupe pour lancer l'analyse.
                    - Laisse l'outil travailler, il peut être assez long.
                    - Ferme ZHPDiag en fin d'analyse.
                    - Pour transmettre le rapport clique sur ce lien : http://www.cijoint.fr/
                    - Clique sur Parcourir et cherche le répertoire où est installé ZHPDiag (en général C:\Program Files\ZHPDiag).
                    - Sélectionne le fichier ZHPDiag.txt.
                    - Clique sur "Cliquez ici pour déposer le fichier".
                    - Un lien de cette forme : http://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt est ajouté dans la page.
                    - Copie ce lien dans ta réponse.

                    Smart
                    1. Oui toujours le fond d'ecran noir , je n'ai pas le fichier ZHPDiag.txt

                      Dans Program Files\ZHPDiag j'ai ZHPscan c'est peut etre sa le rapport du scan non ?
                      1. Contributeur sécurité
                        Pour l'écran noir tu vas faire ceci:

                        Supprimes rogueKiller. rtélécharge le ( nouvelle version) lance le et choisis l'option 2 et poste le rapport

                        Smart
                        1. Voila

                          RogueKiller V4.3.6 par Tigzy
                          contact sur https://www.luanagames.com/index.fr.html
                          mail: tigzyRK<at>gmail<dot>com
                          Remontees: https://www.luanagames.com/index.fr.html

                          Systeme d'exploitation: Windows 7 (6.1.7600 ) 64 bits version
                          Demarrage : Mode normal
                          Utilisateur: Charly [Droits d'admin]
                          Mode: Suppression -- Date : 02/04/2011 14:13:31

                          Processus malicieux: 0

                          Entrees de registre: 1
                          [WallPP] HKCU\[...]\Desktop : Wallpaper () -> REPLACED (C:\Users\Charly\AppData\Roaming\Mozilla\Firefox\Fond d'écran.bmp)

                          Fichier HOSTS:

                          Termine : << RKreport[3].txt >>
                          RKreport[1].txt ; RKreport[2].txt ; RKreport[3].txt
                          1. Voila

                            http://www.cijoint.fr/cjlink.php?file=cj201104/cijep0djFT.txt
                            1. Contributeur sécurité
                              Tu as des barres d'outils infectées et autres adware

                              - Rends-toi à cette adresse afin de télécharger AD-Remover (créé par C_XX) : http://www.teamxscript.org/adremoverTelechargement.html
                              - Clique sur TÉLÉCHARGER et enregistre-le sur ton bureau.
                              - Déconnecte toi et ferme toutes les applications en cours
                              - Double clique sur le fichier d'installation de AD-Remover, le programme s'installera automatiquement.
                              - Au menu principal choisi l'option "Nettoyage" et tape sur [entrée] .
                              - Laisse travailler l'outil et ne touche à rien ...
                              - Poste le rapport qui apparait à la fin. (Le rapport est sauvegardé aussi sous C:\Ad-report.log)
                              (CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

                              Smart
                              1. ======= RAPPORT D'AD-REMOVER 2.0.0.2,F | UNIQUEMENT XP/VISTA/7 =======

                                Mis à jour par TeamXscript le 01/03/11
                                Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
                                Site web: http://www.teamxscript.org

                                C:\Program Files (x86)\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 14:41:34 le 02/04/2011, Mode normal

                                Microsoft Windows 7 Édition Familiale Premium (X64)
                                Charly@CHARLY-PC (Packard Bell EN Butterfly m)

                                ============== ACTION(S) ==============

                                Fichier supprimé: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Navigateur OfferBox.lnk
                                Dossier supprimé: C:\Users\Charly\AppData\Roaming\OfferBox
                                Dossier supprimé: C:\Program Files (x86)\OfferBox

                                (!) -- Fichiers temporaires supprimés.

                                Clé supprimée: HKLM\Software\Classes\CLSID\{A7E8C343-7860-4A95-9AA8-AAF30D0F6D1E}
                                Clé supprimée: HKLM\Software\Classes\CLSID\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}
                                Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}
                                Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}
                                Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}
                                Clé supprimée: HKLM\Software\Classes\Interface\{6612AFDD-34AD-4B89-A236-7E6D07C3FDCD}
                                Clé supprimée: HKLM\Software\Classes\TypeLib\{ED85AEBE-F834-4088-B5D3-97EB2478A6CD}
                                Clé supprimée: HKLM\Software\Classes\OfferBox.OfferBoxServer
                                Clé supprimée: HKLM\Software\Classes\OfferBox.OfferBoxServer.1
                                Clé supprimée: HKLM\Software\OfferBox
                                Clé supprimée: HKCU\Software\OfferBox
                                Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37F4A335-D085-423e-A425-0370799166FB}
                                Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\OfferBox
                                Clé supprimée: HKLM\Software\Google\Chrome\Extensions\bjeikeheijdjdfjbmknpefojickbkmom

                                Valeur supprimée: HKLM\Software\Mozilla\Firefox\Extensions|offerboxffx@offerbox.com

                                ============== SCAN ADDITIONNEL ==============

                                **** Mozilla Firefox Version [3.6.3 (fr)] ****

                                -- C:\Users\Charly\AppData\Roaming\Mozilla\FireFox\Profiles\1ybvgj7d.default --
                                Prefs.js - browser.download.lastDir, C:\\Users\\Charly\\Pictures
                                Prefs.js - browser.startup.homepage_override.mstone, rv:1.9.2.3

                                ========================================

                                **** Internet Explorer Version [8.0.7600.16385] ****

                                HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
                                HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                                HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
                                HKCU_Main|Start Page - hxxp://fr.msn.com/
                                HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
                                HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                                HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
                                HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                                HKLM_Main|Start Page - hxxp://fr.msn.com/
                                HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - C:\Windows\SysWOW64\wpcer.exe (x)
                                HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - C:\Windows\SysWOW64\winfxdocobj.exe (x)
                                HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files (x86)\Internet Explorer\iedw.exe (x)
                                HKLM_ElevationPolicy\{A6E2003F-95C5-4591-BA9A-0093080FDB5C} - C:\Program Files (x86)\Common Files\Oberon Media\OberonBroker\1.0.0.63\OberonBroker.exe (?)
                                HKLM_ElevationPolicy\{B43A0C1E-B63F-4691-B68F-CD807A45DA01} - C:\Windows\system32\TSWbPrxy.exe (x)
                                BHO\{0EEDB912-C5FA-486F-8334-57288578C627} - "Shareaza Web Download Hook" (C:\Program Files (x86)\Shareaza\RazaWebHook32.dll)

                                ========================================

                                C:\Program Files (x86)\Ad-Remover\Quarantine: 17 Fichier(s)
                                C:\Program Files (x86)\Ad-Remover\Backup: 14 Fichier(s)

                                C:\Ad-Report-CLEAN[1].txt - 02/04/2011 14:41:49 (3936 Octet(s))

                                Fin à: 14:43:13, 02/04/2011

                                ============== E.O.F ==============
                                1. Contributeur sécurité
                                  Relance AD-Remover et choisis "désinstaller"

                                  Refais un scan ZHPDiag et poste le rapport vi cijoint.
                                  Ensuite on va passer à la phase finale. il nous reste à faire:
                                  - les mises à jour prioritaires
                                  - l'optimisation du PC
                                  - la désinstallation des outils de désinfection
                                  - les conseils de prévention quand on surfe sur Internet

                                  Smart
                                  1. D'accord :) .

