virus Fermé

Question

Bonjour, jai téléchargé HijackThis comme indiqué dans les messages que jai consulté concernant les virus, je vous donne donc le copié/collé du bloc note, merci davance de me répondre car je ny connais rien, c avast qui a detecté et jai tout mis en quarantaine 


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:41:07, on 06/07/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32undll32.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Safari\Safari.exe
C:\Documents and Settings\Laeti\Mes documents\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.01net.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.01net.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer fourni par 01net.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: ShopperReports - {100EB1FD-D03E-47fd-81F3-EE91287F9465} - C:\Program Files\ShopperReports3\bin\3.0.497.0\ShopperReports.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Interest recogniser for Moovida (powered by Spointer) - {E2A7BD67-0EAF-497f-B05B-748D7BF3C421} - C:\Program Files\Fluendo\Moovida\spointer\extensions\moovida_air_ie.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: OfferBox - {FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C} - C:\Program Files\OfferBox\OfferBoxBHO.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [AliceSAV] C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
O4 - Global Startup: Post-it® Software Notes Lite.lnk = C:\Program Files\3M\PSNLite\PsnLite.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: ShopperReports - Compare product prices - {C5428486-50A0-4a02-9D20-520B59A9F9B2} - C:\Program Files\ShopperReports3\bin\3.0.497.0\ShopperReports.dll
O9 - Extra button: ShopperReports - Compare travel rates - {C5428486-50A0-4a02-9D20-520B59A9F9B3} - C:\Program Files\ShopperReports3\bin\3.0.497.0\ShopperReports.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://fichiers.touslesdrivers.com/maconfig/MaConfig_3_5_3_0.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com/activex/ractrl.cab?lmi=100
O17 - HKLM\System\CCS\Services\Tcpip\..\{BD31365F-0A7B-45A0-AD2C-46E08DD99AF0}: NameServer = 192.168.1.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Service Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NMSAccess - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

jacques.gache · Answer

bonjour, tu passeras ad-remover et puis tu posteras un zhpdiag qui sera plus complet , merci 

1) passes ad-remover mode NETTOYER

Déactives ton anti-virus et anti-spyware le temps du scan 

Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool. 
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. 
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus. 


Télécharge Ad-Remover sur ton bureau: (Merci à l'équipe TeamXscript) 

http://www.teamxscript.org/adremoverTelechargement.html

ou:

https://www.androidworld.fr/

/!\ Ferme toutes tes applications ouvertes. /!\

Double clique sur le fichier que tu viens de télécharger, à l'écran qui apparait, clique sur "Nettoyer".
Laisse travailler l'outil.
Poste le rapport qui s'affiche à l'écran quand l'analyse est terminée.



( Le rapport est sauvegardé sous C:\Ad-report-clean.log ) 




2) postes un zhpdiag pour voir si pas autre chose

Ouvre ce lien et télécharge ZHPDiag : 

https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

cliques sur télécharger "celui du bas" 

ou directement ici: ftp://zebulon.fr/ZHPDiag2.exe



Enregistres le sur ton Bureau. 

Une fois le téléchargement achevé

pour XP, double-clique sur ZHPDiag 

pour Vista,et seven tu  fais un clic droit sur l'icône et exécute en tant qu'administrateur. 

N'oublies pas de cocher la case qui permet de mettre un raccourci sur le Bureau. 

/|\ l'outil a créé 2 icônes ZHPDiag et ZHPFix. 

Double cliques sur le raccourci ZHPDiag sur ton Bureau pour XP sinon clique droit et en tant que administrateur !! 

Cliques sur la loupe pour lancer l'analyse. 

 si tu as un message te demandant la validation pour SIGCHECK acceptes avec OK cela est pour nous faire  un rapport plus complet et pouvoir en faire une lecture plus approfondis 

Laisses l'outil travailler, il peut être assez long 

A la fin de l'analyse,clique sur l'appareil photo et enregistre le rapport sur ton Bureau. 


Fermes ZHPDiag en fin d'analyse. 


Pour me le transmettre clique sur ce lien : 

http://www.cijoint.fr/index.php  


Clique sur Parcourir et cherche le fichier C:\Documents and settings\le_nom_de_ta_session\bureau\.ZHPDiag.txt

ou directement en choisissant bureau et  ZHPDiag.txt clique dessus 

Clique sur Ouvrir. 

Clique sur "Cliquez ici pour déposer le fichier". 

Un lien de cette forme : 

http://www.cijoint.fr/cjlink.php?file=cj200905/cib7SU.txt 

est ajouté dans la page. 

Copie ce lien dans ta réponse. 


et si problème passe par celui ci :    https://www.cjoint.com/

eilane · Answer

merci bcp je tient à préciser que je suis un peu "noob" en la matiere, je poste donc le 1er rapport que vous mavez demandé, merci
======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par TeamXscript le 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (CLEAN [2]) -> Lancé à 23:13:05 le 06/07/2011, Mode normal

Microsoft Windows XP Professionnel Service Pack 3 (X86) 
Laeti@SALON ( ) 
 
============== ACTION(S) ==============



(!) -- Fichiers temporaires supprimés.




============== SCAN ADDITIONNEL ==============

**** Mozilla Firefox Version [3.6.18 (fr)] ****

HKLM_MozillaPlugins\@pandonetworks.com/PandoWebPlugin (x)
HKLM_MozillaPlugins\Adobe Reader (x)
HKCU_MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0 (x)
HKCU_MozillaPlugins\pandonetworks.com/PandoWebPlugin (x)

-- C:\Documents and Settings\Laeti\Application Data\Mozilla\FireFox\Profiles\dx0c1dt4.default --
Prefs.js - browser.startup.homepage_override.mstone, rv:1.9.2.18

========================================

**** Internet Explorer Version [8.0.6001.18702] ****

HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
HKCU_Main|Start Page - hxxp://fr.msn.com/
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Start Page - hxxp://fr.msn.com/
HKCU_SearchScopes\{550f51ed-7625-4b6f-9e7b-3f0debb33cc0} - "Wibeez" (hxxp://www.wibeez.com/meteo?search&q={searchTerms})
HKLM_Toolbar|{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} (C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll)
HKLM_ElevationPolicy\{C9BDBBC1-2B4F-4669-BB5A-51C8D1770C1A} - C:\WINDOWS\Downloaded Program Files\LMIGuardian.exe (LogMeIn, Inc.)
HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?)
BHO\{02478D38-C3F9-4efb-9B51-7695ECA05670} (?)
BHO\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - "avast! WebRep" (C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll)

========================================

C:\Program Files\Ad-Remover\Quarantine: 3235 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 14 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 06/07/2011 19:34:10 (16533 Octet(s)) 
C:\Ad-Report-CLEAN[2].txt - 06/07/2011 23:13:12 (2357 Octet(s)) 

Fin à: 23:14:01, 06/07/2011 
 
============== E.O.F ==============

eilane · Answer

http://www.cijoint.fr/cjlink.php?file=cj200907/cijYJnWZwh.jpg et voila pour le second le ZHPdiag, merci encore.

eilane · Answer

voila, normalement ce doit etre le bon, désolé et encore mercihttp://www.cijoint.fr/cjlink.php?file=cj201107/cijbwVxuXs.txt

eilane · Answer

ok, je vais supprimer des fichiers pour faire de la place tout de suite merci davance pour votre aide.

eilane · Answer

Rapport de ZHPFix 1.12.3335 par Nicolas Coolman, Update du 04/07/2011
Fichier d'export Registre : 
Run by Laeti at 10/07/2011 19:39:46
Windows XP Professional Service Pack 3 (Build 2600)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html

========== Clé(s) du Registre ==========
SUPPRIME Partiel Software Key: {6084C211-01A1-464E-97A0-09772E122B50}
SUPPRIME Key: HKCU\Software\Moovida
SUPPRIME Key: HKLM\Software\CrazyLoader
SUPPRIME Key: HKLM\Software\Moovida
ABSENT CLSID MPSK: {b8f7842d-4355-11e0-9a1d-00138fe50013}
SUPPRIME CLSID MPSK: {e8d4ff68-d3d0-11de-9736-00138fe50013}
SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\ForceRenive
SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ShopperReportsSA
SUPPRIME Key: HKLM\Software\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}
SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{6084C211-01A1-464E-97A0-09772E122B50}
SUPPRIME Key: HKLM\Software\Classes\Interface\{65A16874-2ED0-460E-A547-5FE2EC3A13A7}
SUPPRIME Key: HKLM\Software\Classes\Interface\{71E02280-5212-45C3-B174-4D5A35DA254F}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C5F65718-341D-4e7d-9842-FCB9CC89527E}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C5F65718-341D-4e7d-9842-FCB9CC89527E}
SUPPRIME Key: HKLM\Software\Classes\Installer\Features\5B4758C25396ECF468E04F8E063287FF

========== Valeur(s) du Registre ==========
ABSENT RunValue: RTHDCPL
ABSENT RunValue: Alcmtr
SUPPRIME RunValue: nwiz
SUPPRIME RunValue: Adobe Reader Speed Launcher
SUPPRIME RunValue: SunJavaUpdateSched
SUPPRIME RunValue: ctfmon.exe
ABSENT RunValue: CTFMON.EXE
SUPPRIME AAKE KeyValue: C:\Program Files\CrazyLoader\crazyloader.exe
Aucune valeur présente dans la clé d'exception du registre (FirewallRaz)

========== Dossier(s) ==========
SUPPRIME Folder*: C:\Documents and Settings\Laeti\Application Data\moovida-1
SUPPRIME Folder*: C:\Documents and Settings\Laeti\Local Settings\Application Data\crazyloader Air
SUPPRIME Folder*: C:\Documents and Settings\Laeti\Local Settings\Application Data\Moovida
SUPPRIME Folder*: C:\Documents and Settings\Laeti\Local Settings\Application Data\moovida Air
SUPPRIME Flash Cookies: 17
SUPPRIME Temporaires Windows: : 158

========== Fichier(s) ==========
SUPPRIME c:\documents and settings\all users\menu démarrer\programmes\moovida.lnk
ABSENT File: c:\program files\fluendo\moovida\moovida.exe
SUPPRIME c:\documents and settings\laeti\menu démarrer\programmes\moovida.lnk
ABSENT File: c:\program files\crazyloader\crazyloader.exe
ABSENT Folder/File: c:\documents and settings\laeti\local settings\application data\crazyloader air
ABSENT Folder/File: c:\documents and settings\laeti\local settings\application data\moovida air
ABSENT Folder/File: c:\documents and settings\laeti\local settings\application data\moovida
SUPPRIME Flash Cookies: 10
SUPPRIME Temporaires Windows: : 221

========== Fichier HOSTS ==========
Le fichier Hosts est sain

========== Restauration Système ==========
Point de restauration du système créé avec succès


