Ms removal tool

Résolu/Fermé
vlctxl - 13 avril 2011 à 18:20
 vlctxl - 14 avril 2011 à 05:34
Bonjour, ms removal tool scanne mon ordinateur dont je l,aie meme pas telecharger et bloque tout, quoi faire svp car avast qui ne vaut rien ne l,a pas detecter.



A voir également:

3 réponses

Utilisateur anonyme
13 avril 2011 à 18:25
Salut



* Télécharge RogueKiller (par tigzy)
ICI > RogueKiller (par tigzy)


*( Sous Vista/Seven,clique droit, lancer en tant qu'administrateur )

* Quitte tous tes programmes en cours
* Lance RogueKiller.exe.
* Lorsque demandé, tape 2 et valide

* Un rapport (RKreport.txt) a du se créer à côté de l'exécutable, colle son contenu dans la réponse
* Si le programme a été bloqué, ne pas hésiter a essayer plusieurs fois. ou renommer l'outil en roguekiller.com




Contributeur sécurité CCM
0
oui ca marcher et on m,a dit d,installer antivir qui le detecte, pas avast en tout cas.
0
RogueKiller V4.3.8 par Tigzy
contact sur http://www.sur-la-toile.com
mail: tigzyRK<at>gmail<dot>com
Remontees: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html

Systeme d'exploitation: Windows 7 (6.1.7600 ) 32 bits version
Demarrage : Mode normal
Utilisateur: gst video [Droits d'admin]
Mode: Suppression -- Date : 13/04/2011 20:57:02

Processus malicieux: 0

Entrees de registre: 0

Fichier HOSTS:
0
Run by gst video at 4/13/2011 10:59:06 PM
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html


---\\ Web Browser
MSIE: Internet Explorer v8.0.7600.16385
MFIE: Mozilla Firefox 4.0 v4.0
GCIE: Google Chrome v10.0.648.204 (Defaut)

---\\ System Information
Windows 7 Starter Edition, 32-bit (Build 7600)
Processor: x86 Family 6 Model 28 Stepping 10, GenuineIntel
Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 1011.9 MB (37% free)
System Restore: Activé (Enable)
System drive C: has 102 GB (75%) free of 134 GB

---\\ Logged in mode
Computer Name: GSTVIDEO-PC
User Name: gst video
All Users Names: gst video, Administrateur,
Unselected Option: O45,O61,O62,O65,O66,O82
Logged in as Administrator

---\\ Environnement Variables
%AppData%=C:\Users\gst video\AppData\Roaming
%LocalAppData%=C:\Users\gst video\AppData\Local
%StartMenu%=C:\Users\gst video\AppData\Roaming\Microsoft\Windows\Start Menu

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 102 Go of 134 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 2 Go of 15 Go)
E:\ Hard drive, Flash drive, Thumb drive (Free 0 Go of 0 Go)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK



---\\ Recherche particulière de fichiers génériques
[MD5.2626FC9755BE22F805D3CFA0CE3EE727] - (.Microsoft Corporation - Explorateur Windows.) (.6/25/2010 7:01:39 PM.) -- C:\Windows\Explorer.exe [2614272]
[MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.7/13/2009 8:14:45 PM.) -- C:\Windows\system32\Wininit.exe [96256]
[MD5.78B9ADA2BC8946AF7B17678E0D07A773] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.12/21/2010 12:38:22 AM.) -- C:\Windows\system32\wininet.dll [981504]
[MD5.37CDB7E72EB66BA85A87CBE37E7F03FD] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.6/25/2010 7:01:39 PM.) -- C:\Windows\system32\Winlogon.exe [285696]
[MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.7/13/2009 8:26:15 PM.) -- C:\Windows\system32\drivers\atapi.sys [21584]
[MD5.3795DCD21F740EE799FB7223234215AF] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.7/13/2009 8:20:44 PM.) -- C:\Windows\system32\drivers\ntfs.sys [1210432]



---\\ Processus lancés
[MD5.3453F9A222B72309FD3F1620673C06D3] - (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [601144]
[MD5.031E0AC7341FBF5699011D71D4157D60] - (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray.exe [495708]
[MD5.4B057F27058AD5B6B3C7ED766E47862C] - (.Skyhook Wireless - XPS(TM) Control Panel.) -- C:\Program Files\Skyhook Wireless\XPS\xpscontrolpanel.exe [632136]
[MD5.052F402E557C9EC01B188AD56E336029] - (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe [150552]
[MD5.73E7F1D810AA3520BF15545A57B86712] - (.Zecter Inc. - HP CloudDrive.) -- C:\Program Files\Hewlett-Packard\HP CloudDrive\zumodrive.exe [154304]
[MD5.0BA966FD5349BDF9895F40C045A7C7EC] - (.Intel Corporation - igfxTray Module.) -- C:\Windows\System32\igfxtray.exe [141848]
[MD5.D1930CA970D4250D891F432419E3D6C9] - (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe [186904]
[MD5.5516C26A6AF8EB4E2CAB48EC98A74398] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\Hp\HP Software Update\hpwuschd2.exe [54576]
[MD5.13B671D7253F29DA148569288CECF74B] - (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe [173592]
[MD5.2B3DB9C9D7E206CFCF3E327709BEF3AD] - (.Intel Corporation - igfxsrvc Module.) -- C:\Windows\system32\igfxsrvc.exe [252952]
[MD5.A6D772AA861E673636D48B6EB452ADE3] - (.Microsoft Corporation - Microsoft Office OneNote Quick Launcher.) -- C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE [98696]
[MD5.52DB6CDAC5BC7A1FC884E97C41C91213] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [248040]
[MD5.EB0C1A86359FC518EF5020B15B3EC761] - (.Hewlett-Packard - HP Wireless Assistant.) -- C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe [363064]
[MD5.017B1CDDA13B2FBBD54232BA19C8C6A5] - (.Hewlett-Packard Development Company L.P. - hpCaslNotification.) -- C:\Program Files\Hewlett-Packard\Shared\hpCaslNotification.exe [311352]
[MD5.B0DA80FF42A0819D162A86612896AAF2] - (.Microsoft Corporation - Windows Update.) -- C:\Windows\system32\wuauclt.exe [47104]
[MD5.678F50CBC5537150CFDCCA7944130B6D] - (.Adobe Systems, Inc. - Adobe Flash Player Helper 10.0 r45.) -- C:\Windows\system32\Macromed\Flash\FlashUtil10e.exe [256280]
[MD5.AA08B68EF4E35EFA170CF85A44B23B70] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe [673040]
[MD5.95BEB516BFD2ADD228BE63D543CEA47A] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [642560]