                                    Rapport de ZHPDiag v1.27.1849 par Nicolas Coolman, Update du 31/03/2011
                                    Run by Charly at 03/04/2011 02:49:23
                                    Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html

                                    ---\\ Web Browser
                                    MSIE: Internet Explorer v8.0.7600.16385
                                    MFIE: Mozilla Firefox v3.6.3 (fr) (Defaut)

                                    ---\\ System Information
                                    Windows 7 Home Premium Edition, 64-bit (Build 7600)
                                    Processor: Intel64 Family 6 Model 23 Stepping 10, GenuineIntel
                                    Operating System: 64 Bits
                                    Boot mode: Normal (Normal boot)
                                    Total RAM: 3000 MB (62% free)
                                    System Restore: Activé (Enable)
                                    System drive C: has 176 GB (61%) free of 286 GB

                                    ---\\ Logged in mode
                                    Computer Name: CHARLY-PC
                                    User Name: Charly
                                    All Users Names: Charly, Administrateur,
                                    Unselected Option: O45,O61,O62,O65,O66,O82
                                    Logged in as Administrator

                                    ---\\ Environnement Variables
                                    %AppData%=C:\Users\Charly\AppData\Roaming
                                    %LocalAppData%=C:\Users\Charly\AppData\Local
                                    %StartMenu%=C:\Users\Charly\AppData\Roaming\Microsoft\Windows\Start Menu

                                    ---\\ DOS/Devices
                                    C:\ Hard drive, Flash drive, Thumb drive (Free 176 Go of 286 Go)
                                    D:\ CD-ROM drive (Free 0 Go of 6 Go)

                                    ---\\ Security Center & Tools Informations
                                    [HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
                                    [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
                                    [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
                                    [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
                                    [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
                                    [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
                                    [HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
                                    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
                                    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
                                    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
                                    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
                                    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
                                    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
                                    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
                                    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
                                    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
                                    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
                                    [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK
                                    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
                                    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK

                                    ---\\ Recherche particulière de fichiers génériques
                                    [MD5.9AAAEC8DAC27AA17B053E6352AD233AE] - (.Microsoft Corporation - Explorateur Windows.) (.31/10/2009 07:34:59.) -- C:\Windows\Explorer.exe [2870272]
                                    [MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 02:14:45.) -- C:\Windows\System32\Wininit.exe [96256]
                                    [MD5.78B9ADA2BC8946AF7B17678E0D07A773] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.21/12/2010 06:38:22.) -- C:\Windows\System32\wininet.dll [981504]

                                    ---\\ Processus lancés
                                    [MD5.5D61BE7DB55B026A5D61A3EED09D0EAD] - (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408]
                                    [MD5.483FBD92DC106092D30CF2866F3E68E6] - (.Sony Ericsson Mobile Communications AB - Sony Ericsson PC Companion.) -- C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe [774144]
                                    [MD5.5AEA1DB5490429EEB0989A0CE2A52D5E] - (.NewTech Infosystems, Inc. - Packard Bell MyBackup.) -- C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe [262912]
                                    [MD5.30933E5416B9B476CDC1563DCED8F4AF] - (.Dritek System Inc. - Launch Manager Keyboard Application.) -- C:\Program Files (x86)\Launch Manager\LManager.exe [1191432]
                                    [MD5.56F7619AEBB0A127003019D2D589143D] - (.Chicony - traybar.) -- C:\Program Files (x86)\Video Web Camera\traybar.exe [630784]
                                    [MD5.28FD28A29C637C9AFEFE0A26E27C6DFE] - (.CyberLink Corp. - PowerDVD RC Service.) -- C:\Program Files (x86)\CyberLink\PowerDVD8\PDVD8Serv.exe [91432]
                                    [MD5.8DC7685764B22DB97891012026FA7ED1] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe [141608]
                                    [MD5.3A0647BDED81DBE0BCBB51D70B22C9E0] - (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre6\bin\jusched.exe [149280]
                                    [MD5.49958506B773E40D31832E3EEDA522E7] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [910296]
                                    [MD5.42A8D7674CC494E73930C69D4987C49F] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [642048]

                                    ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
                                    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                                    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.packardbell.com
                                    R0 - HKUS\S-1-5-21-2362854721-1509393665-3421742218-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                                    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
                                    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
                                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
                                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.packardbell.com
                                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
                                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
                                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
                                    R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (8.00.7600.16385 (win7_rtm.090713-1255)) -- C:\Windows\System32\ieframe.dll
                                    R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1

                                    ---\\ Internet Explorer, Proxy Management (R5)
                                    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
                                    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
                                    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
                                    R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
                                    R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

                                    ---\\ ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
                                    F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
                                    F2 - REG:system.ini: VMApplet=C:\WINDOWS\system32\SystemPropertiesPerformance.exe

                                    ---\\ Browser Helper Objects de navigateur (O2)
                                    O2 - BHO: Shareaza Web Download Hook [64Bits] - {0EEDB912-C5FA-486F-8334-57288578C627} . (.Shareaza Development Team - Shareaza Web Download Hook.) -- C:\Program Files (x86)\Shareaza\RazaWebHook64.dll
                                    O2 - BHO: Windows Live ID Sign-in Helper [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                                    O2 - BHO: Google Toolbar Helper [64Bits] - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
                                    O2 - BHO: Google Toolbar Notifier BHO [64Bits] - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg64.dll

                                    ---\\ Internet Explorer Toolbars (O3)
                                    O3 - Toolbar: Google Toolbar [64Bits] - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll

                                    ---\\ ---\\ Applications démarrées par registre & par dossier (O4)
                                    O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                                    O4 - HKLM\..\Run: [ODDPwr] . (.Acer Incorporated - ODDPWR.) -- C:\Program Files\Packard Bell\Optical Drive Power Management\ODDPwr.exe
                                    O4 - HKLM\..\Run: [Acer ePower Management] . (.Acer Incorporated - ePowerTrayLauncher.) -- C:\Program Files\Packard Bell\Packard Bell PowerSave Solution\ePowerTrayLauncher.exe
                                    O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe (.not file.)
                                    O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe (.not file.)
                                    O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe (.not file.)
                                    O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
                                    O4 - HKLM\..\Run: [Skytel] . (.Realtek Semiconductor Corp. - Realtek Voice Manager.) -- C:\Program Files\Realtek\Audio\HDA\Skytel.exe
                                    O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                                    O4 - HKCU\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
                                    O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
                                    O4 - HKCU\..\Run: [Sony Ericsson PC Companion] . (.Sony Ericsson Mobile Communications AB - Sony Ericsson PC Companion.) -- C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe
                                    O4 - HKLM\..\Wow6432Node\Run: [BackupManagerTray] . (.NewTech Infosystems, Inc. - Packard Bell MyBackup.) -- C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe
                                    O4 - HKLM\..\Wow6432Node\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe
                                    O4 - HKLM\..\Wow6432Node\Run: [LManager] . (.Dritek System Inc. - Launch Manager Keyboard Application.) -- C:\Program Files (x86)\Launch Manager\LManager.exe
                                    O4 - HKLM\..\Wow6432Node\Run: [Camera Assistant Software] . (.Chicony - traybar.) -- C:\Program Files (x86)\Video Web Camera\traybar.exe
                                    O4 - HKLM\..\Wow6432Node\Run: [RemoteControl8] . (.CyberLink Corp. - PowerDVD RC Service.) -- C:\Program Files (x86)\CyberLink\PowerDVD8\PDVD8Serv.exe
                                    O4 - HKLM\..\Wow6432Node\Run: [PDVD8LanguageShortcut] . (.CyberLink Corp. - PowerDVD Language Application.) -- C:\Program Files (x86)\CyberLink\PowerDVD8\Language\Language.exe
                                    O4 - HKLM\..\Wow6432Node\Run: [avast!] . (.ALWIL Software - avast! service GUI component.) -- C:\Program Files\Alwil Software\Avast4\ashDisp.exe
                                    O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe
                                    O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe
                                    O4 - HKLM\..\Wow6432Node\Run: [AppleSyncNotifier] . (.Apple Inc. - AppleSyncNotifier.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
                                    O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre6\bin\jusched.exe
                                    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
                                    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
                                    O4 - HKUS\S-1-5-21-2362854721-1509393665-3421742218-1000\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                                    O4 - HKUS\S-1-5-21-2362854721-1509393665-3421742218-1000\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
                                    O4 - HKUS\S-1-5-21-2362854721-1509393665-3421742218-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
                                    O4 - HKUS\S-1-5-21-2362854721-1509393665-3421742218-1000\..\Run: [Sony Ericsson PC Companion] . (.Sony Ericsson Mobile Communications AB - Sony Ericsson PC Companion.) -- C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe
                                    O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (.not file.)
                                    O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (.not file.)