========== Récapitulatif ==========
15 : Clé(s) du Registre
9 : Valeur(s) du Registre
6 : Dossier(s)
9 : Fichier(s)
1 : Fichier HOSTS
1 : Restauration Système


========== Chemin du fichier rapport ==========
C:\Program Files\ZHPDiag\ZHPFixReport.txt



End of the scan in 02mn 02s
voila l1er rapport, je vais maintenant passer usbfix comme vous me lavez demandé.

eilane · Answer

re bonsoir, jai rencontré des difficultées avec usbfix, jai recommencé lopération à 3 reprises, mais à chaque fois jai un message derreur juste apres qu'il soit arrivé à 100%, le programme ne répond plus et du coup je nai pas de rapport, que dois je faire ?

eilane · Answer

Malwarebytes' Anti-Malware 1.51.0.1200
www.malwarebytes.org

Version de la base de données: 7065

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

10/07/2011 23:03:17
mbam-log-2011-07-10 (23-03-17).txt

Type d'examen: Examen complet (C:\|D:\|E:\|F:\|G:\|H:\|I:\|K:\|)
Elément(s) analysé(s): 260498
Temps écoulé: 57 minute(s), 59 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 1
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 19

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_QUERYEXPLORER_SERVICE (Adware.QueryExplorer) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
c:\program files\ad-remover\quarantine\C\program files\shopperreports3\bin\3.0.497.0\brnstie.dll.vir (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\shopperreports3\bin\3.0.497.0\cmndff.dll.vir (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\shopperreports3\bin\3.0.497.0\cntntcntr.dll.vir (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\shopperreports3\bin\3.0.497.0\mozillaps.dll.vir (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\shopperreports3\bin\3.0.497.0\pltfrm.dll.vir (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\shopperreports3\bin\3.0.497.0\shopperreports.dll.vir (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\shopperreports3\bin\3.0.497.0\firefox\firefoxtoolbar\extensions\components\brnstff.dll.vir (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0c86064d-d9ed-4361-933d-19fe03728441}\RP522\A0083465.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0c86064d-d9ed-4361-933d-19fe03728441}\RP522\A0083466.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0c86064d-d9ed-4361-933d-19fe03728441}\RP522\A0083467.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0c86064d-d9ed-4361-933d-19fe03728441}\RP522\A0083469.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0c86064d-d9ed-4361-933d-19fe03728441}\RP522\A0083471.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0c86064d-d9ed-4361-933d-19fe03728441}\RP522\A0083472.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\system volume information\_restore{0c86064d-d9ed-4361-933d-19fe03728441}\RP522\A0083473.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\WINDOWS\ie8\iexplore.exe (Trojan.FakeMS) -> Quarantined and deleted successfully.
c:\WINDOWS\bricopacks\vista inspirat 2\packfiles\79_iexplore.exe (Trojan.FakeMS) -> Quarantined and deleted successfully.
d:\utilitaire\petits jeux cool\atlantis - big fish games - reflexive arcade keygen\keygen.exe (RiskWare.Tool.CK) -> Quarantined and deleted successfully.
d:\utilitaire\petits jeux cool\zuma deluxe\varia entrainement\zuma.deluxe.v1.0_trainer-fff\Trainer.exe (PUP.HackTool.HotKeysHook) -> Not selected for removal.
d:\utilitaire\win rar 3.2 + crack\CORE10k.EXE (Dont.Steal.Our.Software) -> Quarantined and deleted successfully.

eilane · Answer

je rencontre des soucis pour vous poster le rapport de toolbar sd, je narrive pas à valider mon message car il ny aurais pas de titre (je ne comprend pas)

eilane · Answer

ok, merci infiniment de répondre si vite, je me suis inscrite, mais là encore, jai eu des difficultées car le pseudo était deja pris. Je vais donc essayer de vous envoyer ce rapport sous le pseudo eillane, encore mille merci !

eillane · Answer

I:\ (USB)
   K:\ (CD or DVD)

   "C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
   Option : [2] ( 10/07/2011|20:44 )

   -----------\ SUPPRESSION

   Supprime! - C:\DOCUME~1\Laeti\Cookies\laeti@cs.shopperreports[1].txt

   -----------\  Recherche de Fichiers / Dossiers ...


   -----------\  Extensions

   (Laeti) - {20a82645-c095-46ed-80e3-08825760534b} => chrome_user


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Local Page"="C:\WINDOWS\system32\blank.htm"
   "Start Page"="http://fr.msn.com/"
   "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
   "Default_search_url"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Search bar"="http://go.microsoft.com/fwlink/?linkid=54896"
   "Search page"="http://go.microsoft.com/fwlink/?LinkId=54896"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
   "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
   "Local Page"="C:\WINDOWS\system32\blank.htm"
   "Start Page"="http://www.msn.com/"
   "Search bar"="http://search.msn.com/spbasic.htm"


   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\Laeti\Mes documents\Jeux\(PC GAME+CRACK) Luxor
   C:\DOCUME~1\Laeti\Mes documents\Jeux\(PC GAME+CRACK) Luxor\eclas104.exe
   C:\DOCUME~1\Laeti\Mes documents\Jeux\(PC GAME+CRACK) Luxor\LuxorSetup.exe



   1 - "C:\ToolBar SD\TB_1.txt" - 10/07/2011|20:46 - Option : [2]

   -----------\  Fin du rapport a 20:46:32,68 le voila enfin

eillane · Answer

Mince, que dois je faire à présent ? Merci davance.

eillane · Answer

Bonsoir, les 2 liens que vous mavez donné sont innaccessible, mais jai rencontré un probleme pendant lanalyse de ZHPDiag, arrivé à 64%, une fenetre s'est ouverte : "Windows _ Pas de disque"    avec le message suivant Exception Processing Message c 0000013 Parameters 75 afbf7c  75 afbf7c
Je ne pouvais ni cliquer sur Annuler, ou bien Recommencer ou Continuer, du coup jai cliqué à plusieures reprises  sur la croix en haut à droite de la fenetre pour fermer, et ça a repris jusqu'au 100% et ça na duré que quelques minutes (vous me disiez que cela pouvais prendre un certain temps)
Sinon, pour le rapport, jessaierais à nouveau dans quelques temps. Merci encore pour votre aide.

eillane · Answer

voila ça fonctionne, http://www.cijoint.fr/cjlink.php?file=cj201107/cijZQZrqWR.txt

eillane · Answer

j'ai voulue désintaller certains programmes inutiles en passant par, panneau de config, ajout et suppression de programmes, et sans le faire expres jai désintallé "realtek qq chose", il doit s'agir d'un composant concernant le son, car je nai plus de son !
c en voulant enlever les "PC GAME + CRACK" et depuis jai redémarré, ça ma demandé "instalshield..." jai tout accepté bien sur, mais je nai toujours plus de son, je planche sur ce probleme depuis au moins 2 heures. Du coup, jai fais un tour sur le forum, jai decouvert ds logiciels pour aider a savoir ce que lordinateur a comme composant, mais je nose rien faire, jai peur de faire des erreurs....
Je préfere votre avis, je pense avoir fais assez de betises comme ça pour ce soir !
J'espere que vous saurez maider, merci encore mille fois et désolé detre aussi novice = je vais prendre ds cours !

eillane · Answer

ok, ça a marché, jai retrouvé le son, merci beaucoup.

eillane · Answer

voila le nouveau rapport du ZHPDiag
http://www.cijoint.fr/cjlink.php?file=cj201107/cijyrxg1rV.txt

eillane · Answer

erf... ça c'est pas cool !

eillane · Answer

oki, pas de soucis, mais là, on commence par où ? par quoi ? Merci d'avance

eillane · Answer

Rapport de ZHPDiag v1.27.2406 par Nicolas Coolman, Update du 12/07/2011
Run by Laeti at 13/07/2011 18:25:01
Web site :  http://www.premiumorange.com/zeb-help-process/zhpdiag.html


---\ Web Browser
MSIE: Internet Explorer v8.0.6001.18702
MFIE: Mozilla Firefox v (Defaut)

---\ System Information
Windows XP Professional Service Pack 3 (Build 2600)
~ Processor: x86 Family 15 Model 6 Stepping 2, GenuineIntel
~ Operating System: 32 Bits
~ Boot mode: ~ Normal (Normal boot)
Total RAM: 2943 MB (76% free)
~ System Restore: Activé (Enable)
System drive C: has 8 GB (7%) free of 115 GB

---\ Logged in mode
~ Computer Name: SALON
~ User Name: Laeti
~ All Users Names: SUPPORT_388945a0, Laeti, HelpAssistant, ASPNET, Administrateur, 
~ Unselected Option: O45,O61,O62,O65,O66,O82
~ Logged in as Administrator

---\ Environnement Variables
~ %AppData%=C:\Documents and Settings\Laeti\Application Data\
~ %Desktop%=C:\Documents and Settings\Laeti\Bureau\
~ %Favorites%=C:\Documents and Settings\Laeti\Favoris\
~ %LocalAppData%=C:\Documents and Settings\Laeti\Local Settings\Application Data\
~ %StartMenu%=C:\Documents and Settings\Laeti\Menu Démarrer\

---\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 8 Go of 115 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 99 Go of 112 Go)
E:\ Hard drive, Flash drive, Thumb drive (Free 4 Go of 6 Go)
F:\ CD-ROM drive (Not Inserted)
G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
I:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
K:\ CD-ROM drive (Not Inserted)



---\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK



---\ Recherche particulière de fichiers génériques
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.13/07/2011 - 03:34:03.) -- C:\WINDOWS\Explorer.exe [1037824]
[MD5.93AD0B78C7357A05F50E594EC7C22300] - (....) (.13/07/2011 - 03:34:20.) -- C:\WINDOWS\system32undll32.exe [33792]
[MD5.42F5E14E33D79C236680468B1E4999F4] - (.Microsoft Corporation - Internet Extensions for Win32.) (.13/07/2011 - 17:06:11.) -- C:\WINDOWS\system32\wininet.dll [916480]
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.13/07/2011 - 03:34:28.) -- C:\WINDOWS\system32\Winlogon.exe [512000]
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/07/2011 - 19:40:30.) -- C:\WINDOWS\system32\drivers\atapi.sys [96512]
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.13/07/2011 - 20:15:53.) -- C:\WINDOWS\system32\drivers
tfs.sys [574976]



---\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 15/57
~ Mes musiques (My Musics) : 239/1190
~ Mes Favoris (My Favorites) : 4/133
~ Mes Documents (My Documents) : 417/23536
~ Mon Bureau (My Desktop) : 2/10
~ Menu demarrer (Programs) : 6/50



