Virus impossible àsupprimerGen:Packed.FakeAV2 - Page 2

Précédent
  • 1
  • 2
  1. humoristik Messages postés 9 Statut Membre
     
    Voici le compte rendu d'AD remover , g eu un problème à un moment ac , lors du scan , alors qu'internet était coupé j'ai eu plein de fenêtres à s'ouvrir en même temps ( mais vraiment plein genre une centaine) , bref avoir tout éteint et ralumé voici ce que cela donne!
    Dossier trouvé: C:\Users\guyot\AppData\LocalLow\PriceGong

    Clé trouvée: HKCU\Software\AppDataLow\Software\Conduit
    Clé trouvée: HKCU\Software\AppDataLow\Software\PriceGong

    ============== SCAN ADDITIONNEL ==============

    **** Mozilla Firefox Version [3.6.16 (fr)] ****

    Extensions\toolbar@iadah.com (Toolbar Iadah)
    Extensions\{1f3641dc-5372-aca9-3a4f-5261b01f4b28} (z)
    Extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} (Skype extension )
    HKLM_Extensions|FFToolbar@bitdefender.com - C:\Program Files\BitDefender\BitDefender 2011\bdaphffext\

    -- C:\Users\guyot\AppData\Roaming\Mozilla\FireFox\Profiles\47wehyg8.default --
    Extensions\ChoiceGuard@Microsoft (Microsoft Choice Guard)
    Extensions\toolbar@iadah.com (?)
    Extensions\{364d4e0c-543f-4b85-abe3-19551139da4f} (Softonic_France Toolbar)
    Extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7} (?)
    Searchplugins\iadah.xml (<SearchPlugin xmlns=hxxp://www.mozilla.org/2006/browser/search/<ShortNameiadah</ShortName <Descriptioniadah</Desc...)
    Searchplugins\Search.xml (?)
    Prefs.js - browser.download.lastDir, C:\\Users\\guyot\\Desktop\\Harmonica
    Prefs.js - browser.search.defaultenginename, Bing
    Prefs.js - browser.search.defaulturl, hxxp://www.bing.com/search?FORM=IEFM1&q=
    Prefs.js - browser.search.selectedEngine, Google
    Prefs.js - browser.startup.homepage, www.google.fr
    Prefs.js - browser.startup.homepage_override.mstone, rv:1.9.2.16
    Prefs.js - keyword.URL, hxxp://www.bing.com/search?FORM=IEFM1&q=

    -- C:\Users\Utilisateur\AppData\Roaming\Mozilla\FireFox\Profiles\yg1on3rh.default --
    Prefs.js - browser.startup.homepage_override.mstone, rv:1.9.2.8

    ========================================

    **** Internet Explorer Version [8.0.7601.17514] ****

    HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
    HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
    HKCU_Main|Start Page - hxxp://www.menara.ma/
    HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
    HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
    HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    HKLM_Main|Start Page - hxxp://fr.msn.com/
    HKCU_URLSearchHooks|{4daac69c-cba7-45e2-9bc8-1044483d3352} - "Softonic_France Toolbar" (C:\Program Files (x86)\Softonic_France\tbSoft.dll)
    HKLM_URLSearchHooks|{4daac69c-cba7-45e2-9bc8-1044483d3352} - "Softonic_France Toolbar" (C:\Program Files (x86)\Softonic_France\tbSoft.dll)
    HKCU_SearchScopes\{46436164-1AAB-4929-891C-951479DDBEA6} - "Search" (hxxp://www.dymasearch.com/search.php?src=tops&q={SearchTerms})
    HKCU_SearchScopes\{f3d17ef2-8118-4fa3-afea-bb2e18a69054} - "iadah" (hxxp://www.iadah.com/web?search&q={searchTerms})
    HKCU_Toolbar\WebBrowser|{4DAAC69C-CBA7-45E2-9BC8-1044483D3352} (C:\Program Files (x86)\Softonic_France\tbSoft.dll)
    HKLM_Toolbar|{3EA8D036-C9E7-4721-BCDF-C13D00C4CC39} (C:\Program Files (x86)\DevNet\Toolbar\DevNet.dll)
    HKLM_Toolbar|{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} (C:\Program Files (x86)\MSN Toolbar\01.01.2607.0\fr\msntb.dll)
    HKLM_Toolbar|{4daac69c-cba7-45e2-9bc8-1044483d3352} (C:\Program Files (x86)\Softonic_France\tbSoft.dll)
    HKLM_Toolbar|{381FFDE8-2394-4F90-B10D-FC6124A40F8C} (C:\Program Files\BitDefender\BitDefender 2011\Antispam32\IEToolbar.dll)
    HKLM_Toolbar|{8dcb7100-df86-4384-8842-8fa844297b3f} ("C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll") (x)
    HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - C:\Windows\SysWOW64\wpcer.exe (x)
    HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - C:\Windows\SysWOW64\winfxdocobj.exe (x)
    HKLM_ElevationPolicy\{43023B0B-C598-4935-808C-990E0C700723} - C:\Program Files (x86)\DevNet\Toolbar\DevNetUpdater.exe (DevNet)
    HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files (x86)\Internet Explorer\iedw.exe (x)
    HKLM_ElevationPolicy\{80B84A0A-EDA4-47FD-8BE1-6B49F4197BE6} - C:\Program Files\BitDefender\BitDefender 2011\Antispam32\about.exe\about.ex (x)
    HKLM_ElevationPolicy\{aa851425-0109-43f3-9ed2-7b7090125861} - C:\Program Files (x86)\Microsoft\BingBar\BingBar.exe (Microsoft Corporation.)
    HKLM_ElevationPolicy\{B43A0C1E-B63F-4691-B68F-CD807A45DA01} - C:\Windows\system32\TSWbPrxy.exe (x)
    HKLM_Extensions\{DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - "?" (?)
    BHO\{4daac69c-cba7-45e2-9bc8-1044483d3352} - "Softonic_France Toolbar" (C:\Program Files (x86)\Softonic_France\tbSoft.dll)
    BHO\{d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "Bing Bar Helper" ("C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll") (x)
    BHO\{fe363091-3856-4de7-c473-15f3244128f8} (?)

    ========================================

    C:\Program Files (x86)\Ad-Remover\Quarantine: 33 Fichier(s)
    C:\Program Files (x86)\Ad-Remover\Backup: 17 Fichier(s)

    C:\Ad-Report-CLEAN[1].txt - 04/04/2011 15:48:44 (6185 Octet(s))
    C:\Ad-Report-SCAN[1].txt - 04/04/2011 17:29:58 (5479 Octet(s))
    C:\Ad-Report-SCAN[2].txt - 04/04/2011 19:04:39 (5717 Octet(s))
    C:\Ad-Report-SCAN[3].txt - 04/04/2011 19:13:31 (5644 Octet(s))

    Fin à: 19:14:14, 04/04/2011
    0
    1. humoristik Messages postés 9 Statut Membre
       
      Je n'arrive toujours pas à envoyer le compte rendu via le site donné , cette fois on me dit

      Parse error: syntax error, unexpected '{' in /home/www/pjjoint.malekal.com/uploader.php on line 86

      Comment puis je faire ? il n'ya pas moyen de le mettre directement ici ? ( peut être que ça va prendre trop de place après ...)
      0
    2. moment de grace Messages postés 29099 Date d'inscription   Statut Contributeur sécurité Dernière intervention   2 274
       
      0
  2. humoristik Messages postés 9 Statut Membre
     
    Malheureusement ça me remet le message comme quoi les extensions ne sont pas comprises... , je le poste en tant que tel donc , vu que ça ne marche tjrs pas :

    Rapport de ZHPDiag v1.27.1849 par Nicolas Coolman, Update du 31/03/2011
    Run by guyot at 04/04/2011 19:18:52
    Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html

    ---\\ Web Browser
    MSIE: Internet Explorer v8.0.7601.17514 (Defaut)
    MFIE: Mozilla Firefox v3.6.16 (fr)

    ---\\ System Information
    Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
    Processor: Intel64 Family 6 Model 30 Stepping 5, GenuineIntel
    Operating System: 64 Bits
    Boot mode: Normal (Normal boot)
    Total RAM: 4087 MB (14% free)
    System Restore: Activé (Enable)
    System drive C: has 814 GB (87%) free of 931 GB

    ---\\ Logged in mode
    Computer Name: GUYOT-PC
    User Name: guyot
    All Users Names: Utilisateur, guyot, ASPNET, Administrateur,
    Unselected Option: O45,O61,O62,O65,O66,O82
    Logged in as Administrator

    ---\\ Environnement Variables
    %AppData%=C:\Users\guyot\AppData\Roaming
    %LocalAppData%=C:\Users\guyot\AppData\Local
    %StartMenu%=C:\Users\guyot\AppData\Roaming\Microsoft\Windows\Start Menu

    ---\\ DOS/Devices
    C:\ Hard drive, Flash drive, Thumb drive (Free 814 Go of 931 Go)
    D:\ CD-ROM drive (Free 0 Go of 6 Go)

    ---\\ Security Center & Tools Informations
    [HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
    [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
    [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
    [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
    [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
    [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
    [HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK
    [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK
    [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableTaskMgr: OK
    [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableRegistryTools: OK
    [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] NoDispScrSavPage: OK
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
    [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK

