Pirate prenant le contrôle de mon ordinateur

guillaume -  
Bonjour,
avant-hier, en faisant le tri des innombrables mails nuisibles innondant ma boite hotmail, j'ai par mégarde ouvert le contenu de l'un d'entre eux et depuis une personne s'introduit dans mon ordinateur.
Régulièrement, quand je suis sur internet, ma souris se bloque et systématiquement la même page internet s'ouvre (http://wwe-ground.blogspot.com/ si cela vous dit quelque chose ...). La souris est donc bloquée pendant environ dix secondes à chaque fois et pendant ce temps-là tous les onglets et boutons présents sur le site sont passés en revue, comme si on laissait enfoncée la touche tabulation. Ensuite, je peux reprendre le contrôle de ma souris. Parfois, d'autres pages s'ouvrent sur d'autres sites. Et la page s'ouvre toujours à partir de la fenêtre internet que je suis en train d'utiliser, jamais sur les autres fenêtres internet ouvertes au même moment.
Si ma description n'est pas claire, n'hésitez pas à demander plus de précisions !

J'ai néttoyé mon ordinateur avec Bitdefender, il m'a supprimé un cheval de Troie mais apparemment ce n'était pas ça.
De même, j'ai utilisé Spybot search and destroy qui m'a débarassé comme habituellement des innombrables programmes espions, mais là encore rien !

Savez-vous à quoi correspond ce phénomène et surtout comment je peux me débarasser de cette intrusion ?
Je ne suis pas bon en informatique, pourriez-vous m'expliquer cela simplement s'il-vous-plait ?
Je vous remercie par avance

8 réponses

  1.  Tigzy Contributeur sécurité
    Salut

    Supprime Spybot

    -----

    Télécharger sur le bureau Malwarebyte's Anti-Malware

    = double-clic sur mbam-setup pour lancer l'installation
    = Installer simplement sans rien modifier
    = Ne pas décocher "Faire la mise à jour"
    = si la mise à jour a échoué, la faire après execution du logiciel => onglet "Mise à jour"
    = Quand le programme lancé ==> cocher Exécuter un examen complet
    = Clic Rechercher
    = Eventuellement décocher les disque à ne pas analyser
    = Clic Lancer l'examen
    = En fin de scan ( 1h environ), si infection trouvée
    ==> Clic Afficher résultat
    = Fermer vos applications en cours
    = Vérifier si tout est coché et clic Supprimer la sélection

    un rapport s'ouvre le copier et le coller dans la réponse

    -----------

    * Télécharge ZHPDiag
    Capture

    * Laisse toi guider lors de l'installation, il se lancera automatiquement à la fin.
    * Clique sur l'icône représentant une loupe (« Lancer le diagnostic »)
    * Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette
    * Heberge le rapport ici: cijoint et colle le lien dans la réponse

    0
    1. juju666 Contributeur sécurité
      Hello,

      Grilled :p

      Bonne chasse Tigzy ^^
      .::. Contributeur Sécurité .::.
      0
      1. guillaume
        J'ai fait ce que vous m'avez dit. Malwarebytes a trouvé plusieurs chevaux de troie, sauf qu'après les avoir supprimé, il m'a proposé de redémarrer l'orinateur et bêtement j'ai mis oui, je ne peux donc pas vous communiquer le rapport. Cependant, le problème est toujours présent.
        Je refais un scan avec Malwarebytes et je vous envoie le rapport dans une heure.
        0
        1. juju666 Contributeur sécurité
          Ouvre MBAM, onglet rapports/log

          poste le dernier en date
          0
          2. guillaume
            voila l'ancien réalisé ce matin :
            Malwarebytes' Anti-Malware 1.50.1.1100
            www.malwarebytes.org

            Version de la base de données: 6559

            Windows 5.1.2600 Service Pack 3
            Internet Explorer 7.0.5730.13

            12/05/2011 12:46:30
            mbam-log-2011-05-12 (12-46-30).txt

            Type d'examen: Examen complet (C:\|D:\|)
            Elément(s) analysé(s): 244664
            Temps écoulé: 1 heure(s), 20 minute(s), 4 seconde(s)

            Processus mémoire infecté(s): 0
            Module(s) mémoire infecté(s): 0
            Clé(s) du Registre infectée(s): 6
            Valeur(s) du Registre infectée(s): 3
            Elément(s) de données du Registre infecté(s): 1
            Dossier(s) infecté(s): 0
            Fichier(s) infecté(s): 4

            Processus mémoire infecté(s):
            (Aucun élément nuisible détecté)

            Module(s) mémoire infecté(s):
            (Aucun élément nuisible détecté)

            Clé(s) du Registre infectée(s):
            HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{00A6FAF1-072E-44CF-8957-5838F569A31D} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
            HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF1-072E-44CF-8957-5838F569A31D} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
            HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{07B18EA9-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
            HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA9-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully.
            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.

            Valeur(s) du Registre infectée(s):
            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\WINDOWS\SYSTEM32\LEDONOFF.EXE (Trojan.Downloader.F) -> Value: LEDONOFF.EXE -> Quarantined and deleted successfully.
            HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Firewall Administrating (Backdoor.IRCBot) -> Value: Firewall Administrating -> Quarantined and deleted successfully.
            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Firewall Administrating (Backdoor.IRCBot) -> Value: Firewall Administrating -> Quarantined and deleted successfully.

            Elément(s) de données du Registre infecté(s):
            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Hijack.UserInit) -> Bad: (C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\msnmgr.exe) Good: (userinit.exe) -> Quarantined and deleted successfully.

            Dossier(s) infecté(s):
            (Aucun élément nuisible détecté)

            Fichier(s) infecté(s):
            c:\documents and settings\m. van der voorde\local settings\Temp\icreinstall\flvplayersetup[1].exe (Adware.Agent) -> Quarantined and deleted successfully.
            c:\program files\windows live\messenger\riched20.dll (PUP.FunWebProducts) -> Quarantined and deleted successfully.
            c:\system volume information\_restore{50838b60-b920-42da-9638-e0b84e4b7c4b}\RP277\A0112822.dll (PUP.FunWebProducts) -> Quarantined and deleted successfully.
            c:\WINDOWS\system32\LEDONOFF.exe (Trojan.Downloader.F) -> Quarantined and deleted successfully.


            voici le nouveau réalisé tout de suite, il n'y avait qu'un seul cheval de Troie :
            Malwarebytes' Anti-Malware 1.50.1.1100
            www.malwarebytes.org

            Version de la base de données: 6559

            Windows 5.1.2600 Service Pack 3
            Internet Explorer 7.0.5730.13

            12/05/2011 14:08:27
            mbam-log-2011-05-12 (14-08-27).txt

            Type d'examen: Examen complet (C:\|D:\|)
            Elément(s) analysé(s): 243743
            Temps écoulé: 1 heure(s), 14 minute(s), 29 seconde(s)

            Processus mémoire infecté(s): 0
            Module(s) mémoire infecté(s): 0
            Clé(s) du Registre infectée(s): 0
            Valeur(s) du Registre infectée(s): 0
            Elément(s) de données du Registre infecté(s): 0
            Dossier(s) infecté(s): 0
            Fichier(s) infecté(s): 1

            Processus mémoire infecté(s):
            (Aucun élément nuisible détecté)

            Module(s) mémoire infecté(s):
            (Aucun élément nuisible détecté)

            Clé(s) du Registre infectée(s):
            (Aucun élément nuisible détecté)

            Valeur(s) du Registre infectée(s):
            (Aucun élément nuisible détecté)

            Elément(s) de données du Registre infecté(s):
            (Aucun élément nuisible détecté)

            Dossier(s) infecté(s):
            (Aucun élément nuisible détecté)

            Fichier(s) infecté(s):
            c:\system volume information\_restore{50838b60-b920-42da-9638-e0b84e4b7c4b}\RP307\A0127934.exe (Trojan.Downloader.F) -> Quarantined and deleted successfully.
            0
            1. Tigzy Contributeur sécurité
              Tu avais un virus MSN.
              fait le ZHPDiag
              0
              1. guillaume
                Voila le résultat !