---\ Processus lancés
[MD5.D16C826F375A44802BF317982E81A7E2] - (.AVAST Software - avast! Service.) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe   [42184]
[MD5.9C69E6A25F5500501B14AF43311F8D8B] - (.Microsoft Corporation - Media Center Tray Applet.) -- C:\WINDOWS\ehome\ehtray.exe   [64512]
[MD5.DAEFB050AC8FEE4F1097FCF7CB97220E] - (.Microsoft Corporation - Media Center Media Status Aggregator Servic.) -- C:\WINDOWS\eHome\ehmsas.exe   [46592]
[MD5.5D1347AA5AE6E2F77D7F4F8372D95AC9] - (.Microsoft Corporation - Media Center Receiver Service.) -- C:\WINDOWS\eHome\ehRecvr.exe   [237568]
[MD5.692733BE9E923044CEBC96CF882CCEBE] - (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.EXE   [16264192]
[MD5.980EEEA91776357518892C5544768E2B] - (.Microsoft Corporation - Service de planification Media Center.) -- C:\WINDOWS\eHome\ehSched.exe   [103424]
[MD5.9DBA73C2F1E76EC4CB837E67C5743596] - (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe   [153376]
[MD5.9F3287A1CAF6E365ED2B39BB8D44B0EA] - (.Elaborate Bytes AG - Virtual CloneDrive Daemon.) -- C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe   [52168]
[MD5.E75ADCFAFDEF3F4C3AF3332928D59926] - (.Hewlett-Packard Company - LightScribe Service.) -- C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe   [73728]
[MD5.CA416C33C8F4D6DE53C17AAB7CE2FBD8] - (.TechCity Solutions France - AliceAgent.) -- C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe   [81408]
[MD5.93AD0B78C7357A05F50E594EC7C22300] - (...) -- C:\WINDOWS\system32\RUNDLL32.EXE   [33792]
[MD5.13E7CFE8E269ED15E7FC9C3EBBCB7E2B] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe   [254696]
[MD5.7AEA4DF1CA68FD45DD4BBE1F0243CE7F] - (...) -- C:\Program Files\CDBurnerXP\NMSAccessU.exe   [71096]
[MD5.E7CF222185411C6A3E68273C452B3283] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\avastUI.exe   [3493720]
[MD5.B9B7084F7DB3D1B036C0B9178472E96A] - (.Logicool - Logicool Desktop Messenger.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe   [20480]
[MD5.C501206816F35D20422B4C3F88D62860] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 182.5.) -- C:\WINDOWS\system32
vsvc32.exe   [163908]
[MD5.A564A22308A3F55235BA2478EE82992D] - (.Hewlett-Packard - hpotdd01.) -- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe   [28672]
[MD5.B75637DA0A24B4B9D12A87D02FC437FE] - (.Logitech Inc. - Logitech SetPoint.) -- C:\Program Files\Logitech\SetPoint\KEM.exe   [581632]
[MD5.4AC28B51530D3A93B3F27EB7A72F575F] - (...) -- C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe   [630784]
[MD5.32655C9CD64941E6D5E0F031EA9AC34A] - (.Logitech Inc. - Logitech Hardware Abstraction Layer.) -- C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE   [29696]
[MD5.0DAD93BB0FECF5016AE3C06CBB0A873B] - (.Microsoft Corporation - COM Surrogate.) -- C:\WINDOWS\system32\dllhost.exe   [5120]
[MD5.89C981608FE15F3BAB8389794220C350] - (.Apple Inc. - Safari.) -- C:\Program Files\Safari\Safari.exe   [2388264]
[MD5.00365B3515C30F66CDB938F6729F3D0C] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe   [656896]



---\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
C:\Documents and Settings\Laeti\Local Settings\Application Data\Mozilla\Firefox\Profiles\dx0c1dt4.default\prefs.js
M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins
pdeployJava1.dll
P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins
pnul32.dll
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.4.5".) -- C:\Program Files\Mozilla Firefox\Plugins
ppdf32.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
P2 - FPN: [HKLM] [@google.com/npPicasa3,version=3.0.0] - (.Google, Inc. - Picasa plugin.) -- C:\Program Files\Google\Picasa3
pPicasa3.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_26 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin
ew_plugin
pjp2.dll
P2 - FPN: [HKLM] [@ma-config.com/HardwareDetection] - (.Cybelsoft - Plugin NPAPI Ma-Config.com.) -- C:\Program Files\ma-config.com
phardwaredetection.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@pandonetworks.com/PandoWebPlugin] - (.Pando Networks - Pando Web Plugin.) -- C:\Program Files\Pando Networks\Media Booster
pPandoWebPlugin.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.57
pGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.57
pGoogleUpdate3.dll
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.4.5".) -- C:\Program Files\Adobe\Reader 9.0\Reader\AIR
ppdf32.dll
P2 - FPN: [HKCU] [@unity3d.com/UnityPlayer,version=1.0] - (.Unity Technologies ApS - Unity Player 3.3.0f4.) -- C:\Documents and Settings\Laeti\Local Settings\Application Data\Unity\WebPlayer\loader
pUnity3D32.dll
P2 - FPN: [HKCU] [pandonetworks.com/PandoWebPlugin] - (.Pando Networks - Pando Web Plugin.) -- C:\Program Files\Pando Networks\Media Booster
pPandoWebPlugin.dll



---\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKUS\S-1-5-21-854245398-813497703-725345543-1003\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKUS\S-1-5-21-854245398-813497703-725345543-1003\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.19072 (longhorn_ie8_gdr.110420-1700)) -- C:\WINDOWS\system32\ieframe.dll



---\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <local>;localhost
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll



---\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe,
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"



---\ Browser Helper Objects de navigateur (O2)
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} Clé orpheline
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java(TM) Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll



---\ Internet Explorer Toolbars (O3)
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll



---\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [ehTray] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\WINDOWS\ehome\ehtray.exe 
O4 - HKLM\..\Run: [RTHDCPL] . (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.exe 
O4 - HKLM\..\Run: [Alcmtr] . (.Realtek Semiconductor Corp. - Realtek Azalia Audio - Event Monitor.) -- C:\WINDOWS\ALCMTR.exe 
O4 - HKLM\..\Run: [VirtualCloneDrive] . (.Elaborate Bytes AG - Virtual CloneDrive Daemon.) -- C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe 
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] . (.Logitech Inc. - Logitech Hardware Abstraction Layer.) -- C:\WINDOWS\KHALMNPR.exe 
O4 - HKLM\..\Run: [AliceSAV] . (.TechCity Solutions France - AliceAgent.) -- C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe 
O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32\NvCpl.dll 
O4 - HKLM\..\Run: [nwiz] . (...) -- C:\Windows\System32
wiz.exe 
O4 - HKLM\..\Run: [NvMediaCenter] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\WINDOWS\system32\NvMcTray.dll 
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent]  bthprops.cpl 
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe 
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe 
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe 
O4 - HKLM\..\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\avastUI.exe 
O4 - HKCU\..\Run: [PlayNC Launcher] Clé orpheline 
O4 - HKCU\..\Run: [LDM] . (.Logicool - Logicool Desktop Messenger.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe 
O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe 
O4 - HKCU\..\Run: [RegistryBooster] . (.Uniblue Systems Limited - Uniblue Launcher.) -- C:\Program Files\Uniblue\RegistryBooster\launcher.exe 
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe 
O4 - HKUS\S-1-5-18\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe 
O4 - HKUS\S-1-5-18\..\Run: [LDM] . (.Logicool - Logicool Desktop Messenger.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe 
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe 
O4 - HKUS\S-1-5-18\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe 
O4 - HKUS\S-1-5-18\..\Run: [LDM] . (.Logicool - Logicool Desktop Messenger.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe 
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe 
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe 
O4 - HKUS\S-1-5-21-854245398-813497703-725345543-1003\..\Run: [PlayNC Launcher] Clé orpheline 
O4 - HKUS\S-1-5-21-854245398-813497703-725345543-1003\..\Run: [LDM] . (.Logicool - Logicool Desktop Messenger.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe 
O4 - HKUS\S-1-5-21-854245398-813497703-725345543-1003\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe 
O4 - HKUS\S-1-5-21-854245398-813497703-725345543-1003\..\Run: [RegistryBooster] . (.Uniblue Systems Limited - Uniblue Launcher.) -- C:\Program Files\Uniblue\RegistryBooster\launcher.exe 
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\hpoddt01.exe.lnk . (.Hewlett-Packard.)  -- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Logitech Desktop Messenger.lnk . (.Logitech.)  -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Logitech SetPoint.lnk . (.Logitech Inc..)  -- C:\Program Files\Logitech\SetPoint\KEM.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Post-it® Software Notes Lite.lnk . (.3M.)  -- C:\Program Files\3M\PSNLite\PsnLite.exe
O4 - Global Startup: C:\Documents And Settings\Laeti\Menu Démarrer\Programmes\Démarrage\RocketDock.lnk . (...)  -- C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe



---\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader 9.lnk . (...)  -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A94000000001}\SC_Reader.ico
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Apple Software Update.lnk . (...)  -- C:\WINDOWS\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\AppleSoftwareUpdateIco.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\CDBurnerXP.lnk . (.Canneverbe Limited.)  -- C:\Program Files\CDBurnerXP\cdbxpp.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Media Center.lnk . (.Microsoft Corporation.)  -- C:\WINDOWS\ehome\ehshell.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Moovida.lnk . (...)  -- C:\Program Files\Fluendo\Moovida\Moovida.exe (.not file.)
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Post-it® Software Notes Lite.lnk . (.3M.)  -- C:\Program Files\3M\PSNLite\PsnLite.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Safari.lnk . (...)  -- C:\WINDOWS\Installer\{6C1E7AA1-44E9-446D-AAB2-0DE6D9EFEAB1}\SafariIco.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Messenger\msmsgs.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Movie Maker\moviemk.exe
O4 - Global Startup: C:\Documents And Settings\Laeti\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.)  -- C:\WINDOWS\system32cimlby.exe
O4 - Global Startup: C:\Documents And Settings\Laeti\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Documents And Settings\Laeti\Menu Démarrer\Programmes\Moovida.lnk . (...)  -- C:\Program Files\Fluendo\Moovida\Moovida.exe (.not file.)
O4 - Global Startup: C:\Documents And Settings\Laeti\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Outlook Express\msimn.exe
O4 - Global Startup: C:\Documents And Settings\Laeti\Menu Démarrer\Programmes\Windows Media Player.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Windows Media Player\wmplayer.exe



---\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: Add to Google Photos Screensa&ver . (.Google Inc. - Google Photos Screensaver.) -- C:\WINDOWS\system32\GPhotos.scr
O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~2\Office12\EXCEL.exe
O8 - Extra context menu item: Google Sidewiki... . (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_43C348BC2E93EB2B.dll



---\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO
O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (...) -- C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO
O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe



---\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\WINDOWS\system32\wshbth.dll



---\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://fichiers.touslesdrivers.com/maconfig/MaConfig_3_5_3_0.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com/activex/ractrl.cab?lmi=100



---\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{BD31365F-0A7B-45A0-AD2C-46E08DD99AF0}: NameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{BD31365F-0A7B-45A0-AD2C-46E08DD99AF0}: NameServer = 192.168.1.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{BD31365F-0A7B-45A0-AD2C-46E08DD99AF0}: NameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{BD31365F-0A7B-45A0-AD2C-46E08DD99AF0}: DhcpNameServer = 192.168.1.1



---\ Protocole additionnel et piratage de protocole (O18)
O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL



---\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\Windows\System32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\Windows\System32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\Windows\System32\cscdll.dll
O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\Windows\System32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\WlNotify.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll



---\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll



---\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: (no name) - {438755C2-A8BA-11D1-B96B-00A0C90312E1} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll



---\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) . (.Hewlett-Packard Company - LightScribe Service.) - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: NMSAccess (NMSAccess) . (...) - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 182.5.) - C:\WINDOWS\system32
vsvc32.exe



---\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) -  (.not file.)