    ---\\ Recherche particulière de fichiers génériques
    [MD5.AC4C51EB24AA95B77F705AB159189E24] - (.Microsoft Corporation - Explorateur Windows.) (.20/11/2010 14:24:45.) -- C:\Windows\Explorer.exe [2872320]
    [MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 02:14:45.) -- C:\Windows\System32\Wininit.exe [96256]
    [MD5.44214C94911C7CFB1D52CB64D5E8368D] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.20/11/2010 13:21:36.) -- C:\Windows\System32\wininet.dll [980992]

    ---\\ Processus lancés
    [MD5.DC77A655C2ED2AC12C65C4317223EE88] - (...) -- C:\Program Files (x86)\Vidalia Bundle\Vidalia\vidalia.exe [11852288]
    [MD5.390679F7A217A5E73D756276C40AE887] - (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe [2260480]
    [MD5.DF5CF18A5D452A1634CED071C82834DE] - (.The Privoxy team - www.privoxy.org - Privoxy.) -- C:\Program Files (x86)\Vidalia Bundle\Privoxy\privoxy.exe [250368]
    [MD5.37C4DAB6A5A44772EDE770C63B4BF602] - (...) -- C:\Program Files (x86)\Vidalia Bundle\Tor\tor.exe [4591810]
    [MD5.C613E69C3B191BB02C7A191741A1D024] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe [673040]
    [MD5.88C44CA9A052AEAEC0C91A57CE5AB41A] - (.Google Inc. - Google Toolbar Broker.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe [304304]
    [MD5.0F3FA9FDB976C567EC0491685CF4FDF7] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [912344]
    [MD5.3AFF6B10C34CB8EAA6D6D5AA55193571] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe [16856]
    [MD5.42A8D7674CC494E73930C69D4987C49F] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [642048]

    ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
    M3 - MFPP: Plugins - [guyot] -- C:\Users\guyot\AppData\Roaming\Mozilla\Firefox\Profiles\47wehyg8.default\searchplugins\bing.xml
    M3 - MFPP: Plugins - [guyot] -- C:\Users\guyot\AppData\Roaming\Mozilla\Firefox\Profiles\47wehyg8.default\searchplugins\iadah.xml
    M3 - MFPP: Plugins - [guyot] -- C:\Users\guyot\AppData\Roaming\Mozilla\Firefox\Profiles\47wehyg8.default\searchplugins\Search.xml
    M0 - MFSP: prefs.js [guyot - 47wehyg8.default] www.google.fr
    M2 - MFEP: prefs.js [guyot - 47wehyg8.default\ChoiceGuard@Microsoft] [] Microsoft Choice Guard v2.0 (.Microsoft.)
    M2 - MFEP: prefs.js [guyot - 47wehyg8.default\{364d4e0c-543f-4b85-abe3-19551139da4f}] [] Softonic_France Toolbar v2.7.1.3 (.Conduit Ltd..)

    ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.menara.ma/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.microsoft.com/fr-fr/
    R0 - HKUS\S-1-5-21-83055815-1293926308-999991864-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.menara.ma/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
    R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.bing.com/?toHttps=1&redig=17DBE7D168544FA98200E890A8051984
    R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (8.00.7600.16385 (win7_rtm.090713-1255)) -- C:\Windows\System32\ieframe.dll
    R3 - URLSearchHook: Softonic_France Toolbar [64Bits] - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) (5, 7, 2, 2) -- C:\Program Files (x86)\Softonic_France\tbSoft.dll
    R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
    R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2

    ---\\ Internet Explorer, Proxy Management (R5)
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
    R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
    R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

    ---\\ ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
    F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
    F2 - REG:system.ini: VMApplet=C:\WINDOWS\system32\SystemPropertiesPerformance.exe

    ---\\ Browser Helper Objects de navigateur (O2)
    O2 - BHO: Windows Live ID Sign-in Helper [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper [64Bits] - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
    O2 - BHO: Google Toolbar Notifier BHO [64Bits] - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg64.dll

    ---\\ Internet Explorer Toolbars (O3)
    O3 - Toolbar: BitDefender Toolbar [64Bits] - {381FFDE8-2394-4F90-B10D-FC6124A40F8C} . (.BitDefender S.R.L. - BitDefender Antiphishing Toolbar.) -- C:\Program Files\BitDefender\BitDefender 2011\IEToolbar.dll
    O3 - Toolbar: Google Toolbar [64Bits] - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll

    ---\\ ---\\ Applications démarrées par registre & par dossier (O4)
    O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] . (.BitDefender S.R.L. - IEShow Application.) -- C:\Program Files\BitDefender\BitDefender 2011\ieshow.exe
    O4 - HKLM\..\Run: [BDAgent] . (.BitDefender S.R.L. - BitDefender Agent.) -- C:\Program Files\BitDefender\BitDefender 2011\bdagent.exe
    O4 - HKCU\..\Run: [ares] . (.Ares Development Group - Ares p2p for windows.) -- C:\Program Files (x86)\Ares\Ares.exe
    O4 - HKCU\..\Run: [EA Core] . (.Electronic Arts - EA Download Manager.) -- C:\Program Files (x86)\Electronic Arts\EADM\Core.exe
    O4 - HKCU\..\Run: [Steam] . (.Valve Corporation - Steam.) -- c:\program files (x86)\steam\steam.exe
    O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [MsnMsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
    O4 - HKCU\..\Run: [Vidalia] . (...) -- C:\Program Files (x86)\Vidalia Bundle\Vidalia\vidalia.exe
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKLM\..\Wow6432Node\Run: [HDAudDeck] . (.VIA - VIA HD Audio CPL.) -- C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
    O4 - HKLM\..\Wow6432Node\Run: [adiras] . (.Pas de propriétaire - ADI RAS setup Application.) -- C:\Windows\adirasx64.exe
    O4 - HKLM\..\Wow6432Node\Run: [ATICustomerCare] . (.Advanced Micro Devices, Inc. - ATI Customer Care.) -- C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe
    O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
    O4 - HKLM\..\Wow6432Node\Run: [BitDefender Antiphishing Helper] . (.BitDefender S.R.L. - IEShow Application.) -- C:\Program Files\BitDefender\BitDefender 2011\Antispam32\ieshow.exe
    O4 - HKLM\..\Wow6432Node\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe
    O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
    O4 - HKUS\S-1-5-21-83055815-1293926308-999991864-1001\..\Run: [ares] . (.Ares Development Group - Ares p2p for windows.) -- C:\Program Files (x86)\Ares\Ares.exe
    O4 - HKUS\S-1-5-21-83055815-1293926308-999991864-1001\..\Run: [EA Core] . (.Electronic Arts - EA Download Manager.) -- C:\Program Files (x86)\Electronic Arts\EADM\Core.exe
    O4 - HKUS\S-1-5-21-83055815-1293926308-999991864-1001\..\Run: [Steam] . (.Valve Corporation - Steam.) -- c:\program files (x86)\steam\steam.exe
    O4 - HKUS\S-1-5-21-83055815-1293926308-999991864-1001\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKUS\S-1-5-21-83055815-1293926308-999991864-1001\..\Run: [MsnMsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
    O4 - HKUS\S-1-5-21-83055815-1293926308-999991864-1001\..\Run: [Vidalia] . (...) -- C:\Program Files (x86)\Vidalia Bundle\Vidalia\vidalia.exe
    O4 - HKUS\S-1-5-21-83055815-1293926308-999991864-1001\..\Run: [SpybotSD TeaTimer] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
    O4 - Global Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Privoxy.lnk . (.The Privoxy team - www.privoxy.org.) -- C:\Program Files (x86)\Vidalia Bundle\Privoxy\privoxy.exe
    O4 - Global Startup: C:\Users\guyot\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk . (...) -- C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe
    O4 - Global Startup: C:\Users\guyot\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Xfire.lnk . (.Xfire Inc..) -- C:\Program Files (x86)\Xfire\Xfire.exe

