Ms removal tool

Résolu
Bonjour, ms removal tool scanne mon ordinateur dont je l,aie meme pas telecharger et bloque tout, quoi faire svp car avast qui ne vaut rien ne l,a pas detecter.

3 réponses

  • Votes
  • Date
  • Date décroissante
  1. Salut

    * Télécharge RogueKiller (par tigzy)
    ICI > RogueKiller (par tigzy)

    *( Sous Vista/Seven,clique droit, lancer en tant qu'administrateur )

    * Quitte tous tes programmes en cours
    * Lance RogueKiller.exe.
    * Lorsque demandé, tape 2 et valide

    * Un rapport (RKreport.txt) a du se créer à côté de l'exécutable, colle son contenu dans la réponse
    * Si le programme a été bloqué, ne pas hésiter a essayer plusieurs fois. ou renommer l'outil en roguekiller.com

    Contributeur sécurité CCM
    1. oui ca marcher et on m,a dit d,installer antivir qui le detecte, pas avast en tout cas.
    2. RogueKiller V4.3.8 par Tigzy
      contact sur http://www.sur-la-toile.com
      mail: tigzyRK<at>gmail<dot>com
      Remontees: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html

      Systeme d'exploitation: Windows 7 (6.1.7600 ) 32 bits version
      Demarrage : Mode normal
      Utilisateur: gst video [Droits d'admin]
      Mode: Suppression -- Date : 13/04/2011 20:57:02

      Processus malicieux: 0

      Entrees de registre: 0

      Fichier HOSTS:
    3. Run by gst video at 4/13/2011 10:59:06 PM
      Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html

      ---\\ Web Browser
      MSIE: Internet Explorer v8.0.7600.16385
      MFIE: Mozilla Firefox 4.0 v4.0
      GCIE: Google Chrome v10.0.648.204 (Defaut)

      ---\\ System Information
      Windows 7 Starter Edition, 32-bit (Build 7600)
      Processor: x86 Family 6 Model 28 Stepping 10, GenuineIntel
      Operating System: 32 Bits
      Boot mode: Normal (Normal boot)
      Total RAM: 1011.9 MB (37% free)
      System Restore: Activé (Enable)
      System drive C: has 102 GB (75%) free of 134 GB

      ---\\ Logged in mode
      Computer Name: GSTVIDEO-PC
      User Name: gst video
      All Users Names: gst video, Administrateur,
      Unselected Option: O45,O61,O62,O65,O66,O82
      Logged in as Administrator

      ---\\ Environnement Variables
      %AppData%=C:\Users\gst video\AppData\Roaming
      %LocalAppData%=C:\Users\gst video\AppData\Local
      %StartMenu%=C:\Users\gst video\AppData\Roaming\Microsoft\Windows\Start Menu

      ---\\ DOS/Devices
      C:\ Hard drive, Flash drive, Thumb drive (Free 102 Go of 134 Go)
      D:\ Hard drive, Flash drive, Thumb drive (Free 2 Go of 15 Go)
      E:\ Hard drive, Flash drive, Thumb drive (Free 0 Go of 0 Go)

      ---\\ Security Center & Tools Informations
      [HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
      [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
      [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
      [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
      [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
      [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
      [HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
      [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
      [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
      [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
      [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
      [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
      [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
      [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
      [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK
      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK

      ---\\ Recherche particulière de fichiers génériques
      [MD5.2626FC9755BE22F805D3CFA0CE3EE727] - (.Microsoft Corporation - Explorateur Windows.) (.6/25/2010 7:01:39 PM.) -- C:\Windows\Explorer.exe [2614272]
      [MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.7/13/2009 8:14:45 PM.) -- C:\Windows\system32\Wininit.exe [96256]
      [MD5.78B9ADA2BC8946AF7B17678E0D07A773] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.12/21/2010 12:38:22 AM.) -- C:\Windows\system32\wininet.dll [981504]
      [MD5.37CDB7E72EB66BA85A87CBE37E7F03FD] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.6/25/2010 7:01:39 PM.) -- C:\Windows\system32\Winlogon.exe [285696]
      [MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.7/13/2009 8:26:15 PM.) -- C:\Windows\system32\drivers\atapi.sys [21584]
      [MD5.3795DCD21F740EE799FB7223234215AF] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.7/13/2009 8:20:44 PM.) -- C:\Windows\system32\drivers\ntfs.sys [1210432]

      ---\\ Processus lancés
      [MD5.3453F9A222B72309FD3F1620673C06D3] - (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [601144]
      [MD5.031E0AC7341FBF5699011D71D4157D60] - (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray.exe [495708]
      [MD5.4B057F27058AD5B6B3C7ED766E47862C] - (.Skyhook Wireless - XPS(TM) Control Panel.) -- C:\Program Files\Skyhook Wireless\XPS\xpscontrolpanel.exe [632136]
      [MD5.052F402E557C9EC01B188AD56E336029] - (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe [150552]
      [MD5.73E7F1D810AA3520BF15545A57B86712] - (.Zecter Inc. - HP CloudDrive.) -- C:\Program Files\Hewlett-Packard\HP CloudDrive\zumodrive.exe [154304]
      [MD5.0BA966FD5349BDF9895F40C045A7C7EC] - (.Intel Corporation - igfxTray Module.) -- C:\Windows\System32\igfxtray.exe [141848]
      [MD5.D1930CA970D4250D891F432419E3D6C9] - (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe [186904]
      [MD5.5516C26A6AF8EB4E2CAB48EC98A74398] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\Hp\HP Software Update\hpwuschd2.exe [54576]
      [MD5.13B671D7253F29DA148569288CECF74B] - (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe [173592]
      [MD5.2B3DB9C9D7E206CFCF3E327709BEF3AD] - (.Intel Corporation - igfxsrvc Module.) -- C:\Windows\system32\igfxsrvc.exe [252952]
      [MD5.A6D772AA861E673636D48B6EB452ADE3] - (.Microsoft Corporation - Microsoft Office OneNote Quick Launcher.) -- C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE [98696]
      [MD5.52DB6CDAC5BC7A1FC884E97C41C91213] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [248040]
      [MD5.EB0C1A86359FC518EF5020B15B3EC761] - (.Hewlett-Packard - HP Wireless Assistant.) -- C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe [363064]
      [MD5.017B1CDDA13B2FBBD54232BA19C8C6A5] - (.Hewlett-Packard Development Company L.P. - hpCaslNotification.) -- C:\Program Files\Hewlett-Packard\Shared\hpCaslNotification.exe [311352]
      [MD5.B0DA80FF42A0819D162A86612896AAF2] - (.Microsoft Corporation - Windows Update.) -- C:\Windows\system32\wuauclt.exe [47104]
      [MD5.678F50CBC5537150CFDCCA7944130B6D] - (.Adobe Systems, Inc. - Adobe Flash Player Helper 10.0 r45.) -- C:\Windows\system32\Macromed\Flash\FlashUtil10e.exe [256280]
      [MD5.AA08B68EF4E35EFA170CF85A44B23B70] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe [673040]
      [MD5.95BEB516BFD2ADD228BE63D543CEA47A] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [642560]

      ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
      M3 - MFPP: Plugins - [gst video] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
      M3 - MFPP: Plugins - [gst video] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml
      M3 - MFPP: Plugins - [gst video] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
      M3 - MFPP: Plugins - [gst video] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
      M3 - MFPP: Plugins - [gst video] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
      M3 - MFPP: Plugins - [gst video] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
      M3 - MFPP: Plugins - [gst video] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
      P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\Macromed\Flash\NPSWF32.dll
      P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.5.) -- C:\Windows\system32\Adobe\Director\np32dsw.dll
      P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
      P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.50917.0.) -- c:\Program Files\Microsoft Silverlight\4.0.50917.0\npctrl.dll
      P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3502.0922] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
      P2 - FPN: [HKLM] [@skyhookwireless.com/LokiPlugin] - (.Skyhook Wireless - Loki Plugin v.3.3.3.29.) -- C:\Program Files\Skyhook Wireless\Loki Plugin\nploki.dll
      P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=8] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.2.183.39\npGoogleOneClick8.dll
      M0 - MFSP: prefs.js [gst video - d283nc8t.default] http://hp.ca.msn.com/defaultf.aspx?lang=fr-ca&pc=HPNTDF

      ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com
      R0 - HKUS\S-1-5-21-4287223343-3549328378-2291770896-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
      R1 - HKUS\S-1-5-21-4287223343-3549328378-2291770896-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
      R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (8.00.7600.16385 (win7_rtm.090713-1255)) -- C:\Windows\System32\ieframe.dll
      R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1

      ---\\ Internet Explorer, Proxy Management (R5)
      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
      R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
      R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

      ---\\ ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
      F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
      F2 - REG:system.ini: VMApplet=C:\WINDOWS\system32\SystemPropertiesPerformance.exe

      ---\\ Browser Helper Objects de navigateur (O2)
      O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
      O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
      O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} . (.Microsoft Corporation - Windows Live Messenger Companion Core.) -- C:\Program Files\Windows Live\Companion\companioncore.dll
      O2 - BHO: LocationFinder Class - {BC0E8AD7-13AA-4694-8EDD-0246BC47A35F} . (.Skyhook Wireless - Loki Plugin.) -- C:\Program Files\Skyhook Wireless\Loki Plugin\loki.dll
      O2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} . (.Microsoft Corporation - Bing Bar.) -- C:\Program Files\MSN Toolbar\Platform\6.3.2380.0\npwinext.dll
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll

      ---\\ Internet Explorer Toolbars (O3)
      O3 - Toolbar: @C:\Program Files\MSN Toolbar\Platform\6.3.2380.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} . (.Microsoft Corporation - Bing Bar.) -- C:\Program Files\MSN Toolbar\Platform\6.3.2380.0\npwinext.dll

      ---\\ ---\\ Applications démarrées par registre & par dossier (O4)
      O4 - HKLM\..\Run: [HP Quick Launch] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
      O4 - HKLM\..\Run: [ZumoDrive] . (...) -- C:\Program Files\Hewlett-Packard\HP CloudDrive\ZumoLauncher.lnk
      O4 - HKLM\..\Run: [UCam_Menu] Clé orpheline
      O4 - HKLM\..\Run: [SysTrayApp] . (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray.exe
      O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      O4 - HKLM\..\Run: [Skyhook Wireless XPS Service] . (.Skyhook Wireless - XPS(TM) Control Panel.) -- C:\Program Files\Skyhook Wireless\XPS\xpscontrolpanel.exe
      O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe
      O4 - HKLM\..\Run: [Microsoft Default Manager] . (.Microsoft Corporation - Microsoft Default Manager.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe
      O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe
      O4 - HKLM\..\Run: [IAAnotif] . (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
      O4 - HKLM\..\Run: [HPWirelessAssistant] . (...) -- C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe
      O4 - HKLM\..\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
      O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
      O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
      O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
      O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
      O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
      O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
      O4 - Global Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Media Suite.lnk . (.ArcSoft Inc..) -- C:\Program Files\Hewlett-Packard\HP Media Suite\Home\ArcStart.exe
      O4 - Global Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Scrybe.lnk . (.Acresso Software Inc..) -- C:\Windows\Installer\{13061CAA-0284-4F9A-B460-3D4699575B35}\NewShortcut11_8ACB210B42E44145A8C31F8E3DD765A3.exe
      O4 - Global Startup: C:\Users\gst video\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 - Capture d'écran et lancement.lnk . (.Microsoft Corporation.) -- C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

      ---\\ ---\\ Autres liens utilisateurs (O4)
      O4 - Global Startup: C:\Users\gst video\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
      O4 - Global Startup: C:\Users\gst video\Desktop\jv16 PowerTools 2011.lnk . (.Macecraft Software.) -- C:\Program Files\jv16 PowerTools 2011\jv16PT.exe
      O4 - Global Startup: C:\Users\gst video\Desktop\SoftonicDownloader_for_battery-doubler - Raccourci.lnk . (...) -- C:\Users\gst video\Downloads\SoftonicDownloader_for_battery-doubler.exe
      O4 - Global Startup: C:\Users\gst video\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..) -- C:\Program Files\Google\Chrome\Application\chrome.exe
      O4 - Global Startup: C:\Users\gst video\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe

      ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
      O8 - Extra context menu item: E&xport to Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~2\Office12\EXCEL.exe

      ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
      O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} . (.Microsoft Corporation - Windows Live Messenger Companion core resources.) -- C:\Program Files\Windows Live\Companion\companion
      O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBro
      O9 - Extra button: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft Office OneNote Internet Explorer Add-in.) -- C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
      O9 - Extra button: S&end to OneNote - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO

      ---\\ Winsock hijacker (Layered Service Provider) (O10)
      O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
      O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
      O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
      O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
      O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
      O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
      O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL
      O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL

      ---\\ Objets ActiveX (Downloaded Program Files)(O16)
      O16 - DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} (WRC Class) - http://trial.trymicrosoftoffice.com/...

      ---\\ Modification Domaine/Adresses DNS (O17)
      O17 - HKLM\System\CCS\Services\Tcpip\..\{CF9C9CDD-B6DA-4BE5-BE74-A326253F2041}: DhcpNameServer = 192.168.2.1
      O17 - HKLM\System\CCS\Services\Tcpip\..\{D501E13E-DA3B-4BB2-8370-7A8D1AA25424}: DhcpNameServer = 24.200.241.37 24.201.245.77 24.200.243.189
      O17 - HKLM\System\CS1\Services\Tcpip\..\{CF9C9CDD-B6DA-4BE5-BE74-A326253F2041}: DhcpNameServer = 192.168.2.1
      O17 - HKLM\System\CS1\Services\Tcpip\..\{D501E13E-DA3B-4BB2-8370-7A8D1AA25424}: DhcpNameServer = 24.200.241.37 24.201.245.77 24.200.243.189
      O17 - HKLM\System\CS2\Services\Tcpip\..\{CF9C9CDD-B6DA-4BE5-BE74-A326253F2041}: DhcpNameServer = 192.168.2.1
      O17 - HKLM\System\CS2\Services\Tcpip\..\{D501E13E-DA3B-4BB2-8370-7A8D1AA25424}: DhcpNameServer = 24.200.241.37 24.201.245.77 24.200.243.189
      O17 - HKLM\System\CCS\Services\Tcpip\..\{CF9C9CDD-B6DA-4BE5-BE74-A326253F2041}: DhcpDomain = gateway.2wire.net
      O17 - HKLM\System\CS1\Services\Tcpip\..\{CF9C9CDD-B6DA-4BE5-BE74-A326253F2041}: DhcpDomain = gateway.2wire.net
      O17 - HKLM\System\CS2\Services\Tcpip\..\{CF9C9CDD-B6DA-4BE5-BE74-A326253F2041}: DhcpDomain = gateway.2wire.net
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1

      ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
      O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll

      ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
      O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.