                Malwarebytes' Anti-Malware 1.50.1.1100
                www.malwarebytes.org

                Version de la base de données: 6559

                Windows 5.1.2600 Service Pack 3
                Internet Explorer 7.0.5730.13

                12/05/2011 12:46:30
                mbam-log-2011-05-12 (12-46-30).txt

                Type d'examen: Examen complet (C:\|D:\|)
                Elément(s) analysé(s): 244664
                Temps écoulé: 1 heure(s), 20 minute(s), 4 seconde(s)

                Processus mémoire infecté(s): 0
                Module(s) mémoire infecté(s): 0
                Clé(s) du Registre infectée(s): 6
                Valeur(s) du Registre infectée(s): 3
                Elément(s) de données du Registre infecté(s): 1
                Dossier(s) infecté(s): 0
                Fichier(s) infecté(s): 4

                Processus mémoire infecté(s):
                (Aucun élément nuisible détecté)

                Module(s) mémoire infecté(s):
                (Aucun élément nuisible détecté)

                Clé(s) du Registre infectée(s):
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{00A6FAF1-072E-44CF-8957-5838F569A31D} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF1-072E-44CF-8957-5838F569A31D} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{07B18EA9-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA9-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.

                Valeur(s) du Registre infectée(s):
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\WINDOWS\SYSTEM32\LEDONOFF.EXE (Trojan.Downloader.F) -> Value: LEDONOFF.EXE -> Quarantined and deleted successfully.
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Firewall Administrating (Backdoor.IRCBot) -> Value: Firewall Administrating -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Firewall Administrating (Backdoor.IRCBot) -> Value: Firewall Administrating -> Quarantined and deleted successfully.

                Elément(s) de données du Registre infecté(s):
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Hijack.UserInit) -> Bad: (C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\msnmgr.exe) Good: (userinit.exe) -> Quarantined and deleted successfully.

                Dossier(s) infecté(s):
                (Aucun élément nuisible détecté)

                Fichier(s) infecté(s):
                c:\documents and settings\m. van der voorde\local settings\Temp\icreinstall\flvplayersetup[1].exe (Adware.Agent) -> Quarantined and deleted successfully.
                c:\program files\windows live\messenger\riched20.dll (PUP.FunWebProducts) -> Quarantined and deleted successfully.
                c:\system volume information\_restore{50838b60-b920-42da-9638-e0b84e4b7c4b}\RP277\A0112822.dll (PUP.FunWebProducts) -> Quarantined and deleted successfully.
                c:\WINDOWS\system32\LEDONOFF.exe (Trojan.Downloader.F) -> Quarantined and deleted successfully.
                0
                1. guillaume
                  Désolé je n'ai pas colé le bon ^^

                  Rapport de ZHPDiag v1.27.203 par Nicolas Coolman, Update du 12/05/2011
                  Run by M. VAN DER VOORDE at 12/05/2011 14:17:39
                  Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html

                  ---\\ Web Browser
                  MSIE: Internet Explorer v7.0.5730.13 (Defaut)

                  ---\\ System Information
                  Windows XP Professional Service Pack 3 (Build 2600)
                  Processor: x86 Family 6 Model 15 Stepping 13, GenuineIntel
                  Operating System: 32 Bits
                  Boot mode: Normal (Normal boot)
                  Total RAM: 2037 MB (64% free)
                  System Restore: Activé (Enable)
                  System drive C: has 73 GB (49%) free of 149 GB

                  ---\\ Logged in mode
                  Computer Name: GUILLAUMEVDV
                  User Name: M. VAN DER VOORDE
                  All Users Names: SUPPORT_388945a0, M. VAN DER VOORDE, HelpAssistant, ASPNET, Administrateur,
                  Unselected Option: O45,O61,O62,O65,O66,O82
                  Logged in as Administrator

                  ---\\ Environnement Variables
                  %AppData%=C:\Documents and Settings\M. VAN DER VOORDE\Application Data
                  %LocalAppData%=C:\Documents and Settings\M. VAN DER VOORDE\Local Settings\Application Data
                  %StartMenu%=C:\Documents and Settings\M. VAN DER VOORDE\Menu Démarrer

                  ---\\ DOS/Devices
                  C:\ Hard drive, Flash drive, Thumb drive (Free 73 Go of 149 Go)
                  D:\ CD-ROM drive (Free 0 Go of 0 Go)

                  ---\\ Security Center & Tools Informations
                  [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
                  [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
                  [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
                  [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
                  [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
                  [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableTaskMgr: OK
                  [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableRegistryTools: OK
                  [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
                  [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK

                  ---\\ Recherche particulière de fichiers génériques
                  [MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.14/04/2008 03:34:03.) -- C:\WINDOWS\Explorer.exe [1037824]
                  [MD5.0B09E07755F412A1A4F18DDC353BA155] - (.Microsoft Corporation - Internet Extensions for Win32.) (.17/02/2011 19:56:16.) -- C:\WINDOWS\system32\wininet.dll [832512]
                  [MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.14/04/2008 03:34:28.) -- C:\WINDOWS\system32\Winlogon.exe [512000]
                  [MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/04/2008 19:40:30.) -- C:\WINDOWS\system32\drivers\atapi.sys [96512]
                  [MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.13/04/2008 20:15:53.) -- C:\WINDOWS\system32\drivers\ntfs.sys [574976]

                  ---\\ Processus lancés
                  [MD5.7422D7AD1D7B99130F01B90952FBA91E] - (.BitDefender SRL - BitDefender Update Service.) -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe [413696]
                  [MD5.C628A76F90FF129E7A03A89F4354AC30] - (.BitDefender S. R. L. - BitDefender Security Service.) -- C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe [1638240]
                  [MD5.3CB0CC8879956C187E87E18634EE5164] - (.TOSHIBA CORPORATION - Service of ConfigFree..) -- C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe [40960]
                  [MD5.0264B15F628C8C7DBF439FD7AB4108F5] - (.ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM - PrintCtrl.) -- C:\WINDOWS\system32\PrintCtrl.exe [77824]
                  [MD5.3F061F306EDFCFED162F820991D4CE87] - (.TOSHIBA Corp. - TOSHIBA TAPPSRV.) -- C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe [35840]
                  [MD5.C5AC715B65B01788ABC22D10749DDDD8] - (.TOSHIBA Corporation - TDCSrv Application.) -- C:\WINDOWS\system32\TODDSrv.exe [129632]
                  [MD5.6C12B2D50D21F9EA9D5651DD84DFCCFD] - (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe [162328]
                  [MD5.627EF6A9EC36992B5CC4912D1442DDAB] - (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe [137752]
                  [MD5.408DDEA6399D173246A62B7BD9D776DD] - (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.EXE [16859648]
                  [MD5.61C23465F195FDF5AE5FE342E1692AC7] - (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1024000]
                  [MD5.371961D4E5648C73A5AFA951131F5EE7] - (.TOSHIBA - Hotkey Utility.) -- C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe [360448]
                  [MD5.6903C40E1E83BB36BF08C5B3A4EDC632] - (.Intel Corporation - igfxsrvc Module.) -- C:\WINDOWS\system32\igfxsrvc.exe [252440]
                  [MD5.A0E541DBA4496527DF51BD9512D8A30E] - (.TOSHIBA Corporation - Pas de description.) -- C:\WINDOWS\system32\TPSMain.exe [266240]
                  [MD5.9EC785EBD0966DDE6FED10FB59FCB186] - (.TOSHIBA CORPORATION - ConfigFree(TM) Tray.) -- C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe [974848]
                  [MD5.B8C1E6DD7AAE2AABF7FCEE565C58ABF4] - (.TOSHIBA Corporation - SmoothView.) -- C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe [143360]
                  [MD5.305F965A36913480907C10073193CAD5] - (.TOSHIBA Corporation - TFncKy.) -- C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe [184320]
                  [MD5.8A9350D8E866D162104D7A16F03D538D] - (.TOSHIBA Corporation - TOSHIBA Direct Disc Writer - Event Monitor.) -- C:\Program Files\TOSHIBA\TOSHIBA Direct Disc Writer\ddwmon.exe [495616]
                  [MD5.E1FAAF7915BC07352CCF1DFF37058414] - (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe [581632]
                  [MD5.137962BA4B4B60A0E5F12D6C9DFA4C2F] - (.Chicony - traybar.) -- C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe [413696]
                  [MD5.3F714FB68EE2D261965D4074AA4E5BEB] - (.BitDefender S.R.L. - BitDefender Agent.) -- C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe [782336]
                  [MD5.A795B8E9527971F2A2A9B7281522C5C6] - (.TOSHIBA Corporation - Pas de description.) -- C:\WINDOWS\system32\TPSBattM.exe [40960]
                  [MD5.CD3E1E79992F07F9BB6195E497AF3544] - (.ActMask Co.,Ltd - http://www.all2pdf.com - PrintDisp.) -- C:\WINDOWS\system32\PrintDisp.exe [878080]
                  [MD5.DD84FD291B2C324B8E6D6EF6B8643A69] - (...) -- C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe [4624384]
                  [MD5.FEBC1591E5C0DC87EF9CF3D657B65FC2] - (.TOSHIBA - CD/DVD Drive Acoustic Silencer.) -- C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe [65536]
                  [MD5.BA9406C807034F3EF689A455276386C4] - (.Pas de propriétaire - BitDefender Security Center.) -- C:\Program Files\BitDefender\BitDefender 2009\seccenter.exe [442368]
                  [MD5.7D73EF1A0DA0F7171BA19C25BD2CB4A6] - (.SWE von Schleusen - UltimateZip Quick Start Executable.) -- C:\Program Files\UltimateZip\uzqkst.exe [1087488]
                  [MD5.83170B8E03213093B065A9638E146499] - (.OpenOffice.org - OpenOffice.org 3.1.) -- C:\Program Files\OpenOffice.org 3\program\soffice.exe [7424000]
                  [MD5.873867A02F0E83F18CF871E776B651DC] - (.OpenOffice.org - OpenOffice.org 3.1.) -- C:\Program Files\OpenOffice.org 3\program\soffice.bin [7418368]
                  [MD5.E4A798DFDE7FE6E79F23548F0EF0F844] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe [634648]
                  [MD5.1E7E8FE07832E577FF31703542D2E8A1] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [645632]