---\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\FRU Task #Hewlett-Packard#hp psc 1100 series#1253109987.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
[MD5.4D6019BE71C720E2D29F2CE758F7A53B] [APT] [FRU Task #Hewlett-Packard#hp psc 1100 series#1253109987] (...) -- C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpqfrucl.exe
[MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe



---\ Pilotes lancés au démarrage (O41)
O41 - Driver:  (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
O41 - Driver:  (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\System32\DRIVERS\cdrom.sys
O41 - Driver:  (ElbyCDIO) . (.Elaborate Bytes AG - ElbyCD Windows NT/2000/XP I/O driver.) - C:\WINDOWS\System32\Drivers\ElbyCDIO.sys
O41 - Driver:  (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\System32\DRIVERS\i8042prt.sys
O41 - Driver:  (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\System32\DRIVERS\imapi.sys
O41 - Driver:  (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\System32\DRIVERS\intelppm.sys
O41 - Driver:  (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\System32\DRIVERS\ipsec.sys
O41 - Driver:  (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\System32\DRIVERS\kbdclass.sys
O41 - Driver:  (kbdhid) . (.Microsoft Corporation - Pilote de filtre souris HID.) - C:\WINDOWS\System32\DRIVERS\kbdhid.sys
O41 - Driver:  (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\System32\DRIVERS\mouclass.sys
O41 - Driver:  (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\System32\DRIVERS\mrxsmb.sys
O41 - Driver:  (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\System32\DRIVERS
etbios.sys
O41 - Driver:  (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\System32\DRIVERS
etbt.sys
O41 - Driver:  (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\System32\DRIVERSasacd.sys
O41 - Driver:  (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\System32\DRIVERSdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\System32\DRIVERS\RDPCDD.sys
O41 - Driver:  (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\System32\DRIVERSedbook.sys
O41 - Driver:  (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\WINDOWS\System32\DRIVERS\serial.sys
O41 - Driver:  (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\System32\DRIVERS	cpip.sys
O41 - Driver:  (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\System32\DRIVERS	ermdd.sys
O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys



---\ Logiciels installés (O42)
O42 - Logiciel: 7-Zip 4.65 - (.Pas de propriétaire.) [HKLM] -- 7-Zip
O42 - Logiciel: ATI - Utilitaire de désinstallation du logiciel - (.Pas de propriétaire.) [HKLM] -- All ATI Software
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- Adobe AIR
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- {FDB3B167-F4FA-461D-976F-286304A57B2A}
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Reader 9.4.5 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A94000000001}
O42 - Logiciel: Aion (North America) - (.NCsoft.) [HKCU] -- NCsoft-Aion
O42 - Logiciel: Aion - (.NCsoft.) [HKCU] -- NCsoft-AionEU
O42 - Logiciel: Alice Auto-diagnostic - (.Pas de propriétaire.) [HKLM] -- AliceSAV
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {853A4763-6643-4604-8D64-28BDD8925F4C}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
O42 - Logiciel: CCleaner (remove only) - (.Piriform.) [HKLM] -- CCleaner
O42 - Logiciel: CDBurnerXP - (.CDBurnerXP.) [HKLM] -- {7E265513-8CDA-4631-B696-F40D983F3B07}_is1
O42 - Logiciel: Disque de souvenirs HP - (.Hewlett-Packard Company.) [HKLM] -- {B376402D-58EA-45EA-BD50-DD924EB67A70}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: High Definition Audio Driver Package - KB888111 - (.Microsoft Corporation.) [HKLM] -- KB888111WXPSP2
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399
O42 - Logiciel: Hotfix for Windows Media Player 10 (KB903157) - (.Microsoft Corporation.) [HKLM] -- KB903157
O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5
O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5
O42 - Logiciel: Internet Explorer - (.Microsoft Corporation.) [HKLM] -- {4E414048-A9DD-4F60-AA1D-018E716C88C9}
O42 - Logiciel: Java(TM) 6 Update 26 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216017FF}
O42 - Logiciel: K-Lite Codec Pack 4.6.2 (Full) - (.Pas de propriétaire.) [HKLM] -- KLiteCodecPack_is1
O42 - Logiciel: Kit de Connexion Alice ADSL - (.Pas de propriétaire.) [HKLM] -- {3A0221AD-D30B-4320-8F9B-1D0F0E6C6843}
O42 - Logiciel: Lecteur Windows Media 11 - (.Pas de propriétaire.) [HKLM] -- Windows Media Player
O42 - Logiciel: LightScribe System Software  1.14.25.1 - (.LightScribe.) [HKLM] -- {DA9DAC64-C947-47BA-B411-8A1959B177CF}
O42 - Logiciel: Logitech Desktop Messenger - (.Pas de propriétaire.) [HKLM] -- {900B1197-53F5-4F46-A882-2CFFFE2EEDCB}
O42 - Logiciel: Logitech SetPoint - (.Pas de propriétaire.) [HKLM] -- {2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}
O42 - Logiciel: MSN - (.Pas de propriétaire.) [HKLM] -- MSNINST
O42 - Logiciel: MSXML 6 Service Pack 2 (KB973686) - (.Microsoft Corporation.) [HKLM] -- {56EA8BC0-3751-4B93-BC9D-6651CC36E5AA}
O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM] -- {425FFD94-36BD-4933-881B-FE0B9DADF2B7}
O42 - Logiciel: Microsoft .NET Framework 1.0 Hotfix (KB979904) - (.Microsoft Corporation.) [HKLM] -- KB979904
O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Microsoft.) [HKLM] -- {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Pas de propriétaire.) [HKLM] -- Microsoft .NET Framework 1.1  (1033)
O42 - Logiciel: Microsoft .NET Framework 1.1 French Language Pack - (.Microsoft.) [HKLM] -- {9A394342-4A68-4EBA-85A6-55B559F4E700}
O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB2416447) - (.Pas de propriétaire.) [HKLM] -- M2416447
O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB979906) - (.Pas de propriétaire.) [HKLM] -- M979906
O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1
O42 - Logiciel: Microsoft Office Access MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- PROPLUS
O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- Wudf01000
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {7299052b-02a4-4627-81f2-1818da5d550d}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: Moovida - (.Secure Digital Services.) [HKLM] -- {6084C211-01A1-464E-97A0-09772E122B50}
O42 - Logiciel: Mozilla Firefox (3.6.18) - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.6.18)
O42 - Logiciel: Mumble and Murmur - (.Mumble.) [HKLM] -- Mumble
O42 - Logiciel: NCsoft Launcher - (.NCsoft.) [HKLM] -- {5F8E2CBB-949D-4175-AC98-5ADE7F6C9697}
O42 - Logiciel: NVIDIA Drivers - (.NVIDIA Corporation.) [HKLM] -- NVIDIA Drivers
O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM] -- {DD1865F0-AD73-40FB-B23E-1822E02396FF}
O42 - Logiciel: Pack Vista Inspirat 2 1.0 - (.Bricomix.) [HKLM] -- Pack Vista Inspirat 2
O42 - Logiciel: Pando Media Booster - (.Pando Networks Inc..) [HKLM] -- {980A182F-E0A2-4A40-94C1-AE0C1235902E}
O42 - Logiciel: Photo et imagerie HP 2.0 - All-in-One - (.Hewlett-Packard Company.) [HKLM] -- {9867A917-5D17-40DE-83BA-BEA5293194B1}
O42 - Logiciel: Photo et imagerie HP 2.0 - All-in-One Pilote - (.Hewlett-Packard Company.) [HKLM] -- {6ECB39BD-73C2-44DD-B1A0-898207C58D8B}
O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM] -- Picasa 3
O42 - Logiciel: Post-it® Software Notes Lite - (.Pas de propriétaire.) [HKLM] -- PSN
O42 - Logiciel: REALTEK PCIE NIC Driver - (.REALTEK Semiconductor Corp..) [HKLM] -- {17E2F183-BAC4-4D01-BD7A-59F781E17EFA}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Safari - (.Apple Inc..) [HKLM] -- {6C1E7AA1-44E9-446D-AAB2-0DE6D9EFEAB1}
O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473
O42 - Logiciel: Skype(TM) 5.0 - (.Skype Technologies S.A..) [HKLM] -- {E633D396-5188-4E9D-8F6B-BFB8BF3467E8}
O42 - Logiciel: Unity Web Player - (.Unity Technologies ApS.) [HKCU] -- UnityWebPlayer
O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
O42 - Logiciel: VirtualCloneDrive - (.Elaborate Bytes.) [HKLM] -- VirtualCloneDrive
O42 - Logiciel: WinRAR archiver - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver
O42 - Logiciel: Windows Feature Pack for Storage (32-bit) - IMAPI update for Blu-Ray - (.Microsoft Corporation.) [HKLM] -- KB952011
O42 - Logiciel: Windows Imaging Component - (.Microsoft Corporation.) [HKLM] -- WIC
O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8
O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11
O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime
O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11
O42 - Logiciel: Windows XP Media Center Edition 2005 KB2502898 - (.Microsoft Corporation.) [HKLM] -- KB2502898
O42 - Logiciel: Windows XP Media Center Edition 2005 KB925766 - (.Microsoft Corporation.) [HKLM] -- KB925766
O42 - Logiciel: Windows XP Media Center Edition 2005 KB973768 - (.Microsoft Corporation.) [HKLM] -- KB973768
O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service
O42 - Logiciel: XnView 1.97.8 - (.Gougelet Pierre-e.) [HKLM] -- XnView_is1
O42 - Logiciel: avast! Free Antivirus - (.AVAST Software.) [HKLM] -- avast
O42 - Logiciel: hp psc 1100 series - (.Hewlett-Packard Company.) [HKLM] -- {01161F64-6897-4885-93A0-A9F7BE9A4253}
O42 - Logiciel: µTorrent - (.Pas de propriétaire.) [HKLM] -- uTorrent