      ---\\ Liste des services NT non Microsoft et non désactivés (O23)
      O23 - Service: (ACDaemon) . (.ArcSoft Inc. - ArcSoft Connect Service.) - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
      O23 - Service: (AESTFilters) . (.Andrea Electronics Corporation - Andrea filters APO access service (32-bit).) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9691412ff1876250\aestsrv.exe
      O23 - Service: (GameConsoleService) . (.WildTangent, Inc. - GameConsoleService.) - C:\Program Files\HP Games\HP Game Console\GameConsoleService.exe
      O23 - Service: (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
      O23 - Service: (HP Health Check Service) . (.Hewlett-Packard Company - HP Support Assistant.) - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
      O23 - Service: (HP Wireless Assistant Service) . (.Hewlett-Packard - HPPA_Service.) - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
      O23 - Service: (HPDrvMntSvc.exe) . (.Hewlett-Packard Company - HP Quick Synchronization Service.) - C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe
      O23 - Service: (hpqwmiex) . (.Hewlett-Packard Company - hpqwmiex Module.) - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
      O23 - Service: (HPWMISVC) . (.Pas de propriétaire - HPWMISVC Application.) - C:\Program Files\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
      O23 - Service: (IAANTMON) . (.Intel Corporation - RAID Monitor.) - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
      O23 - Service: (ScrybeUpdater) . (.Synaptics, Inc. - Scrybe Update Manager..) - C:\Program Files\Synaptics\Scrybe\Service\ScrybeUpdater.exe
      O23 - Service: (STacSV) . (.IDT, Inc. - IDT PC Audio.) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9691412ff1876250\STacSV.exe
      O23 - Service: (wlidsvc) . (.Microsoft Corp. - Microsoft® Windows Live ID Service.) - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.exe
      O23 - Service: (xpssvc) . (.Skyhook Wireless - XPS(TM) Service.) - C:\Program Files\Skyhook Wireless\XPS\xpssvc.exe

      ---\\ Enumération Active Desktop & MHTML Editor (O24)
      O24 - Default MHTML Editor: Last - .(...) - (.not file.)

      ---\\ Tâches planifiées en automatique (O39)
      O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
      O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
      O39 - APT:Automatic Planified Task - C:\Windows\Tasks\HPCeeScheduleForgst video.job
      [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
      [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
      [MD5.BEAEC745256D3158495FEE10BA673E7C] [APT] [HPCeeScheduleForgst video] (.Hewlett-Packard.) -- C:\Program Files\Hewlett-Packard\HP Ceement\HPCEE.exe
      [MD5.ED5D30F5D177A12E1A67401440DEA36D] [APT] [RecoveryCDWin7] (.Pas de propriétaire.) -- C:\Program Files\Hewlett-Packard\HP Setup\RemEngine.exe
      [MD5.ED5D30F5D177A12E1A67401440DEA36D] [APT] [ServicePlan] (.Pas de propriétaire.) -- C:\Program Files\Hewlett-Packard\HP Setup\RemEngine.exe
      [MD5.AF9D21E924DB028012176C572CB482E5] [APT] [First Boot] (.Hewlett-Packard Company.) -- C:\Program Files\Hewlett-Packard\HP Support Framework\HPSF_Utils.exe

      ---\\ Pilotes lancés au démarrage (O41)
      O41 - Driver: C:\Windows\system32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
      O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\system32\DRIVERS\blbdrive.sys
      O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\system32\Drivers\dfsc.sys
      O41 - Driver: C:\Windows\system32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\system32\drivers\discache.sys
      O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\DRIVERS\mssmbios.sys
      O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\system32\DRIVERS\netbios.sys
      O41 - Driver: C:\Windows\system32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\system32\DRIVERS\netbt.sys
      O41 - Driver: C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\system32\drivers\nsiproxy.sys
      O41 - Driver: C:\Windows\system32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\system32\DRIVERS\pacer.sys
      O41 - Driver: C:\Windows\system32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\system32\DRIVERS\rdbss.sys
      O41 - Driver: C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\system32\DRIVERS\RDPCDD.sys
      O41 - Driver: C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\system32\drivers\rdpencdd.sys
      O41 - Driver: C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\system32\drivers\rdprefmp.sys
      O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\system32\DRIVERS\tdx.sys
      O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\DRIVERS\termdd.sys
      O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
      O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\system32\DRIVERS\vwififlt.sys
      O41 - Driver: C:\Windows\system32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\system32\DRIVERS\wanarp.sys
      O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\system32\DRIVERS\wfplwf.sys