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
M3 - MFPP: Plugins - [gst video] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [gst video] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [gst video] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [gst video] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [gst video] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [gst video] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [gst video] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\Macromed\Flash\NPSWF32.dll
P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.5.) -- C:\Windows\system32\Adobe\Director\np32dsw.dll
P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.50917.0.) -- c:\Program Files\Microsoft Silverlight\4.0.50917.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3502.0922] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@skyhookwireless.com/LokiPlugin] - (.Skyhook Wireless - Loki Plugin v.3.3.3.29.) -- C:\Program Files\Skyhook Wireless\Loki Plugin\nploki.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=8] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.2.183.39\npGoogleOneClick8.dll
M0 - MFSP: prefs.js [gst video - d283nc8t.default] http://hp.ca.msn.com/defaultf.aspx?lang=fr-ca&pc=HPNTDF



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com
R0 - HKUS\S-1-5-21-4287223343-3549328378-2291770896-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKUS\S-1-5-21-4287223343-3549328378-2291770896-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (8.00.7600.16385 (win7_rtm.090713-1255)) -- C:\Windows\System32\ieframe.dll
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll



---\\ ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: VMApplet=C:\WINDOWS\system32\SystemPropertiesPerformance.exe



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} . (.Microsoft Corporation - Windows Live Messenger Companion Core.) -- C:\Program Files\Windows Live\Companion\companioncore.dll
O2 - BHO: LocationFinder Class - {BC0E8AD7-13AA-4694-8EDD-0246BC47A35F} . (.Skyhook Wireless - Loki Plugin.) -- C:\Program Files\Skyhook Wireless\Loki Plugin\loki.dll
O2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} . (.Microsoft Corporation - Bing Bar.) -- C:\Program Files\MSN Toolbar\Platform\6.3.2380.0\npwinext.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: @C:\Program Files\MSN Toolbar\Platform\6.3.2380.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} . (.Microsoft Corporation - Bing Bar.) -- C:\Program Files\MSN Toolbar\Platform\6.3.2380.0\npwinext.dll



---\\ ---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [HP Quick Launch] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
O4 - HKLM\..\Run: [ZumoDrive] . (...) -- C:\Program Files\Hewlett-Packard\HP CloudDrive\ZumoLauncher.lnk
O4 - HKLM\..\Run: [UCam_Menu] Clé orpheline
O4 - HKLM\..\Run: [SysTrayApp] . (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Skyhook Wireless XPS Service] . (.Skyhook Wireless - XPS(TM) Control Panel.) -- C:\Program Files\Skyhook Wireless\XPS\xpscontrolpanel.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [Microsoft Default Manager] . (.Microsoft Corporation - Microsoft Default Manager.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [IAAnotif] . (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [HPWirelessAssistant] . (...) -- C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe
O4 - HKLM\..\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - Global Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Media Suite.lnk . (.ArcSoft Inc..) -- C:\Program Files\Hewlett-Packard\HP Media Suite\Home\ArcStart.exe
O4 - Global Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Scrybe.lnk . (.Acresso Software Inc..) -- C:\Windows\Installer\{13061CAA-0284-4F9A-B460-3D4699575B35}\NewShortcut11_8ACB210B42E44145A8C31F8E3DD765A3.exe
O4 - Global Startup: C:\Users\gst video\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 - Capture d'écran et lancement.lnk . (.Microsoft Corporation.) -- C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE



---\\ ---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\gst video\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\gst video\Desktop\jv16 PowerTools 2011.lnk . (.Macecraft Software.) -- C:\Program Files\jv16 PowerTools 2011\jv16PT.exe
O4 - Global Startup: C:\Users\gst video\Desktop\SoftonicDownloader_for_battery-doubler - Raccourci.lnk . (...) -- C:\Users\gst video\Downloads\SoftonicDownloader_for_battery-doubler.exe
O4 - Global Startup: C:\Users\gst video\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O4 - Global Startup: C:\Users\gst video\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe



---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: E&xport to Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~2\Office12\EXCEL.exe



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} . (.Microsoft Corporation - Windows Live Messenger Companion core resources.) -- C:\Program Files\Windows Live\Companion\companion
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBro
O9 - Extra button: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft Office OneNote Internet Explorer Add-in.) -- C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: S&end to OneNote - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL
O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL



---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} (WRC Class) - http://trial.trymicrosoftoffice.com/...



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{CF9C9CDD-B6DA-4BE5-BE74-A326253F2041}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{D501E13E-DA3B-4BB2-8370-7A8D1AA25424}: DhcpNameServer = 24.200.241.37 24.201.245.77 24.200.243.189
O17 - HKLM\System\CS1\Services\Tcpip\..\{CF9C9CDD-B6DA-4BE5-BE74-A326253F2041}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{D501E13E-DA3B-4BB2-8370-7A8D1AA25424}: DhcpNameServer = 24.200.241.37 24.201.245.77 24.200.243.189
O17 - HKLM\System\CS2\Services\Tcpip\..\{CF9C9CDD-B6DA-4BE5-BE74-A326253F2041}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{D501E13E-DA3B-4BB2-8370-7A8D1AA25424}: DhcpNameServer = 24.200.241.37 24.201.245.77 24.200.243.189
O17 - HKLM\System\CCS\Services\Tcpip\..\{CF9C9CDD-B6DA-4BE5-BE74-A326253F2041}: DhcpDomain = gateway.2wire.net
O17 - HKLM\System\CS1\Services\Tcpip\..\{CF9C9CDD-B6DA-4BE5-BE74-A326253F2041}: DhcpDomain = gateway.2wire.net
O17 - HKLM\System\CS2\Services\Tcpip\..\{CF9C9CDD-B6DA-4BE5-BE74-A326253F2041}: DhcpDomain = gateway.2wire.net
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: (ACDaemon) . (.ArcSoft Inc. - ArcSoft Connect Service.) - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: (AESTFilters) . (.Andrea Electronics Corporation - Andrea filters APO access service (32-bit).) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9691412ff1876250\aestsrv.exe
O23 - Service: (GameConsoleService) . (.WildTangent, Inc. - GameConsoleService.) - C:\Program Files\HP Games\HP Game Console\GameConsoleService.exe
O23 - Service: (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: (HP Health Check Service) . (.Hewlett-Packard Company - HP Support Assistant.) - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: (HP Wireless Assistant Service) . (.Hewlett-Packard - HPPA_Service.) - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
O23 - Service: (HPDrvMntSvc.exe) . (.Hewlett-Packard Company - HP Quick Synchronization Service.) - C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: (hpqwmiex) . (.Hewlett-Packard Company - hpqwmiex Module.) - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: (HPWMISVC) . (.Pas de propriétaire - HPWMISVC Application.) - C:\Program Files\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
O23 - Service: (IAANTMON) . (.Intel Corporation - RAID Monitor.) - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: (ScrybeUpdater) . (.Synaptics, Inc. - Scrybe Update Manager..) - C:\Program Files\Synaptics\Scrybe\Service\ScrybeUpdater.exe
O23 - Service: (STacSV) . (.IDT, Inc. - IDT PC Audio.) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9691412ff1876250\STacSV.exe
O23 - Service: (wlidsvc) . (.Microsoft Corp. - Microsoft® Windows Live ID Service.) - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.exe
O23 - Service: (xpssvc) . (.Skyhook Wireless - XPS(TM) Service.) - C:\Program Files\Skyhook Wireless\XPS\xpssvc.exe