    ---\\ ---\\ Autres liens utilisateurs (O4)
    O4 - Global Startup: C:\Users\guyot\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
    O4 - Global Startup: C:\Users\guyot\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
    O4 - Global Startup: C:\Users\guyot\Desktop\AD-R.lnk . (...) -- C:\Program Files (x86)\Ad-Remover\main.exe
    O4 - Global Startup: C:\Users\guyot\Desktop\Ares.lnk . (.Ares Development Group.) -- C:\Program Files (x86)\Ares\Ares.exe
    O4 - Global Startup: C:\Users\guyot\Desktop\BioShock.lnk - Clé orpheline
    O4 - Global Startup: C:\Users\guyot\Desktop\Blender.lnk . (...) -- C:\Program Files (x86)\Blender Foundation\Blender\blender.exe
    O4 - Global Startup: C:\Users\guyot\Desktop\CCleaner.lnk . (.Piriform Ltd.) -- C:\Program Files (x86)\CCleaner\CCleaner.exe
    O4 - Global Startup: C:\Users\guyot\Desktop\Desktop.lnk . (...) -- C:\Users\guyot\Desktop
    O4 - Global Startup: C:\Users\guyot\Desktop\Désinstaller Star Wars Battlefront II.lnk . (...) -- C:\Program Files (x86)\LucasArts\Star Wars Battlefront II\Install\uninst.exe
    O4 - Global Startup: C:\Users\guyot\Desktop\Flyff.lnk . (...) -- C:\Program Files (x86)\gPotato.eu\FLYFF\Flyff.exe
    O4 - Global Startup: C:\Users\guyot\Desktop\GameSpy Arcade.lnk . (.IGN Entertainment, Inc..) -- C:\Program Files (x86)\GameSpy Arcade\Aphex.exe
    O4 - Global Startup: C:\Users\guyot\Desktop\Images - Raccourci.lnk . (...) -- C:\Users\guyot\AppData\Roaming\Microsoft\Windows\Libraries\Pictures.library-ms
    O4 - Global Startup: C:\Users\guyot\Desktop\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
    O4 - Global Startup: C:\Users\guyot\Desktop\IZArc.lnk . (...) -- C:\Program Files (x86)\IZArc\IZArc.exe
    O4 - Global Startup: C:\Users\guyot\Desktop\Jouer à Dark Messiah Of Might and Magic en multijoueur.lnk . (.Valve Corporation.) -- C:\Program Files (x86)\Steam\Steam.exe
    O4 - Global Startup: C:\Users\guyot\Desktop\Jouez à Dark Messiah of Might and Magic en solo.lnk . (...) -- C:\Users\guyot\AppData\Roaming\Ubisoft\Dark Messiah of Might and Magic\mm.exe
    O4 - Global Startup: C:\Users\guyot\Desktop\OpenOffice.org Writer.lnk . (.OpenOffice.org.) -- C:\Program Files (x86)\OpenOffice.org 3\program\swriter.exe
    O4 - Global Startup: C:\Users\guyot\Desktop\Ordinateur - Raccourci.lnk - Clé orpheline
    O4 - Global Startup: C:\Users\guyot\Desktop\Project64 1.6.lnk . (...) -- C:\Program Files (x86)\Project64 1.6\Project64.exe
    O4 - Global Startup: C:\Users\guyot\Desktop\Skype.lnk . (...) -- C:\Windows\Installer\{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}\SkypeIcon.exe
    O4 - Global Startup: C:\Users\guyot\Desktop\sources texture_fichiers - Raccourci.lnk . (...) -- C:\Users\guyot\Documents\sources texture_fichiers
    O4 - Global Startup: C:\Users\guyot\Desktop\SPORE(TM) - Raccourci.lnk - Clé orpheline
    O4 - Global Startup: C:\Users\guyot\Desktop\Spybot - Search & Destroy.lnk . (.Safer Networking Limited.) -- C:\Program Files (x86)\Spybot - Search & Destroy\SpybotSD.exe
    O4 - Global Startup: C:\Users\guyot\Desktop\The Elder Scrolls Construction Set.lnk . (.Bethesda Softworks.) -- C:\Program Files (x86)\Bethesda Softworks\Morrowind\TES Construction Set.exe
    O4 - Global Startup: C:\Users\guyot\Desktop\tuxguitar.lnk . (...) -- C:\Program Files (x86)\TuxGuitar-Jet\tuxguitar.exe
    O4 - Global Startup: C:\Users\guyot\Desktop\Windows Explorer.lnk . (.Microsoft Corporation.) -- C:\Windows\explorer.exe
    O4 - Global Startup: C:\Users\guyot\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\GameSpy Arcade.lnk . (.IGN Entertainment, Inc..) -- C:\Program Files (x86)\GameSpy Arcade\Aphex.exe
    O4 - Global Startup: C:\Users\guyot\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\GetYourSoft.lnk - Clé orpheline
    O4 - Global Startup: C:\Users\guyot\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\IZArc.lnk . (...) -- C:\Program Files (x86)\IZArc\IZArc.exe
    O4 - Global Startup: C:\Users\guyot\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
    O4 - Global Startup: C:\Users\guyot\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    O4 - Global Startup: C:\Users\guyot\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk . (.Safer Networking Limited.) -- C:\Program Files (x86)\Spybot - Search & Destroy\SpybotSD.exe
    O4 - Global Startup: C:\Users\guyot\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Xfire.lnk . (.Xfire Inc..) -- C:\Program Files (x86)\Xfire\Xfire.exe

    ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
    O8 - Extra context menu item: Google Sidewiki... . (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll

    ---\\ Winsock hijacker (Layered Service Provider) (O10)
    O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
    O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
    O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
    O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
    O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL
    O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL
    O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
    O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll

    ---\\ Modification Domaine/Adresses DNS (O17)
    O17 - HKLM\System\CCS\Services\Tcpip\..\{65470EC2-0621-458E-BD09-2C920D9C8DCD}: NameServer = 81.253.149.9 80.10.246.132
    O17 - HKLM\System\CS1\Services\Tcpip\..\{65470EC2-0621-458E-BD09-2C920D9C8DCD}: NameServer = 81.253.149.9 80.10.246.132

    ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
    O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\system32\webcheck.dll

    ---\\ Liste des services NT non Microsoft et non désactivés (O23)
    O23 - Service: C:\Windows\system32\Alg.exe (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\system32\atiesrxx.exe
    O23 - Service: Service d'état ASP.NET (aspnet_state) . (...) - C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
    O23 - Service: (Creative Audio Engine Licensing Service) . (.Creative Labs - System Level Service Utility.) - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
    O23 - Service: (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    O23 - Service: (gusvc) . (.Google - gusvc.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: (IDriverT) . (.Macrovision Corporation - IDriverT Module.) - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: (maconfservice) . (.CybelSoft - Service de détection matériel.) - C:\Program Files (x86)\ma-config.com\maconfservice.exe
    O23 - Service: (npggsvc) . (.INCA Internet Co., Ltd. - nProtect Game Monitor Rev 1561.) - C:\Windows\system32\GameMon.des
    O23 - Service: (PnkBstrA) . (...) - C:\Windows\system32\PnkBstrA.exe
    O23 - Service: (SBSDWSCService) . (.Safer Networking Ltd. - Spybot-S&D Security Center integration.) - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
    O23 - Service: (Steam Client Service) . (.Valve Corporation - Steam Client Service (buildbot_buildbot_ste.) - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
    O23 - Service: (Update Server) . (.BitDefender - Bitdefender Web Server.) - C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe
    O23 - Service: (Updatesrv) . (.BitDefender S.R.L. - BitDefender Update Service.) - C:\Program Files\BitDefender\BitDefender 2011\updatesrv.exe
    O23 - Service: (VSSERV) . (.BitDefender S.R.L. - BitDefender Security Service.) - C:\Program Files\BitDefender\BitDefender 2011\vsserv.exe
    O23 - Service: (wlidsvc) . (.Microsoft Corp. - Microsoft® Windows Live ID Service.) - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.exe

    ---\\ Enumération Active Desktop & MHTML Editor (O24)
    O24 - Default MHTML Editor: Last - .(...) - (.not file.)