      ---\\ Logiciels installés (O42)
      O42 - Logiciel: 7-Zip 9.20 - (.Pas de propriétaire.) [HKLM] -- 7-Zip
      O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM] -- {287ECFA4-719A-2143-A09B-D6A12DE54E40}
      O42 - Logiciel: ActiveCheck component for HP Active Support Library - (.Hewlett-Packard.) [HKLM] -- {254C37AA-6B72-4300-84F6-98A82419187E}
      O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR
      O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {A2BCA9F1-566C-4805-97D1-7FDC93386723}
      O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
      O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
      O42 - Logiciel: Adobe Reader 9.4.3 MUI - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-FFFF-7B44-A91000000001}
      O42 - Logiciel: Adobe Shockwave Player - (.Adobe Systems, Inc..) [HKLM] -- {D8DFA46A-39F7-4368-810D-18AFCFDDAEAF}
      O42 - Logiciel: ArcSoft WebCam Companion 3 - (.ArcSoft.) [HKLM] -- {34985F59-8F6F-46F4-9AD5-53E2714294D2}
      O42 - Logiciel: Atheros Driver Installation Program - (.Atheros.) [HKLM] -- {C3A32068-8AB1-4327-BB16-BED9C6219DC7}
      O42 - Logiciel: Barre d'outils Bing - (.Microsoft Corporation.) [HKLM] -- {08234a0d-cf39-4dca-99f0-0c5cb496da81}
      O42 - Logiciel: Bejeweled 2 Deluxe - (.WildTangent.) [HKLM] -- WT082192
      O42 - Logiciel: Bing Bar Platform - (.Microsoft Corporation.) [HKLM] -- {B86C9440-82D7-423C-9FEC-6CB3092D1AA4}
      O42 - Logiciel: Blasterball 3 - (.WildTangent.) [HKLM] -- WT082124
      O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
      O42 - Logiciel: Chuzzle Deluxe - (.WildTangent.) [HKLM] -- WT082200
      O42 - Logiciel: Complément Messenger - (.Microsoft Corporation.) [HKLM] -- {6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}
      O42 - Logiciel: Contrôle ActiveX Windows Live Mesh pour connexions à distance - (.Microsoft Corporation.) [HKLM] -- {55D003F4-9599-44BF-BA9E-95D060730DD3}
      O42 - Logiciel: CyberLink DVD Suite - (.CyberLink Corp..) [HKLM] -- InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}
      O42 - Logiciel: CyberLink DVD Suite - (.CyberLink Corp..) [HKLM] -- {1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}
      O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
      O42 - Logiciel: Diner Dash 2 Restaurant Rescue - (.WildTangent.) [HKLM] -- WT082396
      O42 - Logiciel: Dream Chronicles - (.WildTangent.) [HKLM] -- WT083521
      O42 - Logiciel: ESU for Microsoft Windows 7 - (.Hewlett-Packard.) [HKLM] -- {3877C901-7B90-4727-A639-B6ED2DD59D43}
      O42 - Logiciel: FATE - (.WildTangent.) [HKLM] -- WT082141
      O42 - Logiciel: Faerie Solitaire - (.WildTangent.) [HKLM] -- WT082442
      O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {488F0347-C4A7-4374-91A7-30818BEDA710}
      O42 - Logiciel: Gem Shop - (.WildTangent.) [HKLM] -- WT083529
      O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome
      O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
      O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {BE06114F-559D-11E0-B5A1-001D0926B1BF}
      O42 - Logiciel: HP Battery Check - (.Hewlett-Packard.) [HKLM] -- HP Battery Check
      O42 - Logiciel: HP Battery Check - (.Hewlett-Packard.) [HKLM] -- {FDDDD898-725F-498E-8582-938326066177}
      O42 - Logiciel: HP CloudDrive - (.Pas de propriétaire.) [HKLM] -- ZumoDrive
      O42 - Logiciel: HP Customer Experience Enhancements - (.Hewlett-Packard.) [HKLM] -- {07FA4960-B038-49EB-891B-9F95930AA544}
      O42 - Logiciel: HP Game Console - (.WildTangent.) [HKLM] -- My HP Game Console
      O42 - Logiciel: HP Games - (.WildTangent.) [HKLM] -- WildTangent hp Master Uninstall
      O42 - Logiciel: HP HomeBase - (.ArcSoft.) [HKLM] -- {4F22707C-C8E4-4BC8-881C-FAAB2EF5914B}
      O42 - Logiciel: HP MediaSmart Webcam - (.Hewlett-Packard.) [HKLM] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}
      O42 - Logiciel: HP MediaSmart Webcam - (.Hewlett-Packard.) [HKLM] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D}
      O42 - Logiciel: HP Navigator - (.HP.) [HKLM] -- {DBB9D695-D806-438A-B214-7FB3FADDD174}
      O42 - Logiciel: HP Quick Launch - (.Hewlett-Packard Company.) [HKLM] -- {40C915B0-F2A0-423D-BEDF-04D3CE4D4DC5}
      O42 - Logiciel: HP Setup - (.Hewlett-Packard.) [HKLM] -- {72D90DB3-A16A-4545-B555-868471101833}
      O42 - Logiciel: HP Software Framework - (.Hewlett-Packard Company.) [HKLM] -- {DA200FDD-DE3D-4958-8465-C4FBC869544B}
      O42 - Logiciel: HP Support Assistant - (.Hewlett-Packard Company.) [HKLM] -- {08DB3902-2CE0-474D-BCE3-0177766CE9F1}
      O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM] -- {D46D081B-F60E-467E-A7C4-117B70D76731}
      O42 - Logiciel: HP User Guides 0197 - (.Hewlett-Packard.) [HKLM] -- {015E59D5-FC6C-4C06-A3C9-87A578B021B7}
      O42 - Logiciel: HP Wireless Assistant - (.Hewlett-Packard.) [HKLM] -- {EC720706-3F19-4B7F-BDDD-E31D9B3921D2}
      O42 - Logiciel: HPAsset component for HP Active Support Library - (.Hewlett-Packard.) [HKLM] -- {669D4A35-146B-4314-89F1-1AC3D7B88367}
      O42 - Logiciel: IDT Audio - (.IDT.) [HKLM] -- {E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}
      O42 - Logiciel: Insaniquarium Deluxe - (.WildTangent.) [HKLM] -- WT082222
      O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Intel Corporation.) [HKLM] -- HDMI
      O42 - Logiciel: Intel® Matrix Storage Manager - (.Intel Corporation.) [HKLM] -- {9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}
      O42 - Logiciel: Java(TM) 6 Update 20 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216018FF}
      O42 - Logiciel: Jewel Match 2 - (.WildTangent.) [HKLM] -- WT083503
      O42 - Logiciel: Jewel Quest II - (.WildTangent.) [HKLM] -- WT083514
      O42 - Logiciel: Jewel Quest Solitaire - (.WildTangent.) [HKLM] -- WT083510
      O42 - Logiciel: JoJo's Fashion Show - (.WildTangent.) [HKLM] -- WT083489
      O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
      O42 - Logiciel: Loki Browser Plugin - (.Skyhook Wireless.) [HKLM] -- {60C58642-B64D-43E6-B7EF-7928019AA012}
      O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
      O42 - Logiciel: Mahjongg Artifacts - (.WildTangent.) [HKLM] -- WT082409
      O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
      O42 - Logiciel: Mesh Runtime - (.Microsoft Corporation.) [HKLM] -- {8C6D6116-B724-4810-8F2D-D047E6B7D68E}
      O42 - Logiciel: Microsoft Default Manager - (.Microsoft Corporation.) [HKLM] -- {1CAC7A41-583B-4483-9FA5-3E5465AFF8C2}
      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0016-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}
      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0018-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}
      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001B-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}
      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}
      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}_HOMESTUDENTR_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-00A1-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}
      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-00A1-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0115-0409-0000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}
      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
      O42 - Logiciel: Microsoft Office Excel MUI (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-0409-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.) [HKLM] -- HOMESTUDENTR
      O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office OneNote MUI (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-00A1-0409-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office OneNote MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-00A1-040C-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office PowerPoint MUI (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-0409-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office PowerPoint Viewer 2007 (French) - (.Microsoft Corporation.) [HKLM] -- {95120000-00AF-040C-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Proofing (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-0409-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}_HOMESTUDENTR_{14809F99-C601-4D4A-9391-F1E8FAA964C5}
      O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}
      O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
      O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}
      O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}_HOMESTUDENTR_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
      O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}