---\ HKCU & HKLM Software Keys
[HKCU\Software\3M]
[HKCU\Software\7-Zip]
[HKCU\Software\ALWIL Software]
[HKCU\Software\AVAST Software]
[HKCU\Software\Ad-Remover]
[HKCU\Software\Adobe]
[HKCU\Software\Aion]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\BitTorrent]
[HKCU\Software\Bugsplat]
[HKCU\Software\Canneverbe Limited]
[HKCU\Software\CeWe Color]
[HKCU\Software\ClassesB]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\CoreVorbis]
[HKCU\Software\Cyberlink]
[HKCU\Software\Digital River]
[HKCU\Software\DivXNetworks]
[HKCU\Software\Elaborate Bytes]
[HKCU\Software\GNU]
[HKCU\Software\GSpot Appliance Corp]
[HKCU\Software\Gabest]
[HKCU\Software\Genesis Digital Innovations]
[HKCU\Software\Google]
[HKCU\Software\Haali]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\HookNetwork]
[HKCU\Software\INCAInternet]
[HKCU\Software\Intel]
[HKCU\Software\JEDI-VCL]
[HKCU\Software\JavaSoft]
[HKCU\Software\Jitit Virtual Registry]
[HKCU\Software\Lavalys]
[HKCU\Software\LightScribe]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\LogMeIn]
[HKCU\Software\Logitech]
[HKCU\Software\MUSICMATCH]
[HKCU\Software\Macromedia]
[HKCU\Software\MediaInfo]
[HKCU\Software\Moovida]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Mumble]
[HKCU\Software\NCsoft]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\Oak Technology]
[HKCU\Software\Pando Networks]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\Realtek]
[HKCU\Software\Revenger inc.]
[HKCU\Software\RocketDock]
[HKCU\Software\SkypeApps]
[HKCU\Software\Skype]
[HKCU\Software\SoftVTU]
[HKCU\Software\Trolltech]
[HKCU\Software\UberIcon-v1.0.0]
[HKCU\Software\Unity]
[HKCU\Software\Usbfix]
[HKCU\Software\VSO]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\Yahoo]
[HKCU\Software\cybelsoft]
[HKLM\Software\3M]
[HKLM\Software\AGEIA Technologies]
[HKLM\Software\ALWIL Software]
[HKLM\Software\ATI Technologies Inc.]
[HKLM\Software\ATI Technologies]
[HKLM\Software\AVAST Software]
[HKLM\Software\Adobe]
[HKLM\Software\Alice ADSL]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\BackWeb]
[HKLM\Software\Bricomix.net]
[HKLM\Software\C07ft5Y]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Codec Tweak Tool]
[HKLM\Software\CrazyLoader]
[HKLM\Software\Cyberlink]
[HKLM\Software\DIOC]
[HKLM\Software\DivXNetworks]
[HKLM\Software\Dofus 2]
[HKLM\Software\Elaborate Bytes]
[HKLM\Software\GNU]
[HKLM\Software\Gabest]
[HKLM\Software\GalaNetEu]
[HKLM\Software\Gemplus]
[HKLM\Software\Google]
[HKLM\Software\HPS]
[HKLM\Software\HaaliMkx]
[HKLM\Software\Hewlett-Packard]
[HKLM\Software\Intel]
[HKLM\Software\InterVideo]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\KLCodecPack]
[HKLM\Software\LanSetup]
[HKLM\Software\LightScribe]
[HKLM\Software\Macromedia]
[HKLM\Software\MimarSinan]
[HKLM\Software\Moovida]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\NCsoft]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\ODBC]
[HKLM\Software\Oak Technology]
[HKLM\Software\Pando Networks]
[HKLM\Software\Policies]
[HKLM\Software\Program Groups]
[HKLM\Software\REALTEK Semiconductor Corporation]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Revenger inc.]
[HKLM\Software\S3R521]
[HKLM\Software\Schlumberger]
[HKLM\Software\Secure]
[HKLM\Software\Set8168]
[HKLM\Software\Skype]
[HKLM\Software\Sonic]
[HKLM\Software\TechCity]
[HKLM\Software\TrendMicro]
[HKLM\Software\Uniblue]
[HKLM\Software\VSO]
[HKLM\Software\Windows 3.1 Migration Status]
[HKLM\Software\Windows]
[HKLM\Software\XnView]
[HKLM\Software\Yahoo]
[HKLM\Software\cybelsoft]
[HKLM\Software\iColorFolder]
[HKLM\Software\knight]
[HKLM\Software\logitech]
[HKLM\Software\mozilla.org]