                                    ---\\ ---\\ Autres liens utilisateurs (O4)
                                    O4 - Global Startup: C:\Users\Charly\Desktop\Windows Live Messenger .lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

                                    ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
                                    O8 - Extra context menu item: Download with &Shareaza . (.Shareaza Development Team - Shareaza Web Download Hook.) -- C:\Program Files (x86)\Shareaza\RazaWebHook32.dll
                                    O8 - Extra context menu item: E&xport to Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~2\MICROS~1\Office12\EXCEL.exe
                                    O8 - Extra context menu item: Google Sidewiki... . (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll

                                    ---\\ Winsock hijacker (Layered Service Provider) (O10)
                                    O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
                                    O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
                                    O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
                                    O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
                                    O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
                                    O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
                                    O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll
                                    O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL
                                    O10 - WLSP:\000000000009\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL

                                    ---\\ Modification Domaine/Adresses DNS (O17)
                                    O17 - HKLM\System\CCS\Services\Tcpip\..\{C300B48C-559A-40B8-B9F3-0130DDD448BB}: DhcpNameServer = 192.168.1.1
                                    O17 - HKLM\System\CS1\Services\Tcpip\..\{C300B48C-559A-40B8-B9F3-0130DDD448BB}: DhcpNameServer = 192.168.1.1
                                    O17 - HKLM\System\CS2\Services\Tcpip\..\{C300B48C-559A-40B8-B9F3-0130DDD448BB}: DhcpNameServer = 192.168.1.1
                                    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

                                    ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
                                    O20 - Winlogon Notify: igfxcui . (.Pas de propriétaire - Pas de description.) -- igfxdev.dll

                                    ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
                                    O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.

                                    ---\\ Liste des services NT non Microsoft et non désactivés (O23)
                                    O23 - Service: (AdobeActiveFileMonitor7.0) . (.Adobe Systems Incorporated - Adobe Photoshop Elements 7.0 (component).) - c:\Program Files (x86)\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe
                                    O23 - Service: (Apple Mobile Device) . (.Apple Inc. - Apple Mobile Device Service.) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                                    O23 - Service: (aswUpdSv) . (.ALWIL Software - avast! Antivirus updating service.) - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                                    O23 - Service: (avast! Antivirus) . (.ALWIL Software - avast! antivirus service.) - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                                    O23 - Service: (avast! Mail Scanner) . (.ALWIL Software - avast! e-Mail Scanner Service.) - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                                    O23 - Service: (avast! Web Scanner) . (.ALWIL Software - avast! Web Scanner.) - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                                    O23 - Service: (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
                                    O23 - Service: (DsiWMIService) . (.Dritek System Inc. - Dritek WMI Service.) - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
                                    O23 - Service: (ePowerSvc) . (.Acer Incorporated - ePowerSvc.) - C:\Program Files\Packard Bell\Packard Bell PowerSave Solution\ePowerSvc.exe
                                    O23 - Service: (FLEXnet Licensing Service) . (.Macrovision Europe Ltd. - Activation Licensing Service.) - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
                                    O23 - Service: (Greg_Service) . (.Acer Incorporated - Global Registration Service.) - C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe
                                    O23 - Service: (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
                                    O23 - Service: (gusvc) . (.Google - gusvc.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
                                    O23 - Service: (iPod Service) . (.Apple Inc. - iPodService Module (64-bit).) - C:\Program Files\iPod\bin\iPodService.exe
                                    O23 - Service: Nero BackItUp Scheduler 4.0 (Nero BackItUp Scheduler 4.0) . (.Nero AG - Nero BackItUp.) - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
                                    O23 - Service: (NTI IScheduleSvc) . (.NewTech Infosystems, Inc. - Backup Manager Module.) - C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe
                                    O23 - Service: (ODDPwrSvc) . (.Acer Incorporated - ODDPwr service.) - C:\Program Files\Packard Bell\Optical Drive Power Management\ODDPWRSvc.exe
                                    O23 - Service: (Updater Service) . (.Acer - Acer Update Service.) - C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
                                    O23 - Service: (wlidsvc) . (.Microsoft Corp. - Microsoft® Windows Live ID Service.) - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.exe

                                    ---\\ Enumération Active Desktop & MHTML Editor (O24)
                                    O24 - Default MHTML Editor: Last - .(...) - (.not file.)

                                    ---\\ Tâches planifiées en automatique (O39)
                                    O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
                                    O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
                                    [MD5.00000000000000000000000000000000] [APT] [e3524434] (.Pas de propriétaire.) -- C:\Users\Charly\AppData\Local\Temp\setup1889268844.exe (.not file.)
                                    [MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
                                    [MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
                                    [MD5.7B43567B4C32AD7ADED537CD3B1342B9] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe
                                    [MD5.7F59E4F51DA9C9C6B29B881D8DD92400] [APT] [Burn Notification] (.Acer.) -- C:\Program Files\Packard Bell\Packard Bell Recovery Management\NotificationCenter\Notification.exe

                                    ---\\ Pilotes lancés au démarrage (O41)
                                    O41 - Driver: C:\Windows\system32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
                                    O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\system32\DRIVERS\blbdrive.sys
                                    O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
                                    O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
                                    O41 - Driver: C:\Windows\system32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
                                    O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\DRIVERS\mssmbios.sys
                                    O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
                                    O41 - Driver: C:\Windows\system32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
                                    O41 - Driver: C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
                                    O41 - Driver: C:\Windows\system32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
                                    O41 - Driver: C:\Windows\system32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
                                    O41 - Driver: C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
                                    O41 - Driver: C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
                                    O41 - Driver: C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
                                    O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
                                    O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\DRIVERS\termdd.sys
                                    O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
                                    O41 - Driver: C:\Windows\system32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
                                    O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys