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\HPCeeScheduleForgst video.job
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.BEAEC745256D3158495FEE10BA673E7C] [APT] [HPCeeScheduleForgst video] (.Hewlett-Packard.) -- C:\Program Files\Hewlett-Packard\HP Ceement\HPCEE.exe
[MD5.ED5D30F5D177A12E1A67401440DEA36D] [APT] [RecoveryCDWin7] (.Pas de propriétaire.) -- C:\Program Files\Hewlett-Packard\HP Setup\RemEngine.exe
[MD5.ED5D30F5D177A12E1A67401440DEA36D] [APT] [ServicePlan] (.Pas de propriétaire.) -- C:\Program Files\Hewlett-Packard\HP Setup\RemEngine.exe
[MD5.AF9D21E924DB028012176C572CB482E5] [APT] [First Boot] (.Hewlett-Packard Company.) -- C:\Program Files\Hewlett-Packard\HP Support Framework\HPSF_Utils.exe



---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: C:\Windows\system32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\system32\DRIVERS\blbdrive.sys
O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\system32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\system32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\system32\drivers\discache.sys
O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\DRIVERS\mssmbios.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\system32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\system32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\system32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\system32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\system32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\system32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\system32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\system32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\system32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\system32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\system32\drivers\rdprefmp.sys
O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\system32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\system32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\system32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\system32\DRIVERS\wanarp.sys
O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\system32\DRIVERS\wfplwf.sys



