Problème "trojan", aide svp - Page 3

---\\ ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: McAfee Phishing Filter [64Bits] - {27B4851A-3207-45A2-B947-BE8AFE6163AB} . (...) -- c:\PROGRA~2\mcafee\msk\MSKAPB~1.DLL
O2 - BHO: scriptproxy [64Bits] - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} . (.McAfee, Inc. - VSCore Script Scanner.) -- C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: Windows Live ID Sign-in Helper [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper [64Bits] - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
O2 - BHO: Google Toolbar Notifier BHO [64Bits] - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg64.dll
O2 - BHO: McAfee SiteAdvisor BHO [64Bits] - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} . (.McAfee, Inc. - SiteAdvisor.) -- c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll
O2 - BHO: AcroIEHelperStub [64Bits] - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: McAfee Phishing Filter [64Bits] - {27B4851A-3207-45A2-B947-BE8AFE6163AB} . (...) -- c:\PROGRA~2\mcafee\msk\mskapbho.dll
O2 - BHO: Softonic_France [64Bits] - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files (x86)\Softonic_France\tbSoft.dll
O2 - BHO: scriptproxy [64Bits] - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} . (.McAfee, Inc. - VSCore Script Scanner.) -- C:\Program Files (x86)\McAfee\VirusScan\scriptsn.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\
O2 - BHO: Radio Bar 2 Toolbar [64Bits] - {9bb815eb-3f9f-4e11-9150-cb70e29b40fc} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files (x86)\Radio_Bar_2\tbRadi.dll
O2 - BHO: Google Toolbar Helper [64Bits] - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO [64Bits] - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll
O2 - BHO: McAfee SiteAdvisor BHO [64Bits] - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} . (.McAfee, Inc. - SiteAdvisor.) -- c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: McAfee SiteAdvisor Toolbar [64Bits] - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} . (.McAfee, Inc. - SiteAdvisor.) -- c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll
O3 - Toolbar: Google Toolbar [64Bits] - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll

---\\ ---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [IAAnotif] . (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
O4 - HKLM\..\Run: [Skytel] . (.Realtek Semiconductor Corp. - Realtek Voice Manager.) -- C:\Program Files\Realtek\Audio\HDA\Skytel.exe
O4 - HKLM\..\Run: [mwlDaemon] . (.EgisTec Inc. - mwlDaemon Application.) -- C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
O4 - HKCU\..\Run: [WindowsWelcomeCenter] oobefldr.dll
O4 - HKCU\..\Run: [ProductReg] . (.Acer - ProductR Application.) -- C:\Program Files\Acer\WR_PopUp\ProductReg.exe
O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKLM\..\Wow6432Node\Run: [EgisTecLiveUpdate] . (.EgisTec Inc. - EgisUpdate Release Application.) -- C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe
O4 - HKLM\..\Wow6432Node\Run: [MDS_Menu] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files (x86)\CyberLink\MediaShow4\MUITransfer\MUIStartMenu.exe
O4 - HKLM\..\Wow6432Node\Run: [UpdatePDRShortCut] C:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exer\7.0 (.not file.)
O4 - HKLM\..\Wow6432Node\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe
O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Wow6432Node\Run: [ArcadeDeluxeAgent] . (.CyberLink Corp. - Acer Arcade Deluxe Resident Program.) -- C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
O4 - HKLM\..\Wow6432Node\Run: [CLMLServer] . (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe
O4 - HKLM\..\Wow6432Node\Run: [PlayMovie] . (.Acer Corp. - Acer Arcade Deluxe PlayMovie Resident Progr.) -- C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe
O4 - HKLM\..\Wow6432Node\Run: [mcagent_exe] . (.McAfee, Inc. - McAfee Integrated Security Platform.) -- C:\Program Files (x86)\McAfee.com\Agent\mcagent.exe
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
O4 - HKLM\..\Wow6432Node\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe
O4 - HKLM\..\Wow6432Node\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\avastUI.exe
O4 - HKLM\..\Wow6432Node\Run: [ApnUpdater] C:\Program Files (x86)\Ask.com\Updater\Updater.exe (.not file.)
O4 - HKUS\S-1-5-21-216722422-4163288635-495304682-1001\..\Run: [WindowsWelcomeCenter] oobefldr.dll
O4 - HKUS\S-1-5-21-216722422-4163288635-495304682-1001\..\Run: [ProductReg] . (.Acer - ProductR Application.) -- C:\Program Files\Acer\WR_PopUp\ProductReg.exe
O4 - HKUS\S-1-5-21-216722422-4163288635-495304682-1001\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - Global Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Démarrage d'Office.lnk . (...) -- C:\Program Files (x86)\Microsoft Office\Office\OSA.EXE
O4 - Global Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Gestionnaire Microsoft Office.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Microsoft Office\Office\MSOFFICE.EXE
O4 - Global Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Recherche accélérée.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Microsoft Office\Office\FINDFAST.EXE
O4 - Global Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Wireless Configuration Utility.lnk . (...) -- C:\Program Files (x86)\TRENDnet\TEW-424UB\WlanCU.exe

---\\ ---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\Lucile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Lucile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Lucile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Moovida.lnk . (...) -- C:\Program Files (x86)\Fluendo\Moovida\Moovida.exe (.not file.)
O4 - Global Startup: C:\Users\Lucile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe
O4 - Global Startup: C:\Users\Lucile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Users\Lucile\Desktop\AD-R.lnk . (...) -- C:\Program Files (x86)\Ad-Remover\main.exe
O4 - Global Startup: C:\Users\Lucile\Desktop\Architecture 3D 3.1 - Premium (demo).lnk . (.Anuman-Interactive.com.) -- C:\Program Files (x86)\Anuman Interactive\Architecture 3D 3.1 - Premium (demo)\Bin\Launch.exe
O4 - Global Startup: C:\Users\Lucile\Desktop\CyberLink PowerDirector.lnk . (.CyberLink Corp..) -- C:\Program Files (x86)\CyberLink\PowerDirector\PDR.exe
O4 - Global Startup: C:\Users\Lucile\Desktop\Installation du Contrôle Parental.lnk . (.InstallShield Software Corporation.) -- C:\Program Files (x86)\Securitoo\Contrôle Parental\securitoo_controle_parental.exe
O4 - Global Startup: C:\Users\Lucile\Desktop\MediaShow.lnk . (.CyberLink Corp..) -- C:\Program Files (x86)\CyberLink\MediaShow4\MediaShow.exe
O4 - Global Startup: C:\Users\Lucile\Desktop\Moovida.lnk . (...) -- C:\Program Files (x86)\Fluendo\Moovida\Moovida.exe (.not file.)
O4 - Global Startup: C:\Users\Lucile\Desktop\Page d'accueil de Architecture 3D 3.1 - Premium (demo).lnk . (...) -- C:\Program Files (x86)\Anuman Interactive\Architecture 3D 3.1 - Premium (demo)\Bin\WebLaunch.exe
O4 - Global Startup: C:\Users\Lucile\Desktop\Pas à pas vidéo.lnk . (...) -- C:\Program Files (x86)\Anuman Interactive\Aménagement intérieur\Videos\MenuVideos_v2_1.exe
O4 - Global Startup: C:\Users\Lucile\Desktop\PhotoFiltre.lnk . (.Antonio Da Cruz.) -- C:\Program Files (x86)\PhotoFiltre\photofiltre.exe
O4 - Global Startup: C:\Users\Lucile\Desktop\Shortcut to securitoo_controle_parental.exe.lnk . (.InstallShield Software Corporation.) -- C:\Program Files (x86)\Securitoo\Contrôle Parental\securitoo_controle_parental.exe
O4 - Global Startup: C:\Users\Lucile\Desktop\Site internet.lnk . (...) -- C:\Program Files (x86)\Anuman Interactive\Aménagement intérieur\Site.url
O4 - Global Startup: C:\Users\Lucile\Desktop\Windows Live Messenger .lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
O4 - Global Startup: C:\Users\Lucile\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\DraftSight.lnk . (.Acresso Software Inc..) -- C:\Windows\Installer\{6EF329B9-C15C-4329-A6B3-E03071AAAECA}\NewShortcut31_F8E29BF1EB70468CB0249B43C7758D35.exe
O4 - Global Startup: C:\Users\Lucile\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\GOM Player.lnk . (.Gretech Corp..) -- C:\Program Files (x86)\GRETECH\GomPlayer\GOM.exe
O4 - Global Startup: C:\Users\Lucile\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Lucile\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O4 - Global Startup: C:\Users\Lucile\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~2\MICROS~1\Office12\EXCEL.exe
O8 - Extra context menu item: Google Sidewiki... . (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll

---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll

---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{96EA266D-011F-401F-ADA5-CAADC0B9FCBB}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{96EA266D-011F-401F-ADA5-CAADC0B9FCBB}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{96EA266D-011F-401F-ADA5-CAADC0B9FCBB}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{E9B67D63-0FE5-4D92-BC4D-CC010806B3DD}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{96EA266D-011F-401F-ADA5-CAADC0B9FCBB}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{E9B67D63-0FE5-4D92-BC4D-CC010806B3DD}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

---\\ Protocole additionnel et piratage de protocole (O18)
O18 - Handler: dssrequest [64Bits] - {5513F07E-936B-4E52-9B00-067394E91CC5} . (.McAfee, Inc. - SiteAdvisor.) -- c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll
O18 - Handler: sacore [64Bits] - {5513F07E-936B-4E52-9B00-067394E91CC5} . (.McAfee, Inc. - SiteAdvisor.) -- c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\System32\webcheck.dll

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: (no name) [64Bits] - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll

---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: (Ati External Event Utility) . (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - C:\Windows\system32\Ati2evxx.exe
O23 - Service: (Autodesk Licensing Service) . (.Autodesk - System Level Service Utility.) - C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: (CLHNService) . (.Pas de propriétaire - CLHNService Module.) - C:\Program Files (x86)\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
O23 - Service: (CyberLink Media Server Monitor Service) . (...) - C:\Program Files (x86)\Acer Arcade Deluxe\Acer HomeMedia Connect\Kernel\DMS\CLMSMonitorService.exe
O23 - Service: (CyberLink Media Server Service) . (.CyberLink - CLMSServer.) - C:\Program Files (x86)\Acer Arcade Deluxe\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe
O23 - Service: (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: (gupdatem) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: (gusvc) . (.Google - gusvc.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: (IAANTMON) . (.Intel Corporation - RAID Monitor.) - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: (McAfee SiteAdvisor Service) . (.McAfee, Inc. - SiteAdvisor.) - C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: (mcmscsvc) . (.McAfee, Inc. - McAfee Services.) - C:\PROGRA~2\McAfee\MSC\mcmscsvc.exe
O23 - Service: (McNASvc) . (.McAfee, Inc. - McAfee Network Agent.) - c:\PROGRA~2\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: (McODS) . (.McAfee, Inc. - McAfee VirusScan - On Demand Scan.) - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: (McProxy) . (.McAfee, Inc. - McAfee Proxy Service Module.) - c:\PROGRA~2\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: (McShield) . (.McAfee, Inc. - On-Access Scanner service.) - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: (McSysmon) . (.McAfee, Inc. - McAfee SystemGuards Service.) - C:\PROGRA~2\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: (MpfService) . (.McAfee, Inc. - McAfee Personal Firewall Service.) - C:\Program Files (x86)\McAfee\MPF\MPFSrv.exe
O23 - Service: (MSK80Service) . (.McAfee, Inc. - McAfee Anti-Spam Server.) - C:\Program Files (x86)\McAfee\MSK\MskSrver.exe
O23 - Service: (MWLService) . (.EgisTec Inc. - MyWinLocker Service.) - C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\MWLService.exe
O23 - Service: (NTIBackupSvc) . (.NewTech InfoSystems, Inc. - NTI Backup Now 5 BackupSvc Application.) - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O23 - Service: (NTISchedulerSvc) . (.NewTech Infosystems, Inc. - NTI Backup Now 5 SchedulerSvc NT Service.) - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: (RichVideo) . (.Pas de propriétaire - RichVideo Module.) - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
O23 - Service: (wlidsvc) . (.Microsoft Corp. - Microsoft® Windows Live ID Service.) - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.exe

---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)

---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\McDefragTask.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\McQcTask.job
[MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
[MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
[MD5.9198C6139A560FE25F69A80CE38E2E1B] [APT] [HPCustParticipation HP Deskjet 2050 J510 series] (.Hewlett-Packard Co..) -- C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\HPCustPartic.exe
[MD5.13844F66D4FF9929D87177398E157C95] [APT] [McQcTask] (.McAfee, Inc..) -- c:\PROGRA~2\mcafee\mqc\QcConsol.exe
[MD5.00000000000000000000000000000000] [APT] [Scheduled Update for Ask Toolbar] (...) -- C:\Program Files (x86)\Ask.com\UpdateTask.exe (.not file.)

---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Tcpip) . (.Microsoft Corporation - TCP/IP Driver.) - C:\Windows\System32\drivers\tcpip.sys
O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\System32\DRIVERS\i8042prt.sys
O41 - Driver: (kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\System32\DRIVERS\kbdclass.sys
O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre clavier HID.) - C:\Windows\System32\DRIVERS\kbdhid.sys
O41 - Driver: McAfee Inc. mfehidk (mfehidk) . (.McAfee, Inc. - Host Intrusion Detection Link Driver.) - C:\Windows\System32\drivers\mfehidk.sys
O41 - Driver: (mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\System32\DRIVERS\mouclass.sys
O41 - Driver: (MPFP) . (.McAfee, Inc. - McAfee Personal Firewall Plus Driver.) - C:\Windows\System32\Drivers\Mpfp.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: (netbt) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\system32\drivers\pacer.sys (PSched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\System32\DRIVERS\rasacd.sys
O41 - Driver: (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: (RDPENCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Smb) . (.Microsoft Corporation - SMB Transport driver.) - C:\Windows\System32\DRIVERS\smb.sys
O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys

---\\ Logiciels installés (O42)
O42 - Logiciel: Update for Microsoft Office 2007 (KB2508958) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}
O42 - Logiciel: AV Input Selection - (.YUAN.) [HKLM][64Bits] -- {F429ED71-4A8B-457A-85E4-F6398CE73E58}
O42 - Logiciel: Acer Arcade Deluxe - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}
O42 - Logiciel: Acer Arcade Deluxe - (.CyberLink Corp..) [HKLM][64Bits] -- {2637C347-9DAD-11D6-9EA2-00055D0CA761}
O42 - Logiciel: Acer Product Registration - (.Acer Incorporated.) [HKLM][64Bits] -- {DA20E1A8-07CB-4EE7-9B72-A7E28C953F0E}
O42 - Logiciel: Acer ScreenSaver - (.Acer Incorporated.) [HKLM][64Bits] -- {79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}
O42 - Logiciel: Acer eRecovery Management - (.Acer Incorporated.) [HKLM][64Bits] -- {7F811A54-5A09-4579-90E1-C93498E230D9}
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Reader 9 - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-A90000000001}
O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM][64Bits] -- Adobe Shockwave Player
O42 - Logiciel: Akamai NetSession Interface - (.Pas de propriétaire.) [HKLM][64Bits] -- Akamai
O42 - Logiciel: Alice Greenfingers - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112920767}
O42 - Logiciel: Alien Shooter - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110082360}
O42 - Logiciel: Aménagement intérieur - (.Anuman Interactive.) [HKLM][64Bits] -- Aménagement intérieur_is1
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {A93944F2-D2D4-4750-BFE7-9A288FEAF2CF}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {6956856F-B6B3-4BE0-BA0B-8F495BE32033}
O42 - Logiciel: Architecture 3D 3.1 - Premium (demo) - (.Anuman Interactive.) [HKLM][64Bits] -- Architecture_3D_3-Premium_Demo_is1
O42 - Logiciel: Artlantis Studio 3.0.5 - (.Abvent R&D.) [HKLM][64Bits] -- Artlantis Studio 3
O42 - Logiciel: AutoCAD LT 2008 - Français - (.Autodesk.) [HKLM][64Bits] -- AutoCAD LT 2008 - Français
O42 - Logiciel: Autodesk DWF Viewer 7 - (.Autodesk, Inc..) [HKLM][64Bits] -- {9A346205-EA92-4406-B1AB-50379DA3F057}
O42 - Logiciel: Avery Wizard 3.1 - (.Avery.) [HKLM][64Bits] -- {77077FFF-8831-470F-9627-E86F06A50CCD}
O42 - Logiciel: Beetle Junior - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110052107}
O42 - Logiciel: C:\Program Files (x86)\Acer GameZone\GameConsole - (.Oberon Media, Inc..) [HKLM][64Bits] -- {71C2828F-2678-4675-BDEC-895424861262}_is1
O42 - Logiciel: Catalyst Control Center - Branding - (.ATI.) [HKLM][64Bits] -- {3594EE90-B157-4519-9E82-8B6F4711A0A1}
O42 - Logiciel: Chicken Invaders 2 - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110209593}
O42 - Logiciel: CyberLink MediaShow - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{80E158EA-7181-40FE-A701-301CE6BE64AB}
O42 - Logiciel: CyberLink MediaShow - (.CyberLink Corp..) [HKLM][64Bits] -- {80E158EA-7181-40FE-A701-301CE6BE64AB}
O42 - Logiciel: CyberLink PowerDirector - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}
O42 - Logiciel: CyberLink PowerDirector - (.CyberLink Corp..) [HKLM][64Bits] -- {CB099890-1D5F-11D5-9EA9-0050BAE317E1}
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: DraftSight - (.Dassault Systèmes.) [HKLM][64Bits] -- {6EF329B9-C15C-4329-A6B3-E03071AAAECA}
O42 - Logiciel: Dream Day First Home - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113832110}
O42 - Logiciel: GIMP 2.6.8 - (.Pas de propriétaire.) [HKLM][64Bits] -- WinGimp-2.0_is1
O42 - Logiciel: GOM Player - (.Gretech Corporation.) [HKLM][64Bits] -- GOM Player
O42 - Logiciel: Galapago - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111307457}
O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM][64Bits] -- {488F0347-C4A7-4374-91A7-30818BEDA710}
O42 - Logiciel: Go-Go Gourmet - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-114072167}
O42 - Logiciel: Google SketchUp Pro 8 - (.Google, Inc..) [HKLM][64Bits] -- {F067EE71-369C-4D72-BDB7-DE7CF346660F}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: HP Deskjet 2050 J510 series - Enquête sur l'amélioration du produit - (.Hewlett-Packard Co..) [HKLM] -- {88FD4472-F950-4083-A6FA-A829AC785B04}
O42 - Logiciel: HP Deskjet 2050 J510 series Aide - (.Hewlett Packard.) [HKLM][64Bits] -- {7A3DF2E2-CF13-44FB-A93E-F71D5381DB3F}
O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM][64Bits] -- {DE77FE3F-A33D-499A-87AD-5FC406617B40}
O42 - Logiciel: Heroes of Hellas - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113786380}
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM][64Bits] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM][64Bits] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
O42 - Logiciel: Intel(R) Matrix Storage Manager - (.Intel Corporation.) [HKLM] -- {9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}
O42 - Logiciel: Java(TM) 6 Update 20 - (.Sun Microsystems, Inc..) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83216018FF}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
O42 - Logiciel: Logiciel d'archivage WinRAR - (.Pas de propriétaire.) [HKLM][64Bits] -- WinRAR archiver
O42 - Logiciel: Logiciel de base du périphérique HP Deskjet 2050 J510 series - (.Hewlett-Packard Co..) [HKLM] -- {D7716C7E-75F1-4C51-A2D5-C6A1E8311D53}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM][64Bits] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Magic Farm - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-114717227}
O42 - Logiciel: Magic Match Adventures - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-11408540}
O42 - Logiciel: McAfee SecurityCenter - (.McAfee, Inc..) [HKLM][64Bits] -- MSC
O42 - Logiciel: Micro Application - 3D Architecte Ultimate - (.Pas de propriétaire.) [HKLM][64Bits] -- {5C971370-7A50-4EB7-8A52-5C0C4D0951AC}
O42 - Logiciel: Micro Application - Architecte 3DHD Expert Cad - (.Pas de propriétaire.) [HKLM][64Bits] -- {4C739491-3A77-4A3E-A478-9A0136F44743}
O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) [HKLM] -- {3E31821C-7917-367E-938E-E65FC413EA31}
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile FRA Language Pack - (.Microsoft Corporation.) [HKLM] -- {4B5F58F7-C7D1-3CE3-9B37-B657F0852643}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0016-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0018-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001B-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{E64BA721-2310-4B55-BE5A-2925F9706192}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-002A-040C-1000-0000000FF1CE}_HOMESTUDENTR_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-006E-040C-0000-0000000FF1CE}_HOMESTUDENTR_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-00A1-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
O42 - Logiciel: Microsoft Office 97 Professional - (.Pas de propriétaire.) [HKLM][64Bits] -- Office8.0
O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0016-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- HOMESTUDENTR
O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Office 64-bit Components 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002A-0000-1000-0000000FF1CE}
O42 - Logiciel: Microsoft Office OneNote MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-00A1-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0018-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office PowerPoint Viewer 2007 (French) - (.Microsoft Corporation.) [HKLM][64Bits] -- {95120000-00AF-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-0401-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-0413-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-0407-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-0C0A-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-002C-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-0401-0000-0000000FF1CE}_HOMESTUDENTR_{14809F99-C601-4D4A-9391-F1E8FAA964C5}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-0413-0000-0000000FF1CE}_HOMESTUDENTR_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}
O42 - Logiciel: Microsoft Office Shared 64-bit MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002A-040C-1000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-006E-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Suite Activation Assistant - (.Microsoft Corporation.) [HKLM][64Bits] -- {E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}
O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001B-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM][64Bits] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {B6E3757B-5E77-3915-866A-CCFC4B8D194C}
O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM][64Bits] -- {770657D0-A123-3C07-8E44-1C83EC895118}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable (x64) - (.Microsoft Corporation.) [HKLM] -- {6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 - (.Microsoft Corporation.) [HKLM] -- {aac9fcc4-dd9e-4add-901c-b5496a07ab2e}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM][64Bits] -- {7299052b-02a4-4627-81f2-1818da5d550d}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM][64Bits] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 - (.Microsoft Corporation.) [HKLM][64Bits] -- {86CE85E6-DBAC-3FFD-B977-E4B79F83C909}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 - (.Microsoft Corporation.) [HKLM][64Bits] -- {FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM][64Bits] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM][64Bits] -- {3B160861-7250-451E-B5EE-8B92BF30A710}
O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0020-040C-0000-0000000FF1CE}
O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 Language Pack SP1 - fra
O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack
O42 - Logiciel: Moovida - (.Fluendo.) [HKLM][64Bits] -- Moovida
O42 - Logiciel: Moovida - (.Secure Digital Services.) [HKLM][64Bits] -- {6084C211-01A1-464E-97A0-09772E122B50}
O42 - Logiciel: Mozilla Firefox (3.6.17) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox (3.6.17)
O42 - Logiciel: MyWinLocker - (.EgisTec.) [HKLM][64Bits] -- {68301905-2DEA-41CE-A4D4-E8B443B099BA}
O42 - Logiciel: Mystery Solitaire - Secret Island - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111796363}
O42 - Logiciel: NTI Backup Now 5 - (.NewTech Infosystems.) [HKLM][64Bits] -- InstallShield_{12EFA1A4-AC3B-443C-8143-237EDE760403}
O42 - Logiciel: NTI Media Maker 8 - (.NewTech Infosystems.) [HKLM][64Bits] -- InstallShield_{2413930C-8309-47A6-BC61-5EF27A4222BC}
O42 - Logiciel: Notepad++ - (.Pas de propriétaire.) [HKLM][64Bits] -- Notepad++
O42 - Logiciel: PDFCreator - (.Frank Heindörfer, Philip Chinery.) [HKLM][64Bits] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}
O42 - Logiciel: PDFTiger - (.Pas de propriétaire.) [HKLM][64Bits] -- PDFTiger_is1
O42 - Logiciel: PDFTigerDriver - (.Pas de propriétaire.) [HKLM][64Bits] -- {AEM384L1-28E3-1232-1233-1JD74JDIEK32}_is1
O42 - Logiciel: PhotoFiltre - (.Pas de propriétaire.) [HKCU] -- PhotoFiltre
O42 - Logiciel: PlayReady PC runtime - (.Microsoft Corporation.) [HKLM] -- {704ABF63-B0B1-446B-9D92-C5D06AFCE7B6}
O42 - Logiciel: PrintPratic - (.Micro Application.) [HKLM][64Bits] -- PrintPratic
O42 - Logiciel: Pro100 - (.Pas de propriétaire.) [HKLM][64Bits] -- Pro100
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM][64Bits] -- {EB900AF8-CC61-4E15-871B-98D1EA3E8025}
O42 - Logiciel: Radio Bar 2 Toolbar - (.Radio Bar 2.) [HKLM][64Bits] -- Radio_Bar_2 Toolbar
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: SAGEM Wi-Fi 11g USB adapter (pilote) - (.Pas de propriétaire.) [HKLM][64Bits] -- {E2AA331E-E10E-438C-B1C0-24B2FFD3D9C4}
O42 - Logiciel: Sagem Wi-Fi 11g USB adapter (driver) - (.Pas de propriétaire.) [HKLM][64Bits] -- {2ED60C17-4568-4CD5-830A-03C4688B09A1}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288621) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{5C497F0B-2061-4CC9-A61C-6B45B867354D}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288931) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CD769337-C8AC-46DB-A7DC-643E50089263}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2345043) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{536FB502-775F-4494-BACE-C02CC90B7A5B}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2466156) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CEF209AB-F96D-404F-B5CC-44057C057CA3}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2509488) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{AD0DE453-0804-4495-9C91-33D0F9AA5463}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB969559) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB976321) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{7F207DCA-3399-40CB-A968-6E5991B1421A}
O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM][64Bits] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2160841
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2446708
O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB2464583) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{151E2FEA-C3A6-4CB6-BE6B-16651FDF04BE}
O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB979441) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{8CCB781A-CF6B-4FCB-B6D8-59C64DF5C6DB}
O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB2535818) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{8588DD11-6BD7-4400-B55C-DD5AB74B43E1}
O42 - Logiciel: Security Update for Microsoft Office PowerPoint Viewer 2007 (KB2464623) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{D75E6D0C-BADF-4F41-98B2-0C0F02C15062}
O42 - Logiciel: Security Update for Microsoft Office Visio Viewer 2007 (KB973709) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
O42 - Logiciel: Security Update for Microsoft Office Word 2007 (KB2344993) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{7A5B74FA-7A92-4FC9-821A-2DD5D4E73E48}
O42 - Logiciel: Security Update for Microsoft Office system 2007 (972581) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}
O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB974234) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{FCD742B9-7A55-44BC-A776-F795F21FEDDC}
O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM][64Bits] -- {5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}
O42 - Logiciel: Softonic_France Toolbar - (.Softonic_France.) [HKLM][64Bits] -- Softonic_France Toolbar
O42 - Logiciel: TRENDnet TEW-424UB Wireless USB 2.0 Adapter Vista Driver and Utility - (.Pas de propriétaire.) [HKLM][64Bits] -- InstallShield_{B1BDEA80-95CE-4DFB-B9D3-DC800E7F87B4}
O42 - Logiciel: Update for 2007 Microsoft Office System (KB2284654) - (.Microsoft.) [HKLM][64Bits] -- {90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{FB166E7C-8AA6-48C8-B726-1F25BEE7825A}
O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}
O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM][64Bits] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
O42 - Logiciel: Update for Microsoft Office OneNote 2007 (KB980729) - (.Microsoft.) [HKLM][64Bits] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{329050A9-EF80-40F9-B633-74508F54C1FF}
O42 - Logiciel: Veetle TV 0.9.18 - (.Veetle, Inc.) [HKLM][64Bits] -- Veetle TV
O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM][64Bits] -- WinLiveSuite
O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM][64Bits] -- {34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}
O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM][64Bits] -- {D45240D3-B6B3-4FF9-B243-54ECE3E10066}
O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM][64Bits] -- {2075CB0A-D26F-4DAA-B424-5079296B43BA}
O42 - Logiciel: Windows Live ID Sign-in Assistant - (.Microsoft Corporation.) [HKLM] -- {1B8ABA62-74F0-47ED-B18C-A43128E591B8}
O42 - Logiciel: Windows Live Installer - (.Microsoft Corporation.) [HKLM][64Bits] -- {0B0F231F-CE6A-483D-AA23-77B364F75917}
O42 - Logiciel: Windows Live Language Selector - (.Microsoft Corporation.) [HKLM] -- {5EB6F3CB-46F4-451F-A028-7F6D8D35D7D0}
O42 - Logiciel: Windows Live MIME IFilter - (.Microsoft Corporation.) [HKLM] -- {DA54F80E-261C-41A2-A855-549A144F2F59}
O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM][64Bits] -- {9D56775A-93F3-44A3-8092-840E3826DE30}
O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM][64Bits] -- {9FAE6E8D-E686-49F5-A574-0A58DFD9580C}
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {6057E21C-ABE9-4059-AE3E-3BEB9925E660}
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {EB4DF488-AAEF-406F-A341-CB2AAA315B90}
O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM][64Bits] -- {6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}
O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM][64Bits] -- {92EA4134-10D1-418A-91E1-5A0453131A38}
O42 - Logiciel: Windows Live PIMT Platform - (.Microsoft Corporation.) [HKLM][64Bits] -- {4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}
O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM][64Bits] -- {A9BDCA6B-3653-467B-AC83-94367DA3BFE3}
O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM][64Bits] -- {C893D8C0-1BA0-4517-B11C-E89B65E72F70}
O42 - Logiciel: Windows Live Photo Gallery - (.Microsoft Corporation.) [HKLM][64Bits] -- {3336F667-9049-4D46-98B6-4C743EEBC5B1}
O42 - Logiciel: Windows Live SOXE - (.Microsoft Corporation.) [HKLM][64Bits] -- {682B3E4F-696A-42DE-A41C-4C07EA1678B4}
O42 - Logiciel: Windows Live SOXE Definitions - (.Microsoft Corporation.) [HKLM][64Bits] -- {200FEC62-3C34-4D60-9CE8-EC372E01C08F}
O42 - Logiciel: Windows Live UX Platform - (.Microsoft Corporation.) [HKLM][64Bits] -- {CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}
O42 - Logiciel: Windows Live UX Platform Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {09F56A49-A7B1-4AAB-95B9-D13094254AD1}
O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM][64Bits] -- {3B9A92DA-6374-4872-B646-253F18624D5F}
O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM][64Bits] -- {A726AE06-AAA3-43D1-87E3-70F510314F04}
O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM][64Bits] -- {AAAFC670-569B-4A2F-82B4-42945E0DE3EF}
O42 - Logiciel: Windows Live Writer Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {62687B11-58B5-4A18-9BC3-9DF4CE03F194}
O42 - Logiciel: Windows Movie Maker 2.6 - (.Microsoft Corporation.) [HKLM][64Bits] -- {B3DAF54F-DB25-4586-9EF1-96D24BB14088}
O42 - Logiciel: avast! Free Antivirus - (.AVAST Software.) [HKLM][64Bits] -- avast
O42 - Logiciel: eSobi v2 - (.esobi Inc..) [HKLM][64Bits] -- InstallShield_{15D967B5-A4BE-42AE-9E84-64CD062B25AA}
O42 - Logiciel: livebox - (.Pas de propriétaire.) [HKLM][64Bits] -- {17342E3B-0818-4A6F-BFF8-99476605ADD6}
O42 - Logiciel: livebox - (.Pas de propriétaire.) [HKLM][64Bits] -- {AB3F9176-E74A-4F28-9A09-4F22349B145E}
O42 - Logiciel: pdfforge Toolbar v4.4 - (.Spigot, Inc..) [HKLM][64Bits] -- {BCB52F35-4C56-49F2-A3D6-FDED54B01847}