                                    ---\\ Logiciels installés (O42)
                                    O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0016-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}
                                    O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0018-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}
                                    O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001B-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}
                                    O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
                                    O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}
                                    O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}
                                    O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{E64BA721-2310-4B55-BE5A-2925F9706192}
                                    O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-002A-0409-1000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}
                                    O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}
                                    O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-00A1-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}
                                    O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0115-0409-0000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}
                                    O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0116-0409-1000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}
                                    O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
                                    O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {287ECFA4-719A-2143-A09B-D6A12DE54E40}
                                    O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM][64Bits] -- Adobe AIR
                                    O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM][64Bits] -- {A2BCA9F1-566C-4805-97D1-7FDC93386723}
                                    O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX
                                    O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems, Inc..) [HKLM][64Bits] -- {0DFB3DE8-65B9-44FF-AA0A-3BECC5A2BFD1}
                                    O42 - Logiciel: Adobe Photoshop Elements 7.0 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Photoshop Elements 7
                                    O42 - Logiciel: Adobe Photoshop Elements 7.0 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {5511C07D-A83C-45AD-92B6-42DF99729A3C}
                                    O42 - Logiciel: Adobe Photoshop Elements 7.0 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {CB6075D9-F912-40AE-BEA6-E590DA24F16B}
                                    O42 - Logiciel: Adobe Reader 9.1 MUI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-FFFF-7B44-A91000000001}
                                    O42 - Logiciel: Advertising Center - (.Nero AG.) [HKLM][64Bits] -- {b2ec4a38-b545-4a00-8214-13fe0e915e6d}
                                    O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {A93944F2-D2D4-4750-BFE7-9A288FEAF2CF}
                                    O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {9EFC40E3-5F31-4F75-8445-286273F74D8E}
                                    O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {6956856F-B6B3-4BE0-BA0B-8F495BE32033}
                                    O42 - Logiciel: Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver - (.Atheros Communications Inc..) [HKLM][64Bits] -- {3108C217-BE83-42E4-AE9E-A56A2A92E549}
                                    O42 - Logiciel: Backup Manager Basic - (.NewTech Infosystems.) [HKLM][64Bits] -- {72B776E5-4530-4C4B-9453-751DF87D9D93}
                                    O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {DAE239CE-EB9D-4EB3-B0D4-528D6BAA48FD}
                                    O42 - Logiciel: Command & Conquer Generals - (.Electronic Arts.) [HKLM][64Bits] -- InstallShield_{06F80017-8F98-4C94-B868-52358569FC32}
                                    O42 - Logiciel: CyberLink PowerDVD 8 - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}
                                    O42 - Logiciel: CyberLink PowerDVD 8 - (.CyberLink Corp..) [HKLM][64Bits] -- {2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}
                                    O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
                                    O42 - Logiciel: Dairy Dash - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115053100}
                                    O42 - Logiciel: Dream Day First Home - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113832110}
                                    O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM][64Bits] -- {488F0347-C4A7-4374-91A7-30818BEDA710}
                                    O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
                                    O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
                                    O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
                                    O42 - Logiciel: Identity Card - (.Packard Bell.) [HKLM][64Bits] -- Identity Card
                                    O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Intel Corporation.) [HKLM] -- HDMI
                                    O42 - Logiciel: Java(TM) 6 Update 17 - (.Sun Microsystems, Inc..) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83216016FF}
                                    O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
                                    O42 - Logiciel: LG PC Suite III - (.LG Electronics.) [HKLM][64Bits] -- {C0E18DC4-C74A-4889-AE3A-933471023787}
                                    O42 - Logiciel: LG USB Modem Drivers - (.LG Electronics.) [HKLM][64Bits] -- {E1640DA5-89B4-4F52-B15D-5DA3D14F29D4}
                                    O42 - Logiciel: Launch Manager - (.Packard Bell.) [HKLM][64Bits] -- LManager
                                    O42 - Logiciel: LimeWire 5.4.6 - (.Lime Wire, LLC.) [HKLM][64Bits] -- LimeWire
                                    O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
                                    O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9}
                                    O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM][64Bits] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
                                    O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
                                    O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes' Anti-Malware_is1
                                    O42 - Logiciel: Merriam Websters Spell Jam - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112662477}
                                    O42 - Logiciel: Metaboli - (.Packard Bell.) [HKLM][64Bits] -- Metaboli
                                    O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile
                                    O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}
                                    O42 - Logiciel: Microsoft .NET Framework 4 Client Profile FRA Language Pack - (.Microsoft Corporation.) [HKLM] -- {4B5F58F7-C7D1-3CE3-9B37-B657F0852643}
                                    O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0015-040C-0000-0000000FF1CE}_OMUI.fr-fr_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
                                    O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0016-040C-0000-0000000FF1CE}_OMUI.fr-fr_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
                                    O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0018-040C-0000-0000000FF1CE}_OMUI.fr-fr_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
                                    O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0019-040C-0000-0000000FF1CE}_OMUI.fr-fr_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
                                    O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001A-040C-0000-0000000FF1CE}_OMUI.fr-fr_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
                                    O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001B-040C-0000-0000000FF1CE}_OMUI.fr-fr_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
                                    O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-002A-040C-1000-0000000FF1CE}_OMUI.fr-fr_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
                                    O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0044-040C-0000-0000000FF1CE}_OMUI.fr-fr_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
                                    O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-006E-040C-0000-0000000FF1CE}_OMUI.fr-fr_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
                                    O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-00A1-040C-0000-0000000FF1CE}_OMUI.fr-fr_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
                                    O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-00BA-040C-0000-0000000FF1CE}_OMUI.fr-fr_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
                                    O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0100-040C-0000-0000000FF1CE}_OMUI.fr-fr_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
                                    O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0101-040C-0000-0000000FF1CE}_OMUI.fr-fr_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
                                    O42 - Logiciel: Microsoft Office Access MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0015-040C-0000-0000000FF1CE}
                                    O42 - Logiciel: Microsoft Office Excel MUI (English) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0016-0409-0000-0000000FF1CE}
                                    O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0016-040C-0000-0000000FF1CE}
                                    O42 - Logiciel: Microsoft Office Groove MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-00BA-040C-0000-0000000FF1CE}
                                    O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- HOMESTUDENTR
                                    O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}
                                    O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0044-040C-0000-0000000FF1CE}
                                    O42 - Logiciel: Microsoft Office Language Pack 2007 - French/Français - (.Microsoft Corporation.) [HKLM][64Bits] -- OMUI.fr-fr
                                    O42 - Logiciel: Microsoft Office O MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0100-040C-0000-0000000FF1CE}