---\\ Logiciels installés (O42)
O42 - Logiciel: 7-Zip 9.20 - (.Pas de propriétaire.) [HKLM] -- 7-Zip
O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM] -- {287ECFA4-719A-2143-A09B-D6A12DE54E40}
O42 - Logiciel: ActiveCheck component for HP Active Support Library - (.Hewlett-Packard.) [HKLM] -- {254C37AA-6B72-4300-84F6-98A82419187E}
O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR
O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {A2BCA9F1-566C-4805-97D1-7FDC93386723}
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Reader 9.4.3 MUI - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-FFFF-7B44-A91000000001}
O42 - Logiciel: Adobe Shockwave Player - (.Adobe Systems, Inc..) [HKLM] -- {D8DFA46A-39F7-4368-810D-18AFCFDDAEAF}
O42 - Logiciel: ArcSoft WebCam Companion 3 - (.ArcSoft.) [HKLM] -- {34985F59-8F6F-46F4-9AD5-53E2714294D2}
O42 - Logiciel: Atheros Driver Installation Program - (.Atheros.) [HKLM] -- {C3A32068-8AB1-4327-BB16-BED9C6219DC7}
O42 - Logiciel: Barre d'outils Bing - (.Microsoft Corporation.) [HKLM] -- {08234a0d-cf39-4dca-99f0-0c5cb496da81}
O42 - Logiciel: Bejeweled 2 Deluxe - (.WildTangent.) [HKLM] -- WT082192
O42 - Logiciel: Bing Bar Platform - (.Microsoft Corporation.) [HKLM] -- {B86C9440-82D7-423C-9FEC-6CB3092D1AA4}
O42 - Logiciel: Blasterball 3 - (.WildTangent.) [HKLM] -- WT082124
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
O42 - Logiciel: Chuzzle Deluxe - (.WildTangent.) [HKLM] -- WT082200
O42 - Logiciel: Complément Messenger - (.Microsoft Corporation.) [HKLM] -- {6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}
O42 - Logiciel: Contrôle ActiveX Windows Live Mesh pour connexions à distance - (.Microsoft Corporation.) [HKLM] -- {55D003F4-9599-44BF-BA9E-95D060730DD3}
O42 - Logiciel: CyberLink DVD Suite - (.CyberLink Corp..) [HKLM] -- InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}
O42 - Logiciel: CyberLink DVD Suite - (.CyberLink Corp..) [HKLM] -- {1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: Diner Dash 2 Restaurant Rescue - (.WildTangent.) [HKLM] -- WT082396
O42 - Logiciel: Dream Chronicles - (.WildTangent.) [HKLM] -- WT083521
O42 - Logiciel: ESU for Microsoft Windows 7 - (.Hewlett-Packard.) [HKLM] -- {3877C901-7B90-4727-A639-B6ED2DD59D43}
O42 - Logiciel: FATE - (.WildTangent.) [HKLM] -- WT082141
O42 - Logiciel: Faerie Solitaire - (.WildTangent.) [HKLM] -- WT082442
O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {488F0347-C4A7-4374-91A7-30818BEDA710}
O42 - Logiciel: Gem Shop - (.WildTangent.) [HKLM] -- WT083529
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {BE06114F-559D-11E0-B5A1-001D0926B1BF}
O42 - Logiciel: HP Battery Check - (.Hewlett-Packard.) [HKLM] -- HP Battery Check
O42 - Logiciel: HP Battery Check - (.Hewlett-Packard.) [HKLM] -- {FDDDD898-725F-498E-8582-938326066177}
O42 - Logiciel: HP CloudDrive - (.Pas de propriétaire.) [HKLM] -- ZumoDrive
O42 - Logiciel: HP Customer Experience Enhancements - (.Hewlett-Packard.) [HKLM] -- {07FA4960-B038-49EB-891B-9F95930AA544}
O42 - Logiciel: HP Game Console - (.WildTangent.) [HKLM] -- My HP Game Console
O42 - Logiciel: HP Games - (.WildTangent.) [HKLM] -- WildTangent hp Master Uninstall
O42 - Logiciel: HP HomeBase - (.ArcSoft.) [HKLM] -- {4F22707C-C8E4-4BC8-881C-FAAB2EF5914B}
O42 - Logiciel: HP MediaSmart Webcam - (.Hewlett-Packard.) [HKLM] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}
O42 - Logiciel: HP MediaSmart Webcam - (.Hewlett-Packard.) [HKLM] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D}
O42 - Logiciel: HP Navigator - (.HP.) [HKLM] -- {DBB9D695-D806-438A-B214-7FB3FADDD174}
O42 - Logiciel: HP Quick Launch - (.Hewlett-Packard Company.) [HKLM] -- {40C915B0-F2A0-423D-BEDF-04D3CE4D4DC5}
O42 - Logiciel: HP Setup - (.Hewlett-Packard.) [HKLM] -- {72D90DB3-A16A-4545-B555-868471101833}
O42 - Logiciel: HP Software Framework - (.Hewlett-Packard Company.) [HKLM] -- {DA200FDD-DE3D-4958-8465-C4FBC869544B}
O42 - Logiciel: HP Support Assistant - (.Hewlett-Packard Company.) [HKLM] -- {08DB3902-2CE0-474D-BCE3-0177766CE9F1}
O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM] -- {D46D081B-F60E-467E-A7C4-117B70D76731}
O42 - Logiciel: HP User Guides 0197 - (.Hewlett-Packard.) [HKLM] -- {015E59D5-FC6C-4C06-A3C9-87A578B021B7}
O42 - Logiciel: HP Wireless Assistant - (.Hewlett-Packard.) [HKLM] -- {EC720706-3F19-4B7F-BDDD-E31D9B3921D2}
O42 - Logiciel: HPAsset component for HP Active Support Library - (.Hewlett-Packard.) [HKLM] -- {669D4A35-146B-4314-89F1-1AC3D7B88367}
O42 - Logiciel: IDT Audio - (.IDT.) [HKLM] -- {E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}
O42 - Logiciel: Insaniquarium Deluxe - (.WildTangent.) [HKLM] -- WT082222
O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Intel Corporation.) [HKLM] -- HDMI
O42 - Logiciel: Intel® Matrix Storage Manager - (.Intel Corporation.) [HKLM] -- {9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}
O42 - Logiciel: Java(TM) 6 Update 20 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216018FF}
O42 - Logiciel: Jewel Match 2 - (.WildTangent.) [HKLM] -- WT083503
O42 - Logiciel: Jewel Quest II - (.WildTangent.) [HKLM] -- WT083514
O42 - Logiciel: Jewel Quest Solitaire - (.WildTangent.) [HKLM] -- WT083510
O42 - Logiciel: JoJo's Fashion Show - (.WildTangent.) [HKLM] -- WT083489
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
O42 - Logiciel: Loki Browser Plugin - (.Skyhook Wireless.) [HKLM] -- {60C58642-B64D-43E6-B7EF-7928019AA012}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: Mahjongg Artifacts - (.WildTangent.) [HKLM] -- WT082409
O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Mesh Runtime - (.Microsoft Corporation.) [HKLM] -- {8C6D6116-B724-4810-8F2D-D047E6B7D68E}
O42 - Logiciel: Microsoft Default Manager - (.Microsoft Corporation.) [HKLM] -- {1CAC7A41-583B-4483-9FA5-3E5465AFF8C2}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0016-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0018-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001B-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}_HOMESTUDENTR_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-00A1-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-00A1-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0115-0409-0000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
O42 - Logiciel: Microsoft Office Excel MUI (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.) [HKLM] -- HOMESTUDENTR
O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office OneNote MUI (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-00A1-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office OneNote MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-00A1-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office PowerPoint MUI (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office PowerPoint Viewer 2007 (French) - (.Microsoft Corporation.) [HKLM] -- {95120000-00AF-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proofing (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}_HOMESTUDENTR_{14809F99-C601-4D4A-9391-F1E8FAA964C5}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}_HOMESTUDENTR_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}
O42 - Logiciel: Microsoft Office Shared MUI (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Shared Setup Metadata MUI (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0115-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Suite Activation Assistant - (.Microsoft Corporation.) [HKLM] -- {E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}