    ---\\ Tâches planifiées en automatique (O39)
    O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
    O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
    [MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    [MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    [MD5.38088C425259983CA8AA4CF4585A6C1B] [APT] [{02E7D06A-5834-4342-9C30-1F2314C8CD67}] (.Sony DADC Austria AG.) -- C:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin64\Crysis.exe
    [MD5.6209AAF0C2E09E026AEF59D94E00D2C9] [APT] [{03C7F74A-1A94-4C15-B714-E722A6A40D94}] (.Bethesda Softworks.) -- C:\Program Files (x86)\Bethesda Softworks\Morrowind\Morrowind Launcher.exe
    [MD5.6209AAF0C2E09E026AEF59D94E00D2C9] [APT] [{04147538-6D7E-4E2A-8A10-D26286A66DA7}] (.Bethesda Softworks.) -- C:\Program Files (x86)\Bethesda Softworks\Morrowind\Morrowind Launcher.exe
    [MD5.1330C90FCADEA583A0166B6752F05AD8] [APT] [{0B60AF51-573A-463D-B891-43E8B5D40348}] (.Pas de propriétaire.) -- C:\Program Files (x86)\LucasArts\Star Wars Battlefront II\LaunchBFII.exe
    [MD5.1AA23094CE90784854FB1F25BE645AFA] [APT] [{0D29B7C1-5063-42DE-91FC-667299C98776}] (.Skype Technologies S.A..) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
    [MD5.6209AAF0C2E09E026AEF59D94E00D2C9] [APT] [{0F1238EE-2A7E-4863-80B8-529F7B1F2A8B}] (.Bethesda Softworks.) -- C:\Program Files (x86)\Bethesda Softworks\Morrowind\Morrowind Launcher.exe
    [MD5.6209AAF0C2E09E026AEF59D94E00D2C9] [APT] [{11656030-6CAE-4544-B117-F555424ED44C}] (.Bethesda Softworks.) -- C:\Program Files (x86)\Bethesda Softworks\Morrowind\Morrowind Launcher.exe
    [MD5.6209AAF0C2E09E026AEF59D94E00D2C9] [APT] [{170B0962-5E3F-4B4A-B0A9-E70EF7B81382}] (.Bethesda Softworks.) -- C:\Program Files (x86)\Bethesda Softworks\Morrowind\Morrowind Launcher.exe
    [MD5.5AFB69549DEC47D0B2DCA865B9B7131F] [APT] [{204EB306-6025-4079-AE6F-B033202F9835}] (.Maxis, a division of Electronic Arts Inc..) -- C:\Program Files (x86)\EA GAMES\Les Sims 2\TSBin\Sims2.exe
    [MD5.00000000000000000000000000000000] [APT] [{2808F495-707C-44E5-9F5B-D05293C5C60A}] (.Pas de propriétaire.) -- C:\Users\guyot\Desktop\Crack Proper.SKIDROW.JC2_up_by_stiu\JustCause2.exe (.not file.)
    [MD5.6209AAF0C2E09E026AEF59D94E00D2C9] [APT] [{2ECF2D17-DEC4-4C48-9F6C-E547DE1E6DAA}] (.Bethesda Softworks.) -- C:\Program Files (x86)\Bethesda Softworks\Morrowind\Morrowind Launcher.exe
    [MD5.6209AAF0C2E09E026AEF59D94E00D2C9] [APT] [{347C3B35-BB25-46DF-ABCA-6321BD872962}] (.Bethesda Softworks.) -- C:\Program Files (x86)\Bethesda Softworks\Morrowind\Morrowind Launcher.exe
    [MD5.6209AAF0C2E09E026AEF59D94E00D2C9] [APT] [{3B697B9A-AAA2-4BE5-ADDA-2FFD83DE1634}] (.Bethesda Softworks.) -- C:\Program Files (x86)\Bethesda Softworks\Morrowind\Morrowind Launcher.exe
    [MD5.00000000000000000000000000000000] [APT] [{4AE989DF-F111-47F9-9AE8-C95A82095583}] (.Pas de propriétaire.) -- C:\Users\guyot\Desktop\Crack Proper.SKIDROW.JC2_up_by_stiu\JustCause2.exe (.not file.)
    [MD5.00000000000000000000000000000000] [APT] [{50FFD387-D571-4E96-A151-A64B6CF52036}] (.Pas de propriétaire.) -- C:\Users\guyot\Desktop\Morrowind.exe (.not file.)
    [MD5.6209AAF0C2E09E026AEF59D94E00D2C9] [APT] [{51B89439-0BAB-4351-B49D-879D8CAF19BF}] (.Bethesda Softworks.) -- C:\Program Files (x86)\Bethesda Softworks\Morrowind\Morrowind Launcher.exe
    [MD5.1330C90FCADEA583A0166B6752F05AD8] [APT] [{540B37F4-0697-4C8C-8124-11253C698427}] (.Pas de propriétaire.) -- C:\Program Files (x86)\LucasArts\Star Wars Battlefront II\LaunchBFII.exe
    [MD5.6209AAF0C2E09E026AEF59D94E00D2C9] [APT] [{597B73DA-F826-426E-B560-58FACDF353A4}] (.Bethesda Softworks.) -- C:\Program Files (x86)\Bethesda Softworks\Morrowind\Morrowind Launcher.exe
    [MD5.00000000000000000000000000000000] [APT] [{5DD2A508-5003-4A3D-8F60-9C97A562D749}] (.Pas de propriétaire.) -- C:\Users\guyot\Desktop\Crack Proper.SKIDROW.JC2_up_by_stiu\JustCause2.exe (.not file.)
    [MD5.00000000000000000000000000000000] [APT] [{61131674-7C0F-442E-9787-C56F6B4881E5}] (.Pas de propriétaire.) -- C:\Users\guyot\Desktop\Crack Proper.SKIDROW.JC2_up_by_stiu\JustCause2.exe (.not file.)
    [MD5.00000000000000000000000000000000] [APT] [{70918FC7-2043-4093-AA15-AF4E45214230}] (.Pas de propriétaire.) -- C:\Users\guyot\Desktop\Crack Proper.SKIDROW.JC2_up_by_stiu\JustCause2.exe (.not file.)
    [MD5.00000000000000000000000000000000] [APT] [{75E83284-5778-4B62-BB82-8386F1D89EA0}] (.Pas de propriétaire.) -- C:\Users\guyot\Desktop\FalloutLauncher.exe (.not file.)
    [MD5.5AFB69549DEC47D0B2DCA865B9B7131F] [APT] [{7DF52D46-C5E3-4C0E-91A0-D0CAFB35109F}] (.Maxis, a division of Electronic Arts Inc..) -- C:\Program Files (x86)\EA GAMES\Les Sims 2\TSBin\Sims2.exe
    [MD5.00000000000000000000000000000000] [APT] [{813220F4-4C6D-4D22-88DE-C77AEB08CF56}] (.Pas de propriétaire.) -- C:\Users\guyot\Desktop\streaming-audio-recorder_214927_trial.exe (.not file.)
    [MD5.6209AAF0C2E09E026AEF59D94E00D2C9] [APT] [{8373D66C-3230-482D-A9F7-35D0473BFC94}] (.Bethesda Softworks.) -- C:\Program Files (x86)\Bethesda Softworks\Morrowind\Morrowind Launcher.exe
    [MD5.00000000000000000000000000000000] [APT] [{99DDD802-FE71-4713-B4BE-EE7A6D198439}] (.Pas de propriétaire.) -- C:\Users\guyot\Desktop\FalloutLauncher.exe (.not file.)
    [MD5.6209AAF0C2E09E026AEF59D94E00D2C9] [APT] [{A63937DC-57E5-43A9-99A4-16668B9FBFCC}] (.Bethesda Softworks.) -- C:\Program Files (x86)\Bethesda Softworks\Morrowind\Morrowind Launcher.exe
    [MD5.1330C90FCADEA583A0166B6752F05AD8] [APT] [{A8324F8E-8ADE-4EBF-BFD0-87C35F2A5F6E}] (.Pas de propriétaire.) -- C:\Program Files (x86)\LucasArts\Star Wars Battlefront II\LaunchBFII.exe
    [MD5.1330C90FCADEA583A0166B6752F05AD8] [APT] [{A9A6D35A-8F0E-4BA3-8A66-A865907A1389}] (.Pas de propriétaire.) -- C:\Program Files (x86)\LucasArts\Star Wars Battlefront II\LaunchBFII.exe
    [MD5.00000000000000000000000000000000] [APT] [{B65FDEE3-CB0F-4655-8C04-25DC02E1EDD6}] (.Pas de propriétaire.) -- C:\Users\guyot\Desktop\Crack Proper.SKIDROW.JC2_up_by_stiu\JustCause2.exe (.not file.)
    [MD5.00000000000000000000000000000000] [APT] [{BC55CAC2-130F-48A4-8ADD-40DAFBB801C1}] (.Pas de propriétaire.) -- C:\Program Files (x86)\MSN Messenger\msnmsgr.exe (.not file.)
    [MD5.1330C90FCADEA583A0166B6752F05AD8] [APT] [{BF3F6199-664F-48A1-82A9-845902811A9D}] (.Pas de propriétaire.) -- C:\Program Files (x86)\LucasArts\Star Wars Battlefront II\LaunchBFII.exe
    [MD5.6209AAF0C2E09E026AEF59D94E00D2C9] [APT] [{C712B201-A775-41A4-89A5-6B45D9449CD6}] (.Bethesda Softworks.) -- C:\Program Files (x86)\Bethesda Softworks\Morrowind\Morrowind Launcher.exe
    [MD5.00000000000000000000000000000000] [APT] [{CD345340-EDC2-475D-A300-3953D77890C7}] (.Pas de propriétaire.) -- C:\Users\guyot\AppData\Local\Temp\Temp1_v8700a_20100923.zip\v8700a_20100923\SETUP.exe (.not file.)
    [MD5.6209AAF0C2E09E026AEF59D94E00D2C9] [APT] [{D97ABD73-8B32-4CEB-A3BE-E18326133C17}] (.Bethesda Softworks.) -- C:\Program Files (x86)\Bethesda Softworks\Morrowind\Morrowind Launcher.exe
    [MD5.00000000000000000000000000000000] [APT] [{DF8F84F0-0782-49AA-9B7B-A576966808F0}] (.Pas de propriétaire.) -- C:\Users\guyot\Desktop\Crack Proper.SKIDROW.JC2_up_by_stiu\JustCause2.exe (.not file.)
    [MD5.00000000000000000000000000000000] [APT] [{E45A286F-1479-4522-B38A-E8A0C5F5E9C1}] (.Pas de propriétaire.) -- C:\Users\guyot\Desktop\streaming-audio-recorder_214927_trial.exe (.not file.)
    [MD5.6209AAF0C2E09E026AEF59D94E00D2C9] [APT] [{EA586070-5700-4B7D-94FC-906A908839CA}] (.Bethesda Softworks.) -- C:\Program Files (x86)\Bethesda Softworks\Morrowind\Morrowind Launcher.exe
    [MD5.1330C90FCADEA583A0166B6752F05AD8] [APT] [{EC33FABB-C743-429A-9950-B6A038A069D0}] (.Pas de propriétaire.) -- C:\Program Files (x86)\LucasArts\Star Wars Battlefront II\LaunchBFII.exe
    [MD5.00000000000000000000000000000000] [APT] [{F1ECB53D-86AD-456E-BFE2-D6CD974E114E}] (.Pas de propriétaire.) -- C:\Users\guyot\Desktop\Guitar Pro 5.0 Espa¤ol + Crack + KeyGen\Guitar Pro 5 Demo.exe (.not file.)
    [MD5.6209AAF0C2E09E026AEF59D94E00D2C9] [APT] [{FC3652C6-AAD6-49DC-B528-B00C1454DFDD}] (.Bethesda Softworks.) -- C:\Program Files (x86)\Bethesda Softworks\Morrowind\Morrowind Launcher.exe
    [MD5.6209AAF0C2E09E026AEF59D94E00D2C9] [APT] [{FF3FFEBB-78C3-4D24-BDD4-D549B293842F}] (.Bethesda Softworks.) -- C:\Program Files (x86)\Bethesda Softworks\Morrowind\Morrowind Launcher.exe