      O42 - Logiciel: Microsoft Office Shared MUI (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-0409-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Shared Setup Metadata MUI (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0115-0409-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Suite Activation Assistant - (.Microsoft Corporation.) [HKLM] -- {E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}
      O42 - Logiciel: Microsoft Office Word MUI (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-0409-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
      O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) [HKLM] -- {928B06E4-DDAA-476A-926A-641620326327}
      O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
      O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}
      O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {7299052b-02a4-4627-81f2-1818da5d550d}
      O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}
      O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
      O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {3B160861-7250-451E-B5EE-8B92BF30A710}
      O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-040C-0000-0000000FF1CE}
      O42 - Logiciel: Mozilla Firefox 4.0 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 4.0 (x86 fr)
      O42 - Logiciel: NewFreeScreensaver nfsSkyAnimationHD - (.Pas de propriétaire.) [HKLM] -- nfsSkyAnimationHD New Free Screensaver_is1
      O42 - Logiciel: Penguins! - (.WildTangent.) [HKLM] -- WT082168
      O42 - Logiciel: Plants vs. Zombies - (.WildTangent.) [HKLM] -- WT082170
      O42 - Logiciel: Polar Bowler - (.WildTangent.) [HKLM] -- WT082172
      O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM] -- InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}
      O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM] -- {40BF1E83-20EB-11D8-97C5-0009C5020658}
      O42 - Logiciel: Realtek Ethernet Controller Driver For Windows 7 - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
      O42 - Logiciel: Realtek PCIE Card Reader - (.Realtek Semiconductor Corp..) [HKLM] -- {C1594429-8296-4652-BF54-9DBE4932A44C}
      O42 - Logiciel: Recovery Manager - (.CyberLink Corp..) [HKLM] -- {44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}
      O42 - Logiciel: Skyhook Wireless XPS Service - (.Skyhook Wireless.) [HKLM] -- {0AEE22A8-6430-4CD0-917A-F0EB49F4E814}
      O42 - Logiciel: Slingo Deluxe - (.WildTangent.) [HKLM] -- WT082427
      O42 - Logiciel: Synaptics Gesture Suite featuring SYNAPTICS | Scrybe - (.Synaptics Inc..) [HKLM] -- {13061CAA-0284-4F9A-B460-3D4699575B35}
      O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM] -- SynTPDeinstKey
      O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}
      O42 - Logiciel: Update for Microsoft Office 2007 Help for Common Features (KB963673) - (.Microsoft.) [HKLM] -- {90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AB365889-0395-4FAD-B702-CA5985D53D42}
      O42 - Logiciel: Update for Microsoft Office Excel 2007 Help (KB963678) - (.Microsoft.) [HKLM] -- {90120000-0016-0409-0000-0000000FF1CE}_HOMESTUDENTR_{199DF7B6-169C-448C-B511-1054101BE9C9}
      O42 - Logiciel: Update for Microsoft Office OneNote 2007 Help (KB963670) - (.Microsoft.) [HKLM] -- {90120000-00A1-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2744EF05-38E1-4D5D-B333-E021EDAEA245}
      O42 - Logiciel: Update for Microsoft Office Powerpoint 2007 Help (KB963669) - (.Microsoft.) [HKLM] -- {90120000-0018-0409-0000-0000000FF1CE}_HOMESTUDENTR_{397B1D4F-ED7B-4ACA-A637-43B670843876}
      O42 - Logiciel: Update for Microsoft Office Script Editor Help (KB963671) - (.Microsoft.) [HKLM] -- {90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{CD11C6A2-FFC6-4271-8EAB-79C3582F505C}
      O42 - Logiciel: Update for Microsoft Office Word 2007 (KB974631) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{1D53FB73-9826-4541-B2E0-A239C6EBA718}
      O42 - Logiciel: Update for Microsoft Office Word 2007 (KB974631) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{34726474-50D6-49FC-B8AC-35411459D27A}
      O42 - Logiciel: Update for Microsoft Office Word 2007 Help (KB963665) - (.Microsoft.) [HKLM] -- {90120000-001B-0409-0000-0000000FF1CE}_HOMESTUDENTR_{80E762AA-C921-4839-9D7D-DB62A72C0726}
      O42 - Logiciel: Virtual Villagers - The Secret City - (.WildTangent.) [HKLM] -- WT082241
      O42 - Logiciel: Wedding Dash - (.WildTangent.) [HKLM] -- WT082422
      O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite
      O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM] -- {34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}
      O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {D45240D3-B6B3-4FF9-B243-54ECE3E10066}
      O42 - Logiciel: Windows Live Family Safety - (.Microsoft Corporation.) [HKLM] -- {F53D678E-238F-4A71-9742-08BB6774E9DC}
      O42 - Logiciel: Windows Live Family Safety - (.Microsoft Corporation.) [HKLM] -- {FCFBA290-CB48-4AF1-A241-2685AEDEDD66}
      O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM] -- {2075CB0A-D26F-4DAA-B424-5079296B43BA}
      O42 - Logiciel: Windows Live ID Sign-in Assistant - (.Microsoft Corporation.) [HKLM] -- {61AD15B2-50DB-4686-A739-14FE180D4429}
      O42 - Logiciel: Windows Live Installer - (.Microsoft Corporation.) [HKLM] -- {0B0F231F-CE6A-483D-AA23-77B364F75917}
      O42 - Logiciel: Windows Live MIME IFilter - (.Microsoft Corporation.) [HKLM] -- {AF844339-2F8A-4593-81B3-9F4C54038C4E}
      O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {9D56775A-93F3-44A3-8092-840E3826DE30}
      O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {9FAE6E8D-E686-49F5-A574-0A58DFD9580C}
      O42 - Logiciel: Windows Live Mesh - (.Microsoft Corporation.) [HKLM] -- {841F1FB4-FDF8-461C-A496-3E1CFD84C0B5}
      O42 - Logiciel: Windows Live Mesh - (.Microsoft Corporation.) [HKLM] -- {DECDCB7C-58CC-4865-91AF-627F9798FE48}
      O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {6057E21C-ABE9-4059-AE3E-3BEB9925E660}
      O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {EB4DF488-AAEF-406F-A341-CB2AAA315B90}
      O42 - Logiciel: Windows Live Messenger Companion Core - (.Microsoft Corporation.) [HKLM] -- {78A96B4C-A643-4D0F-98C2-A8E16A6669F9}
      O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM] -- {6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}
      O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM] -- {92EA4134-10D1-418A-91E1-5A0453131A38}
      O42 - Logiciel: Windows Live PIMT Platform - (.Microsoft Corporation.) [HKLM] -- {4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}
      O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM] -- {A9BDCA6B-3653-467B-AC83-94367DA3BFE3}
      O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM] -- {C893D8C0-1BA0-4517-B11C-E89B65E72F70}
      O42 - Logiciel: Windows Live Photo Gallery - (.Microsoft Corporation.) [HKLM] -- {3336F667-9049-4D46-98B6-4C743EEBC5B1}
      O42 - Logiciel: Windows Live Remote Client - (.Microsoft Corporation.) [HKLM] -- {19A4A990-5343-4FF7-B3B5-6F046C091EDF}
      O42 - Logiciel: Windows Live Remote Client Resources - (.Microsoft Corporation.) [HKLM] -- {DFDBE1F9-04CE-4645-BB6C-4590EABC7A9C}
      O42 - Logiciel: Windows Live Remote Service - (.Microsoft Corporation.) [HKLM] -- {227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}
      O42 - Logiciel: Windows Live Remote Service Resources - (.Microsoft Corporation.) [HKLM] -- {AB93C51F-71F9-4A28-8134-FE1B5B9373E9}
      O42 - Logiciel: Windows Live SOXE - (.Microsoft Corporation.) [HKLM] -- {682B3E4F-696A-42DE-A41C-4C07EA1678B4}
      O42 - Logiciel: Windows Live SOXE Definitions - (.Microsoft Corporation.) [HKLM] -- {200FEC62-3C34-4D60-9CE8-EC372E01C08F}
      O42 - Logiciel: Windows Live UX Platform - (.Microsoft Corporation.) [HKLM] -- {CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}
      O42 - Logiciel: Windows Live UX Platform Language Pack - (.Microsoft Corporation.) [HKLM] -- {09F56A49-A7B1-4AAB-95B9-D13094254AD1}
      O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {3B9A92DA-6374-4872-B646-253F18624D5F}
      O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {A726AE06-AAA3-43D1-87E3-70F510314F04}
      O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {AAAFC670-569B-4A2F-82B4-42945E0DE3EF}
      O42 - Logiciel: Windows Live Writer Resources - (.Microsoft Corporation.) [HKLM] -- {62687B11-58B5-4A18-9BC3-9DF4CE03F194}
      O42 - Logiciel: Zuma Deluxe - (.WildTangent.) [HKLM] -- WT082246
      O42 - Logiciel: jv16 PowerTools 2011 - (.Macecraft Software.) [HKLM] -- jv16 PowerTools 2011