O42 - Logiciel: Microsoft Office Word MUI (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) [HKLM] -- {928B06E4-DDAA-476A-926A-641620326327}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {7299052b-02a4-4627-81f2-1818da5d550d}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {3B160861-7250-451E-B5EE-8B92BF30A710}
O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-040C-0000-0000000FF1CE}
O42 - Logiciel: Mozilla Firefox 4.0 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 4.0 (x86 fr)
O42 - Logiciel: NewFreeScreensaver nfsSkyAnimationHD - (.Pas de propriétaire.) [HKLM] -- nfsSkyAnimationHD New Free Screensaver_is1
O42 - Logiciel: Penguins! - (.WildTangent.) [HKLM] -- WT082168
O42 - Logiciel: Plants vs. Zombies - (.WildTangent.) [HKLM] -- WT082170
O42 - Logiciel: Polar Bowler - (.WildTangent.) [HKLM] -- WT082172
O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM] -- InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}
O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM] -- {40BF1E83-20EB-11D8-97C5-0009C5020658}
O42 - Logiciel: Realtek Ethernet Controller Driver For Windows 7 - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
O42 - Logiciel: Realtek PCIE Card Reader - (.Realtek Semiconductor Corp..) [HKLM] -- {C1594429-8296-4652-BF54-9DBE4932A44C}
O42 - Logiciel: Recovery Manager - (.CyberLink Corp..) [HKLM] -- {44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}
O42 - Logiciel: Skyhook Wireless XPS Service - (.Skyhook Wireless.) [HKLM] -- {0AEE22A8-6430-4CD0-917A-F0EB49F4E814}
O42 - Logiciel: Slingo Deluxe - (.WildTangent.) [HKLM] -- WT082427
O42 - Logiciel: Synaptics Gesture Suite featuring SYNAPTICS | Scrybe - (.Synaptics Inc..) [HKLM] -- {13061CAA-0284-4F9A-B460-3D4699575B35}
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM] -- SynTPDeinstKey
O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}
O42 - Logiciel: Update for Microsoft Office 2007 Help for Common Features (KB963673) - (.Microsoft.) [HKLM] -- {90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AB365889-0395-4FAD-B702-CA5985D53D42}
O42 - Logiciel: Update for Microsoft Office Excel 2007 Help (KB963678) - (.Microsoft.) [HKLM] -- {90120000-0016-0409-0000-0000000FF1CE}_HOMESTUDENTR_{199DF7B6-169C-448C-B511-1054101BE9C9}
O42 - Logiciel: Update for Microsoft Office OneNote 2007 Help (KB963670) - (.Microsoft.) [HKLM] -- {90120000-00A1-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2744EF05-38E1-4D5D-B333-E021EDAEA245}
O42 - Logiciel: Update for Microsoft Office Powerpoint 2007 Help (KB963669) - (.Microsoft.) [HKLM] -- {90120000-0018-0409-0000-0000000FF1CE}_HOMESTUDENTR_{397B1D4F-ED7B-4ACA-A637-43B670843876}
O42 - Logiciel: Update for Microsoft Office Script Editor Help (KB963671) - (.Microsoft.) [HKLM] -- {90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{CD11C6A2-FFC6-4271-8EAB-79C3582F505C}
O42 - Logiciel: Update for Microsoft Office Word 2007 (KB974631) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{1D53FB73-9826-4541-B2E0-A239C6EBA718}
O42 - Logiciel: Update for Microsoft Office Word 2007 (KB974631) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{34726474-50D6-49FC-B8AC-35411459D27A}
O42 - Logiciel: Update for Microsoft Office Word 2007 Help (KB963665) - (.Microsoft.) [HKLM] -- {90120000-001B-0409-0000-0000000FF1CE}_HOMESTUDENTR_{80E762AA-C921-4839-9D7D-DB62A72C0726}
O42 - Logiciel: Virtual Villagers - The Secret City - (.WildTangent.) [HKLM] -- WT082241
O42 - Logiciel: Wedding Dash - (.WildTangent.) [HKLM] -- WT082422
O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite
O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM] -- {34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}
O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {D45240D3-B6B3-4FF9-B243-54ECE3E10066}
O42 - Logiciel: Windows Live Family Safety - (.Microsoft Corporation.) [HKLM] -- {F53D678E-238F-4A71-9742-08BB6774E9DC}
O42 - Logiciel: Windows Live Family Safety - (.Microsoft Corporation.) [HKLM] -- {FCFBA290-CB48-4AF1-A241-2685AEDEDD66}
O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM] -- {2075CB0A-D26F-4DAA-B424-5079296B43BA}
O42 - Logiciel: Windows Live ID Sign-in Assistant - (.Microsoft Corporation.) [HKLM] -- {61AD15B2-50DB-4686-A739-14FE180D4429}
O42 - Logiciel: Windows Live Installer - (.Microsoft Corporation.) [HKLM] -- {0B0F231F-CE6A-483D-AA23-77B364F75917}
O42 - Logiciel: Windows Live MIME IFilter - (.Microsoft Corporation.) [HKLM] -- {AF844339-2F8A-4593-81B3-9F4C54038C4E}
O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {9D56775A-93F3-44A3-8092-840E3826DE30}
O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {9FAE6E8D-E686-49F5-A574-0A58DFD9580C}
O42 - Logiciel: Windows Live Mesh - (.Microsoft Corporation.) [HKLM] -- {841F1FB4-FDF8-461C-A496-3E1CFD84C0B5}
O42 - Logiciel: Windows Live Mesh - (.Microsoft Corporation.) [HKLM] -- {DECDCB7C-58CC-4865-91AF-627F9798FE48}
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {6057E21C-ABE9-4059-AE3E-3BEB9925E660}
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {EB4DF488-AAEF-406F-A341-CB2AAA315B90}
O42 - Logiciel: Windows Live Messenger Companion Core - (.Microsoft Corporation.) [HKLM] -- {78A96B4C-A643-4D0F-98C2-A8E16A6669F9}
O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM] -- {6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}
O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM] -- {92EA4134-10D1-418A-91E1-5A0453131A38}
O42 - Logiciel: Windows Live PIMT Platform - (.Microsoft Corporation.) [HKLM] -- {4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}
O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM] -- {A9BDCA6B-3653-467B-AC83-94367DA3BFE3}
O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM] -- {C893D8C0-1BA0-4517-B11C-E89B65E72F70}
O42 - Logiciel: Windows Live Photo Gallery - (.Microsoft Corporation.) [HKLM] -- {3336F667-9049-4D46-98B6-4C743EEBC5B1}
O42 - Logiciel: Windows Live Remote Client - (.Microsoft Corporation.) [HKLM] -- {19A4A990-5343-4FF7-B3B5-6F046C091EDF}
O42 - Logiciel: Windows Live Remote Client Resources - (.Microsoft Corporation.) [HKLM] -- {DFDBE1F9-04CE-4645-BB6C-4590EABC7A9C}
O42 - Logiciel: Windows Live Remote Service - (.Microsoft Corporation.) [HKLM] -- {227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}
O42 - Logiciel: Windows Live Remote Service Resources - (.Microsoft Corporation.) [HKLM] -- {AB93C51F-71F9-4A28-8134-FE1B5B9373E9}
O42 - Logiciel: Windows Live SOXE - (.Microsoft Corporation.) [HKLM] -- {682B3E4F-696A-42DE-A41C-4C07EA1678B4}
O42 - Logiciel: Windows Live SOXE Definitions - (.Microsoft Corporation.) [HKLM] -- {200FEC62-3C34-4D60-9CE8-EC372E01C08F}
O42 - Logiciel: Windows Live UX Platform - (.Microsoft Corporation.) [HKLM] -- {CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}
O42 - Logiciel: Windows Live UX Platform Language Pack - (.Microsoft Corporation.) [HKLM] -- {09F56A49-A7B1-4AAB-95B9-D13094254AD1}
O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {3B9A92DA-6374-4872-B646-253F18624D5F}
O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {A726AE06-AAA3-43D1-87E3-70F510314F04}
O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {AAAFC670-569B-4A2F-82B4-42945E0DE3EF}
O42 - Logiciel: Windows Live Writer Resources - (.Microsoft Corporation.) [HKLM] -- {62687B11-58B5-4A18-9BC3-9DF4CE03F194}
O42 - Logiciel: Zuma Deluxe - (.WildTangent.) [HKLM] -- WT082246
O42 - Logiciel: jv16 PowerTools 2011 - (.Macecraft Software.) [HKLM] -- jv16 PowerTools 2011