    ---\\ Pilotes lancés au démarrage (O41)
    O41 - Driver: C:\Windows\system32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
    O41 - Driver: (bdfwfpf) . (.BitDefender - BitDefender Firewall WFP Filter Driver.) - C:\Program Files\Common Files\BitDefender\BitDefender Firewall\bdfwfpf.sys
    O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
    O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\drivers\cdrom.sys
    O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
    O41 - Driver: C:\Windows\system32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
    O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
    O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
    O41 - Driver: C:\Windows\system32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
    O41 - Driver: C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
    O41 - Driver: C:\Windows\system32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
    O41 - Driver: C:\Windows\system32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
    O41 - Driver: C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
    O41 - Driver: C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
    O41 - Driver: C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
    O41 - Driver: (Serial) . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) - C:\Windows\System32\DRIVERS\serial.sys
    O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
    O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys
    O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
    O41 - Driver: C:\Windows\system32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
    O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys

    ---\\ Logiciels installés (O42)
    O42 - Logiciel: 7-Zip 4.65 - (.Pas de propriétaire.) [HKLM][64Bits] -- 7-Zip
    O42 - Logiciel: AMD Drag and Drop Transcoding - (.ATI Technologies Inc..) [HKLM] -- {B95653AB-0E7F-204A-3226-17E9F38E6951}
    O42 - Logiciel: ATI AVIVO64 Codecs - (.ATI Technologies Inc..) [HKLM] -- {E7DA67AE-5A56-75D1-C76E-821217C4FEB9}
    O42 - Logiciel: ATI Catalyst Install Manager - (.ATI Technologies, Inc..) [HKLM] -- {54A0FF28-05C4-81E3-3CC1-13D0C2519EFF}
    O42 - Logiciel: ATI Catalyst Registration - (.ATI Technologies Inc..) [HKLM][64Bits] -- {11083C7A-D0D6-4DA4-8C3A-74B8389EC07B}
    O42 - Logiciel: ATI Problem Report Wizard - (.ATI Technologies.) [HKLM] -- {2FF804EA-34D7-B18B-CF46-2DF3B7117AF0}
    O42 - Logiciel: ATI Stream SDK v2 Developer - (.ATI Technologies Inc..) [HKLM] -- {22441735-5983-AD2A-5CC5-FA2CCD7EF732}
    O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX
    O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
    O42 - Logiciel: Adobe Reader X (10.0.1) - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AA0000000001}
    O42 - Logiciel: Ares 2.1.3 - (.Ares Development Group.) [HKLM][64Bits] -- Ares
    O42 - Logiciel: Barre d'outils MSN - (.Pas de propriétaire.) [HKLM][64Bits] -- MSN Toolbar
    O42 - Logiciel: Bing Bar - (.Microsoft Corporation.) [HKLM][64Bits] -- {77F8A71E-3515-4832-B8B2-2F1EDBD2E0F1}
    O42 - Logiciel: BioShock - (.2K Games.) [HKLM][64Bits] -- {E280923D-C5D9-4728-8C79-AC9A0DC75875}
    O42 - Logiciel: BitDefender Antivirus Pro 2011 - (.BitDefender.) [HKLM] -- BitDefender
    O42 - Logiciel: BitDefender Antivirus Pro 2011 - (.BitDefender.) [HKLM] -- {5A2935F1-137E-454C-B4F8-C379709449E9}
    O42 - Logiciel: Blender (remove only) - (.Pas de propriétaire.) [HKLM][64Bits] -- Blender
    O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner
    O42 - Logiciel: Catalyst Control Center - Branding - (.ATI.) [HKLM][64Bits] -- {6AB57823-3580-4CE0-9CF0-072E2A39460C}
    O42 - Logiciel: Crysis(R) - (.Electronic Arts.) [HKLM][64Bits] -- {000E79B7-E725-4F01-870A-C12942B7F8E4}
    O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
    O42 - Logiciel: Dark Messiah - (.Ubisoft.) [HKCU] -- {A8E2EF8F-73EF-4DD8-BB38-31FCCAF50103}
    O42 - Logiciel: EA Download Manager - (.Electronic Arts.) [HKLM][64Bits] -- InstallShield_{EF7E931D-DC84-471B-8DB6-A83358095474}
    O42 - Logiciel: Fallout 3 - (.Bethesda Softworks.) [HKLM][64Bits] -- {974C4B12-4D02-4879-85E0-61C95CC63E9E}
    O42 - Logiciel: GIMP 2.6.8 - (.Pas de propriétaire.) [HKLM][64Bits] -- WinGimp-2.0_is1
    O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM][64Bits] -- {488F0347-C4A7-4374-91A7-30818BEDA710}
    O42 - Logiciel: GameSpy Arcade - (.Pas de propriétaire.) [HKLM][64Bits] -- GameSpy Arcade
    O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
    O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
    O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
    O42 - Logiciel: Host OpenAL - (.Creative Technology Limited.) [HKLM][64Bits] -- Host OpenAL
    O42 - Logiciel: HydraVision - (.ATI Technologies Inc..) [HKLM][64Bits] -- {2E5AC744-87A6-CAC6-F992-515806007F1E}
    O42 - Logiciel: IZArc 4.1.6 - (.Ivan Zahariev.) [HKLM][64Bits] -- {97C82B44-D408-4F14-9252-47FC1636D23E}_is1
    O42 - Logiciel: Iadah Toolbar - (.DevNet.) [HKCU] -- IadahToolbar
    O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
    O42 - Logiciel: Les Sims 2 - (.Pas de propriétaire.) [HKLM][64Bits] -- {6E7DD182-9FC6-4651-0095-2E666CC6AF35}
    O42 - Logiciel: Les Sims 2 : La bonne affaire - (.Pas de propriétaire.) [HKLM][64Bits] -- {7B3577F5-1D82-4C9B-008B-69D026FD8BCA}
    O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
    O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9}
    O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM][64Bits] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
    O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
    O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM][64Bits] -- {93665FB0-2A3D-47E1-AB9A-1925130924BB}
    O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Microsoft.) [HKLM][64Bits] -- {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
    O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile
    O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}
    O42 - Logiciel: Microsoft Games for Windows - LIVE - (.Microsoft Corporation.) [HKLM][64Bits] -- {86A4C6D9-29EE-4719-AFA1-BA3341862B83}
    O42 - Logiciel: Microsoft Games for Windows - LIVE Redistributable - (.Microsoft Corporation.) [HKLM][64Bits] -- {1FDA5A37-B22D-43FF-B582-B8964050DC13}
    O42 - Logiciel: Microsoft Office Word Viewer 2003 - (.Microsoft Corporation.) [HKLM][64Bits] -- {9085040C-6000-11D3-8CFE-0150048383C9}
    O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM][64Bits] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
    O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
    O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {B6E3757B-5E77-3915-866A-CCFC4B8D194C}
    O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM][64Bits] -- {770657D0-A123-3C07-8E44-1C83EC895118}
    O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable (x64) - (.Microsoft Corporation.) [HKLM] -- {071c9b48-7c32-4621-a0ac-3f809523288f}
    O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM][64Bits] -- {7299052b-02a4-4627-81f2-1818da5d550d}
    O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM][64Bits] -- {002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
    O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 - (.Microsoft Corporation.) [HKLM] -- {350AA351-21FA-3270-8B7A-835434E766AD}
    O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {8220EEFE-38CD-377E-8595-13398D740ACE}
    O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {4B6C7001-C7D6-3710-913E-5BC23FCE91E6}
    O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM][64Bits] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}
    O42 - Logiciel: Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 - (.Microsoft Corporation.) [HKLM] -- {DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}
    O42 - Logiciel: Morrowind - (.Pas de propriétaire.) [HKLM][64Bits] -- {7CCA1688-6F09-49AE-887B-E29A552A187A}
    O42 - Logiciel: Mozilla Firefox (3.6.16) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox (3.6.16)
    O42 - Logiciel: Need for Speed Underground 2 - (.Pas de propriétaire.) [HKLM][64Bits] -- {909F8EBC-EC7F-48FF-0085-475D818F0F31}
    O42 - Logiciel: Oblivion - (.Bethesda Softworks.) [HKLM][64Bits] -- {35CB6715-41F8-4F99-8881-6FC75BF054B0}
    O42 - Logiciel: OpenOffice.org 3.2 - (.OpenOffice.org.) [HKLM][64Bits] -- {97B3824E-B2D2-4C49-A860-BCA56F10B040}
    O42 - Logiciel: Privoxy 3.0.6 - (.Pas de propriétaire.) [HKLM][64Bits] -- Privoxy
    O42 - Logiciel: Project64 1.6 - (.Project64.) [HKLM][64Bits] -- {9559F7CA-5E34-4237-A2D9-D856464AD727}
    O42 - Logiciel: Revo Uninstaller 1.90 - (.VS Revo Group.) [HKLM][64Bits] -- Revo Uninstaller
    O42 - Logiciel: SAGEM F@st 800-840 - (.SAGEM.) [HKLM][64Bits] -- {4AE3A0CB-87B0-4F51-BECD-3D1F8DFDD62F}
    O42 - Logiciel: SPORE(TM) - (.Electronic Arts.) [HKLM][64Bits] -- {9DF0196F-B6B8-4C3A-8790-DE42AA530101}
    O42 - Logiciel: SPORE(TM) Aventures Galactiques - (.Electronic Arts.) [HKLM][64Bits] -- {63CEA2E4-4FE7-4F2C-B388-C1313D24157C}
    O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2160841
    O42 - Logiciel: Skype Toolbars - (.Skype Technologies S.A..) [HKLM][64Bits] -- {CD95D125-2992-4858-B3EF-5F6FB52FBAD6}
    O42 - Logiciel: Skype(TM) 5.0 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {E633D396-5188-4E9D-8F6B-BFB8BF3467E8}
    O42 - Logiciel: Softonic_France Toolbar - (.Softonic_France.) [HKLM][64Bits] -- Softonic_France Toolbar
    O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM][64Bits] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1
    O42 - Logiciel: Star Wars Battlefront II - (.LucasArts.) [HKLM][64Bits] -- {3D374523-CFDE-461A-827E-2A102E2AB365}
    O42 - Logiciel: Steam - (.Valve.) [HKLM][64Bits] -- {048298C9-A4D3-490B-9FF9-AB023A9238F3}
    O42 - Logiciel: TES Construction Set - (.Pas de propriétaire.) [HKLM][64Bits] -- {8245C111-D83F-4C66-BBC6-2424F6116944}
    O42 - Logiciel: Team Fortress 2 - (.Valve.) [HKLM][64Bits] -- Steam App 440
    O42 - Logiciel: The Lord of the Rings FREE Trial - (.ATI Technologies Inc..) [HKLM][64Bits] -- {8ACC73AA-6511-7C55-B1A9-8E5D1DEAFAA3}
    O42 - Logiciel: Tor 0.1.2.18a - (.Pas de propriétaire.) [HKLM][64Bits] -- Tor
    O42 - Logiciel: TuxGuitar 1.2 - (.Pas de propriétaire.) [HKLM][64Bits] -- TuxGuitar_0
    O42 - Logiciel: VIA Gestionnaire de périphériques de plate-forme - (.VIA Technologies, Inc..) [HKLM][64Bits] -- InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}
    O42 - Logiciel: Vidalia 0.0.14 - (.Pas de propriétaire.) [HKLM][64Bits] -- Vidalia
    O42 - Logiciel: WMV9/VC-1 Video Playback - (.ATI Technologies Inc..) [HKLM] -- {B3012F41-D8C7-5ABD-05D1-3EF39D9ACC22}
    O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM][64Bits] -- WinLiveSuite
    O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM][64Bits] -- {34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}
    O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM][64Bits] -- {D45240D3-B6B3-4FF9-B243-54ECE3E10066}
    O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM][64Bits] -- {76810709-A7D3-468D-9167-A1780C1E766C}
    O42 - Logiciel: Windows Live ID Sign-in Assistant - (.Microsoft Corporation.) [HKLM] -- {1B8ABA62-74F0-47ED-B18C-A43128E591B8}
    O42 - Logiciel: Windows Live Installer - (.Microsoft Corporation.) [HKLM][64Bits] -- {0B0F231F-CE6A-483D-AA23-77B364F75917}
    O42 - Logiciel: Windows Live Language Selector - (.Microsoft Corporation.) [HKLM] -- {5EB6F3CB-46F4-451F-A028-7F6D8D35D7D0}
    O42 - Logiciel: Windows Live MIME IFilter - (.Microsoft Corporation.) [HKLM] -- {DA54F80E-261C-41A2-A855-549A144F2F59}
    O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM][64Bits] -- {9D56775A-93F3-44A3-8092-840E3826DE30}
    O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM][64Bits] -- {9FAE6E8D-E686-49F5-A574-0A58DFD9580C}
    O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {6057E21C-ABE9-4059-AE3E-3BEB9925E660}
    O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {EB4DF488-AAEF-406F-A341-CB2AAA315B90}
    O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM][64Bits] -- {6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}
    O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM][64Bits] -- {92EA4134-10D1-418A-91E1-5A0453131A38}
    O42 - Logiciel: Windows Live PIMT Platform - (.Microsoft Corporation.) [HKLM][64Bits] -- {4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}
    O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM][64Bits] -- {A9BDCA6B-3653-467B-AC83-94367DA3BFE3}
    O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM][64Bits] -- {C893D8C0-1BA0-4517-B11C-E89B65E72F70}
    O42 - Logiciel: Windows Live Photo Gallery - (.Microsoft Corporation.) [HKLM][64Bits] -- {3336F667-9049-4D46-98B6-4C743EEBC5B1}
    O42 - Logiciel: Windows Live SOXE - (.Microsoft Corporation.) [HKLM][64Bits] -- {682B3E4F-696A-42DE-A41C-4C07EA1678B4}
    O42 - Logiciel: Windows Live SOXE Definitions - (.Microsoft Corporation.) [HKLM][64Bits] -- {200FEC62-3C34-4D60-9CE8-EC372E01C08F}
    O42 - Logiciel: Windows Live UX Platform - (.Microsoft Corporation.) [HKLM][64Bits] -- {CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}
    O42 - Logiciel: Windows Live UX Platform Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {09F56A49-A7B1-4AAB-95B9-D13094254AD1}
    O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM][64Bits] -- {3B9A92DA-6374-4872-B646-253F18624D5F}
    O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM][64Bits] -- {A726AE06-AAA3-43D1-87E3-70F510314F04}
    O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM][64Bits] -- {AAAFC670-569B-4A2F-82B4-42945E0DE3EF}
    O42 - Logiciel: Windows Live Writer Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {62687B11-58B5-4A18-9BC3-9DF4CE03F194}
    O42 - Logiciel: Xfire (remove only) - (.Pas de propriétaire.) [HKLM][64Bits] -- Xfire
    O42 - Logiciel: [HKLM\Software\Privoxy] - (.Pas de propriétaire.) [HKLM][64Bits] -- PunkBusterSvc
    O42 - Logiciel: aMSN 0.98.3 - (.Pas de propriétaire.) [HKLM][64Bits] -- aMSN
    O42 - Logiciel: eMule - (.Pas de propriétaire.) [HKLM][64Bits] -- eMule