                  ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
                  P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
                  P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
                  P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.60310.0.) -- c:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll
                  P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
                  P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.53\npGoogleUpdate3.dll
                  P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.53\npGoogleUpdate3.dll

                  ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
                  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr
                  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
                  R0 - HKUS\S-1-5-21-3262925684-2652488541-2552351169-1005\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr
                  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
                  R1 - HKUS\S-1-5-21-3262925684-2652488541-2552351169-1005\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
                  R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (7.00.6000.17096 (vista_gdr.110211-1830)) -- C:\WINDOWS\system32\ieframe.dll
                  R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2

                  ---\\ Internet Explorer, Proxy Management (R5)
                  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
                  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
                  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
                  R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
                  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
                  R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

                  ---\\ ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
                  F2 - REG:system.ini: UserInit=userinit.exe,
                  F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

                  ---\\ Browser Helper Objects de navigateur (O2)
                  O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                  O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline
                  O2 - BHO: (no name) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} Clé orpheline

                  ---\\ Internet Explorer Toolbars (O3)
                  O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} . (.Bitdefender - BitDefender Antiphishing Toolbar.) -- C:\Program Files\BitDefender\BitDefender 2009\IEToolbar.dll

                  ---\\ ---\\ Applications démarrées par registre & par dossier (O4)
                  O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe
                  O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe
                  O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe
                  O4 - HKLM\..\Run: [RTHDCPL] . (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.exe
                  O4 - HKLM\..\Run: [Alcmtr] . (.Realtek Semiconductor Corp. - Realtek Azalia Audio - Event Monitor.) -- C:\WINDOWS\ALCMTR.exe
                  O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                  O4 - HKLM\..\Run: [THotkey] . (.TOSHIBA - Hotkey Utility.) -- C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
                  O4 - HKLM\..\Run: [TPSMain] . (.TOSHIBA Corporation - Pas de description.) -- C:\Windows\System32\TPSMain.exe
                  O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
                  O4 - HKLM\..\Run: [SmoothView] . (.TOSHIBA Corporation - SmoothView.) -- C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
                  O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
                  O4 - HKLM\..\Run: [DDWMon] . (.TOSHIBA Corporation - TOSHIBA Direct Disc Writer - Event Monitor.) -- C:\Program Files\TOSHIBA\TOSHIBA Direct Disc Writer\ddwmon.exe
                  O4 - HKLM\..\Run: [topi] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe
                  O4 - HKLM\..\Run: [Camera Assistant Software] . (.Chicony - traybar.) -- C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
                  O4 - HKLM\..\Run: [BDAgent] . (.BitDefender S.R.L. - BitDefender Agent.) -- C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe
                  O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] . (.BitDefender - IEShow Application.) -- C:\Program Files\BitDefender\BitDefender 2009\IEShow.exe
                  O4 - HKLM\..\Run: [CFSServ.exe] CFSServ.exe
                  O4 - HKLM\..\Run: [PrintDisp] . (.ActMask Co.,Ltd - http://www.all2pdf.com - PrintDisp.) -- C:\WINDOWS\system32\PrintDisp.exe
                  O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
                  O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe
                  O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware (reboot)] . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
                  O4 - HKCU\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
                  O4 - HKCU\..\Run: [TOSCDSPD] . (.TOSHIBA - CD/DVD Drive Acoustic Silencer.) -- C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
                  O4 - HKCU\..\Run: [loader1] . (...) -- C:\DOCUME~1\MAEED~1.VAN\LOCALS~1\Temp\remote\loader1.vbe
                  O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
                  O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
                  O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
                  O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
                  O4 - HKUS\S-1-5-21-3262925684-2652488541-2552351169-1005\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
                  O4 - HKUS\S-1-5-21-3262925684-2652488541-2552351169-1005\..\Run: [TOSCDSPD] . (.TOSHIBA - CD/DVD Drive Acoustic Silencer.) -- C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
                  O4 - HKUS\S-1-5-21-3262925684-2652488541-2552351169-1005\..\Run: [loader1] . (...) -- C:\DOCUME~1\MAEED~1.VAN\LOCALS~1\Temp\remote\loader1.vbe
                  O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Microsoft Office.lnk . (.Microsoft Corporation.) -- C:\Program Files\Microsoft Office\Office10\OSA.EXE
                  O4 - Global Startup: C:\Documents And Settings\M. VAN DER VOORDE\Menu Démarrer\Programmes\Démarrage\OpenOffice.org 3.1.lnk . (...) -- C:\Program Files\OpenOffice.org 3\program\quickstart.exe
                  O4 - Global Startup: C:\Documents And Settings\M. VAN DER VOORDE\Menu Démarrer\Programmes\Démarrage\UltimateZip Quick Start.lnk . (.SWE von Schleusen.) -- C:\Program Files\UltimateZip\uzqkst.exe

                  ---\\ ---\\ Autres liens utilisateurs (O4)
                  O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader 9.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A94000000001}\SC_Reader.ico
                  O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Aide sur Graphe_2D.lnk . (...) -- C:\Program Files\JYM\graphe_2D\GRAPHE_2D.HLP
                  O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Apple Software Update.lnk . (...) -- C:\WINDOWS\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}\AppleSoftwareUpdateIco.exe
                  O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Graphe_2D.lnk . (...) -- C:\Program Files\JYM\graphe_2D\Graphe_2D.exe
                  O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Lanceur de tâches Microsoft Works.lnk . (.Microsoft® Corporation.) -- C:\Program Files\Microsoft Works\msworks.exe
                  O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Word.lnk . (...) -- C:\WINDOWS\Installer\{911B040C-6000-11D3-8CFE-0050048383C9}\wordicon.exe
                  O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\MSN.lnk . (.Microsoft Corporation.) -- C:\Program Files\MSN\MSNCoreFiles\Install\msnsusii.exe
                  O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Visionneuse Microsoft Office PowerPoint 2007.lnk . (...) -- C:\WINDOWS\Installer\{95120000-00AF-040C-0000-0000000FF1CE}\ppvwicon.exe
                  O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk . (.Microsoft Corporation.) -- C:\Program Files\Messenger\msmsgs.exe
                  O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Movie Maker\moviemk.exe
                  O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Wireshark.lnk . (.The Wireshark developer community, http://w.) -- C:\Program Files\Wireshark\wireshark.exe
                  O4 - Global Startup: C:\Documents And Settings\M. VAN DER VOORDE\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe
                  O4 - Global Startup: C:\Documents And Settings\M. VAN DER VOORDE\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
                  O4 - Global Startup: C:\Documents And Settings\M. VAN DER VOORDE\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe
                  O4 - Global Startup: C:\Documents And Settings\M. VAN DER VOORDE\Menu Démarrer\Programmes\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

                  ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
                  O8 - Extra context menu item: Google Sidewiki... - (.not file.) - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll

                  ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
                  O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                  O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe

                  ---\\ Winsock hijacker (Layered Service Provider) (O10)
                  O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
                  O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
                  O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll

                  ---\\ Objets ActiveX (Downloaded Program Files)(O16)
                  O16 - DPF: {09C21411-B9A2-4DE6-8416-4E3B58577BE0} (France Telecom MDM ActiveX Control) - http://minitelweb.minitel.com/imin_data/ocx/MDM.cab
                  O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/...
                  O16 - DPF: {2357B3CF-7F8D-4451-8D81-FD6097610AEE} (CamfrogWEB Advanced Unicode Control) - http://activex.camfrogweb.com/...
                  O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
                  O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} () - http://www.update.microsoft.com/...
                  O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} () - http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
                  O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} () - http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
                  O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} () - http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
                  O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} () - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
                  O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