---\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 12/01/2010 - 18:49:14 - [3274392] ----D- C:\Program Files\3M
O43 - CFD: 20/08/2009 - 14:15:10 - [3094515] ----D- C:\Program Files\7-Zip
O43 - CFD: 06/07/2011 - 19:32:40 - [279505046] ----D- C:\Program Files\Ad-Remover
O43 - CFD: 30/10/2010 - 19:06:48 - [163076362] ----D- C:\Program Files\Adobe
O43 - CFD: 12/01/2010 - 16:37:40 - [123222710] ----D- C:\Program Files\AGEIA Technologies
O43 - CFD: 01/07/2010 - 00:08:48 - [0] ----D- C:\Program Files\ALDI
O43 - CFD: 20/08/2009 - 14:07:44 - [1994042] ----D- C:\Program Files\Alice
O43 - CFD: 29/07/2010 - 11:23:30 - [211950609] ----D- C:\Program Files\Alwil Software
O43 - CFD: 08/07/2011 - 16:38:44 - [2428606] ----D- C:\Program Files\Apple Software Update
O43 - CFD: 07/11/2009 - 17:15:44 - [139264] ----D- C:\Program Files\ATI Technologies
O43 - CFD: 16/07/2009 - 17:39:42 - [2355410] ----D- C:\Program Files\CCleaner
O43 - CFD: 09/06/2011 - 22:22:52 - [17887826] ----D- C:\Program Files\CDBurnerXP
O43 - CFD: 16/07/2009 - 22:00:02 - [24619792] ----D- C:\Program Files\Common Files
O43 - CFD: 16/07/2009 - 16:21:36 - [0] ----D- C:\Program Files\ComPlus Applications
O43 - CFD: 01/07/2010 - 00:06:54 - [0] ----D- C:\Program Files\Dofus
O43 - CFD: 21/10/2010 - 18:34:28 - [971232969] ----D- C:\Program Files\Dofus 2
O43 - CFD: 16/07/2009 - 17:40:58 - [1955543] ----D- C:\Program Files\Elaborate Bytes
O43 - CFD: 24/06/2011 - 16:09:56 - [422983495] ----D- C:\Program Files\Fichiers communs
O43 - CFD: 29/01/2010 - 06:47:40 - [96166707] ----D- C:\Program Files\Google
O43 - CFD: 27/07/2009 - 14:42:32 - [2902968620] ----D- C:\Program Files\gPotato.eu
O43 - CFD: 16/09/2009 - 16:04:34 - [383066236] ----D- C:\Program Files\Hewlett-Packard
O43 - CFD: 12/07/2011 - 23:37:00 - [20538172] --H-D- C:\Program Files\InstallShield Installation Information
O43 - CFD: 07/11/2009 - 17:29:00 - [96701] ----D- C:\Program Files\Intel
O43 - CFD: 16/06/2011 - 20:00:08 - [4673988] ----D- C:\Program Files\Internet Explorer
O43 - CFD: 24/06/2011 - 16:09:42 - [81314702] ----D- C:\Program Files\Java
O43 - CFD: 16/07/2009 - 17:42:16 - [37506493] ----D- C:\Program Files\K-Lite Codec Pack
O43 - CFD: 27/07/2009 - 10:31:42 - [40218858] ----D- C:\Program Files\Logitech
O43 - CFD: 07/11/2009 - 17:26:14 - [4935959] ----D- C:\Program Files\ma-config.com
O43 - CFD: 12/07/2011 - 23:36:48 - [838644] ----D- C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD: 14/01/2010 - 04:54:30 - [2152579] ----D- C:\Program Files\Messenger
O43 - CFD: 16/07/2009 - 16:25:42 - [0] ----D- C:\Program Files\microsoft frontpage
O43 - CFD: 16/07/2009 - 17:47:22 - [551059659] ----D- C:\Program Files\Microsoft Office
O43 - CFD: 16/07/2009 - 17:47:20 - [14904] ----D- C:\Program Files\Microsoft Visual Studio
O43 - CFD: 16/07/2009 - 17:47:34 - [3178824] ----D- C:\Program Files\Microsoft Works
O43 - CFD: 16/07/2009 - 17:46:54 - [8152064] ----D- C:\Program Files\Microsoft.NET
O43 - CFD: 12/08/2010 - 14:18:58 - [10949041] ----D- C:\Program Files\Movie Maker
O43 - CFD: 25/06/2011 - 09:01:24 - [30507528] ----D- C:\Program Files\Mozilla Firefox
O43 - CFD: 15/08/2009 - 03:06:32 - [26521] ----D- C:\Program Files\MSBuild
O43 - CFD: 04/08/2009 - 21:40:18 - [21471461] ----D- C:\Program Files\MSN
O43 - CFD: 16/07/2009 - 16:19:44 - [8745735] ----D- C:\Program Files\MSN Gaming Zone
O43 - CFD: 15/08/2009 - 03:01:26 - [6849] ----D- C:\Program Files\MSXML 6.0
O43 - CFD: 06/04/2010 - 15:48:22 - [37973809] ----D- C:\Program Files\Mumble
O43 - CFD: 16/08/2009 - 13:35:50 - [378999] ----D- C:\Program Files\MUSICMATCH
O43 - CFD: 18/07/2009 - 01:33:22 - [48822055834] ----D- C:\Program Files\NCSoft
O43 - CFD: 14/01/2010 - 04:40:46 - [3285523] ----D- C:\Program Files\NetMeeting
O43 - CFD: 09/08/2009 - 20:33:06 - [0] ----D- C:\Program Files\NOS
O43 - CFD: 16/07/2009 - 16:21:26 - [1804] ----D- C:\Program Files\Online Services
O43 - CFD: 16/12/2010 - 04:00:36 - [4379321] ----D- C:\Program Files\Outlook Express
O43 - CFD: 27/10/2010 - 18:20:58 - [7367542] ----D- C:\Program Files\Pando Networks
O43 - CFD: 12/07/2011 - 23:37:00 - [48346159] ----D- C:\Program Files\Realtek
O43 - CFD: 15/08/2009 - 03:06:22 - [36400897] ----D- C:\Program Files\Reference Assemblies
O43 - CFD: 08/07/2011 - 16:38:22 - [42293002] ----D- C:\Program Files\Safari
O43 - CFD: 16/07/2009 - 16:24:00 - [1025] ----D- C:\Program Files\Services en ligne
O43 - CFD: 12/12/2010 - 17:14:14 - [19057007] R---D- C:\Program Files\Skype
O43 - CFD: 20/08/2009 - 14:07:52 - [393007] ----D- C:\Program Files\TechCity Solutions
O43 - CFD: 12/07/2011 - 23:36:56 - [4129440] ----D- C:\Program Files\Uniblue
O43 - CFD: 16/07/2009 - 16:32:20 - [0] --H-D- C:\Program Files\Uninstall Information
O43 - CFD: 01/01/2011 - 16:11:36 - [399736] ----D- C:\Program Files\uTorrent
O43 - CFD: 12/01/2010 - 16:36:38 - [17098024] ----D- C:\Program Files\VLCPortable
O43 - CFD: 12/07/2011 - 23:36:30 - [117177722] ----D- C:\Program Files\VSO
O43 - CFD: 15/12/2009 - 05:29:52 - [3581070] ----D- C:\Program Files\Windows Media Connect 2
O43 - CFD: 15/12/2009 - 05:29:50 - [9600055] ----D- C:\Program Files\Windows Media Player
O43 - CFD: 14/01/2010 - 04:40:44 - [3942655] ----D- C:\Program Files\Windows NT
O43 - CFD: 16/07/2009 - 16:21:02 - [41055406] ----D- C:\Program Files\Windows Plus
O43 - CFD: 16/07/2009 - 16:24:02 - [0] --H-D- C:\Program Files\WindowsUpdate
O43 - CFD: 16/07/2009 - 17:40:12 - [3892521] ----D- C:\Program Files\WinRAR
O43 - CFD: 16/07/2009 - 16:25:42 - [0] ----D- C:\Program Files\xerox
O43 - CFD: 28/09/2010 - 18:40:14 - [8605678] ----D- C:\Program Files\XnView
O43 - CFD: 13/07/2011 - 18:25:28 - [8756578] ----D- C:\Program Files\ZHPDiag
O43 - CFD: 16/07/2009 - 22:00:02 - [24619792] ----D- C:\Program Files\Common Files\INCA Shared
O43 - CFD: 12/01/2010 - 18:49:28 - [6656] ----D- C:\Documents and Settings\Laeti\Application Data\3M
O43 - CFD: 16/12/2009 - 22:27:54 - [3111875] ----D- C:\Documents and Settings\Laeti\Application Data\Adobe
O43 - CFD: 16/12/2009 - 22:59:34 - [4650] ----D- C:\Documents and Settings\Laeti\Application Data\app
O43 - CFD: 26/03/2011 - 11:37:58 - [11631171] ----D- C:\Documents and Settings\Laeti\Application Data\Apple Computer
O43 - CFD: 18/07/2009 - 18:06:24 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\ATI
O43 - CFD: 08/06/2011 - 22:45:08 - [1695] ----D- C:\Documents and Settings\Laeti\Application Data\Canneverbe Limited
O43 - CFD: 25/06/2011 - 09:51:50 - [82185567] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus 2
O43 - CFD: 12/04/2010 - 10:25:18 - [6896] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus-2.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 12/04/2010 - 11:36:52 - [9402] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus-3.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 12/04/2010 - 20:06:10 - [30] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus-4.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 23/12/2010 - 00:45:14 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus-5.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 27/02/2011 - 10:22:50 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus-6.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 11/04/2010 - 21:10:36 - [16911] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 20/07/2009 - 12:10:56 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Droppix
O43 - CFD: 27/03/2011 - 00:52:52 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\dvdcss
O43 - CFD: 30/06/2010 - 23:43:02 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\FOG Downloader
O43 - CFD: 18/07/2009 - 01:33:08 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\GetRightToGo
O43 - CFD: 09/08/2009 - 14:56:24 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Google
O43 - CFD: 16/01/2011 - 13:38:04 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Help
O43 - CFD: 16/09/2009 - 16:07:08 - [2828] ----D- C:\Documents and Settings\Laeti\Application Data\Hewlett-Packard
O43 - CFD: 19/12/2009 - 23:45:56 - [3638] ----D- C:\Documents and Settings\Laeti\Application Data\Icones
O43 - CFD: 16/07/2009 - 16:32:26 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Identities
O43 - CFD: 17/07/2009 - 17:34:44 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\InstallShield
O43 - CFD: 27/07/2009 - 10:36:56 - [10767] ----D- C:\Documents and Settings\Laeti\Application Data\Logitech
O43 - CFD: 16/07/2009 - 18:43:14 - [58357] ----D- C:\Documents and Settings\Laeti\Application Data\Macromedia
O43 - CFD: 10/07/2011 - 22:00:38 - [9451243] ----D- C:\Documents and Settings\Laeti\Application Data\Malwarebytes
O43 - CFD: 08/06/2011 - 22:15:28 - [16] ----D- C:\Documents and Settings\Laeti\Application Data\Media Player Classic
O43 - CFD: 24/06/2011 - 16:35:40 - [14881541] -S--D- C:\Documents and Settings\Laeti\Application Data\Microsoft
O43 - CFD: 12/07/2011 - 23:36:54 - [21950] ----D- C:\Documents and Settings\Laeti\Application Data\moovida-1
O43 - CFD: 30/10/2010 - 19:11:46 - [3258327] ----D- C:\Documents and Settings\Laeti\Application Data\Mozilla
O43 - CFD: 04/08/2009 - 21:40:40 - [853608] ----D- C:\Documents and Settings\Laeti\Application Data\MSNInstaller
O43 - CFD: 13/11/2010 - 03:41:02 - [435490] ----D- C:\Documents and Settings\Laeti\Application Data\Mumble
O43 - CFD: 16/12/2009 - 22:59:34 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Reg.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 21/05/2011 - 22:22:28 - [6627640] ----D- C:\Documents and Settings\Laeti\Application Data\Skype
O43 - CFD: 21/05/2011 - 22:11:50 - [5544] ----D- C:\Documents and Settings\Laeti\Application Data\skypePM
O43 - CFD: 12/01/2010 - 17:54:34 - [31965402] ----D- C:\Documents and Settings\Laeti\Application Data\Sun
O43 - CFD: 25/04/2010 - 01:23:42 - [38815] ----D- C:\Documents and Settings\Laeti\Application Data	eamspeak2
O43 - CFD: 09/02/2010 - 04:42:32 - [187849] ----D- C:\Documents and Settings\Laeti\Application Data\TS3Client
O43 - CFD: 12/07/2011 - 23:36:58 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Uniblue
O43 - CFD: 19/05/2011 - 23:24:58 - [44] ----D- C:\Documents and Settings\Laeti\Application Data\Unity
O43 - CFD: 14/06/2011 - 03:14:34 - [2913304] ----D- C:\Documents and Settings\Laeti\Application Data\uTorrent
O43 - CFD: 19/10/2010 - 00:51:44 - [475423] ----D- C:\Documents and Settings\Laeti\Application Data\vlc
O43 - CFD: 11/07/2011 - 13:32:48 - [5890] ----D- C:\Documents and Settings\Laeti\Application Data\Vso
O43 - CFD: 28/09/2010 - 18:45:16 - [601052] ----D- C:\Documents and Settings\Laeti\Application Data\XnView
O43 - CFD: 15/08/2009 - 18:04:12 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Yahoo!
O43 - CFD: 30/10/2010 - 19:06:26 - [116670] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Adobe
O43 - CFD: 12/01/2010 - 17:03:58 - [0] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Apple
O43 - CFD: 12/01/2010 - 17:04:42 - [803755031] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Apple Computer
O43 - CFD: 24/06/2011 - 16:36:10 - [11125] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\ApplicationHistory
O43 - CFD: 07/09/2010 - 23:06:32 - [36388416] ----D- C:\Docume

eillane · Answer

voici le rapport ad remover
======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par TeamXscript le 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (CLEAN [3]) -> Lancé à 21:07:04 le 13/07/2011, Mode normal

Microsoft Windows XP Professionnel Service Pack 3 (X86) 
Laeti@SALON ( ) 
 
============== ACTION(S) ==============



(!) -- Fichiers temporaires supprimés.




============== SCAN ADDITIONNEL ==============

**** Mozilla Firefox Version [3.6.18 (fr)] ****

HKLM_MozillaPlugins\@pandonetworks.com/PandoWebPlugin (x)
HKLM_MozillaPlugins\Adobe Reader (x)
HKCU_MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0 (x)
HKCU_MozillaPlugins\pandonetworks.com/PandoWebPlugin (x)

-- C:\Documents and Settings\Laeti\Application Data\Mozilla\FireFox\Profiles\dx0c1dt4.default --
Prefs.js - browser.startup.homepage_override.mstone, rv:1.9.2.18

========================================

**** Internet Explorer Version [8.0.6001.18702] ****

HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
HKCU_Main|Start Page - hxxp://fr.msn.com/
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Start Page - hxxp://fr.msn.com/
HKCU_SearchScopes\{550f51ed-7625-4b6f-9e7b-3f0debb33cc0} - "Wibeez" (hxxp://www.wibeez.com/meteo?search&q={searchTerms})
HKLM_Toolbar|{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} (C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll)
HKLM_ElevationPolicy\{C9BDBBC1-2B4F-4669-BB5A-51C8D1770C1A} - C:\WINDOWS\Downloaded Program Files\LMIGuardian.exe (LogMeIn, Inc.)
HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?)
BHO\{02478D38-C3F9-4efb-9B51-7695ECA05670} (?)
BHO\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - "avast! WebRep" (C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll)

========================================

C:\Program Files\Ad-Remover\Quarantine: 3228 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 28 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 06/07/2011 19:34:10 (16533 Octet(s)) 
C:\Ad-Report-CLEAN[2].txt - 06/07/2011 23:13:12 (2673 Octet(s)) 
C:\Ad-Report-CLEAN[3].txt - 13/07/2011 21:08:33 (2357 Octet(s)) 

Fin à: 21:09:18, 13/07/2011 
 
============== E.O.F ==============

eillane · Answer

oui oui dsl... javais pas vu sur linstant, mais c bon jai commencé denvoyé les rapports, voici maintenant celui de usbfix (ça va jai pris le coup de main)

############################## | UsbFix 7.049 | [Suppression]

Utilisateur: Laeti (Administrateur) # SALON [ ]
Mis à jour le 12/07/2011 par TeamXscript
Lancé à 21:49:38 | 13/07/2011
Site Web: http://www.teamxscript.org
Submit your sample: http://www.teamxscript.org/Upload.php
Contact: TeamXscript.ElDesaparecido@gmail.com

CPU:  Intel(R) Pentium(R) D CPU 3.00GHz
CPU 2:  Intel(R) Pentium(R) D CPU 3.00GHz
Microsoft Windows XP Professionnel (5.1.2600 32-Bit) # Service Pack 3
Internet Explorer 8.0.6001.18702