---\\ HKCU & HKLM Software Keys
[HKCU\Software\A.R.T.]
[HKCU\Software\ALWIL Software]
[HKCU\Software\APN]
[HKCU\Software\ATI Technologies Inc.]
[HKCU\Software\ATI]
[HKCU\Software\AVAST Software]
[HKCU\Software\Abvent]
[HKCU\Software\Acer]
[HKCU\Software\Ad-Remover]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\Software\Adobe]
[HKCU\Software\AppDataLow\Software\Google]
[HKCU\Software\AppDataLow\Software\Macromedia]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software\Radio_Bar_2]
[HKCU\Software\AppDataLow\Software\Softonic_France]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Autodesk]
[HKCU\Software\Avery]
[HKCU\Software\Borland]
[HKCU\Software\Bugsplat]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Command]
[HKCU\Software\CyberLink]
[HKCU\Software\Ecru]
[HKCU\Software\GRETECH]
[HKCU\Software\Google]
[HKCU\Software\HP]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\IM Providers]
[HKCU\Software\JavaSoft]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\Macromedia]
[HKCU\Software\McAfee]
[HKCU\Software\Micro Application]
[HKCU\Software\Moovida]
[HKCU\Software\Mozilla]
[HKCU\Software\Netscape]
[HKCU\Software\Northcode Inc]
[HKCU\Software\Novell]
[HKCU\Software\ODBC]
[HKCU\Software\PDFCreator]
[HKCU\Software\Policies]
[HKCU\Software\Realtek]
[HKCU\Software\SWActivation]
[HKCU\Software\Softonic]
[HKCU\Software\Sysinternals]
[HKCU\Software\TechSmith]
[HKCU\Software\Trolltech]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\Veetle]
[HKCU\Software\VirtuaMedia]
[HKCU\Software\Wget]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\Wow6432Node]
[HKCU\Software\YFSoftware]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\mb Software AG]
[HKCU\Software\yahooinstall]
[HKLM\Software\ALWIL Software]
[HKLM\Software\AMD]
[HKLM\Software\APN]
[HKLM\Software\ART Inc]
[HKLM\Software\ATI Technologies]
[HKLM\Software\ATI]
[HKLM\Software\AVAST Software]
[HKLM\Software\Acer Incorporated]
[HKLM\Software\Acer]
[HKLM\Software\Adobe]
[HKLM\Software\America Online]
[HKLM\Software\AppDataLow]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\Autodesk]
[HKLM\Software\Canon]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\CyberLink]
[HKLM\Software\Cyberlink]
[HKLM\Software\Digital River]
[HKLM\Software\EgisTec Egis Software Update]
[HKLM\Software\EgisTec]
[HKLM\Software\FlexCell Studio]
[HKLM\Software\GRETECH]
[HKLM\Software\Google]
[HKLM\Software\Hewlett-Packard]
[HKLM\Software\InstallShield]
[HKLM\Software\InstallationKit]
[HKLM\Software\Intel]
[HKLM\Software\Interface]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\Macromedia]
[HKLM\Software\McAfee.com]
[HKLM\Software\McAfee]
[HKLM\Software\Micro Application]
[HKLM\Software\MicroQuill]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\NOS]
[HKLM\Software\NewTech Infosystems]
[HKLM\Software\ODBC]
[HKLM\Software\OEM]
[HKLM\Software\Oberon Media]
[HKLM\Software\OemSetup]
[HKLM\Software\PDFCreator]
[HKLM\Software\Policies]
[HKLM\Software\Radio_Bar_2]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SRS Labs]
[HKLM\Software\Sagem]
[HKLM\Software\SecureDigitalServices]
[HKLM\Software\Set8187B]
[HKLM\Software\SimDebug]
[HKLM\Software\SiteAdvisor]
[HKLM\Software\Softonic_France]
[HKLM\Software\Sonic]
[HKLM\Software\Swearware]
[HKLM\Software\Veetle]
[HKLM\Software\Volatile]
[HKLM\Software\Waves Audio]
[HKLM\Software\WinRAR]
[HKLM\Software\Wow6432Node]
[HKLM\Software\Yahoo]
[HKLM\Software\mozilla.org]
[HKLM\Software\office]
[HKLM\Software\swearware]