                  ---\\ Modification Domaine/Adresses DNS (O17)
                  O17 - HKLM\System\CCS\Services\Tcpip\..\{7BE30EB6-8BFA-45BD-9563-6AAFB0494C08}: DhcpNameServer = 10.255.255.2
                  O17 - HKLM\System\CS1\Services\Tcpip\..\{7BE30EB6-8BFA-45BD-9563-6AAFB0494C08}: DhcpNameServer = 10.255.255.2
                  O17 - HKLM\System\CCS\Services\Tcpip\..\{7BE30EB6-8BFA-45BD-9563-6AAFB0494C08}: DhcpDomain = vetagro-sup.fr
                  O17 - HKLM\System\CS1\Services\Tcpip\..\{7BE30EB6-8BFA-45BD-9563-6AAFB0494C08}: DhcpDomain = vetagro-sup.fr
                  O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.255.255.2

                  ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
                  O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\Windows\System32\crypt32.dll
                  O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\Windows\System32\cryptnet.dll
                  O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\Windows\System32\cscdll.dll
                  O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll
                  O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
                  O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
                  O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
                  O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\Windows\System32\sclgntfy.dll
                  O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\WlNotify.dll
                  O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
                  O20 - Winlogon Notify: WgaLogon . (.Microsoft Corporation - Notifications Windows Genuine Advantage.) -- C:\Windows\System32\WgaLogon.dll
                  O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll

                  ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
                  O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
                  O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
                  O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
                  O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
                  O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll

                  ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
                  O22 - SharedTaskScheduler: (no name) - {438755C2-A8BA-11D1-B96B-00A0C90312E1} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll
                  O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll

                  ---\\ Liste des services NT non Microsoft et non désactivés (O23)
                  O23 - Service: (Arrakis3) . (.BitDefender S.R.L. http://www.bitdefender.c - Arrakis Web Server.) - C:\Program Files\Fichiers communs\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe
                  O23 - Service: (CFSvcs) . (.TOSHIBA CORPORATION - Service of ConfigFree..) - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
                  O23 - Service: (dmadmin) . (.Microsoft Corp., Veritas Software - Processus du service Gestionnaire de disque.) - C:\WINDOWS\System32\dmadmin.exe
                  O23 - Service: (getPlus(R) Helper) . (.NOS Microsystems Ltd. - getPlus(R) Helper.) - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
                  O23 - Service: (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
                  O23 - Service: (gupdatem) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
                  O23 - Service: (LIVESRV) . (.BitDefender SRL - BitDefender Update Service.) - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
                  O23 - Service: (Printer Control) . (.ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM - PrintCtrl.) - C:\WINDOWS\system32\PrintCtrl.exe
                  O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) . (.CACE Technologies, Inc. - Remote Packet Capture Daemon.) - C:\Program Files\WinPcap\rpcapd.exe
                  O23 - Service: (TAPPSRV) . (.TOSHIBA Corp. - TOSHIBA TAPPSRV.) - C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
                  O23 - Service: (TODDSrv) . (.TOSHIBA Corporation - TDCSrv Application.) - C:\WINDOWS\system32\TODDSrv.exe
                  O23 - Service: (VSSERV) . (.BitDefender S. R. L. - BitDefender Security Service.) - C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe

                  ---\\ Enumération Active Desktop & MHTML Editor (O24)
                  O24 - Default MHTML Editor: Last - .(...) - (.not file.)

                  ---\\ Tâches planifiées en automatique (O39)
                  O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
                  O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
                  O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
                  O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Rappel d'enregistrement 1.job
                  O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Rappel d'enregistrement 2.job
                  O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Rappel d'enregistrement 3.job
                  [MD5.7B43567B4C32AD7ADED537CD3B1342B9] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
                  [MD5.626A24ED1228580B9518C01930936DF9] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
                  [MD5.626A24ED1228580B9518C01930936DF9] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe

                  ---\\ Pilotes lancés au démarrage (O41)
                  O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
                  O41 - Driver: (bdftdif) . (.BitDefender LLC - BitDefender Firewall TDI Filter Driver.) - C:\Program Files\Fichiers communs\BitDefender\BitDefender Firewall\bdftdif.sys
                  O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
                  O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\System32\DRIVERS\i8042prt.sys
                  O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\Windows\System32\DRIVERS\imapi.sys
                  O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\Windows\System32\DRIVERS\intelppm.sys
                  O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\Windows\System32\DRIVERS\ipsec.sys
                  O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\System32\DRIVERS\kbdclass.sys
                  O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\System32\DRIVERS\mouclass.sys
                  O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\Windows\System32\DRIVERS\mrxsmb.sys
                  O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
                  O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
                  O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\System32\DRIVERS\rasacd.sys
                  O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys
                  O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
                  O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\Windows\System32\DRIVERS\redbook.sys
                  O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\Windows\System32\DRIVERS\tcpip.sys
                  O41 - Driver: (Tcpip6) . (.Microsoft Corporation - IPv6 driver.) - C:\Windows\System32\DRIVERS\tcpip6.sys
                  O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys
                  O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys

                  ---\\ Logiciels installés (O42)
                  O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR
                  O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {B194272D-1F92-46DF-99EB-8D5CE91CB4EC}
                  O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
                  O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
                  O42 - Logiciel: Adobe Reader 9.4.4 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A94000000001}
                  O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {553255F3-78FD-40F1-A6F8-6882140265FE}
                  O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {6956856F-B6B3-4BE0-BA0B-8F495BE32033}
                  O42 - Logiciel: Assist TOSHIBA - (.Pas de propriétaire.) [HKLM] -- {12B3A009-A080-4619-9A2A-C6DB151D8D67}
                  O42 - Logiciel: BitDefender Antivirus 2009 - (.BitDefender.) [HKLM] -- {D4B8C119-00F2-4C9D-A669-9AE3EA4A1641}
                  O42 - Logiciel: Camera Assistant Software for Toshiba - (.Chicony Electronics Co.,Ltd..) [HKLM] -- {37C866E4-AA67-4725-9E95-A39968DD7960}
                  O42 - Logiciel: CamfrogWEB Advanced ActiveX Plugin (remove only) - (.Pas de propriétaire.) [HKLM] -- CFWebAdvancedU
                  O42 - Logiciel: Capturino V2.11 - (.Pas de propriétaire.) [HKCU] -- Capturino V2.11
                  O42 - Logiciel: Complément Microsoft Word pour Microsoft Works Suite - (.Microsoft Corporation.) [HKLM] -- {F6B1CD0F-DB2D-4666-A168-C46390AD8C4A}
                  O42 - Logiciel: FileZilla Client 3.3.5.1 - (.Pas de propriétaire.) [HKLM] -- FileZilla Client
                  O42 - Logiciel: Free PDF to Word Doc Converter v1.1 - (.www.hellopdf.com.) [HKLM] -- Free PDF to Word Doc Converter_is1
                  O42 - Logiciel: Gestion d'énergie TOSHIBA - (.TOSHIBA.) [HKLM] -- {8F7AC250-4D7D-431D-AC4E-94FB78EA3F8B}
                  O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
                  O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {4286E640-B5FB-11DF-AC4B-005056C00008}
                  O42 - Logiciel: High Definition Audio Driver Package - KB888111 - (.Microsoft Corporation.) [HKLM] -- KB888111WXPSP2
                  O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
                  O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
                  O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399
                  O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5
                  O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5
                  O42 - Logiciel: Infix 4.05 - (.Iceni Technology.) [HKLM] -- 43442AE9-6512-4392-B5DD-9167BECD1114_is1
                  O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3
                  O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {133742BA-6F46-4D3E-85AF-78631D9AD8B8}
                  O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Pas de propriétaire.) [HKLM] -- HDMI
                  O42 - Logiciel: Intel(R) Matrix Storage Manager - (.Pas de propriétaire.) [HKLM] -- {9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}
                  O42 - Logiciel: InterVideo WinDVD for TOSHIBA - (.Pas de propriétaire.) [HKLM] -- {91810AFC-A4F8-4EBA-A5AA-B198BBC81144}
                  O42 - Logiciel: Lecteur Windows Media 11 - (.Pas de propriétaire.) [HKLM] -- Windows Media Player
                  O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
                  O42 - Logiciel: MSXML 4.0 SP2 (KB927978) - (.Microsoft Corporation.) [HKLM] -- {37477865-A3F1-4772-AD43-AAFC6BCFF99F}
                  O42 - Logiciel: MSXML 4.0 SP2 (KB936181) - (.Microsoft Corporation.) [HKLM] -- {C04E32E0-0416-434D-AFB9-6969D703A9EF}
                  O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
                  O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
                  O42 - Logiciel: MSXML 6.0 Parser (KB933579) - (.Microsoft Corporation.) [HKLM] -- {1787603C-E6E3-42D4-8034-55F358486F1D}
                  O42 - Logiciel: Macromedia Flash Player - (.Macromedia, Inc..) [HKLM] -- {0456ebd7-5f67-4ab6-852e-63781e3f389c}
                  O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
                  O42 - Logiciel: Manuels TOSHIBA - (.TOSHIBA.) [HKLM] -- {5B1DD5AA-FF34-4D6E-A912-CB46BB7378DC}
                  O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
                  O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
                  O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
                  O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
                  O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
                  O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1
                  O42 - Logiciel: Microsoft Internationalized Domain Names Mitigation APIs - (.Microsoft Corporation.) [HKLM] -- IDNMitigationAPIs
                  O42 - Logiciel: Microsoft National Language Support Downlevel APIs - (.Microsoft Corporation.) [HKLM] -- NLSDownlevelMapping
                  O42 - Logiciel: Microsoft Office PowerPoint Viewer 2007 (French) - (.Microsoft Corporation.) [HKLM] -- {95120000-00AF-040C-0000-0000000FF1CE}
                  O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
                  O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- Wudf01000
                  O42 - Logiciel: Microsoft Word 2002 - (.Microsoft Corporation.) [HKLM] -- {911B040C-6000-11D3-8CFE-0050048383C9}
                  O42 - Logiciel: Microsoft Works 7.0 - (.Microsoft Corporation.) [HKLM] -- {64D114CE-4234-45C2-B60A-2B07D5A48F72}
                  O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-040C-0000-0000000FF1CE}
                  O42 - Logiciel: Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 2.0 Language Pack - FRA
                  O42 - Logiciel: NetWaiting - (.BVRP Software, Inc.) [HKLM] -- {3F92ABBB-6BBF-11D5-B229-002078017FBF}
                  O42 - Logiciel: OpenOffice.org 3.1 - (.OpenOffice.org.) [HKLM] -- {0FA44E79-CD7D-4E8D-A2EE-26FE05F509B6}
                  O42 - Logiciel: Outil de diagnostic PC TOSHIBA - (.TOSHIBA.) [HKLM] -- InstallShield_{2C38F661-26B7-445D-B87D-B53FE2D3BD42}
                  O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}
                  O42 - Logiciel: QuickTime - (.Pas de propriétaire.) [HKLM] -- QuickTime
                  O42 - Logiciel: R for Windows 2.2.1 - (.R Development Core Team.) [HKLM] -- R for Windows_is1
                  O42 - Logiciel: REALTEK GbE & FE Ethernet PCI-E NIC Driver - (.Realtek.) [HKLM] -- {C9BED750-1211-4480-B1A5-718A3BE15525}
                  O42 - Logiciel: REALTEK RTL8187B Wireless LAN Driver - (.REALTEK Semiconductor Corp..) [HKLM] -- {895722FE-25FE-4854-95AC-B0C42F9DBEDA}
                  O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
                  O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM] -- {DC24971E-1946-445D-8A82-CE685433FA7D}
                  O42 - Logiciel: Réducteur de bruit lect. CD/DVD - (.TOSHIBA.) [HKLM] -- {9FE35071-CAB2-4E79-93E7-BFC6A2DC5C5D}
                  O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473
                  O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
                  O42 - Logiciel: Soft Modem with SmartCP - (.Conexant.) [HKLM] -- CNXT_MODEM_PCI_VEN_14F1&DEV_2C06&SUBSYS_14F10000
                  O42 - Logiciel: Spelling Dictionaries Support For Adobe Reader 9 - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-5464-3428-900000000004}
                  O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics.) [HKLM] -- SynTPDeinstKey
                  O42 - Logiciel: Sélecteur d'installation de Microsoft Works Suite 2003 - (.Pas de propriétaire.) [HKLM] -- Works2003Setup
                  O42 - Logiciel: TOSHIBA ConfigFree - (.Pas de propriétaire.) [HKLM] -- {BDD83DC9-BEE9-4654-A5DA-CC46C250088D}
                  O42 - Logiciel: TOSHIBA Controls - (.TOSHIBA Corporation.) [HKLM] -- InstallShield_{A6690C0E-B96E-4F0F-A8EB-D5B332454AC6}
                  O42 - Logiciel: TOSHIBA Direct Disc Writer - (.TOSHIBA Corporation.) [HKLM] -- {400830CA-F056-4BBE-80A3-9DF9CA4FB889}
                  O42 - Logiciel: TOSHIBA Disc Creator - (.TOSHIBA Corporation.) [HKLM] -- {5DA0E02F-970B-424B-BF41-513A5018E4C0}
                  O42 - Logiciel: TOSHIBA Hotkey Utility - (.Pas de propriétaire.) [HKLM] -- {07F58BB0-50D4-4477-B491-A97B2AD059B6}
                  O42 - Logiciel: TOSHIBA TouchPad ON/Off Utility - (.Pas de propriétaire.) [HKLM] -- {C02A6D5F-0FE1-46DE-B483-2BD33A226BCF}
                  O42 - Logiciel: TOSHIBA Utilities - (.Pas de propriétaire.) [HKLM] -- {61B84435-7A82-4F5C-87EC-1071EC28D72D}
                  O42 - Logiciel: Toshiba Online Product Information - (.TOSHIBA.) [HKLM] -- {2290A680-4083-410A-ADCC-7092C67FC052}
                  O42 - Logiciel: UltimateZip - (.SWE von Schleusen.) [HKLM] -- UltimateZip_is1
                  O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
                  O42 - Logiciel: Utilitaire de zoom TOSHIBA - (.TOSHIBA.) [HKLM] -- {64212898-097F-4F3F-AECA-6D34A7EF82DF}
                  O42 - Logiciel: VLC media player 1.0.5 - (.VideoLAN Team.) [HKLM] -- VLC media player
                  O42 - Logiciel: WinPcap 4.1.2 - (.CACE Technologies.) [HKLM] -- WinPcapInst
                  O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474) - (.Microsoft Corporation.) [HKLM] -- WgaNotify
                  O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130) - (.Microsoft Corporation.) [HKLM] -- KB892130
                  O42 - Logiciel: Windows Internet Explorer 7 - (.Microsoft Corporation.) [HKLM] -- ie7
                  O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {B3B487E7-6171-4376-9074-B28082CEB504}
                  O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3175E049-F9A9-4A3D-8F19-AC9FB04514D1}
                  O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {445B183D-F4F1-45C8-B9DB-F11355CA657B}
                  O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11
                  O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime
                  O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11
                  O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service
                  O42 - Logiciel: Wireshark 1.4.2 - (.The Wireshark developer community, http://www.wireshark.org.) [HKLM] -- Wireshark
                  O42 - Logiciel: getPlus(R) for Adobe - (.NOS Microsystems Ltd..) [HKLM] -- {CF40ACC5-E1BB-4aff-AC72-04C2F616BCA7}
                  O42 - Logiciel: graphe_2D - (.Pas de propriétaire.) [HKLM] -- graphe_2D