---\\ HKCU & HKLM Software Keys
[HKCU\Software\7-Zip]
[HKCU\Software\Adobe]
[HKCU\Software\AntiCrash]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\ArcSoft]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\CyberLink]
[HKCU\Software\FSCR Master]
[HKCU\Software\Google]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\IDT]
[HKCU\Software\IM Providers]
[HKCU\Software\Integrator]
[HKCU\Software\Intel]
[HKCU\Software\JavaSoft]
[HKCU\Software\Macromedia]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Netscape]
[HKCU\Software\Norton]
[HKCU\Software\ODBC]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\Softonic]
[HKCU\Software\Synaptics]
[HKCU\Software\TuneUp]
[HKCU\Software\YahooPartnerToolbar]
[HKLM\Software\ATI Technologies]
[HKLM\Software\Adobe]
[HKLM\Software\ArcSoft]
[HKLM\Software\Atheros]
[HKLM\Software\CXT]
[HKLM\Software\Caphyon]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Cyberlink]
[HKLM\Software\Dell]
[HKLM\Software\Digital River]
[HKLM\Software\Google]
[HKLM\Software\HPQ]
[HKLM\Software\HP]
[HKLM\Software\Hewlett-Packard]
[HKLM\Software\IDT]
[HKLM\Software\InstalledOptions]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\Loquendo]
[HKLM\Software\Macromedia]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\ODBC]
[HKLM\Software\P2G_Upgrade]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\Product_Upgrade]
[HKLM\Software\RTLSetup]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Skyhook Wireless]
[HKLM\Software\Spime]
[HKLM\Software\Symantec]
[HKLM\Software\Synaptics]
[HKLM\Software\TuneUp]
[HKLM\Software\WildTangent]
[HKLM\Software\Windows]
[HKLM\Software\Wow6432Node]
[HKLM\Software\Zecter]
[HKLM\Software\mozilla.org]