      ---\\ HKCU & HKLM Software Keys
      [HKCU\Software\7-Zip]
      [HKCU\Software\Adobe]
      [HKCU\Software\AntiCrash]
      [HKCU\Software\AppDataLow\Software\Microsoft]
      [HKCU\Software\AppDataLow\Software]
      [HKCU\Software\AppDataLow]
      [HKCU\Software\ArcSoft]
      [HKCU\Software\Classes]
      [HKCU\Software\Clients]
      [HKCU\Software\CyberLink]
      [HKCU\Software\FSCR Master]
      [HKCU\Software\Google]
      [HKCU\Software\Hewlett-Packard]
      [HKCU\Software\IDT]
      [HKCU\Software\IM Providers]
      [HKCU\Software\Integrator]
      [HKCU\Software\Intel]
      [HKCU\Software\JavaSoft]
      [HKCU\Software\Macromedia]
      [HKCU\Software\Malwarebytes' Anti-Malware]
      [HKCU\Software\MozillaPlugins]
      [HKCU\Software\Netscape]
      [HKCU\Software\Norton]
      [HKCU\Software\ODBC]
      [HKCU\Software\Piriform]
      [HKCU\Software\Policies]
      [HKCU\Software\Softonic]
      [HKCU\Software\Synaptics]
      [HKCU\Software\TuneUp]
      [HKCU\Software\YahooPartnerToolbar]
      [HKLM\Software\ATI Technologies]
      [HKLM\Software\Adobe]
      [HKLM\Software\ArcSoft]
      [HKLM\Software\Atheros]
      [HKLM\Software\CXT]
      [HKLM\Software\Caphyon]
      [HKLM\Software\Classes]
      [HKLM\Software\Clients]
      [HKLM\Software\Cyberlink]
      [HKLM\Software\Dell]
      [HKLM\Software\Digital River]
      [HKLM\Software\Google]
      [HKLM\Software\HPQ]
      [HKLM\Software\HP]
      [HKLM\Software\Hewlett-Packard]
      [HKLM\Software\IDT]
      [HKLM\Software\InstalledOptions]
      [HKLM\Software\Intel]
      [HKLM\Software\JavaSoft]
      [HKLM\Software\JreMetrics]
      [HKLM\Software\Loquendo]
      [HKLM\Software\Macromedia]
      [HKLM\Software\Malwarebytes' Anti-Malware]
      [HKLM\Software\MozillaPlugins]
      [HKLM\Software\Mozilla]
      [HKLM\Software\ODBC]
      [HKLM\Software\P2G_Upgrade]
      [HKLM\Software\Piriform]
      [HKLM\Software\Policies]
      [HKLM\Software\Product_Upgrade]
      [HKLM\Software\RTLSetup]
      [HKLM\Software\Realtek Semiconductor Corp.]
      [HKLM\Software\Realtek]
      [HKLM\Software\RegisteredApplications]
      [HKLM\Software\Skyhook Wireless]
      [HKLM\Software\Spime]
      [HKLM\Software\Symantec]
      [HKLM\Software\Synaptics]
      [HKLM\Software\TuneUp]
      [HKLM\Software\WildTangent]
      [HKLM\Software\Windows]
      [HKLM\Software\Wow6432Node]
      [HKLM\Software\Zecter]
      [HKLM\Software\mozilla.org]

      ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
      O43 - CFD: 3/26/2011 - 6:31:20 PM - [3511045] ----D- C:\Program Files\7-Zip
      O43 - CFD: 6/25/2010 - 9:14:42 PM - [688367506] ----D- C:\Program Files\Adobe
      O43 - CFD: 3/21/2011 - 9:37:30 PM - [1394213] ----D- C:\Program Files\Advanced USB Port Monitor
      O43 - CFD: 6/25/2010 - 9:24:58 PM - [68034715] ----D- C:\Program Files\ArcSoft
      O43 - CFD: 3/21/2011 - 9:37:30 PM - [12072] ----D- C:\Program Files\Ask.com
      O43 - CFD: 8/19/2010 - 6:51:58 AM - [1645963] ----D- C:\Program Files\Atheros
      O43 - CFD: 4/11/2011 - 3:03:36 AM - [82682318] ----D- C:\Program Files\Avira
      O43 - CFD: 3/22/2011 - 11:20:14 PM - [190065192] ----D- C:\Program Files\Bell
      O43 - CFD: 3/23/2011 - 12:06:32 AM - [2082123] ----D- C:\Program Files\BellCanada
      O43 - CFD: 3/14/2011 - 3:05:56 AM - [1001287] ----D- C:\Program Files\Bing Bar Installer
      O43 - CFD: 4/6/2011 - 12:56:00 AM - [3673632] ----D- C:\Program Files\CCleaner
      O43 - CFD: 3/23/2011 - 12:03:16 AM - [639161761] ----D- C:\Program Files\Common Files
      O43 - CFD: 3/17/2011 - 9:55:48 PM - [38541] ----D- C:\Program Files\CPUID
      O43 - CFD: 6/25/2010 - 9:49:48 PM - [235193704] ----D- C:\Program Files\CyberLink
      O43 - CFD: 4/5/2011 - 9:52:22 PM - [0] ----D- C:\Program Files\Dachshund Software
      O43 - CFD: 3/10/2011 - 2:16:14 AM - [4191414] ----D- C:\Program Files\DVD Maker
      O43 - CFD: 4/11/2011 - 8:59:48 PM - [10831876] ----D- C:\Program Files\Enigma Software Group
      O43 - CFD: 3/23/2011 - 12:06:26 AM - [432120] ----D- C:\Program Files\Gestionnaire de sauvegarde du Coffre-fort personnel
      O43 - CFD: 4/4/2011 - 11:18:58 PM - [271988354] ----D- C:\Program Files\Google
      O43 - CFD: 4/12/2011 - 10:52:14 PM - [776806274] ----D- C:\Program Files\Hewlett-Packard
      O43 - CFD: 3/16/2011 - 11:10:52 PM - [0] ----D- C:\Program Files\HHD Software
      O43 - CFD: 8/19/2010 - 7:03:36 AM - [2375214418] ----D- C:\Program Files\Hp
      O43 - CFD: 6/25/2010 - 8:00:18 PM - [477461556] ----D- C:\Program Files\HP Games
      O43 - CFD: 8/19/2010 - 6:49:02 AM - [42745996] ----D- C:\Program Files\IDT
      O43 - CFD: 4/12/2011 - 10:52:14 PM - [144729565] --H-D- C:\Program Files\InstallShield Installation Information
      O43 - CFD: 8/19/2010 - 6:45:06 AM - [11120295] ----D- C:\Program Files\Intel
      O43 - CFD: 3/14/2011 - 3:31:42 AM - [4498636] ----D- C:\Program Files\Internet Explorer
      O43 - CFD: 3/17/2011 - 12:34:32 AM - [115] ----D- C:\Program Files\IObit
      O43 - CFD: 3/14/2011 - 1:30:26 AM - [90561185] ----D- C:\Program Files\Java
      O43 - CFD: 4/12/2011 - 10:54:30 PM - [82522656] ----D- C:\Program Files\jv16 PowerTools 2011
      O43 - CFD: 3/23/2011 - 12:06:22 AM - [660959] ----D- C:\Program Files\ma-config.com
      O43 - CFD: 3/10/2011 - 2:08:50 AM - [93571] ----D- C:\Program Files\Makayama Interactive
      O43 - CFD: 3/26/2011 - 6:32:28 PM - [4921787] ----D- C:\Program Files\Malwarebytes' Anti-Malware
      O43 - CFD: 8/19/2010 - 6:58:02 AM - [5207326] ----D- C:\Program Files\Microsoft
      O43 - CFD: 7/14/2009 - 12:52:32 AM - [46990135] ----D- C:\Program Files\Microsoft Games
      O43 - CFD: 6/25/2010 - 8:25:54 PM - [473453872] ----D- C:\Program Files\Microsoft Office
      O43 - CFD: 6/25/2010 - 8:28:20 PM - [7791803] ----D- C:\Program Files\Microsoft Office Suite Activation Assistant
      O43 - CFD: 3/14/2011 - 3:33:06 AM - [38360699] ----D- C:\Program Files\Microsoft Silverlight
      O43 - CFD: 3/7/2011 - 2:29:58 AM - [1829877] ----D- C:\Program Files\Microsoft SQL Server Compact Edition
      O43 - CFD: 3/14/2011 - 2:47:12 AM - [144641984] ----D- C:\Program Files\Microsoft Works
      O43 - CFD: 6/25/2010 - 8:25:38 PM - [8167779] ----D- C:\Program Files\Microsoft.NET
      O43 - CFD: 3/21/2011 - 9:37:24 PM - [553272] ----D- C:\Program Files\MonitorTest
      O43 - CFD: 3/23/2011 - 11:52:12 PM - [32939931] ----D- C:\Program Files\Mozilla Firefox
      O43 - CFD: 7/14/2009 - 12:52:32 AM - [25757] ----D- C:\Program Files\MSBuild
      O43 - CFD: 3/14/2011 - 3:05:26 AM - [6837789] ----D- C:\Program Files\MSN Toolbar
      O43 - CFD: 3/11/2011 - 9:45:10 PM - [1207222] ----D- C:\Program Files\NewFreeScreensavers
      O43 - CFD: 3/11/2011 - 10:48:38 PM - [63849855] ----D- C:\Program Files\Norton Internet Security
      O43 - CFD: 3/9/2011 - 11:42:00 PM - [20429672] R---D- C:\Program Files\Online Services
      O43 - CFD: 3/15/2011 - 10:09:14 PM - [67592659] ----D- C:\Program Files\Panda Security
      O43 - CFD: 3/16/2011 - 12:04:56 PM - [23131] ----D- C:\Program Files\PerformanceTest
      O43 - CFD: 8/19/2010 - 6:50:04 AM - [11410203] ----D- C:\Program Files\Realtek
      O43 - CFD: 7/14/2009 - 12:52:32 AM - [38597377] ----D- C:\Program Files\Reference Assemblies
      O43 - CFD: 3/15/2011 - 12:49:02 AM - [23878] ----D- C:\Program Files\SIW
      O43 - CFD: 8/19/2010 - 7:01:12 AM - [7857872] ----D- C:\Program Files\Skyhook Wireless
      O43 - CFD: 3/15/2011 - 12:49:02 AM - [0] ----D- C:\Program Files\Speccy
      O43 - CFD: 4/12/2011 - 10:54:30 PM - [69999541] ----D- C:\Program Files\Synaptics
      O43 - CFD: 7/14/2009 - 12:53:24 AM - [0] --H-D- C:\Program Files\Uninstall Information
      O43 - CFD: 3/10/2011 - 2:16:12 AM - [3049984] ----D- C:\Program Files\Windows Defender
      O43 - CFD: 4/1/2011 - 8:35:06 PM - [190756655] ----D- C:\Program Files\Windows Live
      O43 - CFD: 3/14/2011 - 3:31:44 AM - [6180864] ----D- C:\Program Files\Windows Mail
      O43 - CFD: 3/14/2011 - 3:31:42 AM - [6607787] ----D- C:\Program Files\Windows Media Player
      O43 - CFD: 7/14/2009 - 12:52:32 AM - [12197556] ----D- C:\Program Files\Windows NT
      O43 - CFD: 3/10/2011 - 2:16:14 AM - [4417800] ----D- C:\Program Files\Windows Photo Viewer
      O43 - CFD: 3/9/2011 - 11:34:26 PM - [189440] ----D- C:\Program Files\Windows Portable Devices
      O43 - CFD: 3/10/2011 - 2:16:16 AM - [11157647] ----D- C:\Program Files\Windows Sidebar
      O43 - CFD: 4/13/2011 - 10:59:20 PM - [3827924] ----D- C:\Program Files\ZHPDiag
      O43 - CFD: 6/25/2010 - 9:13:22 PM - [16460255] ----D- C:\Program Files\Common Files\Adobe
      O43 - CFD: 6/25/2010 - 9:14:32 PM - [31787256] ----D- C:\Program Files\Common Files\Adobe AIR
      O43 - CFD: 6/25/2010 - 9:24:58 PM - [13072960] ----D- C:\Program Files\Common Files\ArcSoft
      O43 - CFD: 6/25/2010 - 8:25:52 PM - [92976] ----D- C:\Program Files\Common Files\DESIGNER
      O43 - CFD: 3/30/2011 - 11:18:08 PM - [3164236] ----D- C:\Program Files\Common Files\InstallShield
      O43 - CFD: 6/25/2010 - 10:11:52 PM - [1231815] ----D- C:\Program Files\Common Files\Java
      O43 - CFD: 4/1/2011 - 8:31:02 PM - [273577090] ----D- C:\Program Files\Common Files\microsoft shared
      O43 - CFD: 3/23/2011 - 12:09:04 AM - [208896] ----D- C:\Program Files\Common Files\Motive
      O43 - CFD: 3/9/2011 - 11:34:42 PM - [2702] ----D- C:\Program Files\Common Files\Services
      O43 - CFD: 7/13/2009 - 10:37:06 PM - [41103783] ----D- C:\Program Files\Common Files\SpeechEngines
      O43 - CFD: 3/10/2011 - 2:16:14 AM - [44730623] ----D- C:\Program Files\Common Files\System
      O43 - CFD: 3/7/2011 - 1:26:12 AM - [213729169] ----D- C:\Program Files\Common Files\Windows Live
      O43 - CFD: 3/11/2011 - 4:10:12 AM - [761] ----D- C:\ProgramData\Adobe
      O43 - CFD: 4/11/2011 - 7:46:12 AM - [192] ----D- C:\ProgramData\aJc31002nKaGl31002
      O43 - CFD: 7/14/2009 - 12:53:56 AM - [0] -SH-D- C:\ProgramData\Application Data
      O43 - CFD: 3/30/2011 - 11:17:56 PM - [15542921] ----D- C:\ProgramData\ArcSoft
      O43 - CFD: 8/19/2010 - 6:52:30 AM - [10585] ----D- C:\ProgramData\Atheros
      O43 - CFD: 4/11/2011 - 3:03:36 AM - [1224043] ----D- C:\ProgramData\Avira
      O43 - CFD: 3/22/2011 - 11:20:04 PM - [21838829] ----D- C:\ProgramData\Bell
      O43 - CFD: 8/19/2010 - 6:59:14 AM - [34404] ----D- C:\ProgramData\CyberLink
      O43 - CFD: 7/14/2009 - 12:53:56 AM - [0] -SH-D- C:\ProgramData\Desktop
      O43 - CFD: 7/14/2009 - 12:53:56 AM - [0] -SH-D- C:\ProgramData\Documents
      O43 - CFD: 7/14/2009 - 12:53:56 AM - [0] -SH-D- C:\ProgramData\Favorites
      O43 - CFD: 3/21/2011 - 9:37:24 PM - [37013] ----D- C:\ProgramData\FreeApp
      O43 - CFD: 4/12/2011 - 10:54:30 PM - [1969824] ----D- C:\ProgramData\Hewlett-Packard
      O43 - CFD: 8/19/2010 - 7:05:52 AM - [49] ----D- C:\ProgramData\HP
      O43 - CFD: 3/22/2011 - 2:44:54 AM - [1191344] ----D- C:\ProgramData\ma-config.com
      O43 - CFD: 3/23/2011 - 11:41:18 PM - [6490100] ----D- C:\ProgramData\Malwarebytes
      O43 - CFD: 4/1/2011 - 8:32:04 PM - [171047232] -S--D- C:\ProgramData\Microsoft
      O43 - CFD: 3/14/2011 - 2:49:48 AM - [111936] ----D- C:\ProgramData\Microsoft Help
      O43 - CFD: 3/22/2011 - 11:10:54 PM - [2513] ----D- C:\ProgramData\Motive
      O43 - CFD: 3/11/2011 - 10:48:38 PM - [13900] ----D- C:\ProgramData\Norton
      O43 - CFD: 8/19/2010 - 7:01:18 AM - [35977512] ----D- C:\ProgramData\NortonInstaller
      O43 - CFD: 3/15/2011 - 10:08:24 PM - [51312298] ----D- C:\ProgramData\Panda Security
      O43 - CFD: 3/16/2011 - 1:40:36 AM - [38] ----D- C:\ProgramData\Panda Security URL Filtering
      O43 - CFD: 3/16/2011 - 9:19:06 PM - [732] ----D- C:\ProgramData\PassMark
      O43 - CFD: 3/22/2011 - 10:56:48 PM - [7357] ----D- C:\ProgramData\Radialpoint
      O43 - CFD: 3/22/2011 - 11:20:40 PM - [143360] ----D- C:\ProgramData\Raxco
      O43 - CFD: 4/2/2011 - 7:45:28 AM - [18873605] ----D- C:\ProgramData\Recovery
      O43 - CFD: 8/19/2010 - 7:00:54 AM - [258653] ----D- C:\ProgramData\Skyhook Wireless
      O43 - CFD: 7/14/2009 - 12:53:56 AM - [0] -SH-D- C:\ProgramData\Start Menu
      O43 - CFD: 6/25/2010 - 10:11:54 PM - [189] ----D- C:\ProgramData\Sun
      O43 - CFD: 4/12/2011 - 10:54:30 PM - [45829] ----D- C:\ProgramData\Synaptics
      O43 - CFD: 3/23/2011 - 12:06:58 AM - [290958] ----D- C:\ProgramData\Temp
      O43 - CFD: 7/14/2009 - 12:53:56 AM - [0] -SH-D- C:\ProgramData\Templates
      O43 - CFD: 3/31/2011 - 3:03:44 AM - [239616] ----D- C:\ProgramData\TuneUp Software
      O43 - CFD: 3/23/2011 - 12:07:06 AM - [1649882698] ----D- C:\ProgramData\WildTangent
      O43 - CFD: 3/11/2011 - 4:12:52 AM - [121622] ----D- C:\Users\gst video\AppData\Local\Adobe
      O43 - CFD: 3/7/2011 - 1:20:42 AM - [0] -SH-D- C:\Users\gst video\AppData\Local\Application Data
      O43 - CFD: 3/19/2011 - 11:26:08 PM - [30486] ----D- C:\Users\gst video\AppData\Local\Apps
      O43 - CFD: 3/15/2011 - 9:17:56 PM - [412] ----D- C:\Users\gst video\AppData\Local\ArcSoft
      O43 - CFD: 4/11/2011 - 12:22:42 PM - [0] ----D- C:\Users\gst video\AppData\Local\Diagnostics
      O43 - CFD: 4/11/2011 - 12:22:42 PM - [887405] ----D- C:\Users\gst video\AppData\Local\ElevatedDiagnostics
      O43 - CFD: 4/4/2011 - 11:22:52 PM - [3835408] ----D- C:\Users\gst video\AppData\Local\Google
      O43 - CFD: 4/12/2011 - 10:54:30 PM - [4353734] --
  2. Re