                  ---\\ HKCU & HKLM Software Keys
                  [HKCU\Software\2015]
                  [HKCU\Software\Adobe]
                  [HKCU\Software\AppDataLow\Software]
                  [HKCU\Software\AppDataLow]
                  [HKCU\Software\Apple Computer, Inc.]
                  [HKCU\Software\Bitdefender]
                  [HKCU\Software\CEC_CM_SW]
                  [HKCU\Software\CamfrogWEBAdvanced]
                  [HKCU\Software\CamfrogWEB]
                  [HKCU\Software\Camfrog]
                  [HKCU\Software\Classes]
                  [HKCU\Software\Core Design]
                  [HKCU\Software\Digital River]
                  [HKCU\Software\EA Games]
                  [HKCU\Software\Google]
                  [HKCU\Software\IM Providers]
                  [HKCU\Software\IMC24]
                  [HKCU\Software\IMEASequencer]
                  [HKCU\Software\IMEA]
                  [HKCU\Software\Iceni]
                  [HKCU\Software\Intel]
                  [HKCU\Software\InterVideo]
                  [HKCU\Software\JavaSoft]
                  [HKCU\Software\Lake]
                  [HKCU\Software\LdShih]
                  [HKCU\Software\LowRegistry]
                  [HKCU\Software\Macromedia]
                  [HKCU\Software\Malwarebytes' Anti-Malware]
                  [HKCU\Software\MimarSinan]
                  [HKCU\Software\NOS]
                  [HKCU\Software\Netscape]
                  [HKCU\Software\ODBC]
                  [HKCU\Software\OpenOffice.org]
                  [HKCU\Software\Piriform]
                  [HKCU\Software\Policies]
                  [HKCU\Software\Realtek]
                  [HKCU\Software\SWE von Schleusen]
                  [HKCU\Software\Safer Networking Limited]
                  [HKCU\Software\SecuROM]
                  [HKCU\Software\Skype]
                  [HKCU\Software\Sony Corporation]
                  [HKCU\Software\SuperSoftwarePackage]
                  [HKCU\Software\Synaptics]
                  [HKCU\Software\TOSHIBA]
                  [HKCU\Software\VB and VBA Program Settings]
                  [HKCU\Software\WinRAR SFX]
                  [HKCU\Software\YahooPartnerToolbar]
                  [HKCU\Software\Yahoo]
                  [HKCU\Software\keyhole.com]
                  [HKLM\Software\54c]
                  [HKLM\Software\781]
                  [HKLM\Software\Absolutist]
                  [HKLM\Software\ActMask Virtual Printer]
                  [HKLM\Software\Adobe]
                  [HKLM\Software\America Online]
                  [HKLM\Software\Apple Computer, Inc.]
                  [HKLM\Software\Apple Inc.]
                  [HKLM\Software\Apple]
                  [HKLM\Software\BVRP Software, Inc]
                  [HKLM\Software\BitDefender]
                  [HKLM\Software\BrowserChoice]
                  [HKLM\Software\C07ft5Y]
                  [HKLM\Software\CXT]
                  [HKLM\Software\Chicony Electronics Co.,Ltd.]
                  [HKLM\Software\Classes]
                  [HKLM\Software\Clients]
                  [HKLM\Software\Conexant]
                  [HKLM\Software\Debug]
                  [HKLM\Software\EA GAMES]
                  [HKLM\Software\Electronic Arts]
                  [HKLM\Software\FileZilla 3]
                  [HKLM\Software\Gemplus]
                  [HKLM\Software\Google]
                  [HKLM\Software\Infix PDF]
                  [HKLM\Software\InstalledOptions]
                  [HKLM\Software\Intel]
                  [HKLM\Software\InterVideo]
                  [HKLM\Software\JYM]
                  [HKLM\Software\JavaSoft]
                  [HKLM\Software\JreMetrics]
                  [HKLM\Software\Lake]
                  [HKLM\Software\Licenses]
                  [HKLM\Software\Lucent]
                  [HKLM\Software\Macromedia]
                  [HKLM\Software\Malwarebytes' Anti-Malware]
                  [HKLM\Software\McAfee]
                  [HKLM\Software\MimarSinan]
                  [HKLM\Software\MozillaPlugins]
                  [HKLM\Software\Mozilla]
                  [HKLM\Software\NOS]
                  [HKLM\Software\ODBC]
                  [HKLM\Software\OpenOffice.org]
                  [HKLM\Software\Policies]
                  [HKLM\Software\Program Groups]
                  [HKLM\Software\R-core]
                  [HKLM\Software\RTLSetup]
                  [HKLM\Software\Realtek Semiconductor Corp.]
                  [HKLM\Software\Realtek USB 2.0 Card Reader]
                  [HKLM\Software\Realtek]
                  [HKLM\Software\Red Orb]
                  [HKLM\Software\RegisteredApplications]
                  [HKLM\Software\SOFTWARE]
                  [HKLM\Software\Safer Networking Limited]
                  [HKLM\Software\Schlumberger]
                  [HKLM\Software\Secure]
                  [HKLM\Software\Set8187B]
                  [HKLM\Software\Softwin]
                  [HKLM\Software\Sun Microsystems]
                  [HKLM\Software\Synaptics]
                  [HKLM\Software\TOSHIBA]
                  [HKLM\Software\Ubisoft]
                  [HKLM\Software\VideoLAN]
                  [HKLM\Software\WinPcap]
                  [HKLM\Software\Windows 3.1 Migration Status]
                  [HKLM\Software\Windows]
                  [HKLM\Software\Wow6432Node]
                  [HKLM\Software\Yahoo]
                  [HKLM\Software\aMSN]