    ---\\ HKCU & HKLM Software Keys
    [HKCU\Software\7-Zip]
    [HKCU\Software\AMD]
    [HKCU\Software\ATI]
    [HKCU\Software\Ad-Remover]
    [HKCU\Software\Adobe]
    [HKCU\Software\AppDataLow\Software\Conduit]
    [HKCU\Software\AppDataLow\Software\Microsoft]
    [HKCU\Software\AppDataLow\Software\Monitored]
    [HKCU\Software\AppDataLow\Software\PriceGong]
    [HKCU\Software\AppDataLow\Software\Softonic_France]
    [HKCU\Software\AppDataLow\Software\settings]
    [HKCU\Software\AppDataLow\Software]
    [HKCU\Software\AppDataLow]
    [HKCU\Software\Ares]
    [HKCU\Software\Battle.net]
    [HKCU\Software\BitDefender]
    [HKCU\Software\Classes]
    [HKCU\Software\Clients]
    [HKCU\Software\Creative Tech]
    [HKCU\Software\DevNet]
    [HKCU\Software\GameSpy]
    [HKCU\Software\Google]
    [HKCU\Software\Herac]
    [HKCU\Software\IM Providers]
    [HKCU\Software\INCAInternet]
    [HKCU\Software\IZSoftware]
    [HKCU\Software\JaboSoft]
    [HKCU\Software\JustCause2]
    [HKCU\Software\LowRegistry]
    [HKCU\Software\LucasArts]
    [HKCU\Software\Macromedia]
    [HKCU\Software\Malwarebytes' Anti-Malware]
    [HKCU\Software\Mozilla]
    [HKCU\Software\N64 Emulation]
    [HKCU\Software\Netscape]
    [HKCU\Software\OpenOffice.org]
    [HKCU\Software\Piriform]
    [HKCU\Software\Policies]
    [HKCU\Software\Privoxy]
    [HKCU\Software\Safer Networking Limited]
    [HKCU\Software\SecuROM]
    [HKCU\Software\SkypeApps]
    [HKCU\Software\Skype]
    [HKCU\Software\Softonic]
    [HKCU\Software\Sysinternals]
    [HKCU\Software\Ubisoft]
    [HKCU\Software\VSRevoGroup]
    [HKCU\Software\Valve]
    [HKCU\Software\Wget]
    [HKCU\Software\WinRAR SFX]
    [HKCU\Software\Windows Live Writer]
    [HKCU\Software\Wow6432Node]
    [HKCU\Software\Xfire]
    [HKCU\Software\aMSN]
    [HKCU\Software\cybelsoft]
    [HKCU\Software\eMule]
    [HKLM\Software\2K Games]
    [HKLM\Software\AMD]
    [HKLM\Software\ASUS]
    [HKLM\Software\ATI Technologies]
    [HKLM\Software\ATI]
    [HKLM\Software\AVC3]
    [HKLM\Software\Adobe]
    [HKLM\Software\Analog Devices]
    [HKLM\Software\Battle.net]
    [HKLM\Software\Bethesda Softworks]
    [HKLM\Software\BlenderFoundation]
    [HKLM\Software\Classes]
    [HKLM\Software\Clients]
    [HKLM\Software\Creative Labs]
    [HKLM\Software\Creative Tech]
    [HKLM\Software\Crytek]
    [HKLM\Software\DevNet]
    [HKLM\Software\EA Games]
    [HKLM\Software\Electronic Arts]
    [HKLM\Software\Even Balance]
    [HKLM\Software\FRANCE TELECOM]
    [HKLM\Software\GalaNetEu]
    [HKLM\Software\Google]
    [HKLM\Software\InstallShield]
    [HKLM\Software\Intel]
    [HKLM\Software\Khronos]
    [HKLM\Software\LucasArts]
    [HKLM\Software\Macromedia]
    [HKLM\Software\Malwarebytes' Anti-Malware]
    [HKLM\Software\MidasHeurScanner]
    [HKLM\Software\MozillaPlugins]
    [HKLM\Software\Mozilla]
    [HKLM\Software\ODBC]
    [HKLM\Software\OpenAL]
    [HKLM\Software\OpenOffice.org]
    [HKLM\Software\Policies]
    [HKLM\Software\QSound Labs, Inc.]
    [HKLM\Software\RegisteredApplications]
    [HKLM\Software\SAGEM]
    [HKLM\Software\Safer Networking Limited]
    [HKLM\Software\Skype]
    [HKLM\Software\Softonic_France]
    [HKLM\Software\Sonic]
    [HKLM\Software\Sun Microsystems]
    [HKLM\Software\Swearware]
    [HKLM\Software\Ubisoft]
    [HKLM\Software\Uniblue]
    [HKLM\Software\VIA Technologies, Inc]
    [HKLM\Software\Valve]
    [HKLM\Software\Volatile]
    [HKLM\Software\Wow6432Node]
    [HKLM\Software\cybelsoft]
    [HKLM\Software\mozilla.org]
    [HKLM\Software\swearware]

    ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
    O43 - CFD: 13/01/2010 - 09:58:34 - [23462411] ----D- C:\Program Files\ATI
    O43 - CFD: 28/12/2010 - 22:18:20 - [28] ----D- C:\Program Files\ATI Technologies
    O43 - CFD: 29/12/2010 - 18:33:04 - [149986318] ----D- C:\Program Files\BitDefender
    O43 - CFD: 03/04/2011 - 13:11:58 - [1083643218] ----D- C:\Program Files\Common Files
    O43 - CFD: 19/01/2011 - 17:39:30 - [6643344] ----D- C:\Program Files\Creative
    O43 - CFD: 21/08/2010 - 13:16:50 - [2950] ----D- C:\Program Files\Diablo II Shareware
    O43 - CFD: 02/04/2011 - 20:46:52 - [90256916] ----D- C:\Program Files\DVD Maker
    O43 - CFD: 13/01/2010 - 09:31:32 - [0] -SH-D- C:\Program Files\Fichiers communs
    O43 - CFD: 24/01/2010 - 00:06:54 - [1931968] ----D- C:\Program Files\Google
    O43 - CFD: 02/04/2011 - 20:46:52 - [5182765] ----D- C:\Program Files\Internet Explorer
    O43 - CFD: 14/07/2009 - 17:35:26 - [149237810] ----D- C:\Program Files\Microsoft Games
    O43 - CFD: 14/07/2009 - 07:32:40 - [25757] ----D- C:\Program Files\MSBuild
    O43 - CFD: 14/07/2009 - 07:32:40 - [36813993] ----D- C:\Program Files\Reference Assemblies
    O43 - CFD: 14/07/2009 - 07:09:28 - [0] --H-D- C:\Program Files\Uninstall Information
    O43 - CFD: 02/04/2011 - 20:46:42 - [4039680] ----D- C:\Program Files\Windows Defender
    O43 - CFD: 02/04/2011 - 20:46:50 - [9224824] ----D- C:\Program Files\Windows Journal
    O43 - CFD: 23/10/2010 - 14:04:34 - [43896] ----D- C:\Program Files\Windows Live
    O43 - CFD: 02/04/2011 - 20:46:52 - [6667776] ----D- C:\Program Files\Windows Mail
    O43 - CFD: 02/04/2011 - 20:46:50 - [7687085] ----D- C:\Program Files\Windows Media Player
    O43 - CFD: 13/01/2010 - 09:31:32 - [12627636] ----D- C:\Program Files\Windows NT
    O43 - CFD: 02/04/2011 - 20:46:50 - [5516056] ----D- C:\Program Files\Windows Photo Viewer
    O43 - CFD: 02/04/2011 - 20:46:50 - [244736] ----D- C:\Program Files\Windows Portable Devices
    O43 - CFD: 02/04/2011 - 20:46:52 - [7044767] ----D- C:\Program Files\Windows Sidebar
    O43 - CFD: 28/12/2010 - 19:37:00 - [5392136] ----D- C:\Program Files\Common Files\ATI Technologies
    O43 - CFD: 29/12/2010 - 18:33:04 - [979652045] ----D- C:\Program Files\Common Files\BitDefender
    O43 - CFD: 19/08/2010 - 18:07:52 - [24619886] ----D- C:\Program Files\Common Files\INCA Shared
    O43 - CFD: 23/10/2010 - 14:04:24 - [61071846] ----D- C:\Program Files\Common Files\Microsoft Shared
    O43 - CFD: 14/07/2009 - 05:20:10 - [2702] ----D- C:\Program Files\Common Files\Services
    O43 - CFD: 14/07/2009 - 05:20:10 - [608768] ----D- C:\Program Files\Common Files\SpeechEngines
    O43 - CFD: 14/07/2009 - 17:24:10 - [12194291] ----D- C:\Program Files\Common Files\System
    O43 - CFD: 29/12/2010 - 16:19:28 - [3413] ----D- C:\ProgramData\3e460000-82e7-4b13-7fe1-2948b090cb6
    O43 - CFD: 29/12/2010 - 16:15:18 - [4506] ----D- C:\ProgramData\5a810000-11fe-40a8-e2d6-aff8e28e4b90
    O43 - CFD: 09/01/2011 - 10:36:00 - [124467961] ----D- C:\ProgramData\Adobe
    O43 - CFD: 14/07/2009 - 07:08:58 - [0] -SH-D- C:\ProgramData\Application Data
    O43 - CFD: 28/12/2010 - 22:18:34 - [188] ----D- C:\ProgramData\ATI
    O43 - CFD: 29/12/2010 - 21:05:06 - [72] ----D- C:\ProgramData\bdch
    O43 - CFD: 29/12/2010 - 18:33:54 - [9046468] ----D- C:\ProgramData\BitDefender
    O43 - CFD: 13/01/2010 - 09:31:32 - [0] -SH-D- C:\ProgramData\Bureau
    O43 - CFD: 14/07/2009 - 07:08:58 - [0] -SH-D- C:\ProgramData\Desktop
    O43 - CFD: 14/07/2009 - 07:08:58 - [0] -SH-D- C:\ProgramData\Documents
    O43 - CFD: 06/03/2010 - 21:42:26 - [87670] ----D- C:\ProgramData\Electronic Arts
    O43 - CFD: 15/05/2010 - 14:37:50 - [0] ----D- C:\ProgramData\eMule
    O43 - CFD: 13/01/2010 - 09:31:32 - [0] -SH-D- C:\ProgramData\Favoris
    O43 - CFD: 14/07/2009 - 07:08:58 - [0] -SH-D- C:\ProgramData\Favorites
    O43 - CFD: 24/01/2010 - 00:06:58 - [536138] ----D- C:\ProgramData\Google
    O43 - CFD: 16/01/2011 - 00:33:20 - [1230964] ----D- C:\ProgramData\ma-config.com
    O43 - CFD: 25/12/2010 - 13:18:28 - [199] ----D- C:\ProgramData\Malwarebytes
    O43 - CFD: 21/08/2010 - 19:08:58 - [3702] ----D- C:\ProgramData\McAfee
    O43 - CFD: 06/02/2010 - 20:09:38 - [1387] ----D- C:\ProgramData\Media Center Programs
    O43 - CFD: 13/01/2010 - 09:31:32 - [0] -SH-D- C:\ProgramData\Menu Démarrer
    O43 - CFD: 23/03/2011 - 17:06:50 - [174227333] -S--D- C:\ProgramData\Microsoft
    O43 - CFD: 13/01/2010 - 09:31:32 - [0] -SH-D- C:\ProgramData\Modèles
    O43 - CFD: 12/12/2010 - 17:46:26 - [21442894] ----D- C:\ProgramData\Skype
    O43 - CFD: 04/04/2011 - 17:32:10 - [78698] ----D- C:\ProgramData\Spybot - Search & Destroy
    O43 - CFD: 14/07/2009 - 07:08:58 - [0] -SH-D- C:\ProgramData\Start Menu
    O43 - CFD: 14/07/2009 - 07:08:58 - [0] -SH-D- C:\ProgramData\Templates
    O43 - CFD: 09/01/2011 - 10:34:22 - [2998313] ----D- C:\Users\guyot\AppData\Roaming\Adobe
    O43 - CFD: 30/03/2010 - 19:54:08 - [0] ----D- C:\Users\guyot\AppData\Roaming\AdobeUM
    O43 - CFD: 21/01/2010 - 21:22:58 - [0] ----D- C:\Users\guyot\AppData\Roaming\ATI
    O43 - CFD: 11/11/2010 - 11:47:34 - [0] ----D- C:\Users\guyot\AppData\Roaming\Audacity
    O43 - CFD: 03/04/2011 - 19:03:04 - [986585] ----D- C:\Users\guyot\AppData\Roaming\Bioshock
    O43 - CFD: 29/12/2010 - 18:33:10 - [78144] ----D- C:\Users\guyot\AppData\Roaming\BitDefender
    O43 - CFD: 18/11/2010 - 18:52:40 - [7347668] ----D- C:\Users\guyot\AppData\Roaming\Blender Foundation
    O43 - CFD: 24/01/2010 - 10:24:26 - [0] ----D- C:\Users\guyot\AppData\Roaming\Google
    O43 - CFD: 09/06/2010 - 18:39:32 - [169] ----D- C:\Users\guyot\AppData\Roaming\gtk-2.0
    O43 - CFD: 02/06/2010 - 18:10:54 - [3638] ----D- C:\Users\guyot\AppData\Roaming\Icones
    O43 - CFD: 21/01/2010 - 21:21:34 - [0] ----D- C:\Users\guyot\AppData\Roaming\Identities
    O43 - CFD: 24/01/2010 - 22:32:56 - [0] ----D- C:\Users\guyot\AppData\Roaming\InstallShield
    O43 - CFD: 13/02/2010 - 12:51:28 - [3998374] ----D- C:\Users\guyot\AppData\Roaming\InstallShield Installation Information
    O43 - CFD: 24/01/2010 - 00:07:14 - [3554] ----D- C:\Users\guyot\AppData\Roaming\Macromedia
    O43 - CFD: 26/12/2010 - 11:19:08 - [1763] ----D- C:\Users\guyot\AppData\Roaming\Malwarebytes
    O43 - CFD: 14/07/2009 - 17:35:06 - [0] ----D- C:\Users\guyot\AppData\Roaming\Media Center Programs
    O43 - CFD: 19/02/2011 - 15:25:14 - [5744668] -S--D- C:\Users\guyot\AppData\Roaming\Microsoft
    O43 - CFD: 06/02/2010 - 11:46:48 - [9243995] ----D- C:\Users\guyot\AppData\Roaming\Mozilla
    O43 - CFD: 18/02/2010 - 22:12:06 - [3052042] ----D- C:\Users\guyot\AppData\Roaming\OpenOffice.org
    O43 - CFD: 29/12/2010 - 16:08:34 - [0] ----D- C:\Users\guyot\AppData\Roaming\QuickScan
    O43 - CFD: 06/02/2010 - 20:10:56 - [23912] R-H-D- C:\Users\guyot\AppData\Roaming\SecuROM
    O43 - CFD: 09/02/2011 - 11:31:40 - [3997466] ----D- C:\Users\guyot\AppData\Roaming\Skype
    O43 - CFD: 09/02/2011 - 11:16:28 - [13632] ----D- C:\Users\guyot\AppData\Roaming\skypePM
    O43 - CFD: 20/03/2010 - 20:34:44 - [1307629074] ----D- C:\Users\guyot\AppData\Roaming\SPORE
    O43 - CFD: 04/04/2011 - 17:29:32 - [1107365] ----D- C:\Users\guyot\AppData\Roaming\tor
    O43 - CFD: 13/02/2010 - 12:51:28 - [7989389105] ----D- C:\Users\guyot\AppData\Roaming\Ubisoft
    O43 - CFD: 14/03/2011 - 18:10:18 - [0] ----D- C:\Users\guyot\AppData\Roaming\Uniblue
    O43 - CFD: 04/04/2011 - 15:21:50 - [70094] ----D- C:\Users\guyot\AppData\Roaming\Vidalia
    O43 - CFD: 06/02/2010 - 20:00:10 - [0] ----D- C:\Users\guyot\AppData\Roaming\Windows Live Writer
    O43 - CFD: 03/12/2010 - 18:09:02 - [101] ----D- C:\Users\guyot\AppData\Roaming\Xfire
    O43 - CFD: 06/02/2010 - 19:54:42 - [6442409467] ----D- C:\Program Files (x86)\2K Games
    O43 - CFD: 27/01/2010 - 17:06:58 - [3094515] ----D- C:\Program Files (x86)\7-Zip
    O43 - CFD: 04/04/2011 - 15:48:36 - [97805026] ----D- C:\Program Files (x86)\Ad-Remover
    O43 - CFD: 30/12/2010 - 15:18:28 - [114227921] ----D- C:\Program Files (x86)\Adobe
    O43 - CFD: 11/09/2010 - 21:51:34 - [56816955] ----D- C:\Program Files (x86)\aMSN
    O43 - CFD: 11/02/2010 - 19:01:36 - [4555035] ----D- C:\Program Files (x86)\Ares
    O43 - CFD: 28/12/2010 - 19:37:02 - [556326] ----D- C:\Program Files (x86)\ATI
    O43 - CFD: 28/12/2010 - 19:36:56 - [54221243] ----D- C:\Program Files (x86)\ATI Stream
    O43 - CFD: 28/12/2010 - 22:18:32 - [119641049] ----D- C:\Program Files (x86)\ATI Technologies
    O43 - CFD: 14/03/2011 - 18:16:08 - [11536316410] ----D- C:\Program Files (x86)\Bethesda Softworks
    O43 - CFD: 18/11/2010 - 18:52:38 - [32837364] ----D- C:\Program Files (x86)\Blender Foundation
    O43 - CFD: 06/02/2010 - 12:00:40 - [2847944] ----D- C:\Program Files (x86)\CCleaner
    O43 - CFD: 03/04/2011 - 13:11:58 - [348832003] ----D- C:\Program Files (x86)\Common Files
    O43 - CFD: 19/01/2011 - 17:47:26 - [1388549] ----D- C:\Program Files (x86)\Creative
    O43 - CFD: 02/06/2010 - 18:11:36 - [1538032] ----D- C:\Program Files (x86)\DevNet
    O43 - CFD: 01/01/2011 - 15:11:04 - [5405095071] ----D- C:\Program Files (x86)\EA GAMES
    O43 - CFD: 09/09/2010 - 18:13:02 - [13336619288] ----D- C:\Program Files (x86)\Electronic Arts
    O43 - CFD: 15/05/2010 - 14:37:44 - [10906334] ----D- C:\Program Files (x86)\eMule
    O43 - CFD: 03/12/2010 - 18:20:44
    0
  3. moment de grace Messages postés 29099 Date d'inscription   Statut Contributeur sécurité Dernière intervention   2 274
     