                                    O42 - Logiciel: Microsoft Office Office 64-bit Components 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002A-0000-1000-0000000FF1CE}
                                    O42 - Logiciel: Microsoft Office OneNote MUI (English) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-00A1-0409-0000-0000000FF1CE}
                                    O42 - Logiciel: Microsoft Office OneNote MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-00A1-040C-0000-0000000FF1CE}
                                    O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001A-040C-0000-0000000FF1CE}
                                    O42 - Logiciel: Microsoft Office PowerPoint MUI (English) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0018-0409-0000-0000000FF1CE}
                                    O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0018-040C-0000-0000000FF1CE}
                                    O42 - Logiciel: Microsoft Office PowerPoint Viewer 2007 (French) - (.Microsoft Corporation.) [HKLM][64Bits] -- {95120000-00AF-040C-0000-0000000FF1CE}
                                    O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-0401-0000-0000000FF1CE}
                                    O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-0413-0000-0000000FF1CE}
                                    O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-0409-0000-0000000FF1CE}
                                    O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-040C-0000-0000000FF1CE}
                                    O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-0407-0000-0000000FF1CE}
                                    O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-0C0A-0000-0000000FF1CE}
                                    O42 - Logiciel: Microsoft Office Proofing (English) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-002C-0409-0000-0000000FF1CE}
                                    O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-002C-040C-0000-0000000FF1CE}
                                    O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-0401-0000-0000000FF1CE}_OMUI.fr-fr_{14809F99-C601-4D4A-9391-F1E8FAA964C5}
                                    O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-0407-0000-0000000FF1CE}_OMUI.fr-fr_{A0516415-ED61-419A-981D-93596DA74165}
                                    O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-0413-0000-0000000FF1CE}_OMUI.fr-fr_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
                                    O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0019-040C-0000-0000000FF1CE}
                                    O42 - Logiciel: Microsoft Office SharePoint Designer 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0017-040C-0000-0000000FF1CE}_OMUI.fr-fr_{CCDA3DD6-E33D-4D75-B7C9-FF585580CE83}
                                    O42 - Logiciel: Microsoft Office SharePoint Designer MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0017-040C-0000-0000000FF1CE}
                                    O42 - Logiciel: Microsoft Office Shared 64-bit MUI (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002A-0409-1000-0000000FF1CE}
                                    O42 - Logiciel: Microsoft Office Shared 64-bit MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002A-040C-1000-0000000FF1CE}
                                    O42 - Logiciel: Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0116-0409-1000-0000000FF1CE}
                                    O42 - Logiciel: Microsoft Office Shared MUI (English) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-006E-0409-0000-0000000FF1CE}
                                    O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-006E-040C-0000-0000000FF1CE}
                                    O42 - Logiciel: Microsoft Office Shared Setup Metadata MUI (English) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0115-0409-0000-0000000FF1CE}
                                    O42 - Logiciel: Microsoft Office Suite Activation Assistant - (.Microsoft Corporation.) [HKLM][64Bits] -- {E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}
                                    O42 - Logiciel: Microsoft Office Word MUI (English) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001B-0409-0000-0000000FF1CE}
                                    O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001B-040C-0000-0000000FF1CE}
                                    O42 - Logiciel: Microsoft Office X MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0101-040C-0000-0000000FF1CE}
                                    O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM][64Bits] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
                                    O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
                                    O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {B6E3757B-5E77-3915-866A-CCFC4B8D194C}
                                    O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable (x64) - (.Microsoft Corporation.) [HKLM] -- {071c9b48-7c32-4621-a0ac-3f809523288f}
                                    O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM][64Bits] -- {7299052b-02a4-4627-81f2-1818da5d550d}
                                    O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM][64Bits] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c}
                                    O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM][64Bits] -- {0214A441-A4AB-43A8-8DEF-2F73C5364673}
                                    O42 - Logiciel: MobileMe Control Panel - (.Apple Inc..) [HKLM] -- {E78A769A-592F-4154-8277-07CC3BDCAAD8}
                                    O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0020-040C-0000-0000000FF1CE}
                                    O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack
                                    O42 - Logiciel: Mozilla Firefox (3.6.3) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox (3.6.3)
                                    O42 - Logiciel: Nero 9 Essentials - (.Nero AG.) [HKLM][64Bits] -- {cdd8dfe1-3b9d-4bfb-953e-dcb02e2e0ba6}
                                    O42 - Logiciel: Nero ControlCenter - (.Nero AG.) [HKLM][64Bits] -- {bd5ca0da-71ad-43da-b19e-6eee0c9adc9a}
                                    O42 - Logiciel: Nero ControlCenter - (.Nero AG.) [HKLM][64Bits] -- {f4041dce-3fe1-4e18-8a9e-9de65231ee36}
                                    O42 - Logiciel: Nero DiscSpeed - (.Nero AG.) [HKLM][64Bits] -- {869200db-287a-4dc0-b02b-2b6787fbcd4c}
                                    O42 - Logiciel: Nero DiscSpeed Help - (.Nero AG.) [HKLM][64Bits] -- {cc019e3f-59d2-4486-8d4b-878105b62a71}
                                    O42 - Logiciel: Nero DriveSpeed - (.Nero AG.) [HKLM][64Bits] -- {33cf58f5-48d8-4575-83d6-96f574e4d83a}
                                    O42 - Logiciel: Nero DriveSpeed Help - (.Nero AG.) [HKLM][64Bits] -- {e5c7d048-f9b4-4219-b323-8bdb01a2563d}
                                    O42 - Logiciel: Nero Express Help - (.Nero AG.) [HKLM][64Bits] -- {83202942-84b3-4c50-8622-b8c0aa2d2885}
                                    O42 - Logiciel: Nero InfoTool - (.Nero AG.) [HKLM][64Bits] -- {fbcdfd61-7dcf-4e71-9226-873ba0053139}
                                    O42 - Logiciel: Nero InfoTool Help - (.Nero AG.) [HKLM][64Bits] -- {20400dbd-e6db-45b8-9b6b-1dd7033818ec}
                                    O42 - Logiciel: Nero Installer - (.Nero AG.) [HKLM][64Bits] -- {e8a80433-302b-4ff1-815d-fcc8eac482ff}
                                    O42 - Logiciel: Nero Online Upgrade - (.Nero AG.) [HKLM][64Bits] -- {dba84796-8503-4ff0-af57-1747dd9a166d}
                                    O42 - Logiciel: Nero StartSmart - (.Nero AG.) [HKLM][64Bits] -- {7748ac8c-18e3-43bb-959b-088faea16fb2}
                                    O42 - Logiciel: Nero StartSmart Help - (.Nero AG.) [HKLM][64Bits] -- {2348b586-c9ae-46ce-936c-a68e9426e214}
                                    O42 - Logiciel: Nero StartSmart OEM - (.Nero AG.) [HKLM][64Bits] -- {4D43D635-6FDA-4fa5-AA9B-23CF73D058EA}
                                    O42 - Logiciel: NeroExpress - (.Nero AG.) [HKLM][64Bits] -- {595a3116-40bb-4e0f-a2e8-d7951da56270}
                                    O42 - Logiciel: Optical Drive Power Management - (.Acer Incorporated.) [HKLM][64Bits] -- {AE09C972-EEB2-4DA5-8090-0FCF54576854}
                                    O42 - Logiciel: Packard Bell GameZone Console - (.Oberon Media, Inc..) [HKLM][64Bits] -- {9242564e-02e9-4ea8-9d2d-351f6f728e1c}_is1
                                    O42 - Logiciel: Packard Bell InfoCentre - (.Packard Bell.) [HKLM][64Bits] -- Packard Bell InfoCentre
                                    O42 - Logiciel: Packard Bell MyBackup - (.NewTech Infosystems.) [HKLM][64Bits] -- InstallShield_{72B776E5-4530-4C4B-9453-751DF87D9D93}
                                    O42 - Logiciel: Packard Bell PowerSave Solution - (.Packard Bell.) [HKLM][64Bits] -- {3DB0448D-AD82-4923-B305-D001E521A964}
                                    O42 - Logiciel: Packard Bell Recovery Management - (.Packard Bell.) [HKLM][64Bits] -- {7F811A54-5A09-4579-90E1-C93498E230D9}
                                    O42 - Logiciel: Packard Bell Registration - (.Packard Bell.) [HKLM][64Bits] -- Packard Bell Registration
                                    O42 - Logiciel: Packard Bell ScreenSaver - (.Packard Bell Incorporated.) [HKLM][64Bits] -- Packard Bell Screensaver
                                    O42 - Logiciel: Packard Bell Updater - (.Packard Bell.) [HKLM][64Bits] -- {EE171732-BEB4-4576-887D-CB62727F01CA}
                                    O42 - Logiciel: PhotoFiltre - (.Pas de propriétaire.) [HKCU] -- PhotoFiltre
                                    O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM][64Bits] -- {1451DE6B-ABE1-4F62-BE9A-B363A17588A2}
                                    O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
                                    O42 - Logiciel: SAMSUNG CDMA Modem Driver Set - (.Pas de propriétaire.) [HKLM][64Bits] -- SAMSUNG CDMA Modem
                                    O42 - Logiciel: SAMSUNG Mobile Modem Driver Set - (.Pas de propriétaire.) [HKLM] -- SAMSUNG Mobile Modem
                                    O42 - Logiciel: SAMSUNG Mobile USB Modem 1.0 Software - (.Pas de propriétaire.) [HKLM] -- SAMSUNG Mobile USB Modem 1.0
                                    O42 - Logiciel: SAMSUNG Mobile USB Modem 1.0 Software - (.Pas de propriétaire.) [HKLM][64Bits] -- SAMSUNG Mobile USB Modem 1.0
                                    O42 - Logiciel: SAMSUNG Mobile USB Modem Software - (.Pas de propriétaire.) [HKLM] -- SAMSUNG Mobile USB Modem
                                    O42 - Logiciel: SAMSUNG Mobile USB Modem Software - (.Pas de propriétaire.) [HKLM][64Bits] -- SAMSUNG Mobile USB Modem