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 24/08/2009 - 17:45:14 - [18102598] ----D- C:\Program Files\Acer
O43 - CFD: 24/10/2010 - 20:40:44 - [177929236] ----D- C:\Program Files\Alwil Software
O43 - CFD: 10/10/2006 - 13:14:28 - [18872087] ----D- C:\Program Files\ATI
O43 - CFD: 15/06/2011 - 13:44:36 - [225657767] ----D- C:\Program Files\Common Files
O43 - CFD: 24/08/2009 - 17:44:18 - [0] -SH-D- C:\Program Files\Fichiers communs
O43 - CFD: 25/08/2009 - 14:08:20 - [2909912] ----D- C:\Program Files\Google
O43 - CFD: 30/12/2010 - 21:22:20 - [46675275] ----D- C:\Program Files\HP
O43 - CFD: 22/05/2011 - 11:16:28 - [6668552] ----D- C:\Program Files\Internet Explorer
O43 - CFD: 14/04/2009 - 01:48:26 - [12453845] ----D- C:\Program Files\McAfee
O43 - CFD: 02/11/2006 - 17:07:28 - [94671287] ----D- C:\Program Files\Microsoft Games
O43 - CFD: 14/04/2009 - 01:36:50 - [1141526] ----D- C:\Program Files\Microsoft Office
O43 - CFD: 13/08/2010 - 09:52:54 - [116334702] ----D- C:\Program Files\Movie Maker
O43 - CFD: 02/11/2006 - 17:07:28 - [25757] ----D- C:\Program Files\MSBuild
O43 - CFD: 14/04/2009 - 01:42:04 - [1350378] ----D- C:\Program Files\PlayReady
O43 - CFD: 14/04/2009 - 01:22:24 - [12455104] ----D- C:\Program Files\Realtek
O43 - CFD: 02/11/2006 - 17:07:28 - [36351145] ----D- C:\Program Files\Reference Assemblies
O43 - CFD: 02/11/2006 - 17:44:56 - [0] --H-D- C:\Program Files\Uninstall Information
O43 - CFD: 21/01/2008 - 05:09:42 - [1302528] ----D- C:\Program Files\Windows Calendar
O43 - CFD: 19/10/2009 - 14:49:30 - [2963968] ----D- C:\Program Files\Windows Collaboration
O43 - CFD: 19/10/2009 - 14:49:30 - [6394224] ----D- C:\Program Files\Windows Defender
O43 - CFD: 19/10/2009 - 14:49:30 - [9655416] ----D- C:\Program Files\Windows Journal
O43 - CFD: 25/10/2010 - 17:54:24 - [43896] ----D- C:\Program Files\Windows Live
O43 - CFD: 12/05/2011 - 10:19:46 - [9619128] ----D- C:\Program Files\Windows Mail
O43 - CFD: 15/10/2010 - 08:54:26 - [5140215] ----D- C:\Program Files\Windows Media Player
O43 - CFD: 24/08/2009 - 17:44:18 - [8057896] ----D- C:\Program Files\Windows NT
O43 - CFD: 19/10/2009 - 14:49:30 - [16439458] ----D- C:\Program Files\Windows Photo Gallery
O43 - CFD: 19/11/2009 - 11:52:12 - [167424] ----D- C:\Program Files\Windows Portable Devices
O43 - CFD: 19/10/2009 - 14:49:30 - [8304146] ----D- C:\Program Files\Windows Sidebar
O43 - CFD: 14/04/2009 - 01:48:08 - [1597230] ----D- C:\Program Files\Common Files\McAfee
O43 - CFD: 25/10/2010 - 17:54:14 - [213844953] ----D- C:\Program Files\Common Files\Microsoft Shared
O43 - CFD: 02/11/2006 - 15:33:54 - [2702] ----D- C:\Program Files\Common Files\Services
O43 - CFD: 02/11/2006 - 15:33:54 - [608256] ----D- C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 21/01/2008 - 05:09:30 - [9604626] ----D- C:\Program Files\Common Files\System
O43 - CFD: 06/03/2011 - 12:33:54 - [53] ----D- C:\ProgramData\Abvent
O43 - CFD: 10/10/2006 - 13:21:34 - [19484] ----D- C:\ProgramData\Acer GameZone Console
O43 - CFD: 14/04/2009 - 02:06:02 - [769] ----D- C:\ProgramData\Adobe
O43 - CFD: 24/10/2010 - 20:35:42 - [55956465] ----D- C:\ProgramData\Alwil Software
O43 - CFD: 07/03/2011 - 18:16:22 - [16878592] ----D- C:\ProgramData\Apple
O43 - CFD: 07/03/2011 - 18:17:12 - [26927616] ----D- C:\ProgramData\Apple Computer
O43 - CFD: 02/11/2006 - 17:42:18 - [0] -SH-D- C:\ProgramData\Application Data
O43 - CFD: 10/10/2006 - 13:26:52 - [187] ----D- C:\ProgramData\ATI
O43 - CFD: 02/10/2009 - 12:57:36 - [10297] ----D- C:\ProgramData\Autodesk
O43 - CFD: 24/08/2009 - 17:44:18 - [0] -SH-D- C:\ProgramData\Bureau
O43 - CFD: 14/06/2011 - 10:48:36 - [16956604] --H-D- C:\ProgramData\CanonBJ
O43 - CFD: 18/05/2011 - 17:29:28 - [108560] ----D- C:\ProgramData\CyberLink
O43 - CFD: 16/01/2011 - 15:08:32 - [881376] ----D- C:\ProgramData\Dassault Systemes
O43 - CFD: 02/11/2006 - 17:42:18 - [0] -SH-D- C:\ProgramData\Desktop
O43 - CFD: 02/11/2006 - 17:42:18 - [0] -SH-D- C:\ProgramData\Documents
O43 - CFD: 14/04/2009 - 01:55:38 - [0] ----D- C:\ProgramData\EgisTec
O43 - CFD: 14/04/2009 - 02:19:32 - [420] ----D- C:\ProgramData\eSobi
O43 - CFD: 24/08/2009 - 17:44:18 - [0] -SH-D- C:\ProgramData\Favoris
O43 - CFD: 02/11/2006 - 17:42:18 - [0] -SH-D- C:\ProgramData\Favorites
O43 - CFD: 17/10/2010 - 13:50:42 - [7816461] ----D- C:\ProgramData\Google
O43 - CFD: 31/01/2011 - 21:42:10 - [51032961] ----D- C:\ProgramData\HP
O43 - CFD: 24/08/2009 - 17:47:36 - [34078577] ----D- C:\ProgramData\McAfee
O43 - CFD: 24/08/2009 - 17:44:18 - [0] -SH-D- C:\ProgramData\Menu Démarrer
O43 - CFD: 25/10/2010 - 17:54:44 - [317406416] -S--D- C:\ProgramData\Microsoft
O43 - CFD: 14/06/2011 - 10:49:30 - [57688] ----D- C:\ProgramData\Microsoft Help
O43 - CFD: 24/08/2009 - 17:44:18 - [0] -SH-D- C:\ProgramData\Modèles
O43 - CFD: 14/04/2009 - 01:50:42 - [36] ----D- C:\ProgramData\SiteAdvisor
O43 - CFD: 02/11/2006 - 17:42:18 - [0] -SH-D- C:\ProgramData\Start Menu
O43 - CFD: 29/03/2010 - 17:21:08 - [154] ----D- C:\ProgramData\Sun
O43 - CFD: 10/10/2006 - 13:18:20 - [163911] ----D- C:\ProgramData\Temp
O43 - CFD: 02/11/2006 - 17:42:18 - [0] -SH-D- C:\ProgramData\Templates
O43 - CFD: 06/03/2011 - 12:21:16 - [0] ----D- C:\ProgramData\WinZip
O43 - CFD: 15/06/2011 - 14:58:24 - [26789765] -S--D- C:\Users\Lucile\AppData\Roaming\Microsoft
O43 - CFD: 06/03/2011 - 12:33:54 - [0] ----D- C:\Users\Lucile\AppData\Roaming\Abvent
O43 - CFD: 12/06/2011 - 15:39:44 - [32348] ----D- C:\Users\Lucile\AppData\Roaming\Abvent_Artlantis3
O43 - CFD: 10/10/2006 - 13:21:34 - [29536] ----D- C:\Users\Lucile\AppData\Roaming\Acer GameZone Console
O43 - CFD: 26/08/2009 - 17:10:50 - [4607281] ----D- C:\Users\Lucile\AppData\Roaming\Adobe
O43 - CFD: 01/09/2009 - 22:29:18 - [695440] ----D- C:\Users\Lucile\AppData\Roaming\Anuman Interactive
O43 - CFD: 24/05/2011 - 17:33:14 - [208093] ----D- C:\Users\Lucile\AppData\Roaming\ArchiFacile
O43 - CFD: 25/08/2009 - 11:13:42 - [0] ----D- C:\Users\Lucile\AppData\Roaming\ATI
O43 - CFD: 02/10/2009 - 12:57:36 - [4879444] ----D- C:\Users\Lucile\AppData\Roaming\Autodesk
O43 - CFD: 31/01/2011 - 21:54:04 - [18325143] ----D- C:\Users\Lucile\AppData\Roaming\Avery
O43 - CFD: 18/05/2011 - 17:29:30 - [0] ----D- C:\Users\Lucile\AppData\Roaming\CyberLink
O43 - CFD: 16/01/2011 - 15:09:50 - [3047986] ----D- C:\Users\Lucile\AppData\Roaming\DraftSight
O43 - CFD: 10/06/2011 - 16:34:30 - [91038] ----D- C:\Users\Lucile\AppData\Roaming\Décorateur de plinthes frises et corniches
O43 - CFD: 25/05/2011 - 17:44:56 - [2401464] ----D- C:\Users\Lucile\AppData\Roaming\Décorateur de surfaces
O43 - CFD: 25/05/2011 - 17:31:28 - [61] ----D- C:\Users\Lucile\AppData\Roaming\EASYTools
O43 - CFD: 17/10/2010 - 13:51:46 - [611566] ----D- C:\Users\Lucile\AppData\Roaming\Google
O43 - CFD: 06/06/2011 - 23:23:28 - [171] ----D- C:\Users\Lucile\AppData\Roaming\gtk-2.0
O43 - CFD: 30/12/2010 - 21:25:58 - [0] ----D- C:\Users\Lucile\AppData\Roaming\HpUpdate
O43 - CFD: 25/08/2009 - 11:13:12 - [0] ----D- C:\Users\Lucile\AppData\Roaming\Identities
O43 - CFD: 24/05/2011 - 14:19:04 - [3567] ----D- C:\Users\Lucile\AppData\Roaming\LiveCAD3
O43 - CFD: 25/08/2009 - 11:13:38 - [3052594] ----D- C:\Users\Lucile\AppData\Roaming\Macromedia
O43 - CFD: 02/11/2006 - 17:07:26 - [0] ----D- C:\Users\Lucile\AppData\Roaming\Media Center Programs
O43 - CFD: 04/02/2011 - 12:50:42 - [629144] ----D- C:\Users\Lucile\AppData\Roaming\moovida-1
O43 - CFD: 24/02/2010 - 15:54:38 - [8171492] ----D- C:\Users\Lucile\AppData\Roaming\Mozilla
O43 - CFD: 24/02/2010 - 18:42:42 - [167871] ----D- C:\Users\Lucile\AppData\Roaming\Notepad++
O43 - CFD: 07/03/2011 - 21:59:10 - [570] ----D- C:\Users\Lucile\AppData\Roaming\PhotoFiltre
O43 - CFD: 18/05/2011 - 17:29:34 - [42666103] ----D- C:\Users\Lucile\AppData\Roaming\PowerCinema
O43 - CFD: 09/01/2011 - 11:56:24 - [1081344] ----D- C:\Users\Lucile\AppData\Roaming\V-Safe
O43 - CFD: 06/03/2011 - 12:30:38 - [12] ----D- C:\Users\Lucile\AppData\Roaming\WinRAR
O43 - CFD: 30/03/2011 - 15:58:34 - [1768751406] ----D- C:\Users\Lucile\Appdata\Local\Microsoft
O43 - CFD: 18/05/2011 - 17:29:36 - [0] ----D- C:\Users\Lucile\Appdata\Local\Acer Arcade Deluxe
O43 - CFD: 26/08/2009 - 17:11:28 - [3066359] ----D- C:\Users\Lucile\Appdata\Local\Adobe
O43 - CFD: 07/03/2011 - 18:16:24 - [0] ----D- C:\Users\Lucile\Appdata\Local\Apple
O43 - CFD: 07/03/2011 - 18:19:12 - [2016] ----D- C:\Users\Lucile\Appdata\Local\Apple Computer
O43 - CFD: 25/08/2009 - 11:13:02 - [0] -SH-D- C:\Users\Lucile\Appdata\Local\Application Data
O43 - CFD: 25/08/2009 - 11:13:42 - [42011] ----D- C:\Users\Lucile\Appdata\Local\ATI
O43 - CFD: 22/09/2009 - 18:00:30 - [1666447] ----D- C:\Users\Lucile\Appdata\Local\Autodesk
O43 - CFD: 16/01/2011 - 15:09:50 - [0] ----D- C:\Users\Lucile\Appdata\Local\CrashRpt
O43 - CFD: 25/08/2009 - 11:13:34 - [181] ----D- C:\Users\Lucile\Appdata\Local\EgisTec
O43 - CFD: 20/05/2011 - 14:37:32 - [1997079] ----D- C:\Users\Lucile\Appdata\Local\Google
O43 - CFD: 25/08/2009 - 11:13:02 - [0] -SH-D- C:\Users\Lucile\Appdata\Local\Historique
O43 - CFD: 30/12/2010 - 21:21:26 - [18132] ----D- C:\Users\Lucile\Appdata\Local\HP
O43 - CFD: 19/11/2010 - 18:06:32 - [1132080] ----D- C:\Users\Lucile\Appdata\Local\Micro Application
O43 - CFD: 01/10/2009 - 14:24:02 - [0] ----D- C:\Users\Lucile\Appdata\Local\Microsoft Help
O43 - CFD: 19/11/2010 - 18:06:30 - [2465] ----D- C:\Users\Lucile\Appdata\Local\Micro_Application
O43 - CFD: 12/06/2011 - 20:41:54 - [656561] ----D- C:\Users\Lucile\Appdata\Local\moovida Air
O43 - CFD: 24/02/2010 - 15:54:32 - [79994601] ----D- C:\Users\Lucile\Appdata\Local\Mozilla
O43 - CFD: 18/05/2011 - 17:29:28 - [6786] ----D- C:\Users\Lucile\Appdata\Local\PlayMovie
O43 - CFD: 15/06/2011 - 14:53:12 - [728818] ----D- C:\Users\Lucile\Appdata\Local\temp
O43 - CFD: 14/06/2011 - 10:35:18 - [34745] ----D- C:\Users\Lucile\Appdata\Local\Temp(2437)
O43 - CFD: 25/08/2009 - 11:13:02 - [0] -SH-D- C:\Users\Lucile\Appdata\Local\Temporary Internet Files
O43 - CFD: 03/03/2011 - 13:04:34 - [331741129] ----D- C:\Users\Lucile\Appdata\Local\VirtualStore
O43 - CFD: 17/05/2011 - 12:03:44 - [65536] ----D- C:\Users\Lucile\Appdata\Local\Windows Live
O43 - CFD: 14/05/2011 - 09:36:36 - [0] ----D- C:\Users\Lucile\Appdata\Local\{0639F198-8089-42BF-9489-8A5685BAC680}
O43 - CFD: 29/04/2011 - 11:56:26 - [0] ----D- C:\Users\Lucile\Appdata\Local\{0F95D372-BB80-4BE7-B8AD-562B1707BC04}
O43 - CFD: 02/05/2011 - 12:15:32 - [0] ----D- C:\Users\Lucile\Appdata\Local\{3C3AD67A-121E-4876-9E1C-AD18019FE342}
O43 - CFD: 10/05/2011 - 11:03:00 - [0] ----D- C:\Users\Lucile\Appdata\Local\{405BE581-CC90-45CD-8BA7-C990273DC41F}
O43 - CFD: 04/05/2011 - 11:57:28 - [0] ----D- C:\Users\Lucile\Appdata\Local\{41098126-7973-4647-AB83-B518555A6A56}
O43 - CFD: 09/05/2011 - 18:37:54 - [0] ----D- C:\Users\Lucile\Appdata\Local\{43BA2FAA-A320-42BD-B011-D68049FFA117}
O43 - CFD: 03/05/2011 - 12:52:34 - [0] ----D- C:\Users\Lucile\Appdata\Local\{4455C7AC-1208-4400-BACF-363112A2ABCA}
O43 - CFD: 10/05/2011 - 20:59:16 - [0] ----D- C:\Users\Lucile\Appdata\Local\{4E07790C-4A4A-458E-8F29-EA99899E7153}
O43 - CFD: 17/05/2011 - 12:03:34 - [0] ----D- C:\Users\Lucile\Appdata\Local\{51944C5A-A475-402D-B2BF-0291E5E2A104}
O43 - CFD: 13/05/2011 - 13:31:18 - [0] ----D- C:\Users\Lucile\Appdata\Local\{552F1D02-DD1C-4014-A476-2192A8106311}
O43 - CFD: 03/05/2011 - 11:35:00 - [0] ----D- C:\Users\Lucile\Appdata\Local\{56E60AC2-B526-4707-81AF-B963F7D93EE9}
O43 - CFD: 16/05/2011 - 11:57:46 - [0] ----D- C:\Users\Lucile\Appdata\Local\{68D09AF5-E28C-4C42-B2D4-DB3AF2DE78EA}
O43 - CFD: 01/05/2011 - 10:43:12 - [0] ----D- C:\Users\Lucile\Appdata\Local\{729009AF-22E2-41D5-9F72-5255100FA224}
O43 - CFD: 09/05/2011 - 17:03:16 - [0] ----D- C:\Users\Lucile\Appdata\Local\{7899ABD9-C186-4F5D-A106-1E86E111DB5B}
O43 - CFD: 29/04/2011 - 12:20:24 - [0] ----D- C:\Users\Lucile\Appdata\Local\{7994562D-7C24-424D-B543-14975C03773A}
O43 - CFD: 12/05/2011 - 13:07:24 - [0] ----D- C:\Users\Lucile\Appdata\Local\{7CC0D17D-F854-4DDB-B1F1-6765F6096534}
O43 - CFD: 15/05/2011 - 20:18:36 - [0] ----D- C:\Users\Lucile\Appdata\Local\{7CE7A8B0-C142-4968-ADE3-08128276FF26}
O43 - CFD: 03/05/2011 - 13:54:38 - [0] ----D- C:\Users\Lucile\Appdata\Local\{7F518336-22F7-47B0-9B63-AC60E73C6BCB}
O43 - CFD: 08/05/2011 - 10:48:20 - [0] ----D- C:\Users\Lucile\Appdata\Local\{82B340DF-A7F5-4409-8723-CD6B01D893FA}
O43 - CFD: 06/05/2011 - 16:44:44 - [0] ----D- C:\Users\Lucile\Appdata\Local\{8DD8FB52-8F6F-4726-82EC-DF8715AFAB32}
O43 - CFD: 09/05/2011 - 00:25:32 - [0] ----D- C:\Users\Lucile\Appdata\Local\{967E7020-CF11-4068-A5AB-74A94E3DCC35}
O43 - CFD: 29/04/2011 - 18:21:34 - [0] ----D- C:\Users\Lucile\Appdata\Local\{99FF0D54-E0E5-44BB-8F50-9472C517A8A7}
O43 - CFD: 30/04/2011 - 21:00:54 - [0] ----D- C:\Users\Lucile\Appdata\Local\{9C78ED74-EA53-4C77-8B35-B156CE6C28FE}
O43 - CFD: 27/04/2011 - 22:16:14 - [0] ----D- C:\Users\Lucile\Appdata\Local\{A4B5008D-268D-402E-B48F-B860BE105E8F}
O43 - CFD: 05/05/2011 - 09:09:02 - [0] ----D- C:\Users\Lucile\Appdata\Local\{A7B33CC3-9634-46E0-A27D-84534667924D}
O43 - CFD: 07/05/2011 - 12:12:28 - [0] ----D- C:\Users\Lucile\Appdata\Local\{B0B9EB10-5021-475C-AF71-A831C83CD47B}
O43 - CFD: 30/04/2011 - 09:59:40 - [0] ----D- C:\Users\Lucile\Appdata\Local\{D7447C39-08F1-45D0-A226-DC21ECB8507B}
O43 - CFD: 02/05/2011 - 22:10:18 - [0] ----D- C:\Users\Lucile\Appdata\Local\{D9269A38-E314-417D-953B-9BAE52B319F7}
O43 - CFD: 04/05/2011 - 12:38:12 - [0] ----D- C:\Users\Lucile\Appdata\Local\{DE354A4C-E930-4A34-8E5C-A54637D05A04}
O43 - CFD: 12/05/2011 - 22:31:12 - [0] ----D- C:\Users\Lucile\Appdata\Local\{E00BD210-332D-4B57-9AAF-058336A36CAB}
O43 - CFD: 05/05/2011 - 21:27:00 - [0] ----D- C:\Users\Lucile\Appdata\Local\{E0C0BF25-D5CE-451D-BD14-8EBFC068E85D}
O43 - CFD: 09/05/2011 - 10:50:42 - [0] ----D- C:\Users\Lucile\Appdata\Local\{E6CE0CB2-55F9-41D9-8076-F7FD6DA2C009}
O43 - CFD: 28/04/2011 - 10:44:50 - [0] ----D- C:\Users\Lucile\Appdata\Local\{FFBF0DB0-C14E-40DA-A91A-209CC1C473E7}
O43 - CFD: 21/01/2008 - 05:20:46 - [15271] R---D- C:\Users\Lucile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 25/08/2009 - 11:13:20 - [174] R---D- C:\Users\Lucile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 06/03/2011 - 12:33:26 - [3013] ----D- C:\Users\Lucile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Artlantis Studio 3
O43 - CFD: 14/04/2009 - 01:53:26 - [8144] ----D- C:\Users\Lucile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink MediaShow4
O43 - CFD: 14/04/2009 - 02:00:38 - [6584] ----D- C:\Users\Lucile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDirector
O43 - CFD: 21/01/2008 - 05:20:46 - [548] R---D- C:\Users\Lucile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 15/12/2010 - 23:53:32 - [1066] ----D- C:\Users\Lucile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Moovida
O43 - CFD: 24/02/2010 - 18:30:02 - [0] ----D- C:\Users\Lucile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
O43 - CFD: 07/03/2011 - 21:55:14 - [0] ----D- C:\Users\Lucile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoFiltre
O43 - CFD: 25/08/2009 - 11:13:20 - [174] R---D- C:\Users\Lucile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 22/05/2011 - 11:06:06 - [2027] ----D- C:\Users\Lucile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TRENDnet
O43 - CFD: 06/03/2011 - 12:18:50 - [2681] ----D- C:\Users\Lucile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
O43 - CFD: 15/06/2011 - 14:58:36 - [3900665] ----D- C:\Program Files (x86)\ZHPDiag2
O43 - CFD: 10/10/2006 - 13:21:02 - [223662572] ----D- C:\Program Files (x86)\Acer Arcade Deluxe
O43 - CFD: 14/04/2009 - 02:26:32 - [552085911] ----D- C:\Program Files (x86)\Acer GameZone
O43 - CFD: 10/10/2006 - 13:22:18 - [0] ----D- C:\Program Files (x86)\Acer Incorporated
O43 - CFD: 15/06/2011 - 14:21:00 - [241276146] ----D- C:\Program Files (x86)\Ad-Remover
O43 - CFD: 14/04/2009 - 02:05:52 - [236344790] ----D- C:\Program Files (x86)\Adobe
O43 - CFD: 14/06/2011 - 10:48:54 - [2483125784] ----D- C:\Program Files (x86)\Anuman Interactive
O43 - CFD: 07/03/2011 - 18:16:22 - [2221118] ----D- C:\Program Files (x86)\Apple Software Update
O43 - CFD: 14/06/2011 - 10:51:08 - [125322534] ----D- C:\Program Files (x86)\Artlantis Studio 3
O43 - CFD: 10/10/2006 - 13:15:14 - [65900295] ----D- C:\Program Files (x86)\ATI Technologies
O43 - CFD: 22/09/2009 - 18:03:40 - [310993660] ----D- C:\Program Files (x86)\AutoCAD LT 2008
O43 - CFD: 22/09/2009 - 17:58:08 - [38496812] ----D- C:\Program Files (x86)\Autodesk
O43 - CFD: 15/06/2011 - 14:43:10 - [1034217404] ----D- C:\Program Files (x86)\Common Files
O43 - CFD: 14/04/2009 - 01:57:58 - [795721418] ----D- C:\Program Files (x86)\CyberLink
O43 - CFD: 16/01/2011 - 15:08:28 - [157462441] ----D- C:\Program Files (x86)\Dassault Systemes
O43 - CFD: 14/04/2009 - 01:42:22 - [33770667] ----D- C:\Program Files (x86)\EgisTec
O43 - CFD: 14/04/2009 - 01:42:24 - [1636481] ----D- C:\Program Files (x86)\EgisTec Egis Software Update
O43 - CFD: 14/04/2009 - 02:19:24 - [23923792] ----D- C:\Program Files (x86)\eSobi
O43 - CFD: 25/03/2010 - 16:14:38 - [99230433] ----D- C:\Program Files (x86)\GIMP-2.0
O43 - CFD: 04/03/2011 - 14:33:36 - [170468310] ----D- C:\Program Files (x86)\Google
O43 - CFD: 14/06/2011 - 10:48:58 - [14867011] ----D- C:\Program Files (x86)\GRETECH
O43 - CFD: 30/12/2010 - 21:26:00 - [5706539] ----D- C:\Program Files (x86)\HP
O43 - CFD: 25/05/2011 - 17:23:26 - [136505791] --H-D- C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 14/04/2009 - 01:15:12 - [10065822] ----D- C:\Program Files (x86)\Intel
O43 - CFD: 22/05/2011 - 11:16:28 - [6674184] ----D- C:\Program Files (x86)\Internet Explorer
O43 - CFD: 24/01/2011 - 12:11:10 - [88678980] ----D- C:\Program Files (x86)\Java
O43 - CFD: 29/04/2011 - 11:48:56 - [225749173] ----D- C:\Program Files (x86)\McAfee
O43 - CFD: 14/04/2009 - 01:48:10 - [2211737] ----D- C:\Program Files (x86)\McAfee.com
O43 - CFD: 14/06/2011 - 10:49:08 - [1800967882] ----D- C:\Program Files (x86)\Micro Application
O43 - CFD: 25/08/2009 - 11:50:26 - [464660563] ----D- C:\Program Files (x86)\Microsoft Office
O43 - CFD: 14/04/2009 - 01:47:28 - [7791803] ----D- C:\Program Files (x86)\Microsoft Office Suite Activation Assistant
O43 - CFD: 22/04/2011 - 11:41:54 - [38388859] ----D- C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 14/04/2009 - 01:46:26 - [1829877] ----D- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 17/12/2010 - 11:07:14 - [145421942] ----D- C:\Program Files (x86)\Microsoft Works
O43 - CFD: 26/06/2010 - 09:18:14 - [8167779] ----D- C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 01/04/2011 - 10:14:10 - [9339850] ----D- C:\Program Files (x86)\Movie Maker 2.6
O43 - CFD: 24/05/2011 - 20:38:54 - [31494417] ----D- C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 02/11/2006 - 17:07:28 - [25757] ----D- C:\Program Files (x86)\MSBuild
O43 - CFD: 25/08/2009 - 15:12:32 - [0] ----D- C:\Program Files (x86)\MSXML 4.0
O43 - CFD: 14/04/2009 - 02:04:56 - [228541594] ----D- C:\Program Files (x86)\NewTech Infosystems
O43 - CFD: 03/02/2011 - 19:33:36 - [0] ----D- C:\Program Files (x86)\NOS
O43 - CFD: 24/02/2010 - 18:45:18 - [9055746] ----D- C:\Program Files (x86)\Notepad++
O43 - CFD: 06/10/2010 - 21:42:56 - [25472309] ----D- C:\Program Files (x86)\PDFCreator
O43 - CFD: 06/10/2010 - 11:42:18 - [17582154] ----D- C:\Program Files (x86)\PDFTiger
O43 - CFD: 07/03/2011 - 21:55:14 - [3699431] ----D- C:\Program Files (x86)\PhotoFiltre
O43 - CFD: 14/04/2009 - 01:42:04 - [1041368] ----D- C:\Program Files (x86)\PlayReady
O43 - CFD: 29/03/2010 - 18:18:58 - [72467524] ----D- C:\Program Files (x86)\Pro100Demo
O43 - CFD: 07/03/2011 - 18:18:16 - [76334922] ----D- C:\Program Files (x86)\QuickTime
O43 - CFD: 10/10/2010 - 18:39:56 - [861434] ----D- C:\Program Files (x86)\qvPDF
O43 - CFD: 14/06/2011 - 10:49:30 - [4054743] ----D- C:\Program Files (x86)\Radio_Bar_2
O43 - CFD: 14/04/2009 - 01:22:00 - [4186249] ----D- C:\Program Files (x86)\Realtek
O43 - CFD: 02/11/2006 - 17:07:28 - [38690561] ----D- C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 25/08/2009 - 13:53:12 - [13130506] ----D- C:\Program Files (x86)\SAGEM
O43 - CFD: 25/08/2009 - 11:19:36 - [21030881] ----D- C:\Program Files (x86)\Securitoo
O43 - CFD: 14/06/2011 - 10:49:30 - [8327467] ----D- C:\Program Files (x86)\Softonic_France
O43 - CFD: 10/10/2006 - 13:07:22 - [0] ----D- C:\Program Files (x86)\Temp
O43 - CFD: 17/09/2009 - 11:15:28 - [5468421] ----D- C:\Program Files (x86)\TRENDnet
O43 - CFD: 02/11/2006 - 17:36:08 - [0] ----D- C:\Program Files (x86)\Uninstall Information
O43 - CFD: 24/10/2010 - 20:22:04 - [10428379] ----D- C:\Program Files (x86)\Veetle
O43 - CFD: 25/08/2009 - 13:54:44 - [17904979] ----D- C:\Program Files (x86)\Wanadoo
O43 - CFD: 19/10/2009 - 14:49:30 - [1016832] ----D- C:\Program Files (x86)\Windows Calendar
O43 - CFD: 21/01/2008 - 05:09:48 - [53248] ----D- C:\Program Files (x86)\Windows Collaboration
O43 - CFD: 21/01/2008 - 05:09:42 - [504128] ----D- C:\Program Files (x86)\Windows Defender
O43 - CFD: 31/03/2011 - 10:18:32 - [146221717] ----D- C:\Program Files (x86)\Windows Live
O43 - CFD: 12/05/2011 - 10:19:46 - [8935608] ----D- C:\Program Files (x86)\Windows Mail
O43 - CFD: 15/10/2010 - 08:54:26 - [3013093] ----D- C:\Program Files (x86)\Windows Media Player
O43 - CFD: 14/06/2011 - 10:49:30 - [563886] ----D- C:\Program Files (x86)\Windows Messaging
O43 - CFD: 02/11/2006 - 17:07:28 - [7957544] ----D- C:\Program Files (x86)\Windows NT
O43 - CFD: 19/10/2009 - 14:49:30 - [13528738] ----D- C:\Program Files (x86)\Windows Photo Gallery
O43 - CFD: 19/11/2009 - 11:52:12 - [134144] ----D- C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 19/10/2009 - 14:49:30 - [6527558] ----D- C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 06/03/2011 - 12:18:50 - [3886217] ----D- C:\Program Files (x86)\WinRAR
O43 - CFD: 10/10/2006 - 13:17:10 - [1975295] ----D- C:\Program Files (x86)\YUAN
O43 - CFD: 12/06/2011 - 17:38:12 - [761969] ----D- C:\Program Files (x86)\ZHPDiag
O43 - CFD: 14/04/2009 - 02:05:52 - [4594718] ----D- C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 15/06/2011 - 14:44:46 - [14015287] ----D- C:\Program Files (x86)\Common Files\Akamai
O43 - CFD: 07/03/2011 - 18:16:32 - [44308227] ----D- C:\Program Files (x86)\Common Files\Apple
O43 - CFD: 22/09/2009 - 18:03:44 - [48611435] ----D- C:\Program Files (x86)\Common Files\Autodesk Shared
O43 - CFD: 14/04/2009 - 01:38:02 - [92976] ----D- C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 14/04/2009 - 01:42:24 - [101672] ----D- C:\Program Files (x86)\Common Files\EgisTec
O43 - CFD: 22/09/2009 - 17:58:26 - [7203276] ----D- C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 29/03/2010 - 17:21:06 - [1231815] ----D- C:\Program Files (x86)\Common Files\Java
O43 - CFD: 14/04/2009 - 01:48:50 - [10016660] ----D- C:\Program Files (x86)\Common Files\McAfee
O43 - CFD: 25/10/2010 - 17:54:06 - [442054155] ----D- C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 14/04/2009 - 02:07:02 - [354896] ----D- C:\Program Files (x86)\Common Files\Oberon Media
O43 - CFD: 02/11/2006 - 15:33:54 - [2702] ----D- C:\Program Files (x86)\Common Files\Services
O43 - CFD: 02/11/2006 - 15:33:54 - [41101735] ----D- C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 19/10/2009 - 14:49:30 - [42750094] ----D- C:\Program Files (x86)\Common Files\System
O43 - CFD: 14/04/2009 - 01:44:28 - [377777756] ----D- C:\Program Files (x86)\Common Files\Windows Live