                  ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
                  O43 - CFD: 27/10/2008 - 12:42:58 - [13824] ----D- C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
                  O43 - CFD: 08/05/2010 - 23:51:44 - [213117718] ----D- C:\Program Files\Adobe
                  O43 - CFD: 19/06/2010 - 02:10:42 - [2221118] ----D- C:\Program Files\Apple Software Update
                  O43 - CFD: 08/09/2009 - 16:39:52 - [109558738] ----D- C:\Program Files\BitDefender
                  O43 - CFD: 06/09/2008 - 14:15:14 - [65057094] ----D- C:\Program Files\Camera Assistant Software for Toshiba
                  O43 - CFD: 07/04/2010 - 18:20:04 - [2181913] ----D- C:\Program Files\Capturino V211
                  O43 - CFD: 24/09/2009 - 21:13:50 - [6533042] ----D- C:\Program Files\CFWebAdvancedU
                  O43 - CFD: 09/04/2008 - 11:44:30 - [0] ----D- C:\Program Files\ComPlus Applications
                  O43 - CFD: 06/09/2008 - 14:15:38 - [1011712] ----D- C:\Program Files\CONEXANT
                  O43 - CFD: 29/11/2009 - 22:37:46 - [13584138] ----D- C:\Program Files\Core Design
                  O43 - CFD: 12/09/2010 - 21:50:08 - [0] ----D- C:\Program Files\directx
                  O43 - CFD: 22/08/2010 - 17:43:28 - [0] ----D- C:\Program Files\EA GAMES
                  O43 - CFD: 12/05/2011 - 04:50:08 - [962087015] ----D- C:\Program Files\Fichiers communs
                  O43 - CFD: 18/01/2011 - 20:49:48 - [16451399] ----D- C:\Program Files\FileZilla FTP Client
                  O43 - CFD: 01/06/2010 - 14:08:22 - [2854812] ----D- C:\Program Files\Free PDF to Word Doc Converter
                  O43 - CFD: 12/05/2011 - 12:48:28 - [99624502] ----D- C:\Program Files\Google
                  O43 - CFD: 07/02/2010 - 13:57:38 - [36443475] ----D- C:\Program Files\Iceni
                  O43 - CFD: 30/11/2010 - 20:59:50 - [208003] ----D- C:\Program Files\IMEA Sequencer
                  O43 - CFD: 07/02/2010 - 13:39:02 - [186180276] ----D- C:\Program Files\Inkscape
                  O43 - CFD: 17/12/2010 - 22:15:52 - [68348783] --H-D- C:\Program Files\InstallShield Installation Information
                  O43 - CFD: 06/09/2008 - 22:02:38 - [8524031] ----D- C:\Program Files\Intel
                  O43 - CFD: 16/04/2011 - 03:09:18 - [2555771] ----D- C:\Program Files\Internet Explorer
                  O43 - CFD: 09/04/2008 - 12:59:54 - [34406839] ----D- C:\Program Files\InterVideo
                  O43 - CFD: 15/10/2009 - 16:13:58 - [16664352] ----D- C:\Program Files\JRE
                  O43 - CFD: 03/01/2009 - 17:28:16 - [1073967] ----D- C:\Program Files\JYM
                  O43 - CFD: 12/05/2011 - 11:15:08 - [4922066] ----D- C:\Program Files\Malwarebytes' Anti-Malware
                  O43 - CFD: 02/06/2010 - 20:14:46 - [2152579] ----D- C:\Program Files\Messenger
                  O43 - CFD: 29/08/2010 - 00:15:46 - [226432] ----D- C:\Program Files\Microsoft
                  O43 - CFD: 06/09/2008 - 22:03:06 - [0] ----D- C:\Program Files\microsoft frontpage
                  O43 - CFD: 15/10/2009 - 16:12:02 - [94405492] ----D- C:\Program Files\Microsoft Office
                  O43 - CFD: 22/04/2011 - 09:43:28 - [38388859] ----D- C:\Program Files\Microsoft Silverlight
                  O43 - CFD: 27/10/2008 - 12:52:58 - [131409282] ----D- C:\Program Files\Microsoft Works
                  O43 - CFD: 27/10/2008 - 12:45:14 - [6922956] ----D- C:\Program Files\Microsoft Works Suite 2003
                  O43 - CFD: 28/08/2010 - 23:05:26 - [10374874] ----D- C:\Program Files\Movie Maker
                  O43 - CFD: 21/01/2010 - 15:16:24 - [25757] ----D- C:\Program Files\MSBuild
                  O43 - CFD: 23/11/2009 - 14:12:18 - [57686237] ----D- C:\Program Files\MSECache
                  O43 - CFD: 06/09/2008 - 22:05:42 - [19278399] ----D- C:\Program Files\MSN
                  O43 - CFD: 06/09/2008 - 22:05:52 - [8745735] ----D- C:\Program Files\MSN Gaming Zone
                  O43 - CFD: 09/04/2008 - 12:25:24 - [0] ----D- C:\Program Files\MSXML 4.0
                  O43 - CFD: 06/09/2008 - 22:05:52 - [17340] ----D- C:\Program Files\MSXML 6.0
                  O43 - CFD: 15/12/2010 - 20:30:10 - [0] ----D- C:\Program Files\Myst III Exile
                  O43 - CFD: 06/09/2008 - 14:46:04 - [3285523] ----D- C:\Program Files\NetMeeting
                  O43 - CFD: 06/09/2008 - 14:15:56 - [5214916] ----D- C:\Program Files\NetWaiting
                  O43 - CFD: 06/09/2008 - 16:16:10 - [127344] ----D- C:\Program Files\NOS
                  O43 - CFD: 06/09/2008 - 22:05:54 - [1811] ----D- C:\Program Files\Online Services
                  O43 - CFD: 15/10/2009 - 16:13:56 - [385258869] ----D- C:\Program Files\OpenOffice.org 3
                  O43 - CFD: 06/01/2011 - 02:37:32 - [4379321] ----D- C:\Program Files\Outlook Express
                  O43 - CFD: 12/09/2010 - 21:46:14 - [9850148] ----D- C:\Program Files\QuickTime
                  O43 - CFD: 13/05/2010 - 00:23:18 - [46795542] ----D- C:\Program Files\R
                  O43 - CFD: 06/09/2008 - 22:06:06 - [57151203] ----D- C:\Program Files\Realtek
                  O43 - CFD: 06/09/2008 - 14:15:58 - [497200] ----D- C:\Program Files\REALTEK RTL8187B Wireless LAN Driver
                  O43 - CFD: 12/09/2010 - 21:45:44 - [664] ----D- C:\Program Files\Red Orb
                  O43 - CFD: 21/01/2010 - 15:16:14 - [36400897] ----D- C:\Program Files\Reference Assemblies
                  O43 - CFD: 06/09/2008 - 22:06:06 - [1032] ----D- C:\Program Files\Services en ligne
                  O43 - CFD: 12/05/2011 - 11:13:42 - [3428696] ----D- C:\Program Files\Spybot - Search & Destroy
                  O43 - CFD: 09/04/2008 - 12:41:38 - [32763953] ----D- C:\Program Files\Synaptics
                  O43 - CFD: 06/09/2008 - 14:17:24 - [67430962] ----D- C:\Program Files\TOSHIBA
                  O43 - CFD: 12/05/2011 - 12:50:44 - [15576382] ----D- C:\Program Files\UltimateZip
                  O43 - CFD: 09/04/2008 - 11:49:38 - [0] --H-D- C:\Program Files\Uninstall Information
                  O43 - CFD: 06/10/2009 - 21:18:52 - [79014588] ----D- C:\Program Files\VideoLAN
                  O43 - CFD: 29/08/2010 - 00:15:00 - [45853789] ----D- C:\Program Files\Windows Live
                  O43 - CFD: 27/10/2009 - 18:10:22 - [245112] ----D- C:\Program Files\Windows Live SkyDrive
                  O43 - CFD: 12/05/2011 - 12:16:40 - [3581070] ----D- C:\Program Files\Windows Media Connect 2
                  O43 - CFD: 12/05/2011 - 12:16:40 - [9212149] ----D- C:\Program Files\Windows Media Player
                  O43 - CFD: 06/09/2008 - 14:46:04 - [3942655] ----D- C:\Program Files\Windows NT
                  O43 - CFD: 09/04/2008 - 11:45:14 - [0] --H-D- C:\Program Files\WindowsUpdate
                  O43 - CFD: 07/01/2011 - 16:02:36 - [237571] ----D- C:\Program Files\WinPcap
                  O43 - CFD: 07/01/2011 - 16:02:44 - [85349137] ----D- C:\Program Files\Wireshark
                  O43 - CFD: 06/09/2008 - 22:06:28 - [0] ----D- C:\Program Files\xerox
                  O43 - CFD: 12/05/2011 - 14:17:50 - [3820874] ----D- C:\Program Files\ZHPDiag
                  O43 - CFD: 21/02/2011 - 18:16:52 - [6281214] ----D- C:\Program Files\Fichiers Communs\Adobe
                  O43 - CFD: 08/05/2010 - 23:51:40 - [29410406] ----D- C:\Program Files\Fichiers Communs\Adobe AIR
                  O43 - CFD: 19/06/2010 - 02:10:52 - [41190056] ----D- C:\Program Files\Fichiers Communs\Apple
                  O43 - CFD: 08/09/2009 - 16:40:10 - [712919857] ----D- C:\Program Files\Fichiers Communs\BitDefender
                  O43 - CFD: 27/10/2008 - 12:51:46 - [86016] ----D- C:\Program Files\Fichiers Communs\Designer
                  O43 - CFD: 06/09/2008 - 22:00:58 - [8559456] ----D- C:\Program Files\Fichiers Communs\InstallShield
                  O43 - CFD: 10/05/2011 - 17:25:50 - [113638766] ----D- C:\Program Files\Fichiers Communs\Microsoft Shared
                  O43 - CFD: 06/09/2008 - 22:02:10 - [284160] ----D- C:\Program Files\Fichiers Communs\MSSoap
                  O43 - CFD: 06/09/2008 - 22:02:10 - [0] ----D- C:\Program Files\Fichiers Communs\ODBC
                  O43 - CFD: 06/09/2008 - 22:02:10 - [8106] ----D- C:\Program Files\Fichiers Communs\Services
                  O43 - CFD: 06/09/2008 - 22:02:10 - [3787229] ----D- C:\Program Files\Fichiers Communs\SpeechEngines
                  O43 - CFD: 27/10/2008 - 12:38:06 - [13626469] ----D- C:\Program Files\Fichiers Communs\System
                  O43 - CFD: 27/10/2009 - 18:08:18 - [32295280] ----D- C:\Program Files\Fichiers Communs\Windows Live
                  O43 - CFD: 08/05/2010 - 23:51:46 - [5708778] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Application Data\Adobe
                  O43 - CFD: 19/06/2010 - 02:16:24 - [2217] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Application Data\Apple Computer
                  O43 - CFD: 07/02/2010 - 13:57:38 - [0] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Application Data\Aspell
                  O43 - CFD: 08/09/2009 - 16:40:18 - [68859] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Application Data\BitDefender
                  O43 - CFD: 24/09/2009 - 21:13:52 - [1372252] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Application Data\CamfrogWEB
                  O43 - CFD: 07/04/2010 - 18:20:10 - [184] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Application Data\Capturino
                  O43 - CFD: 08/05/2010 - 23:52:18 - [5120] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Application Data\com.oskoui-oskoui.avatar
                  O43 - CFD: 03/05/2011 - 11:00:12 - [359] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Application Data\dvdcss
                  O43 - CFD: 20/04/2011 - 01:21:24 - [17738] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Application Data\FileZilla
                  O43 - CFD: 03/10/2009 - 19:19:42 - [98323] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Application Data\Google
                  O43 - CFD: 07/02/2010 - 13:57:44 - [492] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Application Data\Iceni
                  O43 - CFD: 06/09/2008 - 21:52:04 - [0] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Application Data\Identities
                  O43 - CFD: 07/02/2010 - 13:36:04 - [24934] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Application Data\inkscape
                  O43 - CFD: 06/09/2008 - 21:52:04 - [0] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Application Data\InstallShield
                  O43 - CFD: 18/10/2008 - 21:48:58 - [1428] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Application Data\InterVideo
                  O43 - CFD: 06/09/2008 - 16:14:20 - [298221] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Application Data\Macromedia
                  O43 - CFD: 01/04/2010 - 00:30:48 - [561601] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Application Data\Malwarebytes
                  O43 - CFD: 17/03/2011 - 23:45:34 - [96886207] -S--D- C:\Documents and Settings\M. VAN DER VOORDE\Application Data\Microsoft
                  O43 - CFD: 17/10/2009 - 14:01:28 - [2436473] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Application Data\OpenOffice.org
                  O43 - CFD: 03/12/2010 - 19:31:02 - [0] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Application Data\Real
                  O43 - CFD: 26/03/2011 - 23:02:54 - [1535802] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Application Data\Skype
                  O43 - CFD: 24/02/2011 - 14:15:02 - [40168] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Application Data\skypePM
                  O43 - CFD: 06/09/2008 - 21:52:04 - [27120640] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Application Data\Sun
                  O43 - CFD: 16/09/2009 - 09:03:42 - [10696] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Application Data\toshiba
                  O43 - CFD: 02/12/2009 - 18:35:10 - [3604480] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Application Data\U3
                  O43 - CFD: 10/12/2009 - 21:02:32 - [53] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Application Data\UltimateZip
                  O43 - CFD: 12/05/2011 - 11:47:06 - [476374] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Application Data\vlc
                  O43 - CFD: 07/01/2011 - 16:05:50 - [3555] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Application Data\Wireshark
                  O43 - CFD: 21/02/2011 - 18:16:16 - [5677391] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Local Settings\Application Data\Adobe
                  O43 - CFD: 19/06/2010 - 02:10:44 - [0] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Local Settings\Application Data\Apple
                  O43 - CFD: 19/06/2010 - 02:10:30 - [9370] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Local Settings\Application Data\Apple Computer
                  O43 - CFD: 06/09/2008 - 21:52:10 - [3165] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Local Settings\Application Data\ApplicationHistory
                  O43 - CFD: 12/05/2011 - 11:40:22 - [768032369] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Local Settings\Application Data\Google
                  O43 - CFD: 07/02/2010 - 13:58:42 - [739] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Local Settings\Application Data\Iceni
                  O43 - CFD: 05/10/2009 - 22:38:16 - [303396] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Local Settings\Application Data\Identities
                  O43 - CFD: 03/05/2011 - 16:31:12 - [464703297] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Local Settings\Application Data\Microsoft
                  O43 - CFD: 09/04/2008 - 13:06:36 - [0] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Local Settings\Application Data\Microsoft Help
                  O43 - CFD: 06/09/2008 - 21:52:12 - [285696] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Local Settings\Application Data\Seven Zip
                  O43 - CFD: 11/05/2011 - 02:33:28 - [0] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Local Settings\Application Data\Temp
                  O43 - CFD: 05/10/2008 - 20:25:54 - [0] ----D- C:\Documents and Settings\M. VAN DER VOORDE\Local Settings\Application Data\WMTools Downloaded Files