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 3/26/2011 - 6:31:20 PM - [3511045] ----D- C:\Program Files\7-Zip
O43 - CFD: 6/25/2010 - 9:14:42 PM - [688367506] ----D- C:\Program Files\Adobe
O43 - CFD: 3/21/2011 - 9:37:30 PM - [1394213] ----D- C:\Program Files\Advanced USB Port Monitor
O43 - CFD: 6/25/2010 - 9:24:58 PM - [68034715] ----D- C:\Program Files\ArcSoft
O43 - CFD: 3/21/2011 - 9:37:30 PM - [12072] ----D- C:\Program Files\Ask.com
O43 - CFD: 8/19/2010 - 6:51:58 AM - [1645963] ----D- C:\Program Files\Atheros
O43 - CFD: 4/11/2011 - 3:03:36 AM - [82682318] ----D- C:\Program Files\Avira
O43 - CFD: 3/22/2011 - 11:20:14 PM - [190065192] ----D- C:\Program Files\Bell
O43 - CFD: 3/23/2011 - 12:06:32 AM - [2082123] ----D- C:\Program Files\BellCanada
O43 - CFD: 3/14/2011 - 3:05:56 AM - [1001287] ----D- C:\Program Files\Bing Bar Installer
O43 - CFD: 4/6/2011 - 12:56:00 AM - [3673632] ----D- C:\Program Files\CCleaner
O43 - CFD: 3/23/2011 - 12:03:16 AM - [639161761] ----D- C:\Program Files\Common Files
O43 - CFD: 3/17/2011 - 9:55:48 PM - [38541] ----D- C:\Program Files\CPUID
O43 - CFD: 6/25/2010 - 9:49:48 PM - [235193704] ----D- C:\Program Files\CyberLink
O43 - CFD: 4/5/2011 - 9:52:22 PM - [0] ----D- C:\Program Files\Dachshund Software
O43 - CFD: 3/10/2011 - 2:16:14 AM - [4191414] ----D- C:\Program Files\DVD Maker
O43 - CFD: 4/11/2011 - 8:59:48 PM - [10831876] ----D- C:\Program Files\Enigma Software Group
O43 - CFD: 3/23/2011 - 12:06:26 AM - [432120] ----D- C:\Program Files\Gestionnaire de sauvegarde du Coffre-fort personnel
O43 - CFD: 4/4/2011 - 11:18:58 PM - [271988354] ----D- C:\Program Files\Google
O43 - CFD: 4/12/2011 - 10:52:14 PM - [776806274] ----D- C:\Program Files\Hewlett-Packard
O43 - CFD: 3/16/2011 - 11:10:52 PM - [0] ----D- C:\Program Files\HHD Software
O43 - CFD: 8/19/2010 - 7:03:36 AM - [2375214418] ----D- C:\Program Files\Hp
O43 - CFD: 6/25/2010 - 8:00:18 PM - [477461556] ----D- C:\Program Files\HP Games
O43 - CFD: 8/19/2010 - 6:49:02 AM - [42745996] ----D- C:\Program Files\IDT
O43 - CFD: 4/12/2011 - 10:52:14 PM - [144729565] --H-D- C:\Program Files\InstallShield Installation Information
O43 - CFD: 8/19/2010 - 6:45:06 AM - [11120295] ----D- C:\Program Files\Intel
O43 - CFD: 3/14/2011 - 3:31:42 AM - [4498636] ----D- C:\Program Files\Internet Explorer
O43 - CFD: 3/17/2011 - 12:34:32 AM - [115] ----D- C:\Program Files\IObit
O43 - CFD: 3/14/2011 - 1:30:26 AM - [90561185] ----D- C:\Program Files\Java
O43 - CFD: 4/12/2011 - 10:54:30 PM - [82522656] ----D- C:\Program Files\jv16 PowerTools 2011
O43 - CFD: 3/23/2011 - 12:06:22 AM - [660959] ----D- C:\Program Files\ma-config.com
O43 - CFD: 3/10/2011 - 2:08:50 AM - [93571] ----D- C:\Program Files\Makayama Interactive
O43 - CFD: 3/26/2011 - 6:32:28 PM - [4921787] ----D- C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD: 8/19/2010 - 6:58:02 AM - [5207326] ----D- C:\Program Files\Microsoft
O43 - CFD: 7/14/2009 - 12:52:32 AM - [46990135] ----D- C:\Program Files\Microsoft Games
O43 - CFD: 6/25/2010 - 8:25:54 PM - [473453872] ----D- C:\Program Files\Microsoft Office
O43 - CFD: 6/25/2010 - 8:28:20 PM - [7791803] ----D- C:\Program Files\Microsoft Office Suite Activation Assistant
O43 - CFD: 3/14/2011 - 3:33:06 AM - [38360699] ----D- C:\Program Files\Microsoft Silverlight
O43 - CFD: 3/7/2011 - 2:29:58 AM - [1829877] ----D- C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD: 3/14/2011 - 2:47:12 AM - [144641984] ----D- C:\Program Files\Microsoft Works
O43 - CFD: 6/25/2010 - 8:25:38 PM - [8167779] ----D- C:\Program Files\Microsoft.NET
O43 - CFD: 3/21/2011 - 9:37:24 PM - [553272] ----D- C:\Program Files\MonitorTest
O43 - CFD: 3/23/2011 - 11:52:12 PM - [32939931] ----D- C:\Program Files\Mozilla Firefox
O43 - CFD: 7/14/2009 - 12:52:32 AM - [25757] ----D- C:\Program Files\MSBuild
O43 - CFD: 3/14/2011 - 3:05:26 AM - [6837789] ----D- C:\Program Files\MSN Toolbar
O43 - CFD: 3/11/2011 - 9:45:10 PM - [1207222] ----D- C:\Program Files\NewFreeScreensavers
O43 - CFD: 3/11/2011 - 10:48:38 PM - [63849855] ----D- C:\Program Files\Norton Internet Security
O43 - CFD: 3/9/2011 - 11:42:00 PM - [20429672] R---D- C:\Program Files\Online Services
O43 - CFD: 3/15/2011 - 10:09:14 PM - [67592659] ----D- C:\Program Files\Panda Security
O43 - CFD: 3/16/2011 - 12:04:56 PM - [23131] ----D- C:\Program Files\PerformanceTest
O43 - CFD: 8/19/2010 - 6:50:04 AM - [11410203] ----D- C:\Program Files\Realtek
O43 - CFD: 7/14/2009 - 12:52:32 AM - [38597377] ----D- C:\Program Files\Reference Assemblies
O43 - CFD: 3/15/2011 - 12:49:02 AM - [23878] ----D- C:\Program Files\SIW
O43 - CFD: 8/19/2010 - 7:01:12 AM - [7857872] ----D- C:\Program Files\Skyhook Wireless
O43 - CFD: 3/15/2011 - 12:49:02 AM - [0] ----D- C:\Program Files\Speccy
O43 - CFD: 4/12/2011 - 10:54:30 PM - [69999541] ----D- C:\Program Files\Synaptics
O43 - CFD: 7/14/2009 - 12:53:24 AM - [0] --H-D- C:\Program Files\Uninstall Information
O43 - CFD: 3/10/2011 - 2:16:12 AM - [3049984] ----D- C:\Program Files\Windows Defender
O43 - CFD: 4/1/2011 - 8:35:06 PM - [190756655] ----D- C:\Program Files\Windows Live
O43 - CFD: 3/14/2011 - 3:31:44 AM - [6180864] ----D- C:\Program Files\Windows Mail
O43 - CFD: 3/14/2011 - 3:31:42 AM - [6607787] ----D- C:\Program Files\Windows Media Player
O43 - CFD: 7/14/2009 - 12:52:32 AM - [12197556] ----D- C:\Program Files\Windows NT
O43 - CFD: 3/10/2011 - 2:16:14 AM - [4417800] ----D- C:\Program Files\Windows Photo Viewer
O43 - CFD: 3/9/2011 - 11:34:26 PM - [189440] ----D- C:\Program Files\Windows Portable Devices
O43 - CFD: 3/10/2011 - 2:16:16 AM - [11157647] ----D- C:\Program Files\Windows Sidebar
O43 - CFD: 4/13/2011 - 10:59:20 PM - [3827924] ----D- C:\Program Files\ZHPDiag
O43 - CFD: 6/25/2010 - 9:13:22 PM - [16460255] ----D- C:\Program Files\Common Files\Adobe
O43 - CFD: 6/25/2010 - 9:14:32 PM - [31787256] ----D- C:\Program Files\Common Files\Adobe AIR
O43 - CFD: 6/25/2010 - 9:24:58 PM - [13072960] ----D- C:\Program Files\Common Files\ArcSoft
O43 - CFD: 6/25/2010 - 8:25:52 PM - [92976] ----D- C:\Program Files\Common Files\DESIGNER
O43 - CFD: 3/30/2011 - 11:18:08 PM - [3164236] ----D- C:\Program Files\Common Files\InstallShield
O43 - CFD: 6/25/2010 - 10:11:52 PM - [1231815] ----D- C:\Program Files\Common Files\Java
O43 - CFD: 4/1/2011 - 8:31:02 PM - [273577090] ----D- C:\Program Files\Common Files\microsoft shared
O43 - CFD: 3/23/2011 - 12:09:04 AM - [208896] ----D- C:\Program Files\Common Files\Motive
O43 - CFD: 3/9/2011 - 11:34:42 PM - [2702] ----D- C:\Program Files\Common Files\Services
O43 - CFD: 7/13/2009 - 10:37:06 PM - [41103783] ----D- C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 3/10/2011 - 2:16:14 AM - [44730623] ----D- C:\Program Files\Common Files\System
O43 - CFD: 3/7/2011 - 1:26:12 AM - [213729169] ----D- C:\Program Files\Common Files\Windows Live
O43 - CFD: 3/11/2011 - 4:10:12 AM - [761] ----D- C:\ProgramData\Adobe
O43 - CFD: 4/11/2011 - 7:46:12 AM - [192] ----D- C:\ProgramData\aJc31002nKaGl31002
O43 - CFD: 7/14/2009 - 12:53:56 AM - [0] -SH-D- C:\ProgramData\Application Data
O43 - CFD: 3/30/2011 - 11:17:56 PM - [15542921] ----D- C:\ProgramData\ArcSoft
O43 - CFD: 8/19/2010 - 6:52:30 AM - [10585] ----D- C:\ProgramData\Atheros
O43 - CFD: 4/11/2011 - 3:03:36 AM - [1224043] ----D- C:\ProgramData\Avira
O43 - CFD: 3/22/2011 - 11:20:04 PM - [21838829] ----D- C:\ProgramData\Bell
O43 - CFD: 8/19/2010 - 6:59:14 AM - [34404] ----D- C:\ProgramData\CyberLink
O43 - CFD: 7/14/2009 - 12:53:56 AM - [0] -SH-D- C:\ProgramData\Desktop
O43 - CFD: 7/14/2009 - 12:53:56 AM - [0] -SH-D- C:\ProgramData\Documents
O43 - CFD: 7/14/2009 - 12:53:56 AM - [0] -SH-D- C:\ProgramData\Favorites
O43 - CFD: 3/21/2011 - 9:37:24 PM - [37013] ----D- C:\ProgramData\FreeApp
O43 - CFD: 4/12/2011 - 10:54:30 PM - [1969824] ----D- C:\ProgramData\Hewlett-Packard
O43 - CFD: 8/19/2010 - 7:05:52 AM - [49] ----D- C:\ProgramData\HP
O43 - CFD: 3/22/2011 - 2:44:54 AM - [1191344] ----D- C:\ProgramData\ma-config.com
O43 - CFD: 3/23/2011 - 11:41:18 PM - [6490100] ----D- C:\ProgramData\Malwarebytes
O43 - CFD: 4/1/2011 - 8:32:04 PM - [171047232] -S--D- C:\ProgramData\Microsoft
O43 - CFD: 3/14/2011 - 2:49:48 AM - [111936] ----D- C:\ProgramData\Microsoft Help
O43 - CFD: 3/22/2011 - 11:10:54 PM - [2513] ----D- C:\ProgramData\Motive
O43 - CFD: 3/11/2011 - 10:48:38 PM - [13900] ----D- C:\ProgramData\Norton
O43 - CFD: 8/19/2010 - 7:01:18 AM - [35977512] ----D- C:\ProgramData\NortonInstaller
O43 - CFD: 3/15/2011 - 10:08:24 PM - [51312298] ----D- C:\ProgramData\Panda Security
O43 - CFD: 3/16/2011 - 1:40:36 AM - [38] ----D- C:\ProgramData\Panda Security URL Filtering
O43 - CFD: 3/16/2011 - 9:19:06 PM - [732] ----D- C:\ProgramData\PassMark
O43 - CFD: 3/22/2011 - 10:56:48 PM - [7357] ----D- C:\ProgramData\Radialpoint
O43 - CFD: 3/22/2011 - 11:20:40 PM - [143360] ----D- C:\ProgramData\Raxco
O43 - CFD: 4/2/2011 - 7:45:28 AM - [18873605] ----D- C:\ProgramData\Recovery
O43 - CFD: 8/19/2010 - 7:00:54 AM - [258653] ----D- C:\ProgramData\Skyhook Wireless
O43 - CFD: 7/14/2009 - 12:53:56 AM - [0] -SH-D- C:\ProgramData\Start Menu
O43 - CFD: 6/25/2010 - 10:11:54 PM - [189] ----D- C:\ProgramData\Sun
O43 - CFD: 4/12/2011 - 10:54:30 PM - [45829] ----D- C:\ProgramData\Synaptics
O43 - CFD: 3/23/2011 - 12:06:58 AM - [290958] ----D- C:\ProgramData\Temp
O43 - CFD: 7/14/2009 - 12:53:56 AM - [0] -SH-D- C:\ProgramData\Templates
O43 - CFD: 3/31/2011 - 3:03:44 AM - [239616] ----D- C:\ProgramData\TuneUp Software
O43 - CFD: 3/23/2011 - 12:07:06 AM - [1649882698] ----D- C:\ProgramData\WildTangent
O43 - CFD: 3/11/2011 - 4:12:52 AM - [121622] ----D- C:\Users\gst video\AppData\Local\Adobe
O43 - CFD: 3/7/2011 - 1:20:42 AM - [0] -SH-D- C:\Users\gst video\AppData\Local\Application Data
O43 - CFD: 3/19/2011 - 11:26:08 PM - [30486] ----D- C:\Users\gst video\AppData\Local\Apps
O43 - CFD: 3/15/2011 - 9:17:56 PM - [412] ----D- C:\Users\gst video\AppData\Local\ArcSoft
O43 - CFD: 4/11/2011 - 12:22:42 PM - [0] ----D- C:\Users\gst video\AppData\Local\Diagnostics
O43 - CFD: 4/11/2011 - 12:22:42 PM - [887405] ----D- C:\Users\gst video\AppData\Local\ElevatedDiagnostics
O43 - CFD: 4/4/2011 - 11:22:52 PM - [3835408] ----D- C:\Users\gst video\AppData\Local\Google
O43 - CFD: 4/12/2011 - 10:54:30 PM - [4353734] --
0
Utilisateur anonyme
13 avril 2011 à 19:35
Re