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.8A8B6BDFD8E6113E431E5E579FB83213] - 15/06/2011 - 13:51:29 ---A- . (...) -- C:\Windows\SysNative\PerfStringBackup.INI [1495948]
O44 - LFC:[MD5.87EFAA7FCCB4B4688D01AD302A59BF8C] - 15/06/2011 - 13:51:29 ---A- . (...) -- C:\Windows\SysNative\perfc009.dat [103872]
O44 - LFC:[MD5.66698686357017F286A3312D9D2FDD3D] - 15/06/2011 - 13:51:29 ---A- . (...) -- C:\Windows\SysNative\perfc00C.dat [126420]
O44 - LFC:[MD5.8B35253C2DA2AFD46B4FFC688F0D6A10] - 15/06/2011 - 13:51:29 ---A- . (...) -- C:\Windows\SysNative\perfh009.dat [595798]
O44 - LFC:[MD5.78DFFE778B612FE9ADA993825B9E0959] - 15/06/2011 - 13:51:29 ---A- . (...) -- C:\Windows\SysNative\perfh00C.dat [678804]
O44 - LFC:[MD5.7CEE1700D64D727600DCFD7E50EF1700] - 15/06/2011 - 13:48:01 ---A- . (...) -- C:\Windows\WindowsUpdate.log [2046098]
O44 - LFC:[MD5.EC3B9EAA63811451760DF8F34FE094FE] - 15/06/2011 - 13:44:29 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]
O44 - LFC:[MD5.533452F5F9206362976006EA4673B760] - 15/06/2011 - 13:43:53 ---A- . (...) -- C:\Windows\SysNative\Config.MPF [6755]
O44 - LFC:[MD5.4E0B0A6884E559D1B7CC1D69C9A4CA1F] - 15/06/2011 - 13:43:23 ---A- . (...) -- C:\Ad-Report-CLEAN[1].txt [21589]
O44 - LFC:[MD5.E17685C2A10D4DE50F29F053A12DFE42] - 15/06/2011 - 13:23:12 ---A- . (...) -- C:\Ad-Report-SCAN[1].txt [22634]
O44 - LFC:[MD5.8367CAEE22A8E69645A169B5D400974E] - 15/06/2011 - 13:00:42 ---A- . (...) -- C:\ComboFix.txt [24001]
O44 - LFC:[MD5.3CF3D4A45CC2AF973DBC30EC8D33252B] - 15/06/2011 - 12:52:01 ---A- . (...) -- C:\Windows\system.ini [215]
O44 - LFC:[MD5.3AA1C307900030FEA8F1223A4BF5AB2C] - 15/06/2011 - 12:50:22 ---A- . (...) -- C:\Windows\PFRO.log [764920]
O44 - LFC:[MD5.753BC16326FEE4A421ACB636CCD602F4] - 15/06/2011 - 12:38:33 ---A- . (.NirSoft - NirCmd.) -- C:\Windows\NIRCMD.exe [60416]
O44 - LFC:[MD5.A46842C9B0C567A5A9584E83A163560C] - 15/06/2011 - 12:38:33 ---A- . (.SteelWerX - Freeware implementation of REG.EXE.) -- C:\Windows\SWREG.exe [518144]
O44 - LFC:[MD5.0297C72529807322B152F517FDB0A9FC] - 15/06/2011 - 12:38:33 ---A- . (.SteelWerX - Freeware implementation of SC.EXE.) -- C:\Windows\SWSC.exe [406528]
O44 - LFC:[MD5.13AE2579BD594C6DF293FA99A5788DA7] - 14/06/2011 - 15:41:33 ---A- . (...) -- C:\Windows\SysNative\spsys.log [16168]
O44 - LFC:[MD5.65AC9F645B6B604445E4C2F0C1703298] - 12/06/2011 - 17:53:33 ---A- . (...) -- C:\UsbFix.txt [5823]
O44 - LFC:[MD5.55B7D542A0939140CEED247ACAEF3C3C] - 06/06/2011 - 22:50:47 ---A- . (...) -- C:\Windows\Lucile.pcb [8192]
O44 - LFC:[MD5.341CA955D1A6BB774D712D310FFC830B] - 24/05/2011 - 19:15:52 ---A- . (...) -- C:\Windows\MEMORY.DMP [273431298]
O44 - LFC:[MD5.081DAF5BB955EA5CBB88E8F736337C6C] - 22/05/2011 - 10:15:23 ---A- . (...) -- C:\Windows\IE9_main.log [3126]
O44 - LFC:[MD5.ECD81B99477AB4A93D7838EB40B870D0] - 22/05/2011 - 10:15:15 ---A- . (...) -- C:\Windows\SysNative\icrav03.rat [8798]
O44 - LFC:[MD5.6D21D0A95286DCD09E354B612F592EB7] - 22/05/2011 - 10:15:15 ---A- . (...) -- C:\Windows\SysNative\ticrf.rat [1988]
O44 - LFC:[MD5.ECD81B99477AB4A93D7838EB40B870D0] - 22/05/2011 - 10:15:15 ---A- . (...) -- C:\Windows\System32\icrav03.rat [8798]
O44 - LFC:[MD5.6D21D0A95286DCD09E354B612F592EB7] - 22/05/2011 - 10:15:15 ---A- . (...) -- C:\Windows\System32\ticrf.rat [1988]
O44 - LFC:[MD5.4B333D3CC96AE66BD754329FD2989EE2] - 22/05/2011 - 10:15:04 ---A- . (...) -- C:\Windows\System32\ieuinit.inf [72822]
O44 - LFC:[MD5.4B333D3CC96AE66BD754329FD2989EE2] - 22/05/2011 - 10:14:56 ---A- . (...) -- C:\Windows\SysNative\ieuinit.inf [72822]
O44 - LFC:[MD5.0277C027A26428DB64EF4F64F52BB4FD] - 07/11/2010 - 18:20:24 ---A- . (...) -- C:\Windows\MBR.exe [208896]
O44 - LFC:[MD5.F1FBA6185A6A2BC6456970914875078E] - 26/04/2010 - 08:58:12 ---A- . (...) -- C:\Windows\PEV.exe [256512]
O44 - LFC:[MD5.9E05A9C264C8A908A8E79450FCBFF047] - 31/08/2000 - 01:00:00 ---A- . (...) -- C:\Windows\grep.exe [80412]
O44 - LFC:[MD5.2B657A67AEBB84AEA5632C53E61E23BF] - 31/08/2000 - 01:00:00 ---A- . (...) -- C:\Windows\sed.exe [98816]
O44 - LFC:[MD5.5E832F4FAF5F481F2EAF3B3A48F603B8] - 31/08/2000 - 01:00:00 ---A- . (...) -- C:\Windows\zip.exe [68096]

---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (...) -- (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (...) -- (.not file.)(.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- (.not file.)(.not file.)(.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (...) -- (.not file.)(.not file.)(.not file.)(.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (...) -- (.not file.)(.not file.)(.not file.)(.not file.)(.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (...) -- (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (...) -- (.not file.)(.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (...) -- (.not file.)(.not file.)(.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (...) -- (.not file.)(.not file.)(.not file.)(.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (...) -- (.not file.)(.not file.)(.not file.)(.not file.)(.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- (.not file.)(.not file.)(.not file.)(.not file.)(.not file.)(.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (...) -- (.not file.)(.not file.)(.not file.)(.not file.)(.not file.)(.not file.)(.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (...) -- (.not file.)(.not file.)(.not file.)(.not file.)(.not file.)(.not file.)(.not file.)(.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\sermouse.sys . (...) -- (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\vga.sys . (...) -- (.not file.)(.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\vgasave.sys . (...) -- (.not file.)(.not file.)(.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\volmgr.sys . (...) -- (.not file.)(.not file.)(.not file.)(.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\volmgrx.sys . (...) -- (.not file.)(.not file.)(.not file.)(.not file.)(.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\ipnat.sys . (...) -- (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\nsiproxy.sys . (...) -- (.not file.)(.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\rdpencdd.sys . (...) -- (.not file.)(.not file.)(.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\sermouse.sys . (...) -- (.not file.)(.not file.)(.not file.)(.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\vga.sys . (...) -- (.not file.)(.not file.)(.not file.)(.not file.)(.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\vgasave.sys . (...) -- (.not file.)(.not file.)(.not file.)(.not file.)(.not file.)(.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\volmgr.sys . (...) -- (.not file.)(.not file.)(.not file.)(.not file.)(.not file.)(.not file.)(.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\volmgrx.sys . (...) -- (.not file.)(.not file.)(.not file.)(.not file.)(.not file.)(.not file.)(.not file.)(.not file.)

---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm

---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll

---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=2
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "DisableRegistryTools"=0

---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDrives"=0
O56 - MWPE:[HKLM\...\policies\Explorer] - "BindDirectlyToPropertySetStorage"=0
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDrives"=0