    1) * Pas fini !!

    Poste le rapport >> Le rapport est sauvegardé dans C:\RKreport.txt

    2)* inscris toi sur le forum afin de rendre tes liens lisibles

    * ICI >> CCM

    Contributeur sécurité CCM
    1. en tout cas le site testo antivirus serait mieux de retourner a l,ecole disant que antivir 10 est nul , avas lui ne vaut rien car je connais une personne ayant antivir 10 et detecte tout.
  3. Salut

    Ce rapport ne montre rien

    *vlctxl - 13 avr 2011 à 18:50 >>> oui ca marcher et on m,a dit d,installer antivir qui le detecte, pas avast en tout cas.

    * vlctxl - 14 avr 2011 à 02:59 >>> RogueKiller V4.3.8 par Tigzy
    Mode: Suppression -- Date : 13/04/2011 20:57:02

    1) si tu l as déjà ne le télécharge pas ,

    * Télécharges Malwarebytes' (mbam)

    ICI >> Malwarebytes' (mbam)

    ou

    >> Malwarebytes' Mbam

    * installes + mise a jour
    * Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) sans les ouvrir
    * Lances--> Malwarebytes (MBAM)
    * Puis vas dans l'onglet "Recherche", coche >>Exécuter un examen complet
    * puis "Rechercher"
    * Sélectionnes tes disques durs" puis clique sur "Lancer l'examen"
    * A la fin du scan, clique sur Afficher les résultats puis sur Enregistrer le rapport
    * Si MalwareBytes' détecte des infections, clique sur ==>Afficher les résultats, puis sur ==>Supprimer la sélection
    * S'il t' es demandé de redémarrer, clique sur "oui "
    * aprés la suppression(s) de ou des infections trouvées --> poste le rapport ici
    !!! Ne pas vider la quarantaine de MBAM sans avis !!!

    2) * Télécharge ZHPDiag (de Nicolas coolman)

    ICI >> ZHPDiag (de Nicolas coolman)

    * Une fois le téléchargement achevé,
    * double clique sur ZHPDiag.exe et suis les instructions.
    * /!\Utilisateurs de Windows Vista et Windows 7
    >> Clique droit sur le logo de ZHPDiag.exe, « exécuter en tant qu'Administrateur »
    * Laisse toi guider lors de l'installation,
    * coche >> créer une icône sur le bureau
    * il se lancera automatiquement à la fin.
    * Clique sur l'icône représentant une loupe (« Lancer le diagnostic »)
    * Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette
    * Héberge le rapport sur ce site,
    >> Cijoint.fr
    * puis copie/colle le lien fourni dans ta prochaine réponse sur le forum.

    * Pour t aider ,pour heberger le rapport
    * rends toi sur Cijoint.fr
    * clic sur Parcourir
    * Trouve >> le rapport que tu viens d'enregistrer qui doit par exemple être sur ton bureau
    * et valide en cliquant sur >> Cliquez ici pour déposer le Fichier
    * un lien de ce genre http://www.cijoint.fr/cjlink.php?file=cj201004/cijecaEGX.txt te sera généré,
    * il te suffit de le poster ici pour que je puisse voir le rapport

    ou

    ICI >> pjjoint.malekal
    * Cliques sur >> Parcourir
    * Trouve >> le rapport que tu viens d'enregistrer par exemple sur ton bureau
    * Cliques sur >> envoyer le fichier
    * Un lien te sera généré,
    * il te suffit de le poster ici

    Contributeur sécurité CCM
    1. c'est fou le nombre de gens qui savent pas lire hein ? ^^
    2. pourquoi cette remarque svp.
    3. c'est clairement expliqué au dessus
    4. c,est vrai et je m,excuse.