    * Télécharge Defogger
    http://www.jpshortstuff.247fixes.com/Defogger.exe

    => lance le
    * Une fenêtre apparait clique sur Disable
    * Redémarre le PC si demandé

    ensuite

    /!\ Il faut impérativement désactiver tous tes logiciels de protection pour utiliser ce programme/!\

    ? Télécharge : Gmer (by Przemyslaw Gmerek)

    http://www.gmer.net/

    ? Dezippe gmer ,cliques sur l'onglet rootkit,lances le scan,des lignes rouges vont apparaitre.

    ? Les lignes rouges indiquent la presence d'un rootkit.Postes moi le rapport gmer (cliques sur copy,puis vas dans demarrer ,puis ouvres le bloc note,vas dans edition et cliques sur coller,le rapport gmer va apparaitre,postes moi le)
    0
  4. humoristik Messages postés 9 Statut Membre
     
    Rebonjour!! Alors j'ai fait ce que tu m'a dit mais Gmer n'a rien trouvé , cela veut il dire que mon PC est clean? En tout cas merci de prendre le temps de m'aider , c'est très gentil de votre part!
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. humoristik Messages postés 9 Statut Membre
     
    je up le sujet , je demande juste confirmation pour savoir si je peux effectivement considérer mon pc comme clean après toutes ces différentes manipulations , merci pour tout ce que vous avez déjà fait en tout cas ^^
    0
Précédent
  • 1
  • 2