                                    O42 - Logiciel: Safari - (.Apple Inc..) [HKLM][64Bits] -- {EAFEF30E-3789-49C7-A6D9-77C12E005BAC}
                                    O42 - Logiciel: Samsung Mobile phone USB driver Drive Software - (.Pas de propriétaire.) [HKLM] -- Samsung Mobile phone USB driver Drive
                                    O42 - Logiciel: Samsung Mobile phone USB driver Software - (.Pas de propriétaire.) [HKLM] -- Samsung Mobile phone USB driver
                                    O42 - Logiciel: Samsung PC Studio 3 - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- {C4A4722E-79F9-417C-BD72-8D359A090C97}
                                    O42 - Logiciel: Samsung PC Studio 3 USB Driver Installer - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- {EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}
                                    O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288621) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{5C497F0B-2061-4CC9-A61C-6B45B867354D}
                                    O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288931) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CD769337-C8AC-46DB-A7DC-643E50089263}
                                    O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2289158) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{210B16C0-CEBD-4DE9-B474-04A7E8735E16}
                                    O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2344875) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6FC5C4C1-D7AE-44C3-94B7-6424FC3E752F}
                                    O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2345043) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{536FB502-775F-4494-BACE-C02CC90B7A5B}
                                    O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB969559) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
                                    O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB976321) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{7F207DCA-3399-40CB-A968-6E5991B1421A}
                                    O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2160841
                                    O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB2345035) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{B23002DD-34EC-4988-B810-A5E2A0BF04F1}
                                    O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB979441) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{8CCB781A-CF6B-4FCB-B6D8-59C64DF5C6DB}
                                    O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB982158) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{F5B70033-E79C-4569-90BF-BC9B4E4F3F46}
                                    O42 - Logiciel: Security Update for Microsoft Office PowerPoint Viewer (KB2413381) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3DED0A62-44C8-4E00-A785-5212F297A9D9}
                                    O42 - Logiciel: Security Update for Microsoft Office Visio Viewer 2007 (KB973709) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
                                    O42 - Logiciel: Security Update for Microsoft Office Word 2007 (KB2344993) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{7A5B74FA-7A92-4FC9-821A-2DD5D4E73E48}
                                    O42 - Logiciel: Security Update for Microsoft Office system 2007 (972581) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}
                                    O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB974234) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{FCD742B9-7A55-44BC-A776-F795F21FEDDC}
                                    O42 - Logiciel: Shareaza 2.5.3.0 - (.Shareaza Development Team.) [HKLM][64Bits] -- Shareaza_is1
                                    O42 - Logiciel: Sony Ericsson PC Companion 1.60.13 - (.Sony Ericsson.) [HKLM][64Bits] -- {F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}
                                    O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM] -- SynTPDeinstKey
                                    O42 - Logiciel: Update for 2007 Microsoft Office System (KB2284654) - (.Microsoft.) [HKLM][64Bits] -- {90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{FB166E7C-8AA6-48C8-B726-1F25BEE7825A}
                                    O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}
                                    O42 - Logiciel: Update for Microsoft Office 2007 Help for Common Features (KB963673) - (.Microsoft.) [HKLM][64Bits] -- {90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AB365889-0395-4FAD-B702-CA5985D53D42}
                                    O42 - Logiciel: Update for Microsoft Office Excel 2007 Help (KB963678) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0016-0409-0000-0000000FF1CE}_HOMESTUDENTR_{199DF7B6-169C-448C-B511-1054101BE9C9}
                                    O42 - Logiciel: Update for Microsoft Office OneNote 2007 (KB980729) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{329050A9-EF80-40F9-B633-74508F54C1FF}
                                    O42 - Logiciel: Update for Microsoft Office OneNote 2007 Help (KB963670) - (.Microsoft.) [HKLM][64Bits] -- {90120000-00A1-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2744EF05-38E1-4D5D-B333-E021EDAEA245}
                                    O42 - Logiciel: Update for Microsoft Office Powerpoint 2007 Help (KB963669) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0018-0409-0000-0000000FF1CE}_HOMESTUDENTR_{397B1D4F-ED7B-4ACA-A637-43B670843876}
                                    O42 - Logiciel: Update for Microsoft Office Script Editor Help (KB963671) - (.Microsoft.) [HKLM][64Bits] -- {90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{CD11C6A2-FFC6-4271-8EAB-79C3582F505C}
                                    O42 - Logiciel: Update for Microsoft Office Word 2007 Help (KB963665) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001B-0409-0000-0000000FF1CE}_HOMESTUDENTR_{80E762AA-C921-4839-9D7D-DB62A72C0726}
                                    O42 - Logiciel: VLC media player 1.1.4 - (.VideoLAN.) [HKLM][64Bits] -- VLC media player
                                    O42 - Logiciel: Video Web Camera - (.Chicony Electronics Co.,Ltd..) [HKLM][64Bits] -- {12A1B519-5934-4508-ADBD-335347B0DC87}
                                    O42 - Logiciel: Welcome Center - (.Packard Bell.) [HKLM][64Bits] -- Packard Bell Welcome Center
                                    O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM][64Bits] -- WinLiveSuite
                                    O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM][64Bits] -- {34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}
                                    O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM][64Bits] -- {D45240D3-B6B3-4FF9-B243-54ECE3E10066}
                                    O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM][64Bits] -- {2075CB0A-D26F-4DAA-B424-5079296B43BA}
                                    O42 - Logiciel: Windows Live ID Sign-in Assistant - (.Microsoft Corporation.) [HKLM] -- {1B8ABA62-74F0-47ED-B18C-A43128E591B8}
                                    O42 - Logiciel: Windows Live Installer - (.Microsoft Corporation.) [HKLM][64Bits] -- {0B0F231F-CE6A-483D-AA23-77B364F75917}
                                    O42 - Logiciel: Windows Live Language Selector - (.Microsoft Corporation.) [HKLM] -- {5EB6F3CB-46F4-451F-A028-7F6D8D35D7D0}
                                    O42 - Logiciel: Windows Live MIME IFilter - (.Microsoft Corporation.) [HKLM] -- {DA54F80E-261C-41A2-A855-549A144F2F59}
                                    O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM][64Bits] -- {9D56775A-93F3-44A3-8092-840E3826DE30}
                                    O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM][64Bits] -- {9FAE6E8D-E686-49F5-A574-0A58DFD9580C}
                                    O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {6057E21C-ABE9-4059-AE3E-3BEB9925E660}
                                    O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {EB4DF488-AAEF-406F-A341-CB2AAA315B90}
                                    O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM][64Bits] -- {6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}
                                    O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM][64Bits] -- {92EA4134-10D1-418A-91E1-5A0453131A38}
                                    O42 - Logiciel: Windows Live PIMT Platform - (.Microsoft Corporation.) [HKLM][64Bits] -- {4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}
                                    O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM][64Bits] -- {A9BDCA6B-3653-467B-AC83-94367DA3BFE3}
                                    O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM][64Bits] -- {C893D8C0-1BA0-4517-B11C-E89B65E72F70}
                                    O42 - Logiciel: Windows Live Photo Gallery - (.Microsoft Corporation.) [HKLM][64Bits] -- {3336F667-9049-4D46-98B6-4C743EEBC5B1}
                                    O42 - Logiciel: Windows Live SOXE - (.Microsoft Corporation.) [HKLM][64Bits] -- {682B3E4F-696A-42DE-A41C-4C07EA1678B4}
                                    O42 - Logiciel: Windows Live SOXE Definitions - (.Microsoft Corporation.) [HKLM][64Bits] -- {200FEC62-3C34-4D60-9CE8-EC372E01C08F}
                                    O42 - Logiciel: Windows Live UX Platform - (.Microsoft Corporation.) [HKLM][64Bits] -- {CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}
                                    O42 - Logiciel: Windows Live UX Platform Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {09F56A49-A7B1-4AAB-95B9-D13094254AD1}
                                    O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM][64Bits] -- {3B9A92DA-6374-4872-B646-253F18624D5F}
                                    O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM][64Bits] -- {A726AE06-AAA3-43D1-87E3-70F510314F04}
                                    O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM][64Bits] -- {AAAFC670-569B-4A2F-82B4-42945E0DE3EF}
                                    O42 - Logiciel: Windows Live Writer Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {62687B11-58B5-4A18-9BC3-9DF4CE03F194}
                                    O42 - Logiciel: avast! Antivirus - (.Alwil Software.) [HKLM][64Bits] -- avast!
                                    O42 - Logiciel: eBay Worldwide - (.OEM.) [HKLM][64Bits] -- {AAF89271-2594-468D-B578-96B2E30C41C4}
                                    O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {84BC87D4-0480-4E10-B15D-1E7886D55180}
                                    O42 - Logiciel: neroxml - (.Nero AG.) [HKLM][64Bits] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B}