---\\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.F14215E37CF124104575073F782111D2] - 21/01/2008 - 03:46:53 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys [486456]
O58 - SDL:[MD5.7D05A75E3066861A6610F7EE04FF085C] - 21/01/2008 - 03:46:54 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys [342584]
O58 - SDL:[MD5.820A201FE08A0C345B3BEDBC30E1A77C] - 21/01/2008 - 03:46:54 ---A- . (.Adaptec, Inc. - Adaptec LH Ultra160 Driver (X64).) -- C:\Windows\system32\drivers\adpu160m.sys [126520]
O58 - SDL:[MD5.9B4AB6854559DC168FBB4C24FC52E794] - 21/01/2008 - 03:47:27 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\system32\drivers\adpu320.sys [185912]
O58 - SDL:[MD5.157D0898D4B73F075CE9FA26B482DF98] - 21/01/2008 - 03:46:50 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\system32\drivers\aliide.sys [15976]
O58 - SDL:[MD5.BA8417D4765F3988FF921F30F630E303] - 21/01/2008 - 03:46:52 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys [90680]
O58 - SDL:[MD5.9D41C435619733B34CC16A511E644B11] - 21/01/2008 - 03:47:00 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys [91192]
O58 - SDL:[MD5.F1DBE3D02FFCDEE5246F29B0ECEBE6E0] - 10/05/2011 - 12:59:37 ---A- . (.AVAST Software - avast! File System Access Blocking Driver.) -- C:\Windows\system32\drivers\aswFsBlk.sys [22360]
O58 - SDL:[MD5.F3E75DD1BCC358FB4629357AD09E7C84] - 10/05/2011 - 12:59:48 ---A- . (.AVAST Software - avast! File System Minifilter for Windows 2003/Vista.) -- C:\Windows\system32\drivers\aswMonFlt.sys [64344]
O58 - SDL:[MD5.FCCBDC045DC12AFD1508205117E7ED11] - 10/05/2011 - 12:59:59 ---A- . (.AVAST Software - avast! TDI RDR Driver.) -- C:\Windows\system32\drivers\aswRdr.sys [31064]
O58 - SDL:[MD5.5824DCA602A0A30E866BC2AC98C6D970] - 10/05/2011 - 13:04:08 ---A- . (.AVAST Software - avast! Virtualization Driver.) -- C:\Windows\system32\drivers\aswSnx.sys [600920]
O58 - SDL:[MD5.AF07B4BEF920F90205148F3A05E2974C] - 10/05/2011 - 13:04:07 ---A- . (.AVAST Software - avast! self protection module.) -- C:\Windows\system32\drivers\aswSP.sys [287576]
O58 - SDL:[MD5.A3ECA5AF3B4823A523C285A8DF0F9E4F] - 10/05/2011 - 13:02:41 ---A- . (.AVAST Software - avast! TDI Filter Driver.) -- C:\Windows\system32\drivers\aswTdi.sys [53592]
O58 - SDL:[MD5.8EA545F0F90E6388DCACA8F4F9404DC5] - 12/11/2008 - 16:42:22 ---A- . (.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\system32\drivers\atikmdag.sys [4999680]
O58 - SDL:[MD5.F09EEE9EDC320B5E1501F749FDE686C8] - 18/09/2006 - 22:30:15 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys [18432]
O58 - SDL:[MD5.B114D3098E9BDB8BEA8B053685831BE6] - 18/09/2006 - 22:30:15 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys [8704]
O58 - SDL:[MD5.F0F0BA4D815BE446AA6A4583CA3BCA9B] - 02/11/2006 - 09:43:25 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys [86528]
O58 - SDL:[MD5.A6ECA2151B08A09CACECA35C07F05B42] - 18/09/2006 - 22:30:18 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys [47104]
O58 - SDL:[MD5.B79968002C277E869CF38BD22CD61524] - 18/09/2006 - 22:30:18 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys [14976]
O58 - SDL:[MD5.A87528880231C54E75EA7A44943B38BF] - 19/09/2006 - 12:42:33 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys [14720]
O58 - SDL:[MD5.E5D5499A1C50A54B5161296B6AFE6192] - 21/01/2008 - 03:46:50 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\cmdide.sys [18024]
O58 - SDL:[MD5.222CB641B4B8A1D1126F8033F9FD6A00] - 02/11/2006 - 12:50:06 ---A- . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\system32\drivers\djsvs.sys [88168]
O58 - SDL:[MD5.264CEE7B031A9D6C827F3D0CB031F2FE] - 21/01/2008 - 03:46:56 ---A- . (.Intel Corporation - Intel(R) PRO/1000 Adapter NDIS 6 deserialized driver.) -- C:\Windows\system32\drivers\E1G6032E.sys [146176]
O58 - SDL:[MD5.BDDC6F6C49633AA85A30A989418E30F4] - 21/11/2008 - 02:53:32 ---A- . (.Intel Corporation - Intel(R) Gigabit Network Connection NDIS 6 deserialized driver.) -- C:\Windows\system32\drivers\e1y60x64.sys [306304]
O58 - SDL:[MD5.C4636D6E10469404AB5308D9FD45ED07] - 21/01/2008 - 03:46:59 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys [397368]
O58 - SDL:[MD5.D7109A1E6BD2DFDBCBA72A6BC626A13B] - 21/01/2008 - 03:46:59 ---A- . (.Hewlett-Packard Company - Smart Array Storport Driver.) -- C:\Windows\system32\drivers\HpCISSs.sys [47672]
O58 - SDL:[MD5.756879FA65978DF948437CE3FD1EACCD] - 12/09/2008 - 12:48:26 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\system32\drivers\iaStor.sys [406040]
O58 - SDL:[MD5.3E3BF3627D886736D0B4E90054F929F6] - 21/01/2008 - 03:46:59 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver (base).) -- C:\Windows\system32\drivers\iaStorV.sys [290872]
O58 - SDL:[MD5.8C3951AD2FE886EF76C7B5027C3125D3] - 02/11/2006 - 13:02:39 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\system32\drivers\iirsp.sys [44648]
O58 - SDL:[MD5.63C766CDC609FF8206CB447A65ABBA4A] - 02/11/2006 - 13:02:09 ---A- . (.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) -- C:\Windows\system32\drivers\iteatapi.sys [37480]
O58 - SDL:[MD5.1281FE73B17664631D12F643CBEA3F59] - 02/11/2006 - 13:02:09 ---A- . (.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) -- C:\Windows\system32\drivers\iteraid.sys [37480]
O58 - SDL:[MD5.ACBE1AF32D3123E330A07BFBC5EC4A9B] - 21/01/2008 - 03:46:51 ---A- . (.LSI Logic - LSI Logic Fusion-MPT FC Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_fc.sys [113720]
O58 - SDL:[MD5.799FFB2FC4729FA46D2157C0065B3525] - 21/01/2008 - 03:46:56 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas.sys [105016]
O58 - SDL:[MD5.F445FF1DAAD8A226366BFAF42551226B] - 21/01/2008 - 03:47:01 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_scsi.sys [113720]
O58 - SDL:[MD5.5C5CD6AACED32FB26C3FB34B3DCF972F] - 21/01/2008 - 03:46:59 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows Vista/Longhorn for x.) -- C:\Windows\system32\drivers\megasas.sys [35896]
O58 - SDL:[MD5.859BC2436B076C77C159ED694ACFE8F8] - 21/01/2008 - 03:46:56 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\system32\drivers\MegaSR.sys [438328]
O58 - SDL:[MD5.8996F52497FEA75D4B7A1E9BA1EC046F] - 26/09/2008 - 19:01:06 ---A- . (.McAfee, Inc. - Anti-Virus File System Filter Driver.) -- C:\Windows\system32\drivers\mfeavfk.sys [101832]
O58 - SDL:[MD5.ED276A940E62B8AE25617C4C3D3DEAC1] - 26/09/2008 - 19:01:06 ---A- . (.McAfee, Inc. - Host Intrusion Detection Link Driver.) -- C:\Windows\system32\drivers\mfehidk.sys [306504]
O58 - SDL:[MD5.81C337F82CA538207A290845056ABE0E] - 26/09/2008 - 18:54:12 ---A- . (.McAfee, Inc. - VSCore Code Analysis Driver.) -- C:\Windows\system32\drivers\mferkdk.sys [40904]
O58 - SDL:[MD5.C1D3C9A17DA89629111D7FAE76E1044F] - 26/09/2008 - 19:01:06 ---A- . (.McAfee, Inc. - System Monitor Filter Driver.) -- C:\Windows\system32\drivers\mfesmfk.sys [49480]
O58 - SDL:[MD5.E843A4295A3381347B4CD17C5DE4090A] - 26/08/2008 - 12:51:36 ---A- . (.McAfee, Inc. - McAfee Personal Firewall Plus Driver.) -- C:\Windows\system32\drivers\Mpfp.sys [176144]
O58 - SDL:[MD5.3C200630A89EF2C0864D515B7A75802E] - 02/11/2006 - 13:02:24 ---A- . (.LSI Logic Corporation - MegaRAID RAID Controller Driver for Windows Vista/Longhorn for.) -- C:\Windows\system32\drivers\Mraid35x.sys [39016]
O58 - SDL:[MD5.FB3D139AD1AC117B99A16042C1DD02D1] - 27/10/2008 - 11:06:00 ---A- . (.Egis Incorporated. - PSD Filter Driver.) -- C:\Windows\system32\drivers\mwlPSDFilter.sys [22064]
O58 - SDL:[MD5.BF3F82A3EA6FBB6657DFE081A6BA4E2E] - 27/10/2008 - 11:06:00 ---A- . (.Egis Incorporated. - MyWinLocker PSD Named Pipe Driver.) -- C:\Windows\system32\drivers\mwlPSDNserv.sys [20528]
O58 - SDL:[MD5.DA24873DCB2891805692A03BAD1E34B4] - 27/10/2008 - 11:06:00 ---A- . (.Egis Incorporated. - MyWinLocker PSD Virtual Disk Driver.) -- C:\Windows\system32\drivers\mwlPSDVDisk.sys [59952]
O58 - SDL:[MD5.40A54ED5BECB5ADD057A54A1B1F16E02] - 01/12/2008 - 07:02:54 ---A- . (.Ralink Technology, Corp. - Ralink 802.11 Wireless Adapter Driver.) -- C:\Windows\system32\drivers\netr28x.sys [532480]
O58 - SDL:[MD5.4AC08BD6AF2DF42E0C3196D826C8AEA7] - 02/11/2006 - 13:03:03 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\system32\drivers\nfrd960.sys [51816]
O58 - SDL:[MD5.7D397449AAF52B0E7C79B64F6AD4473E] - 30/01/2008 - 10:48:32 ---A- . (.NewTech Infosystems, Inc. - NTI CD-ROM Filter Driver.) -- C:\Windows\system32\drivers\NTIDrvr.sys [16384]
O58 - SDL:[MD5.2C040B7ADA5B06F6FACADAC8514AA034] - 21/01/2008 - 03:46:54 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\system32\drivers\nvraid.sys [128056]
O58 - SDL:[MD5.F7EA0FE82842D05EDA3EFDD376DBFDBA] - 21/01/2008 - 03:46:54 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\system32\drivers\nvstor.sys [54328]
O58 - SDL:[MD5.0B83F4E681062F3839BE2EC1D98FD94A] - 21/01/2008 - 03:46:52 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\system32\drivers\ql2300.sys [1221176]
O58 - SDL:[MD5.E1C80F8D4D1E39EF9595809C1369BF2A] - 02/11/2006 - 12:50:27 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\system32\drivers\ql40xx.sys [124008]
O58 - SDL:[MD5.C3CF92F7983477FF305BD1AFAE411152] - 20/02/2009 - 11:10:00 ---A- . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function Driver.) -- C:\Windows\system32\drivers\RtHDMIVX.sys [191392]
O58 - SDL:[MD5.FDFC40441FAC0F3114A974168125279F] - 10/03/2009 - 09:24:14 ---A- . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function Driver.) -- C:\Windows\system32\drivers\RTKVHD64.sys [1733024]
O58 - SDL:[MD5.739E2720AECC4C4AA41A35C9BDF10648] - 23/07/2007 - 17:26:08 ---A- . (.Realtek Semiconductor Corporation - Realtek RTL8187B NDIS Driver.) -- C:\Windows\system32\drivers\RTL8187B.sys [340000]
O58 - SDL:[MD5.3EA8A16169C26AFBEB544E0E48421186] - 30/09/2006 - 00:51:44 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\system32\drivers\secdrv.sys [23040]
O58 - SDL:[MD5.3A2F769FAB9582BC720E11EA1DFB184D] - 21/01/2008 - 03:47:26 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\system32\drivers\sisraid4.sys [78392]
O58 - SDL:[MD5.2F26A2C6FC96B29BEFF5D8ED74E6625B] - 02/11/2006 - 13:02:52 ---A- . (.LSI Logic - LSI Logic 8XX SCSI Miniport Driver.) -- C:\Windows\system32\drivers\symc8xx.sys [49256]
O58 - SDL:[MD5.A909667976D3BCCD1DF813FED517D837] - 02/11/2006 - 13:02:37 ---A- . (.LSI Logic - LSI Logic Hi-Perf SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_hi.sys [44648]
O58 - SDL:[MD5.36887B56EC2D98B9C362F6AE4DE5B7B0] - 02/11/2006 - 13:02:47 ---A- . (.LSI Logic - LSI Logic Ultra160 SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_u3.sys [48232]
O58 - SDL:[MD5.00C8CE31657624A125FDB90EFD554371] - 30/01/2008 - 10:48:16 ---A- . (.NewTech Infosystems Corporation - NTI CDROM Filter Driver.) -- C:\Windows\system32\drivers\UBHelper.sys [16384]
O58 - SDL:[MD5.697F0446134CDC8F99E69306184FBBB4] - 21/01/2008 - 03:46:56 ---A- . (.ULi Electronics Inc. - ULi SATA Controller Driver.) -- C:\Windows\system32\drivers\uliahci.sys [284728]
O58 - SDL:[MD5.31707F09846056651EA2C37858F5DDB0] - 02/11/2006 - 12:50:54 ---A- . (.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win2003.) -- C:\Windows\system32\drivers\ulsata.sys [148072]
O58 - SDL:[MD5.85E5E43ED5B48C8376281BAB519271B7] - 21/01/2008 - 03:46:52 ---A- . (.Promise Technology, Inc. - Promise SATAII150 Series x64 Windows Driver.) -- C:\Windows\system32\drivers\ulsata2.sys [174696]
O58 - SDL:[MD5.8294B6C3FDB6C33F24E150DE647ECDAA] - 21/01/2008 - 03:46:50 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\viaide.sys [18024]
O58 - SDL:[MD5.A68F455ED2673835209318DD61BFBB0E] - 21/01/2008 - 03:47:25 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\system32\drivers\vsmraid.sys [149048]

---\\ Liste des outils de nettoyage (O63)
O63 - Logiciel: Ad-Remover par C_XX - (.C_XX.) [HKLM][64Bits] -- Ad-Remover
O63 - Logiciel: ZHPDiag 1.27 - (.Nicolas Coolman.) [HKLM][64Bits] -- ZHPDiag_is1

---\\ Liste des services Legacy (O64)
O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWFSBLK.sys - (.not file.) - aswFsBlk (aswFsBlk) .(...) - LEGACY_ASWFSBLK
O64 - Services: CurCS - 30/12/1899 - C:\Windows\system32\drivers\aswMonFlt.sys - aswMonFlt(aswMonFlt) .(.AVAST Software - avast! File System Minifilter for Windows 2.) - LEGACY_ASWMONFLT
O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWRDR.sys - (.not file.) - aswRdr (aswRdr) .(...) - LEGACY_ASWRDR
O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWSNX.sys - (.not file.) - aswSnx (aswSnx) .(...) - LEGACY_ASWSNX
O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWSP.sys - (.not file.) - avast! Self Protection (aswSP) .(...) - LEGACY_ASWSP
O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWTDI.sys - (.not file.) - avast! Network Shield Support (aswTdi) .(...) - LEGACY_ASWTDI
O64 - Services: CurCS - C:\Windows\system32\Drivers\FASTFAT.sys - (.not file.) - FAT12/16/32 File System Driver (fastfat) .(...) - LEGACY_FASTFAT
O64 - Services: CurCS - C:\Windows\system32\Drivers\FS_REC.sys - Fs_Rec (Fs_Rec) .(...) - LEGACY_FS_REC
O64 - Services: CurCS - C:\Windows\System32\drivers\mfeavfk.sys - McAfee Inc. mfeavfk (mfeavfk) .(...) - LEGACY_MFEAVFK
O64 - Services: CurCS - C:\Windows\System32\drivers\mfehidk.sys - McAfee Inc. mfehidk (mfehidk) .(...) - LEGACY_MFEHIDK
O64 - Services: CurCS - C:\Windows\System32\drivers\mfesmfk.sys - McAfee Inc. mfesmfk (mfesmfk) .(...) - LEGACY_MFESMFK
O64 - Services: CurCS - 30/12/1899 - C:\Windows\System32\Drivers\Mpfp.sys - MPFP(MPFP) .(.McAfee, Inc. - McAfee Personal Firewall Plus Driver.) - LEGACY_MPFP
O64 - Services: CurCS - C:\Windows\system32\Drivers\MSFS.sys - Msfs (Msfs) .(...) - LEGACY_MSFS
O64 - Services: CurCS - 30/12/1899 - C:\Windows\System32\DRIVERS\mwlPSDFilter.sys - mwlPSDFilter(mwlPSDFilter) .(.Egis Incorporated. - PSD Filter Driver.) - LEGACY_MWLPSDFILTER
O64 - Services: CurCS - 30/12/1899 - C:\Windows\System32\DRIVERS\mwlPSDNServ.sys - mwlPSDNServ(mwlPSDNServ) .(.Egis Incorporated. - MyWinLocker PSD Named Pipe Driver.) - LEGACY_MWLPSDNSERV
O64 - Services: CurCS - 30/12/1899 - C:\Windows\System32\DRIVERS\mwlPSDVDisk.sys - mwlPSDVDisk(mwlPSDVDisk) .(.Egis Incorporated. - MyWinLocker PSD Virtual Disk Driver.) - LEGACY_MWLPSDVDISK
O64 - Services: CurCS - C:\Windows\system32\Drivers\NDPROXY.sys - NDProxy (NDProxy) .(...) - LEGACY_NDPROXY
O64 - Services: CurCS - C:\Windows\system32\Drivers\NPFS.sys - Npfs (Npfs) .(...) - LEGACY_NPFS
O64 - Services: CurCS - C:\Windows\system32\Drivers\NTFS.sys - Ntfs (Ntfs) .(...) - LEGACY_NTFS
O64 - Services: CurCS - C:\Windows\system32\Drivers\NULL.sys - Null (Null) .(...) - LEGACY_NULL
O64 - Services: CurCS - (.not file.) - PROCEXP113 (PROCEXP113) .(...) - LEGACY_PROCEXP113
O64 - Services: CurCS - C:\Windows\system32\Drivers\SECDRV.sys - (.not file.) - Security Driver (secdrv) .(...) - LEGACY_SECDRV
O64 - Services: CurCS - C:\Windows\system32\Drivers\SPLDR.sys - (.not file.) - Security Processor Loader Driver (spldr) .(...) - LEGACY_SPLDR
O64 - Services: CurCS - C:\Windows\system32\Drivers\UBHELPER.sys - UBHelper (UBHelper) .(...) - LEGACY_UBHELPER

---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.com> <ComFile>[HKLM\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.com> <>[HKU\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.exe> <>[HKU\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.com> <ComFile>[HKCR\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe

---\\ Start Menu Internet (O68)
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe

---\\ Search Browser Infection (O69)
O69 - SBI: SearchScopes [HKCU] ${searchCLSID} - (@ieframe.dll,-12512) - https://www.bing.com/?fdr=lc&toHttps=1&redig=FA6AD360E0BE4C719380F8C470A3D3A8
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - https://www.bing.com/?toHttps=1&redig=69DA0EF8272048D9864AF4DB37211DE8
O69 - SBI: SearchScopes [HKCU] {67A2568C-7A0A-4EED-AECC-B5405DE63B64} - (Google) - https://www.google.com/?gws_rd=ssl
O69 - SBI: SearchScopes [HKCU] {EE7FC551-87A0-4571-AC51-3E8CD2E52165} [DefaultScope] - (Google) - https://www.google.com/?gws_rd=ssl
O69 - SBI: SearchScopes [HKCU] {FD736862-6FAF-4C8A-A203-B9FF1E79792F} - (Yahoo! Search) - https://fr.search.yahoo.com/

---\\ Recherche particuliere à la racine de certains dossiers (O84)
[MD5.B9B0ABB41ABA16E2562B261F5F9D9323] [SPRF] (...) -- C:\Users\Lucile\AppData\Roaming\init.dll [701]
[MD5.B9B0ABB41ABA16E2562B261F5F9D9323] [SPRF] (...) -- C:\Users\Lucile\AppData\Roaming\sound.dll [701]
[MD5.11131A291823134CFB0092926438DAA1] [SPRF] (...) -- C:\Users\Lucile\AppData\Roaming\SYSTEM32.dll [6]
[MD5.22650CEC38F14EA171DFC0B3BF6B366C] [SPRF] (...) -- C:\Users\Lucile\AppData\Roaming\tigersetting.dll [48]