Pare-feu Windows: Activé
Antivirus: avast! Antivirus 5.0.100664499 [(!) Disabled | Updated]
RAM -> 2943 Mo 
C:\ (%systemdrive%) -> Disque fixe # 115 Go (8 Go libre(s) - 7%) [] # NTFS
D:\ -> Disque fixe # 112 Go (99 Go libre(s) - 89%) [BACKUP] # NTFS
E:\ -> Disque fixe # 6 Go (4 Go libre(s) - 61%) [RECOVER] # FAT32
F:\ -> CD-ROM
J:\ -> Disque amovible # 8 Go (7 Go libre(s) - 93%) [] # FAT32
K:\ -> CD-ROM
L:\ -> Disque fixe # 233 Go (167 Go libre(s) - 72%) [Expansion Drive] # NTFS

################## | Éléments infectieux |

Supprimé! C:\Recycler\S-1-5-21-854245398-813497703-725345543-1003
Supprimé! C:\Recycler\S-1-5-21-854245398-813497703-725345543-1003(2)
Supprimé! D:\Recycler\S-1-5-21-854245398-813497703-725345543-1003
Supprimé! D:\Recycler\S-1-5-21-854245398-813497703-725345543-1003(2)
Supprimé! L:\Recycler\S-1-5-21-854245398-813497703-725345543-1003

################## | Registre |


################## | Mountpoints2 |


################## | Listing |

[06/07/2011 - 19:35:59 | N | 16533] 	C:\Ad-Report-CLEAN[1].txt
[06/07/2011 - 23:14:01 | N | 2673] 	C:\Ad-Report-CLEAN[2].txt
[13/07/2011 - 21:09:18 | N | 2739] 	C:\Ad-Report-CLEAN[3].txt
[16/07/2009 - 17:48:58 | D ] 	C:\ATI
[16/07/2009 - 16:25:28 | N | 0] 	C:\AUTOEXEC.BAT
[10/07/2011 - 20:23:32 | D ] 	C:\Autorun(2).inf
[12/07/2011 - 23:36:48 | RASHD ] 	C:\Autorun.inf
[12/07/2011 - 23:54:25 | N | 209] 	C:\boot.ini
[10/08/2004 - 14:00:00 | N | 4952] 	C:\Bootfont.bin
[12/07/2011 - 23:36:22 | D ] 	C:\Config.Msi
[16/07/2009 - 16:25:28 | N | 0] 	C:\CONFIG.SYS
[16/07/2009 - 16:30:36 | D ] 	C:\Documents and Settings
[13/07/2011 - 13:37:19 | D ] 	C:\En attente
[27/10/2010 - 18:53:52 | D ] 	C:\GAMIGO
[30/06/2011 - 14:13:04 | N | 10725] 	C:\hpfr3420.log
[30/06/2011 - 14:13:04 | N | 525] 	C:\hpfr3420.xml
[07/11/2009 - 17:28:47 | D ] 	C:\Intel
[16/07/2009 - 16:25:28 | N | 0] 	C:\IO.SYS
[16/07/2009 - 16:25:28 | N | 0] 	C:\MSDOS.SYS
[16/07/2009 - 17:44:29 | RHD ] 	C:\MSOCache
[10/08/2004 - 14:00:00 | N | 47564] 	C:\NTDETECT.COM
[14/01/2010 - 04:38:56 | N | 252240] 	C:\ntldr
[07/11/2009 - 17:34:45 | D ] 	C:\NVIDIA
[13/07/2011 - 21:10:36 | ASH | 1610612736] 	C:\pagefile.sys
[11/07/2011 - 23:05:51 | N | 512] 	C:\PhysicalDisk0_MBR.bin
[07/11/2009 - 17:28:36 | D ] 	C:\pilotes
[12/07/2011 - 23:36:58 | D ] 	C:\Program Files
[13/07/2011 - 21:50:42 | SHD ] 	C:\RECYCLER
[16/07/2009 - 16:29:38 | SHD ] 	C:\System Volume Information
[10/07/2011 - 20:46:32 | N | 2394] 	C:\TB.txt
[19/10/2010 - 00:40:26 | D ] 	C:\Temp
[12/07/2011 - 23:36:48 | D ] 	C:\ToolBar SD
[13/07/2011 - 21:50:42 | D ] 	C:\UsbFix
[13/07/2011 - 21:50:42 | A | 1444] 	C:\UsbFix.txt
[10/07/2011 - 20:15:51 | D ] 	C:\UsbFix_Upload_Me
[13/07/2011 - 21:11:12 | D ] 	C:\WINDOWS
[10/07/2011 - 19:39:46 | N | 38966] 	C:\ZHPExportRegistry-10-07-2011-19-39-46.txt
[13/07/2011 - 21:00:24 | N | 37778] 	C:\ZHPExportRegistry-13-07-2011-21-00-24.txt
[03/01/2007 - 17:05:26 | N | 168592911] 	D:\(App) -Adobe Photoshop 7.0_for PC_with serial (Photoshop7.0+Illustrator7.0.zip
[15/12/2009 - 05:29:57 | D ] 	D:\0d8a326925892ed20acaac246ed7
[16/07/2009 - 17:41:15 | N | 75595848] 	D:\9-3_1_legacy_xp32-64_dd_ccc.exe
[15/12/2009 - 05:29:14 | D ] 	D:\9f713c0f2ac2aa016292f7c3db22b1d4
[17/07/2009 - 17:33:06 | N | 363552] 	D:\aion.exe
[10/07/2011 - 20:23:32 | D ] 	D:\Autorun(2).inf
[12/07/2011 - 23:37:06 | RASHD ] 	D:\Autorun.inf
[17/07/2009 - 15:19:31 | N | 308160] 	D:\avast_home_setup.exe
[04/12/2009 - 02:40:11 | D ] 	D:\bricopack-vista-inspirat-ultimate-2-crystalxp.net-fr-130
[11/02/2008 - 01:28:25 | N | 28981233] 	D:\bricopack-vista-inspirat-ultimate-2-crystalxp.net-fr-130.zip
[16/02/2009 - 17:25:18 | N | 3171208] 	D:\ccsetup216.exe
[16/02/2009 - 17:23:35 | N | 3183182] 	D:\cdbxp_setup_4.2.3.1110.exe
[02/08/2008 - 23:36:46 | D ] 	D:\Delicious 2 Deluxe + crack
[12/12/2008 - 14:02:15 | N | 181040153] 	D:\Delicious 2 Deluxe + crack.rar
[06/07/2011 - 17:41:37 | N | 180100102] 	D:\Deluxe Pack Games-14 Games (Zuma,Cake Mania 1&2, Feeding Frenzy 1 &2, Diner Dash 2, Pizza Frenzy,.rar
[23/05/2009 - 01:21:33 | N | 2953069] 	D:\DofusInstaller_v1_27_0.exe
[12/10/2008 - 18:12:03 | N | 2945816] 	D:\dotnetfx3setup.exe
[06/07/2009 - 09:39:02 | N | 341634] 	D:\Downloader_4Story_FR.exe
[02/05/2006 - 09:53:13 | D ] 	D:\Driver
[15/08/2009 - 03:06:06 | D ] 	D:\ebec5711bd3151ea2833f8d3
[26/01/2008 - 18:08:58 | N | 5843256] 	D:\Firefox Setup 2.0.0.11.exe
[30/10/2010 - 19:09:20 | N | 8174952] 	D:\Firefox Setup 3.5.15.exe
[16/07/2009 - 19:21:14 | N | 812568246] 	D:\fly_for_fun_client_complet_-_acte_iii_bataille_pour_madrigal_francais_41629.exe
[04/08/2009 - 02:23:54 | N | 1424839] 	D:\FTool Extended.rar
[12/10/2008 - 17:12:31 | N | 2513432] 	D:\infinst_autol.exe
[26/10/2010 - 14:36:17 | N | 19725152] 	D:\installation-ie8-xp-01NET.exe
[20/06/2009 - 16:46:12 | N | 1878888] 	D:\install_flash_player.exe
[27/10/2010 - 18:48:43 | N | 927093996] 	D:\LastChaos_French_Setup.exe
[01/05/2008 - 13:07:20 | N | 4225744] 	D:\Limewire Lime Wire Pro 4[1].12.3.exe
[08/08/2010 - 03:49:21 | N | 1046048] 	D:\moovida-setup.exe
[12/01/2010 - 18:48:58 | N | 2502128] 	D:\pn30lous.exe
[13/07/2011 - 21:50:42 | SHD ] 	D:\RECYCLER
[07/05/2009 - 21:17:12 | N | 176212096] 	D:\rw2_021_w02_fra.exe
[14/04/2008 - 10:48:48 | N | 91003576] 	D:\Samsung Pc Studio 3 (Pc Studio 2.0.9 Internet Acess Usb Driver 4.24 Mobile Sgh Z500.rar
[14/04/2008 - 08:04:46 | N | 65761963] 	D:\Samsung PC Studio v.3.1.1 Live Update Installer + USB Drivers + Manual PDF_DnGnMsTr.rar
[20/06/2009 - 13:54:09 | N | 49623696] 	D:\SetupDroppixRecorder01Net.exe
[30/12/2007 - 07:06:58 | N | 1000052483] 	D:\shaiya.exe
[02/04/2009 - 19:15:32 | N | 1084022848] 	D:\Shaiya_FR_FullClient_090310.exe
[27/12/2009 - 01:52:07 | N | 2020136] 	D:\SkypeSetup.exe
[04/02/2008 - 02:28:10 | D ] 	D:\StudioLine3
[19/01/2007 - 02:23:10 | SHD ] 	D:\System Volume Information
[02/05/2006 - 12:08:06 | D ] 	D:\Tools
[10/02/2010 - 17:46:43 | D ] 	D:\Utilitaire
[06/11/2008 - 17:37:07 | D ] 	D:\WOW
[17/07/2008 - 14:37:01 | N | 93493255] 	D:\[Full Version] diner dash (ok).zip
[02/05/2006 - 15:02:48 | N | 24] 	E:\SWCONF.DAT
[02/05/2006 - 09:57:02 | D ] 	E:\Recover
[12/07/2011 - 23:37:08 | RASHD ] 	E:\Autorun.inf
[10/07/2011 - 20:23:34 | D ] 	E:\Autorun(2).inf
[29/05/2006 - 15:33:32 | N | 49] 	E:\PASS.RPT
[19/01/2007 - 20:05:26 | SHD ] 	E:\System Volume Information
[19/01/2007 - 21:31:26 | SHD ] 	E:\Recycled
[02/01/2009 - 23:52:08 | D ] 	J:\App
[03/01/2009 - 00:05:12 | D ] 	J:\Data
[03/01/2009 - 00:05:14 | D ] 	J:\EmDesk
[30/09/2007 - 21:37:58 | N | 79198] 	J:\EmDesk.exe
[10/07/2011 - 20:23:34 | RASHD ] 	J:\Autorun.inf
[02/02/2011 - 10:45:27 | D ] 	L:\$AVG
[10/07/2011 - 20:19:42 | SHD ] 	L:\$RECYCLE.BIN
[11/07/2011 - 22:43:58 | D ] 	L:\(PC GAME+CRACK) Luxor
[06/02/2011 - 13:44:34 | N | 142] 	L:\.~lock.projet pedagogique les ajoncs.docx#
[01/01/2011 - 21:00:32 | N | 7685226251] 	L:\Alice In Wonderland 3D.mkv
[12/01/2011 - 20:13:40 | N | 733323264] 	L:\Arsène Lupin.avi
[10/07/2011 - 20:23:32 | RASHD ] 	L:\Autorun.inf
[13/11/2008 - 19:04:43 | N | 53054] 	L:\baba.ico
[09/06/2011 - 13:35:02 | D ] 	L:\backup
[10/07/2011 - 18:35:07 | D ] 	L:\Bleach part 1
[12/06/2011 - 12:43:52 | D ] 	L:\Bleach part 2
[01/04/2011 - 01:51:33 | N | 740259840] 	L:\Elle.S.appelait.Sarah.2011.LIMITED.FRENCH.SUBFORCED.REPACK.1CD.DVDRiP.XViD-UraM.avi
[13/01/2011 - 17:32:00 | D ] 	L:\FILMS et séries
[08/06/2011 - 20:29:46 | N | 12602568] 	L:\Firefox Setup 4-3.0.1.exe
[16/04/2011 - 22:26:58 | N | 3108653056] 	L:\fr_windows_7_enterprise_with_sp1_x64_dvd_620217.iso
[11/07/2011 - 22:50:10 | D ] 	L:\jeux1
[16/02/2011 - 18:33:05 | N | 734683136] 	L:\L'Effet Papillon 2.avi
[20/01/2011 - 04:10:45 | N | 1651010447] 	L:\L'expérience.mkv
[26/01/2010 - 18:53:21 | N | 732956672] 	L:\L'illusionniste.avi
[23/09/2010 - 18:03:18 | N | 27398] 	L:\laetitia.ico
[13/01/2011 - 17:15:02 | D ] 	L:\le dernier maitre de l'air
[12/01/2011 - 19:01:14 | N | 730183680] 	L:\Le Syndrome du Titanic.avi
[31/01/2011 - 13:50:18 | N | 733272064] 	L:\LovBones.avi
[13/01/2011 - 17:21:06 | D ] 	L:\Matrix I.II.III
[02/04/2011 - 17:16:06 | N | 735811584] 	L:\Memoires D'une Geisha Dvdrip Fr .avi
[06/02/2011 - 21:15:15 | N | 734230528] 	L:\Never.Let.Me.Go..avi
[10/02/2011 - 11:28:48 | N | 735752192] 	L:\persecutions.avi
[10/07/2011 - 18:35:11 | D ] 	L:\Play liste
[13/07/2011 - 21:50:42 | SHD ] 	L:\RECYCLER
[01/04/2000 - 18:04:28 | SHD ] 	L:\System Volume Information
[27/03/2011 - 17:21:28 | D ] 	L:\The Good Wife saison 1 french dvdrip
[13/01/2011 - 17:14:38 | D ] 	L:\The.Crazies.FRENCH.DVDRIP.XviD.AC3-WTF
[06/01/2011 - 21:13:29 | N | 1465036800] 	L:\The.Tournament.READNFO.FRENCH.DVDRIP.XVID.AC3-TBoss.avi
[10/07/2011 - 18:35:07 | ASH | 4096] 	L:\Thumbs.db
[10/07/2011 - 18:35:06 | D ] 	L:\[REC]2007.VOST.multi.DVD-rip