1) * Pas fini !!

Poste le rapport >> Le rapport est sauvegardé dans C:\RKreport.txt


2)* inscris toi sur le forum afin de rendre tes liens lisibles

* ICI >> CCM




Contributeur sécurité CCM
0
en tout cas le site testo antivirus serait mieux de retourner a l,ecole disant que antivir 10 est nul , avas lui ne vaut rien car je connais une personne ayant antivir 10 et detecte tout.
0
Utilisateur anonyme
14 avril 2011 à 04:10
Salut

Ce rapport ne montre rien


*vlctxl - 13 avr 2011 à 18:50 >>> oui ca marcher et on m,a dit d,installer antivir qui le detecte, pas avast en tout cas.


* vlctxl - 14 avr 2011 à 02:59 >>> RogueKiller V4.3.8 par Tigzy
Mode: Suppression -- Date : 13/04/2011 20:57:02


1) si tu l as déjà ne le télécharge pas ,

* Télécharges Malwarebytes' (mbam)

ICI >> Malwarebytes' (mbam)

ou

>> Malwarebytes' Mbam

* installes + mise a jour
* Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) sans les ouvrir
* Lances--> Malwarebytes (MBAM)
* Puis vas dans l'onglet "Recherche", coche >>Exécuter un examen complet
* puis "Rechercher"
* Sélectionnes tes disques durs" puis clique sur "Lancer l'examen"
* A la fin du scan, clique sur Afficher les résultats puis sur Enregistrer le rapport
* Si MalwareBytes' détecte des infections, clique sur ==>Afficher les résultats, puis sur ==>Supprimer la sélection
* S'il t' es demandé de redémarrer, clique sur "oui "
* aprés la suppression(s) de ou des infections trouvées --> poste le rapport ici
!!! Ne pas vider la quarantaine de MBAM sans avis !!!


2) * Télécharge ZHPDiag (de Nicolas coolman)


ICI >> ZHPDiag (de Nicolas coolman)

* Une fois le téléchargement achevé,
* double clique sur ZHPDiag.exe et suis les instructions.
* /!\Utilisateurs de Windows Vista et Windows 7
>> Clique droit sur le logo de ZHPDiag.exe, « exécuter en tant qu'Administrateur »
* Laisse toi guider lors de l'installation,
* coche >> créer une icône sur le bureau
* il se lancera automatiquement à la fin.
* Clique sur l'icône représentant une loupe (« Lancer le diagnostic »)
* Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette
* Héberge le rapport sur ce site,
>> Cijoint.fr
* puis copie/colle le lien fourni dans ta prochaine réponse sur le forum.

* Pour t aider ,pour heberger le rapport
* rends toi sur Cijoint.fr
* clic sur Parcourir
* Trouve >> le rapport que tu viens d'enregistrer qui doit par exemple être sur ton bureau
* et valide en cliquant sur >> Cliquez ici pour déposer le Fichier
* un lien de ce genre http://www.cijoint.fr/cjlink.php?file=cj201004/cijecaEGX.txt te sera généré,
* il te suffit de le poster ici pour que je puisse voir le rapport

ou

ICI >> pjjoint.malekal
* Cliques sur >> Parcourir
* Trouve >> le rapport que tu viens d'enregistrer par exemple sur ton bureau
* Cliques sur >> envoyer le fichier
* Un lien te sera généré,
* il te suffit de le poster ici



Contributeur sécurité CCM
0
Utilisateur anonyme
14 avril 2011 à 05:12
c'est fou le nombre de gens qui savent pas lire hein ? ^^
0
pourquoi cette remarque svp.
0
Utilisateur anonyme
14 avril 2011 à 05:24
c'est clairement expliqué au dessus
0
c,est vrai et je m,excuse.
0