---\\ Firewall Active Exception List (FirewallRules) (O87)
O87 - FAEL: "FPS-SpoolSvc-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Windows\system32\spoolsv.exe (.not file.)
O87 - FAEL: "FPS-SpoolSvc-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Windows\system32\spoolsv.exe (.not file.)
O87 - FAEL: "CoreNet-GP-LSASS-Out-TCP" |Out - Domain - P6 - TRUE | .(...) -- C:\Windows\system32\lsass.exe (.not file.)
O87 - FAEL: "WinCollab-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe
O87 - FAEL: "WinCollab-In-UDP" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe
O87 - FAEL: "WinCollab-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe
O87 - FAEL: "WinCollab-In-TCP" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe
O87 - FAEL: "WinCollab-DFSR-Out-TCP" |Out - Domain - P6 - FALSE | .(...) -- C:\Windows\system32\dfsr.exe (.not file.)
O87 - FAEL: "WinCollab-DFSR-In-TCP" |In - Domain - P6 - TRUE | .(...) -- C:\Windows\system32\dfsr.exe (.not file.)
O87 - FAEL: "RemoteSvcAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe
O87 - FAEL: "RemoteSvcAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe
O87 - FAEL: "NetPres-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-WSD-Out-UDP" |Out - Domain - P17 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-WSD-In-UDP" |In - Domain - P17 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "NetPres-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)
O87 - FAEL: "{C5159984-553C-4823-BF32-B2DFF233CC6D}" | In - Domain - P17 - TRUE | .(.McAfee, Inc. - McAfee Network Agent.) -- C:\Program Files (x86)\Common Files\Mcafee\MNA\McNaSvc.exe
O87 - FAEL: "{BB6635D5-3886-4845-B466-E925B3887D79}" | In - None - P17 - TRUE | .(.CyberLink Corp. - PowerDirector.) -- C:\Program Files (x86)\CyberLink\PowerDirector\PDR.exe
O87 - FAEL: "{C91DF075-46FD-497B-A89A-CCBA8C466255}" | In - Public - P6 -

O87 - FAEL: "{DC50D5E6-0294-472B-896F-CFA7F7DB1EFE}" | In - Public - P17 - TRUE | .(.NewTech InfoSystems, Inc. - NTI Backup Now 5 BackupSvc Application.) -- C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O87 - FAEL: "{86EBC3BD-6066-43A5-9F22-714963395E99}" | In - Public - P6 - TRUE | .(.NewTech Infosystems, Inc. - NTI Backup Now 5 SchedulerSvc NT Service.) -- C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O87 - FAEL: "{9880492A-BB17-499F-9186-89E48FA1B2A7}" | In - Public - P17 - TRUE | .(.NewTech Infosystems, Inc. - NTI Backup Now 5 SchedulerSvc NT Service.) -- C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O87 - FAEL: "{8652B5C8-ADF1-4F02-BCFB-0094D8327D8F}" | In - None - P17 - TRUE | .(.CyberLink Corp. - Acer HomeMedia Connect.) -- C:\Program Files (x86)\Acer Arcade Deluxe\Acer HomeMedia Connect\HomeMedia Connect.exe
O87 - FAEL: "{FB7FA5C7-2E21-49AE-AE61-C1EFB72892BF}" | In - None - P17 - TRUE | .(.CyberLink - CLMSService.) -- C:\Program Files (x86)\Acer Arcade Deluxe\Acer HomeMedia Connect\Kernel\DMS\CLMSService.exe
O87 - FAEL: "{DF6B6BAE-CC46-41B4-9B04-3E6A9FDE06FC}" | In - None - P17 - TRUE | .(.CyberLink - CLMSServer.) -- C:\Program Files (x86)\Acer Arcade Deluxe\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe
O87 - FAEL: "{81C66A96-2DD7-413B-8C3C-6216D14532B2}" | In - None - P17 - TRUE | .(.Acer Incorporated - Acer Arcade Deluxe.) -- C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\Acer Arcade Deluxe.exe
O87 - FAEL: "{2F4180B0-86A0-45A8-9A11-EE2AD9A52E32}" | In - None - P17 - TRUE | .(.Acer Corp. - Acer Arcade Deluxe PlayMovie.) -- C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PlayMovie.exe
O87 - FAEL: "{661A4126-5448-4065-B80B-5FF56828EC20}" | In - None - P17 - TRUE | .(.Acer Corp. - Acer Arcade Deluxe PlayMovie Resident Program.) -- C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe
O87 - FAEL: "{634458B1-00F4-4A56-AB03-61E77418402C}" | In - None - P17 - TRUE | .(.Acer Incorporated - Acer HomeMedia.) -- C:\Program Files (x86)\Acer Arcade Deluxe\HomeMedia\HomeMedia.exe
O87 - FAEL: "{940E1B4C-86B1-44D9-A67D-A19A268B0C5C}" | In - None - P17 - TRUE | .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
O87 - FAEL: "TCP Query User{028D0211-19FB-41BC-8E85-95C36B27E087}C:\program files (x86)\internet explorer\iexplore.exe" | In - Private - P6 - TRUE | .(.Microsoft Corporation.) -- C:\program files (x86)\internet explorer\iexplore.exe
O87 - FAEL: "UDP Query User{BE2CB21F-EE07-4A7C-BA66-CB20C225167E}C:\program files (x86)\internet explorer\iexplore.exe" | In - Private - P17 - TRUE | .(.Microsoft Corporation.) -- C:\program files (x86)\internet explorer\iexplore.exe
O87 - FAEL: "{C844DD31-C49C-4AFD-B027-64FD4F05C0C3}" | In - Private - P6 - TRUE | .(.Hewlett-Packard Co. - USBSetup.exe.) -- C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\USBSetup.exe
O87 - FAEL: "{FB800EBD-6D41-4524-AC98-6181595B52C4}" | In - Private - P17 - TRUE | .(.Hewlett-Packard Co. - USBSetup.exe.) -- C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\USBSetup.exe

---\\ Scan Additionnel (O88)
Database Version : 8370 - (14/06/2011)
Clés trouvées (Keys found) : 14
Valeurs trouvées (Values found) : 0
Dossiers trouvés (Folders found) : 7
Fichiers trouvés (Files found) : 0

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4a99-B4B6-146BF802613B}] =>Toolbar.Babylon
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4a99-B4B6-146BF802613B}] =>Toolbar.Babylon
[HKLM\Software\Classes\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B}] =>Toolbar.Babylon
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4daac69c-cba7-45e2-9bc8-1044483d3352}] =>Toolbar.Conduit
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4daac69c-cba7-45e2-9bc8-1044483d3352}] =>Toolbar.Conduit
[HKLM\Software\Classes\Installer\Features\53F25BCB65C42F943A6DDFDE450B8174] =>Adware.BHO
[HKLM\Software\Classes\Installer\Products\53F25BCB65C42F943A6DDFDE450B8174] =>Adware.BHO
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\53F25BCB65C42F943A6DDFDE450B8174] =>Adware.BHO
[HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF] =>Adware.AskSBar
[HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF] =>Adware.AskSBar
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF] =>Adware.AskSBar
[HKCU\Software\AppDataLow\Software\Softonic_France] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Softonic_France] =>Toolbar.Conduit
[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar] =>Adware.AskTBar
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Moovida =>Adware.SPointer
C:\Users\Lucile\Appdata\Local\moovida air =>Adware.SPointer
C:\Users\Lucile\Appdata\LocalLow\BabylonToolbar =>Toolbar.Babylon
C:\Users\Lucile\Appdata\LocalLow\Softonic_France =>Toolbar.Conduit
C:\Documents and Settings\Lucile\Local Settings\Application Data\moovida air =>Adware.SPointer
C:\Program Files (x86)\Softonic_France =>Toolbar.Conduit
C:\Users\Lucile\AppData\Roaming\Mozilla\Firefox\Profiles\qler3qru.default\Extensions\ffxtlbr@babylon.com =>Toolbar.Babylon

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SR - | Auto 0 | (Ati External Event Utility) . (.ATI Technologies Inc..) - C:\Windows\system32\Ati2evxx.exe
SS - | Demand 22/09/2009 85096 | (Autodesk Licensing Service) . (.Autodesk.) - C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe
SR - | Auto 10/05/2011 42184 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
SR - | Auto 18/12/2008 75048 | (CLHNService) . (...) - C:\Program Files (x86)\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
SR - | Auto 24/12/2008 58664 | (CyberLink Media Server Monitor Service) . (...) - C:\Program Files (x86)\Acer Arcade Deluxe\Acer HomeMedia Connect\Kernel\DMS\CLMSMonitorService.exe
SR - | Auto 24/12/2008 288120 | (CyberLink Media Server Service) . (.CyberLink.) - C:\Program Files (x86)\Acer Arcade Deluxe\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe
SS - | Auto 29/01/2010 135664 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 29/01/2010 135664 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 25/08/2009 182768 | (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
SR - | Auto 12/09/2008 354840 | (IAANTMON) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
SR - | Auto 16/02/2011 101048 | (McAfee SiteAdvisor Service) . (.McAfee, Inc..) - C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe
SR - | Auto 31/10/2008 793208 | (mcmscsvc) . (.McAfee, Inc..) - C:\PROGRA~2\McAfee\MSC\mcmscsvc.exe
SR - | Auto 12/09/2008 2482848 | (McNASvc) . (.McAfee, Inc..) - c:\PROGRA~2\COMMON~1\mcafee\mna\mcnasvc.exe
SS - | Demand 26/09/2008 694800 | (McODS) . (.McAfee, Inc..) - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
SR - | Auto 10/09/2008 359248 | (McProxy) . (.McAfee, Inc..) - c:\PROGRA~2\COMMON~1\mcafee\mcproxy\mcproxy.exe
SS - | Auto 26/09/2008 152896 | (McShield) . (.McAfee, Inc..) - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
SS - | Disabled 26/09/2008 606736 | (McSysmon) . (.McAfee, Inc..) - C:\PROGRA~2\McAfee\VIRUSS~1\mcsysmon.exe
SR - | Auto 12/09/2008 884360 | (MpfService) . (.McAfee, Inc..) - C:\Program Files (x86)\McAfee\MPF\MPFSrv.exe
SR - | Auto 22/09/2008 25416 | (MSK80Service) . (.McAfee, Inc..) - C:\Program Files (x86)\McAfee\MSK\MskSrver.exe
SR - | Auto 27/10/2008 306736 | (MWLService) . (.EgisTec Inc..) - C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\MWLService.exe
SS - | Demand 23/09/2008 50424 | (NTIBackupSvc) . (.NewTech InfoSystems, Inc..) - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
SR - | Auto 23/09/2008 144632 | (NTISchedulerSvc) . (.NewTech Infosystems, Inc..) - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
SR - | Auto 09/01/2009 247152 | (RichVideo) . (...) - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
SR - | Auto 21/01/2008 21504 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\system32\svchost.exe

---\\ Recherche Master Boot Record Infection (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Run by Lucile at 15/06/2011 15:00:15

device: opened successfully
user: error reading MBR

Disk trace:
error: Read Descripteur non valide
kernel: error reading MBR

---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by Lucile at 15/06/2011 15:00:17

********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin

End of the scan (1314 lines in 01mn 49s)(0)

Re,

C'est vraiment pas évident de lire un rapport de la sorte de plus il manque des morceaux.

===============================

▶ Télécharge Malwarebytes Anti Malware

▶ Installe-le, s'il te demande de faire la mise à jour, accepte.
▶ Une fois la mise à jour terminée
▶ rends-toi dans l'onglet Recherche
▶ Sélectionne Exécuter un examen complet
▶ Coche tous tes disques
▶ Clique sur Rechercher
▶ ▶ Le scan démarre.
▶ A la fin de l'analyse, un message s'affiche : L'examen s'est terminé normalement. Cliquez sur ''Afficher les résultats'' pour afficher tous les objets trouvés.
▶ Clique sur Ok pour poursuivre.
▶ Si des malwares ont été détectés, cliques sur Afficher les résultats
▶ Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection . Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
▶ Malwarebytes va ouvrir le bloc-notes et y copier le rapport d''analyse. Copie/colle le ici (ctrl+a pour tout sélectionner, ctrl+c pour copier, ctrl+v pour coller)

▶ ▶ Il se peut que MBAM ait besoin de redémarrer le pc pour finaliser la suppression, donc pas de panique, redémarre ton pc !!!
▶ Une fois le PC redémarré, rends toi dans l'onglet rapport/log
▶ Tu clique dessus pour l'afficher, une fois affiché
▶ Copie/colle le ici (ctrl+a pour tout sélectionner, ctrl+c pour copier, ctrl+v pour coller)

Si tu as besoin d''aide regarde ce tutoriel :
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

▶ ▶ Si tu n''arrive pas à le mettre à jour, télécharge ce fichier , ferme MBAM, et exécute le

Bonjour, je dois m'absenter jusqu'au weekend, je fais ça à mon retour. Merci Juju et à plus tard. :-)

Malwarebytes' Anti-Malware 1.51.0.1200
www.malwarebytes.org

Version de la base de données: 6907

Windows 6.0.6002 Service Pack 2
Internet Explorer 9.0.8112.16421

21/06/2011 13:17:08
mbam-log-2011-06-21 (13-17-08).txt

Type d'examen: Examen complet (C:\|D:\|E:\|F:\|G:\|)
Elément(s) analysé(s): 479757
Temps écoulé: 55 minute(s), 23 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 3

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
c:\program files (x86)\ad-remover\quarantine\C\program files (x86)\common files\Spigot\wtxpcom\components\widgitoolbarff.dll.vir (Adware.WidgiToolbar) -> Quarantined and deleted successfully.
c:\Qoobox\quarantine\C\program files (x86)\common files\Spigot\wtxpcom\components\widgitoolbarff.dll.vir (Adware.WidgiToolbar) -> Quarantined and deleted successfully.
c:\UsbFix\quarantine\C\Users\Lucile\AppData\Local\Temp\pdv.exe.vir (Trojan.Downloader) -> Quarantined and deleted successfully.

Y'a l'air que c'est bon :)
toujorus des soucis ?
refais un zhpdiag mais héberge le rapport stp :D

Bonne nouvelle alors :-) Pas de soucis non, ni d'alerte avast.
Ok je refais un zhp diag et je l'héberge. lol

Tu ne vas pas être content mais comme l'autre fois, je ne retrouve pas le rapport sur mon bureau. J'ai pourtant cliqué sur la disquette et enregistré le rapport ZHPdiag.txt dans "mon bureau". Mais je ne le retrouve nulle part ce rapport.

Voilà le lien du rapport ZHPdiag :

https://pjjoint.malekal.com/files.php?id=5eae3f0379575

ok.
reste encore des traces

copie ça :