                                    ---\\ HKCU & HKLM Software Keys
                                    [HKCU\Software\?? ?? ???? ????? ??? ?? ????]
                                    [HKCU\Software\ALWIL Software]
                                    [HKCU\Software\Acer]
                                    [HKCU\Software\Adobe]
                                    [HKCU\Software\AppDataLow\Software\Google]
                                    [HKCU\Software\AppDataLow\Software\Microsoft]
                                    [HKCU\Software\AppDataLow\Software]
                                    [HKCU\Software\AppDataLow]
                                    [HKCU\Software\Apple Computer, Inc.]
                                    [HKCU\Software\Apple Inc.]
                                    [HKCU\Software\CDDB]
                                    [HKCU\Software\CEC_CM_SW]
                                    [HKCU\Software\Classes]
                                    [HKCU\Software\Clients]
                                    [HKCU\Software\CyberLink]
                                    [HKCU\Software\Google]
                                    [HKCU\Software\Hewlett-Packard]
                                    [HKCU\Software\IM Providers]
                                    [HKCU\Software\Intel]
                                    [HKCU\Software\Inventec]
                                    [HKCU\Software\JavaSoft]
                                    [HKCU\Software\LG Electronics Inc]
                                    [HKCU\Software\Lake]
                                    [HKCU\Software\Local AppWizard-Generated Applications]
                                    [HKCU\Software\LowRegistry]
                                    [HKCU\Software\Macromedia]
                                    [HKCU\Software\Magnet]
                                    [HKCU\Software\Malwarebytes' Anti-Malware]
                                    [HKCU\Software\Mozilla]
                                    [HKCU\Software\Nero]
                                    [HKCU\Software\Netscape]
                                    [HKCU\Software\Norton]
                                    [HKCU\Software\ODBC]
                                    [HKCU\Software\OEM]
                                    [HKCU\Software\Policies]
                                    [HKCU\Software\Realtek]
                                    [HKCU\Software\Samsung PC Studio]
                                    [HKCU\Software\Samsung]
                                    [HKCU\Software\Shareaza]
                                    [HKCU\Software\Sony Ericsson]
                                    [HKCU\Software\Synaptics]
                                    [HKCU\Software\Wow6432Node]
                                    [HKCU\Software\YahooPartnerToolbar]
                                    [HKLM\Software\<company>]
                                    [HKLM\Software\ALWIL Software]
                                    [HKLM\Software\AMD]
                                    [HKLM\Software\ATI Technologies]
                                    [HKLM\Software\Acer Incorporated]
                                    [HKLM\Software\Acer]
                                    [HKLM\Software\Adobe]
                                    [HKLM\Software\Apple Computer, Inc.]
                                    [HKLM\Software\Apple Inc.]
                                    [HKLM\Software\Atheros Communications Inc.]
                                    [HKLM\Software\Audible]
                                    [HKLM\Software\BrowserChoice]
                                    [HKLM\Software\C07ft5Y]
                                    [HKLM\Software\CDDB]
                                    [HKLM\Software\Chicony Electronics Co.,Ltd.]
                                    [HKLM\Software\Classes]
                                    [HKLM\Software\Clients]
                                    [HKLM\Software\CyberLink]
                                    [HKLM\Software\Digital River]
                                    [HKLM\Software\Electronic Arts]
                                    [HKLM\Software\GEAR Software]
                                    [HKLM\Software\Google]
                                    [HKLM\Software\Hewlett-Packard]
                                    [HKLM\Software\InstallShield]
                                    [HKLM\Software\InstalledOptions]
                                    [HKLM\Software\Intel]
                                    [HKLM\Software\Inventec]
                                    [HKLM\Software\JavaSoft]
                                    [HKLM\Software\JreMetrics]
                                    [HKLM\Software\LG Electronics]
                                    [HKLM\Software\Lake]
                                    [HKLM\Software\MCCI]
                                    [HKLM\Software\Macromedia]
                                    [HKLM\Software\Malwarebytes' Anti-Malware]
                                    [HKLM\Software\MozillaPlugins]
                                    [HKLM\Software\Mozilla]
                                    [HKLM\Software\Nero]
                                    [HKLM\Software\NewTech Infosystems]
                                    [HKLM\Software\Norton]
                                    [HKLM\Software\ODBC]
                                    [HKLM\Software\OEM]
                                    [HKLM\Software\Oberon Media]
                                    [HKLM\Software\OemSetup]
                                    [HKLM\Software\Packard Bell]
                                    [HKLM\Software\Policies]
                                    [HKLM\Software\Realtek Semiconductor Corp.]
                                    [HKLM\Software\Realtek]
                                    [HKLM\Software\RegisteredApplications]
                                    [HKLM\Software\SRS Labs]
                                    [HKLM\Software\Samsung Electronics Co., Ltd.]
                                    [HKLM\Software\Samsung]
                                    [HKLM\Software\Shareaza]
                                    [HKLM\Software\Sonic]
                                    [HKLM\Software\Sony Ericsson]
                                    [HKLM\Software\Symantec]
                                    [HKLM\Software\Synaptics]
                                    [HKLM\Software\VideoLAN]
                                    [HKLM\Software\Waves Audio]
                                    [HKLM\Software\Windows]
                                    [HKLM\Software\Wow6432Node]
                                    [HKLM\Software\mozilla.org]