                  ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
                  O44 - LFC:[MD5.E6D35F3AA51A65EB35C1F2340154A25E] - 12/05/2011 - 13:09:02 ---A- . (...) -- C:\WINDOWS\System32\drivers\dakah.sys [54016]
                  O44 - LFC:[MD5.18EF1200F915817C00FCFD7FECEF1200] - 12/05/2011 - 12:49:57 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log [1103035]
                  O44 - LFC:[MD5.03CE84E95FF464645D9EF02E7FE62586] - 12/05/2011 - 11:50:49 ---A- . (...) -- C:\WINDOWS\wmsetup.log [96185]
                  O44 - LFC:[MD5.6CC3127C0C970302B18916F15B9F0960] - 12/05/2011 - 11:50:19 ---A- . (...) -- C:\WINDOWS\System32\wpa.dbl [1158]
                  O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 12/05/2011 - 11:49:30 ---A- . (...) -- C:\WINDOWS\0.log [0]
                  O44 - LFC:[MD5.E85D395A832FFF3773165541AD9D9F36] - 12/05/2011 - 11:49:02 ---A- . (...) -- C:\WINDOWS\spupdsvc.log [150960]
                  O44 - LFC:[MD5.18EF1200F915817C00FCFD7FECEF1200] - 12/05/2011 - 11:48:44 ---A- . (...) -- C:\WINDOWS\wiadebug.log [159]
                  O44 - LFC:[MD5.18EF1200F915817C00FCFD7FECEF1200] - 12/05/2011 - 11:48:43 ---A- . (...) -- C:\WINDOWS\wiaservc.log [50]
                  O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 12/05/2011 - 11:48:30 -S-A- . (...) -- C:\WINDOWS\bootstat.dat [2048]
                  O44 - LFC:[MD5.18EF1200F915817C00FCFD7FECEF1200] - 12/05/2011 - 11:47:46 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt [32398]
                  O44 - LFC:[MD5.A3469E83B8523DDAD639A047335B9910] - 12/05/2011 - 11:17:29 ---A- . (...) -- C:\WINDOWS\wmsetup10.log [5986]
                  O44 - LFC:[MD5.254FDBED1CB4E5B3E4FC00FCA7EADFCB] - 12/05/2011 - 11:17:10 ---A- . (...) -- C:\WINDOWS\MSCompPackV1.log [14588]
                  O44 - LFC:[MD5.9017DFBB3396E4EBB96934AF15ABF479] - 12/05/2011 - 11:16:55 ---A- . (...) -- C:\WINDOWS\wmp11.log [42445]
                  O44 - LFC:[MD5.6D6F4B1886E91EB37ABCCAD19C561EE0] - 12/05/2011 - 11:16:50 ---A- . (...) -- C:\WINDOWS\System32\amcompat.tlb [16832]
                  O44 - LFC:[MD5.A32B14BE5EDAE794FCE1A9E970827509] - 12/05/2011 - 11:16:50 ---A- . (...) -- C:\WINDOWS\System32\nscompat.tlb [23392]
                  O44 - LFC:[MD5.47233BB6A69EA78E0C2E1393D3F6A9A2] - 12/05/2011 - 11:16:19 ---A- . (...) -- C:\WINDOWS\setupapi.log [344437]
                  O44 - LFC:[MD5.D40D69F79DC02C3EC8B74A375DD53132] - 12/05/2011 - 11:15:51 ---A- . (...) -- C:\WINDOWS\WMFDist11.log [59803]
                  O44 - LFC:[MD5.8A7B4F802ABED6D68F7AADEBFA1094CC] - 12/05/2011 - 11:15:43 ---A- . (...) -- C:\WINDOWS\updspapi.log [299914]
                  O44 - LFC:[MD5.6C49880313E27FBD1C39363102D5C187] - 12/05/2011 - 11:14:27 ---A- . (...) -- C:\WINDOWS\Wudf01000Inst.log [16256]
                  O44 - LFC:[MD5.645B44985DE09B0A3C98C0B240DFD492] - 12/05/2011 - 10:55:32 ---A- . (...) -- C:\WINDOWS\setupact.log [224717]
                  O44 - LFC:[MD5.D68E165C3123ABA3B1282EDDB4213BD8] - 12/05/2011 - 10:15:07 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [38224]
                  O44 - LFC:[MD5.836E0E09CA9869BE7EB39EF2CF3602C7] - 12/05/2011 - 10:15:03 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\System32\drivers\mbam.sys [20952]
                  O44 - LFC:[MD5.FDF06637A62677613683D05D9FA001E9] - 12/05/2011 - 06:21:05 ---A- . (...) -- C:\WINDOWS\System32\bdod.bin [81984]
                  O44 - LFC:[MD5.B0D0E9708AC997F4C963CA43B2C965DA] - 11/05/2011 - 02:40:17 ---A- . (...) -- C:\WINDOWS\System32\BDUpdateV1.xml [901]
                  O44 - LFC:[MD5.9695FB9A055DCB94377C47654041679B] - 16/04/2011 - 02:26:14 ---A- . (...) -- C:\WINDOWS\System32\FNTCACHE.DAT [291680]
                  O44 - LFC:[MD5.2945B54119E34D4899E95CE3616743A2] - 16/04/2011 - 02:10:00 ---A- . (...) -- C:\WINDOWS\KB2485663.log [21096]
                  O44 - LFC:[MD5.CA51164BC5F13318D25061A58641CCA6] - 16/04/2011 - 02:10:00 ---A- . (...) -- C:\WINDOWS\MedCtrOC.log [127231]
                  O44 - LFC:[MD5.2862F989EFFD4E5A929404A3D9CC61A4] - 16/04/2011 - 02:10:00 ---A- . (...) -- C:\WINDOWS\comsetup.log [608511]
                  O44 - LFC:[MD5.E2754CBB2648CDE6DE98AAA3AC07311A] - 16/04/2011 - 02:10:00 ---A- . (...) -- C:\WINDOWS\iis6.log [1955131]
                  O44 - LFC:[MD5.402F6D0FFF6BB8B
                  0
                  1. Tigzy Contributeur sécurité
                    Le ZHPDiag doit être hébergé comme demandé ;)
                    0
                  2. guillaume
                    http://www.cijoint.fr/cjlink.php?file=cj201105/cijK3YCd9R.txt

                    voici le lien donné pour l'hébergement !
                    0