M2 - MFEP: prefs.js [Lucile - qler3qru.default\ffxtlbr@babylon.com] [] Babylon v1.1.3 (.Babylon.) => Infection BT (Toolbar.Babylon)
O4 - HKLM\..\Wow6432Node\Run: [ApnUpdater] C:\Program Files (x86)\Ask.com\Updater\Updater.exe (.not file.) => Infection BT (Adware.AskBarDis)
O4 - Global Startup: C:\Users\Lucile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Moovida.lnk . (...) -- C:\Program Files (x86)\Fluendo\Moovida\Moovida.exe (.not file.) => Infection BT (Adware.SPointer)
O4 - Global Startup: C:\Users\Lucile\Desktop\Moovida.lnk . (...) -- C:\Program Files (x86)\Fluendo\Moovida\Moovida.exe (.not file.) => Infection BT (Adware.SPointer)
[MD5.00000000000000000000000000000000] [APT] [Scheduled Update for Ask Toolbar] (...) -- C:\Program Files (x86)\Ask.com\UpdateTask.exe (.not file.) => Infection BT (Adware.AskBarDis)
O42 - Logiciel: Moovida - (.Fluendo.) [HKLM][64Bits] -- Moovida => Infection BT (Adware.SPointer)
O42 - Logiciel: Moovida - (.Secure Digital Services.) [HKLM][64Bits] -- {6084C211-01A1-464E-97A0-09772E122B50} => Infection BT (Adware.SPointer)
O42 - Logiciel: pdfforge Toolbar v4.4 - (.Spigot, Inc..) [HKLM][64Bits] -- {BCB52F35-4C56-49F2-A3D6-FDED54B01847} => Infection BT (PUP.Dealio)
[HKCU\Software\Moovida] => Infection BT (Adware.SPointer)
O43 - CFD: 04/02/2011 - 12:50:42 - [629144] ----D- C:\Users\Lucile\AppData\Roaming\moovida-1 => Infection BT (Adware.SPointer)
O43 - CFD: 12/06/2011 - 20:41:54 - [656561] ----D- C:\Users\Lucile\Appdata\Local\moovida Air => Infection BT (Adware.SPointer)
O43 - CFD: 15/12/2010 - 23:53:32 - [1066] ----D- C:\Users\Lucile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Moovida => Infection BT (Adware.SPointer)
O69 - SBI: prefs.js [Lucile - qler3qru.default] user_pref("CommunityToolbar.ETag.http://settings.toolbar.search.conduit.com/root/CT2542115/CT2542115", => Infection BT (Possible)
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4a99-B4B6-146BF802613B}] => Infection BT (Toolbar.Babylon)
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4a99-B4B6-146BF802613B}] => Infection BT (Toolbar.Babylon)
[HKLM\Software\Classes\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B}] => Infection BT (Toolbar.Babylon)
[HKLM\Software\Classes\Installer\Features\53F25BCB65C42F943A6DDFDE450B8174] => Infection BT (Adware.BHO)
[HKLM\Software\Classes\Installer\Products\53F25BCB65C42F943A6DDFDE450B8174] => Infection BT (Adware.BHO)
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\53F25BCB65C42F943A6DDFDE450B8174] => Infection BT (Adware.BHO)
[HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF] => Infection BT (Adware.AskSBar)
[HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF] => Infection BT (Adware.AskSBar)
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF] => Infection BT (Adware.AskSBar)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Moovida => Infection BT (Adware.SPointer)
C:\Users\Lucile\Appdata\Local\moovida air => Infection BT (Adware.SPointer)
C:\Users\Lucile\Appdata\LocalLow\BabylonToolbar => Infection BT (Toolbar.Babylon)
C:\Documents and Settings\Lucile\Local Settings\Application Data\moovida air => Infection BT (Adware.SPointer)
C:\Users\Lucile\AppData\Roaming\Mozilla\Firefox\Profiles\qler3qru.default\Extensions\ffxtlbr@babylon.com =>
M2 - MFEP: prefs.js [Lucile - qler3qru.default\{4daac69c-cba7-45e2-9bc8-1044483d3352}] [] Softonic_France Community Toolbar v3.2.5.2 (.Conduit Ltd..) => Toolbar.Conduit
R3 - URLSearchHook: (no name) [64Bits] - {9bb815eb-3f9f-4e11-9150-cb70e29b40fc} . (...) (No version) -- (.not file.) => Conduit Radio Bar 2 Toolbar
R3 - URLSearchHook: (no name) [64Bits] - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (...) (No version) -- (.not file.) => Toolbar.Conduit
O2 - BHO: Softonic_France [64Bits] - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files (x86)\Softonic_France\tbSoft.dll
O2 - BHO: Radio Bar 2 Toolbar [64Bits] - {9bb815eb-3f9f-4e11-9150-cb70e29b40fc} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files (x86)\Radio_Bar_2\tbRadi.dll
O42 - Logiciel: Softonic_France Toolbar - (.Softonic_France.) [HKLM][64Bits] -- Softonic_France Toolbar => Toolbar.Conduit
[HKCU\Software\AppDataLow\Software\Softonic_France] => Toolbar.Conduit
[HKLM\Software\Softonic_France] => Toolbar.Conduit
O43 - CFD: 14/06/2011 - 10:49:30 - [8327467] ----D- C:\Program Files (x86)\Softonic_France => Toolbar.Conduit
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4daac69c-cba7-45e2-9bc8-1044483d3352}] => Toolbar.Conduit
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4daac69c-cba7-45e2-9bc8-1044483d3352}] => Toolbar.Conduit
[HKCU\Software\AppDataLow\Software\Softonic_France] => Toolbar.Conduit
[HKLM\Software\Wow6432Node\Softonic_France] => Toolbar.Conduit
C:\Users\Lucile\Appdata\LocalLow\Softonic_France => Toolbar.Conduit
C:\Program Files (x86)\Softonic_France => Toolbar.Conduit
C:\Users\Lucile\AppData\Roaming\Mozilla\Firefox\Profiles\qler3qru.default\Conduit => Toolbar.Conduit
EMPTYTEMP

lance zhpfix
clique sur le H puis sur GO
poste le rapport

Rapport de ZHPFix 1.12.3322 par Nicolas Coolman, Update du 20/06/2011
Fichier d'export Registre : C:\ZHPExportRegistry-21-06-2011-21-39-19.txt
Run by Lucile at 21/06/2011 21:39:18
Windows Vista Home Premium Edition, 64-bit Service Pack 2 (Build 6002)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html

========== Logiciel(s) ==========
ABSENT Software Key: Moovida
ABSENT Software Key: {6084C211-01A1-464E-97A0-09772E122B50}
ABSENT Software Key: {BCB52F35-4C56-49F2-A3D6-FDED54B01847}
ABSENT Software Key: Softonic_France Toolbar

========== Processus mémoire ==========
SUPPRIME Reboot Memory Process: C:\Users\Lucile\Appdata\LocalLow\Softonic_France
SUPPRIME Reboot Memory Process: C:\Users\Lucile\AppData\Roaming\Mozilla\Firefox\Profiles\qler3qru.default\Conduit

========== Clé(s) du Registre ==========
ABSENT Key: HKCU\Software\Moovida
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4a99-B4B6-146BF802613B}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4a99-B4B6-146BF802613B}
ABSENT Key: HKLM\Software\Classes\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B}
ABSENT Key: HKLM\Software\Classes\Installer\Features\53F25BCB65C42F943A6DDFDE450B8174
ABSENT Key: HKLM\Software\Classes\Installer\Products\53F25BCB65C42F943A6DDFDE450B8174
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\53F25BCB65C42F943A6DDFDE450B8174
ABSENT Key: HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
ABSENT Key: HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
ABSENT Key: CLSID BHO: {4daac69c-cba7-45e2-9bc8-1044483d3352}
ABSENT Key: CLSID BHO: {9bb815eb-3f9f-4e11-9150-cb70e29b40fc}
ABSENT Key: HKCU\Software\AppDataLow\Software\Softonic_France
ABSENT Key: HKLM\Software\Softonic_France
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4daac69c-cba7-45e2-9bc8-1044483d3352}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4daac69c-cba7-45e2-9bc8-1044483d3352}
SUPPRIME Key: HKLM\Software\Wow6432Node\Softonic_France
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4daac69c-cba7-45e2-9bc8-1044483d3352}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4daac69c-cba7-45e2-9bc8-1044483d3352}
ABSENT Key: HKLM\Software\Wow6432Node\Softonic_France

========== Valeur(s) du Registre ==========
ABSENT RunValue: ApnUpdater
ABSENT URLSearchHook: {9bb815eb-3f9f-4e11-9150-cb70e29b40fc}
ABSENT URLSearchHook: {4daac69c-cba7-45e2-9bc8-1044483d3352}

========== Préférences navigateur ==========
ABSENT Mozilla Pref: user_pref("CommunityToolbar.ETag.http://settings.toolbar.search.conduit.com/root/CT2542115/CT2542115",

========== Dossier(s) ==========
ABSENT C:\Users\Lucile\AppData\Roaming\moovida-1
ABSENT C:\Users\Lucile\Appdata\Local\moovida Air
ABSENT C:\Users\Lucile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Moovida
SUPPRIME C:\Program Files (x86)\Softonic_France
SUPPRIME Temporaires Windows: : 96
SUPPRIME Temporaires Windows: : 0

========== Fichier(s) ==========
ABSENT File: c:\program files (x86)\ask.com
ABSENT File: c:\users\lucile\appdata\roaming\microsoft\windows\start menu\programs\moovida.lnk
ABSENT File: c:\users\lucile\desktop\moovida.lnk
ABSENT Folder/File: c:\programdata\microsoft\windows\start menu\programs\moovida
ABSENT Folder/File: c:\users\lucile\appdata\local\moovida air
ABSENT Folder/File: c:\users\lucile\appdata\locallow\babylontoolbar
ABSENT Folder/File: c:\documents and settings\lucile\local settings\application data\moovida air
ABSENT Folder/File: c:\users\lucile\appdata\roaming\mozilla\firefox\profiles\qler3qru.default\extensions\ffxtlbr@babylon.com
ABSENT Folder/File: c:\program files (x86)\softonic_france
SUPPRIME Temporaires Windows: : 122
SUPPRIME Temporaires Windows: : 0

========== Tache planifiée ==========
ABSENT Task: Scheduled Update for Ask Toolbar

========== Récapitulatif ==========
2 : Processus mémoire
20 : Clé(s) du Registre
3 : Valeur(s) du Registre
6 : Dossier(s)
11 : Fichier(s)
4 : Logiciel(s)
1 : Préférences navigateur
1 : Tache planifiée

========== Chemin du fichier rapport ==========
C:\Program Files (x86)\ZHPDiag2\ZHPFixReport.txt

End of the scan

hébé voilà :o) au vu des "ABSENT" beaucoup de choses étaient parties malgré le bug.
_________________________
Procédure d'optimisation/d'entretien/de prévention

▶ Télécharge ici : PureRa (par l''editeur de JavaRa)

▶ Lance-le (clic droit "executer en tant qu''administrateur" pour Vista/7)

=> Configuration en vidéo ( merci gen-hackman )

▶ clique sur "Clean"

▶ L''outil va faire son scan puis son nettoyage

▶ à la fin du rapport tu auras une ligne comme ca :

Total space cleaned: 8140878 bytes

▶ transmets juste cette ligne , le reste importe peu

------

▶ télécharge et installe Ccleaner

▶ double-clique sur le fichier pour lancer l''installation

/!\Utilisateur de Vista et windows 7 : Clique droit sur le logo de Ccleaner, « exécuter en tant qu''administrateur »

▶ ▶ une fois ouvert tu cliques sur option et puis avancé
▶ tu décoches "effacer uniquement les fichiers du dossier temp de windows plus vieux que 24 heures "
▶ ▶ cliques sur nettoyeur
▶ cliques sur windows et dans la colonne avancé
▶ coches la première case "vieilles données du perfetch"
▶ cliques sur analyse une fois l''analyse terminé
▶ cliques sur "lancer le nettoyage" et sur la demande de confirmation "OK" ▶ ▶ cliques maintenant sur registre et puis sur "rechercher les erreurs "
▶ laisses tout cochées et cliques sur "réparer les erreurs sélectionnées"
▶ il te demande de sauvegarder ==> OUI
▶ tu lui donnes un nom pour pouvoir la retrouver et enregistre
▶ cliques sur "corriger toutes les erreurs sélectionnées" et sur la demande de confirmation ==> OK
▶ Vérifie qu''il ne reste plus rien en relançant "rechercher les erreurs"
▶ tu retournes dans option et tu recoches la case "effacer uniquement les fichiers du dossier temp de windows plus vieux que 24 heures" et sur nettoyeur windows, sous avancé, tu décoches la première case "vieilles données du perfetch"
▶ tu peux fermer Ccleaner

------

Fais une recherche des erreurs de disque :
ouvre Ordinateur/Poste de travail => clic droit sur C: => propriétés => outils => Vérification des erreurs cliquez sur vérifier maintenant. Ensuite cochez les deux cases puis cliquez sur démarrer. Répondez oui pour le message d''avertissement et redémarrez votre système.

------

Défragmente tes disques dur :
Télécharge Deffragler, et défragmente tes disques.

------

▶ Désactivation, puis Réactivation de la restauration système après désinfection :

Il est nécessaire de désactiver puis réactiver la restauration système pour la purger car les points de restauration peuvent être infectés :

XP/Vista : http://www.forum-fec.net/t97-purger-la-restauration-du-systeme
Seven: http://www.forum-fec.net/faq-tutoriel-astuces-f10/purger-la-restauration-du-systeme-sous-windows-7-t142.htm

------

▶ Mises à jour Windows :

Il est très important de maintenir son système à jour car ceci comble les failles de sécurité par lesquelles les malwares ("virus") s'introduisent ...

▶ Windows Update XP (uniquement avec Internet Explorer): http://update.microsoft.com/windowsupdate/v6/thanks.aspx?ln=fr&&thankspage=5

▶ Windows Update Vista/Seven : cliquer sur le logo windows, dans la rechercher taper "Windows Update", cliquer sur le résultat.

-----

▶ Mets à jour Java : https://www.java.com/fr/download/uninstalltool.jsp

▶ Désinstaller les anciennes versions de Java :

▶ Télécharge JavaRa.zip

▶ Décompresse le fichier sur ton bureau (clique droit > Extraire tout.)

▶ Double-clique sur le répertoire JavaRa obtenu.

▶ Puis double-clique sur le fichier JavaRa.exe (le .exe peut ne pas s''afficher)

▶ Clique sur Remove Older Versions.

▶ Clique sur Oui pour confirmer. L''outil va travailler, clique ensuite sur Ok, puis une deuxième fois sur Ok.

▶ Un rapport va s''ouvrir, copie-colle le dans ta prochaine réponse.

▶ Note : le rapport se trouve aussi là : ( C:\JavaRa.log )

▶ Tu peux fermer l''application

▶ ▶ Met à jour les logiciels Adobe :

▶ Reader : https://get2.adobe.com/fr/reader/otherversions/

▶ Flash Player: https://get.adobe.com/flashplayer/?loc=fr

-----

▶ ▶ pour supprimer les outils de désinfection :

▶ Télécharge Delfix sur ton bureau :

▶ Clique sur le bouton « Suppression » et poste son rapport sur ton prochain message
▶ ▶ Pour le désinstaller, il suffit de le relancer et cliquer sur le bouton de désinstallation.

------

Tu peux garder Malwarebytes pour un scan de temps à autres

-----

Tu peux lire ce sujet sur les logiciels recommandés, et les attitudes responsables sur le web
Et celui ci, sur les logiciels gratuits à éviter

------

Si tu utilise FireFox, vérifie que tes plug in sont à jour : https://support.mozilla.org/en-US/kb/npapi-plugins

-----

▶ ▶ Pense à marquer le fil comme résolu

------

Si tu as d''autres questions, je t''écoute avec plaisir :)
On se quitte si le rapport DelFix est ok...

@+

si avast bloque essai doc web

J'ai redémarré le PC et c'est long. Il arrive au bout de la vérification. Il en est à 260 000 fichiers sur 368000

Bonjour Juju, voici le rapport de delfix :

# DelFix v8.1 - Rapport créé le 24/06/2011 à 17:18
# Mis à jour le 20/06/11 à 19h par Xplode
# Système d'exploitation : Windows (TM) Vista Home Premium (64 bits) [version 6.0.6002]
# Nom d'utilisateur : Lucile - PC-DE-MAT (Administrateur)
# Exécuté depuis : C:\Users\Lucile\Downloads\DelFix.exe
# Option [Suppression]

~~~~~~ Dossier(s) ~~~~~~

Supprimé : C:\Program Files (x86)\ZHPDiag
Supprimé : C:\Users\Lucile\Desktop\RK_Quarantine
Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP

~~~~~~ Fichier(s) ~~~~~~

Supprimé : C:\Users\Lucile\Desktop\combo.exe <-- Combofix
Supprimé : C:\Ad-Report-CLEAN[1].txt
Supprimé : C:\Ad-Report-SCAN[1].txt
Supprimé : C:\ComboFix.txt
Supprimé : C:\UsbFix.txt
Supprimé : C:\Windows\grep.exe
Supprimé : C:\Windows\MBR.exe
Supprimé : C:\Windows\NIRCMD.exe
Supprimé : C:\Windows\PEV.exe
Supprimé : C:\Windows\sed.exe
Supprimé : C:\Windows\SWREG.exe
Supprimé : C:\Windows\SWSC.exe
Supprimé : C:\Windows\SWXCACLS.exe
Supprimé : C:\Windows\zip.exe
Supprimé : C:\Users\Lucile\Desktop\AD-R.lnk
Supprimé : C:\Users\Lucile\Desktop\JavaRa.def
Supprimé : C:\Users\Lucile\Desktop\JavaRa.exe
Supprimé : C:\Users\Lucile\Desktop\RKreport[1].txt
Supprimé : C:\Users\Lucile\Desktop\RKreport[2].txt
Supprimé : C:\Users\Lucile\Desktop\ZHPDiag.txt
Supprimé : C:\Users\Lucile\Desktop\ZHPDiaga.txt
Supprimé : C:\Users\Public\Desktop\MBRCheck.lnk
Supprimé : C:\Users\Public\Desktop\ZHPDiag.lnk
Supprimé : C:\Users\Public\Desktop\ZHPFix.lnk
Supprimé : C:\Users\Lucile\Downloads\JavaRa.zip
Supprimé : C:\Users\Lucile\Downloads\ZHPDiag2.exe

~~~~~~ Registre ~~~~~~

Clé Supprimée : HKCU\SOFTWARE\Ad-Remover
Clé Supprimée : HKLM\Software\Classes\.cfxxe
Clé Supprimée : HKLM\Software\Classes\cfxxefile
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Ad-Remover
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\combofix.exe
ACL -> [F] & Clé Supprimée : HKLM\SOFTWARE\Swearware

~~~~~~ Autre ~~~~~~

-> Prefetch vidé

########## EOF - "C:\DelFixSuppr.txt" - [2245 octets] ##########

Hello :) c est ici que l'on se quitte ..
Prudence et surtout bon surf ;)

Je n'ai pas réussi à mettre à jour Adobe Reader, ça ne fonctionne pas.

Je suis en train de mettre à jour les plugs-in chez mozilla.

L'autre jour en suivant une de tes manipulations, "google chrome" s'est installé tout seul. ?

Merci encore mille fois Juju de ton aide, de te temps et de ta patience!!!! Je vais faire un scan dans la soirée ou demain et je mettrai "résolu".

Ouaip .... Faut lire les CGU hein ! :)
Il s'est installé avec CCleaner ...

Les CGU sur internet ne sont pas tjrs bien lues je l'avoue et c'est un tort. Merci encore. Bon week end!