                                    ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
                                    O43 - CFD: 21/12/2009 - 12:24:40 - [110870662] ----D- C:\Program Files\Alwil Software
                                    O43 - CFD: 31/12/2009 - 13:40:50 - [193024] ----D- C:\Program Files\Bonjour
                                    O43 - CFD: 31/12/2009 - 13:39:40 - [82222566] ----D- C:\Program Files\Common Files
                                    O43 - CFD: 22/09/2009 - 17:36:34 - [90257428] ----D- C:\Program Files\DVD Maker
                                    O43 - CFD: 21/12/2009 - 11:07:18 - [0] -SH-D- C:\Program Files\Fichiers communs
                                    O43 - CFD: 02/09/2009 - 01:29:46 - [2250928] ----D- C:\Program Files\Google
                                    O43 - CFD: 10/02/2011 - 22:29:38 - [5174813] ----D- C:\Program Files\Internet Explorer
                                    O43 - CFD: 25/02/2010 - 13:47:04 - [1667179] ----D- C:\Program Files\iPod
                                    O43 - CFD: 25/02/2010 - 13:47:22 - [1977544] ----D- C:\Program Files\iTunes
                                    O43 - CFD: 14/07/2009 - 09:45:56 - [148930098] ----D- C:\Program Files\Microsoft Games
                                    O43 - CFD: 02/09/2009 - 01:17:48 - [1141694] ----D- C:\Program Files\Microsoft Office
                                    O43 - CFD: 14/07/2009 - 07:32:40 - [25757] ----D- C:\Program Files\MSBuild
                                    O43 - CFD: 02/09/2009 - 01:41:54 - [26682908] ----D- C:\Program Files\Packard Bell
                                    O43 - CFD: 21/12/2009 - 11:08:20 - [243741] ----D- C:\Program Files\PB Accessory Store
                                    O43 - CFD: 02/09/2009 - 01:02:36 - [12124476] ----D- C:\Program Files\Realtek
                                    O43 - CFD: 14/07/2009 - 07:32:40 - [36253865] ----D- C:\Program Files\Reference Assemblies
                                    O43 - CFD: 02/09/2009 - 01:04:06 - [28978855] ----D- C:\Program Files\Synaptics
                                    O43 - CFD: 14/07/2009 - 07:09:28 - [0] --H-D- C:\Program Files\Uninstall Information
                                    O43 - CFD: 22/09/2009 - 17:36:34 - [4039168] ----D- C:\Program Files\Windows Defender
                                    O43 - CFD: 22/09/2009 - 17:36:34 - [9224824] ----D- C:\Program Files\Windows Journal
                                    O43 - CFD: 01/04/2011 - 15:39:26 - [43896] ----D- C:\Program Files\Windows Live
                                    O43 - CFD: 18/12/2010 - 00:38:22 - [6667264] ----D- C:\Program Files\Windows Mail
                                    O43 - CFD: 15/10/2010 - 12:33:24 - [7687085] ----D- C:\Program Files\Windows Media Player
                                    O43 - CFD: 21/12/2009 - 11:07:18 - [12627124] ----D- C:\Program Files\Windows NT
                                    O43 - CFD: 22/09/2009 - 17:36:34 - [5516568] ----D- C:\Program Files\Windows Photo Viewer
                                    O43 - CFD: 14/07/2009 - 07:32:40 - [235008] ----D- C:\Program Files\Windows Portable Devices
                                    O43 - CFD: 22/09/2009 - 17:36:34 - [7044255] ----D- C:\Program Files\Windows Sidebar
                                    O43 - CFD: 31/12/2009 - 13:39:40 - [4080887] ----D- C:\Program Files\Common Files\Apple
                                    O43 - CFD: 01/04/2011 - 15:39:10 - [65520238] ----D- C:\Program Files\Common Files\Microsoft Shared
                                    O43 - CFD: 14/07/2009 - 05:20:10 - [2702] ----D- C:\Program Files\Common Files\Services
                                    O43 - CFD: 14/07/2009 - 05:20:10 - [608768] ----D- C:\Program Files\Common Files\SpeechEngines
                                    O43 - CFD: 22/09/2009 - 17:36:34 - [12009971] ----D- C:\Program Files\Common Files\System
                                    O43 - CFD: 22/09/2009 - 08:01:56 - [399195603] ----D- C:\ProgramData\Adobe
                                    O43 - CFD: 31/12/2009 - 13:45:04 - [50052367] ----D- C:\ProgramData\Apple
                                    O43 - CFD: 31/12/2009 - 13:41:54 - [117920939] ----D- C:\ProgramData\Apple Computer
                                    O43 - CFD: 14/07/2009 - 07:08:58 - [0] -SH-D- C:\ProgramData\Application Data
                                    O43 - CFD: 02/09/2009 - 01:24:54 - [87022] ----D- C:\ProgramData\BackupManager
                                    O43 - CFD: 05/01/2011 - 02:40:26 - [94] ----D- C:\ProgramData\bCjJc01804
                                    O43 - CFD: 21/12/2009 - 11:07:18 - [0] ----D- C:\ProgramData\Bureau
                                    O43 - CFD: 14/07/2009 - 07:08:58 - [0] ----D- C:\ProgramData\Desktop
                                    O43 - CFD: 14/07/2009 - 07:08:58 - [0] ----D- C:\ProgramData\Documents
                                    O43 - CFD: 21/12/2009 - 11:07:18 - [0] ----D- C:\ProgramData\Favoris
                                    O43 - CFD: 14/07/2009 - 07:08:58 - [0] ----D- C:\ProgramData\Favorites
                                    O43 - CFD: 02/09/2009 - 01:29:48 - [536147] ----D- C:\ProgramData\Google
                                    O43 - CFD: 01/04/2011 - 14:23:54 - [6525201] ----D- C:\ProgramData\Malwarebytes
                                    O43 - CFD: 21/12/2009 - 11:07:18 - [0] ----D- C:\ProgramData\Menu Démarrer
                                    O43 - CFD:
                                    • 1
                                    • 2