################## | Vaccin |

C:\Autorun(2).inf -> Vaccin créé par UsbFix (TeamXscript)
C:\Autorun.inf -> Vaccin créé par UsbFix (TeamXscript)
D:\Autorun(2).inf -> Vaccin créé par UsbFix (TeamXscript)
D:\Autorun.inf -> Vaccin créé par UsbFix (TeamXscript)
E:\Autorun.inf -> Vaccin créé par UsbFix (TeamXscript)
E:\Autorun(2).inf -> Vaccin créé par UsbFix (TeamXscript)
J:\Autorun.inf -> Vaccin créé par UsbFix (TeamXscript)
L:\Autorun.inf -> Vaccin créé par UsbFix (TeamXscript)

eillane · Answer

ah oui je me suis trompé, jai confondu entre les 2 rapports, bon bah je poste le zhpfix que jai faisRapport de ZHPFix 1.12.3338 par Nicolas Coolman, Update du 12/07/2011
Fichier d'export Registre : 
Run by Laeti at 13/07/2011 21:00:24
Windows XP Professional Service Pack 3 (Build 2600)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html

========== Clé(s) du Registre ==========
SUPPRIME Partiel Software Key: {6084C211-01A1-464E-97A0-09772E122B50}
SUPPRIME Key: HKCU\Software\Moovida
SUPPRIME Key: HKLM\Software\CrazyLoader
SUPPRIME Key: HKLM\Software\Moovida
ABSENT CLSID MPSK: {b8f7842d-4355-11e0-9a1d-00138fe50013}
SUPPRIME CLSID MPSK: {e8d4ff68-d3d0-11de-9736-00138fe50013}
SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\ForceRenive
SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ShopperReportsSA
SUPPRIME Key: HKLM\Software\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}
SUPPRIME Key: HKLM\Software\Classes\Interface\{65A16874-2ED0-460E-A547-5FE2EC3A13A7}
SUPPRIME Key: HKLM\Software\Classes\Interface\{71E02280-5212-45C3-B174-4D5A35DA254F}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C5F65718-341D-4e7d-9842-FCB9CC89527E}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C5F65718-341D-4e7d-9842-FCB9CC89527E}
SUPPRIME Key: HKLM\Software\Classes\Installer\Features\5B4758C25396ECF468E04F8E063287FF

========== Valeur(s) du Registre ==========
SUPPRIME RunValue: RTHDCPL
SUPPRIME RunValue: Alcmtr
SUPPRIME RunValue: nwiz
SUPPRIME RunValue: Adobe Reader Speed Launcher
SUPPRIME RunValue: ctfmon.exe
ABSENT RunValue: ctfmon.exe
SUPPRIME AAKE KeyValue: C:\Program Files\CrazyLoader\crazyloader.exe
Aucune valeur présente dans la clé d'exception du registre (FirewallRaz)

========== Dossier(s) ==========
SUPPRIME Folder*: C:\Documents and Settings\Laeti\Application Data\moovida-1
SUPPRIME Folder*: C:\Documents and Settings\Laeti\Local Settings\Application Data\crazyloader Air
SUPPRIME Folder*: C:\Documents and Settings\Laeti\Local Settings\Application Data\Moovida
SUPPRIME Folder*: C:\Documents and Settings\Laeti\Local Settings\Application Data\moovida Air
SUPPRIME Flash Cookies: 19
SUPPRIME Temporaires Windows: : 69

========== Fichier(s) ==========
SUPPRIME c:\documents and settings\all users\menu démarrer\programmes\moovida.lnk
ABSENT File: c:\program files\fluendo\moovida\moovida.exe
SUPPRIME c:\documents and settings\laeti\menu démarrer\programmes\moovida.lnk
ABSENT File: c:\program files\crazyloader\crazyloader.exe
ABSENT Folder/File: c:\documents and settings\laeti\local settings\application data\crazyloader air
ABSENT Folder/File: c:\documents and settings\laeti\local settings\application data\moovida air
ABSENT Folder/File: c:\documents and settings\laeti\local settings\application data\moovida
SUPPRIME Flash Cookies: 3
SUPPRIME Temporaires Windows: : 43

========== Fichier HOSTS ==========
Le fichier Hosts est sain

========== Restauration Système ==========
Point de restauration du système créé avec succès


========== Récapitulatif ==========
14 : Clé(s) du Registre
8 : Valeur(s) du Registre
6 : Dossier(s)
9 : Fichier(s)
1 : Fichier HOSTS
1 : Restauration Système


========== Chemin du fichier rapport ==========
C:\Program Files\ZHPDiag\ZHPFixReport.txt



End of the scan in 01mn 41s
c bon ? c bien celui ci ? je pense que oui

eillane · Answer

voici le rapport maleware

Malwarebytes' Anti-Malware 1.51.0.1200
www.malwarebytes.org

Version de la base de données: 7116

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

13/07/2011 23:31:34
mbam-log-2011-07-13 (23-31-34).txt

Type d'examen: Examen complet (C:\|D:\|E:\|F:\|G:\|H:\|I:\|K:\|)
Elément(s) analysé(s): 262537
Temps écoulé: 52 minute(s), 3 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 1
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 3

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_QUERYEXPLORER_SERVICE (Adware.QueryExplorer) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
c:\system volume information\_restore{0c86064d-d9ed-4361-933d-19fe03728441}\RP528\A0096918.exe (Trojan.FakeMS) -> Quarantined and deleted successfully.
c:\WINDOWS\ie8\iexplore.exe (Trojan.FakeMS) -> Quarantined and deleted successfully.
d:\utilitaire\petits jeux cool\zuma deluxe\varia entrainement\zuma.deluxe.v1.0_trainer-fff\Trainer.exe (PUP.HackTool.HotKeysHook) -> Not selected for removal.

eillane · Answer

re bonsoir, je pense avoir terminé toutes les taches que vous mavez demandé, néanmoins, lorsque jai fais le dernier ZHPDiag, celui ci a encore bloqué a 64%, jai donc fais comme précédemment, clik sur continuer et fermer la fenetre en question, et ce à plusieures reprises, et ça a fini par reprendre jusque 100%, voici le dernier rapport :

Rapport de ZHPDiag v1.27.2406 par Nicolas Coolman, Update du 12/07/2011
Run by Laeti at 13/07/2011 23:41:28
Web site :  http://www.premiumorange.com/zeb-help-process/zhpdiag.html


---\ Web Browser
MSIE: Internet Explorer v8.0.6001.18702
MFIE: Mozilla Firefox v (Defaut)

---\ System Information
Windows XP Professional Service Pack 3 (Build 2600)
~ Processor: x86 Family 15 Model 6 Stepping 2, GenuineIntel
~ Operating System: 32 Bits
~ Boot mode: ~ Normal (Normal boot)
Total RAM: 2943 MB (81% free)
~ System Restore: Activé (Enable)
System drive C: has 8 GB (7%) free of 115 GB

---\ Logged in mode
~ Computer Name: SALON
~ User Name: Laeti
~ All Users Names: SUPPORT_388945a0, Laeti, HelpAssistant, ASPNET, Administrateur, 
~ Unselected Option: O45,O61,O62,O65,O66,O82
~ Logged in as Administrator

---\ Environnement Variables
~ %AppData%=C:\Documents and Settings\Laeti\Application Data\
~ %Desktop%=C:\Documents and Settings\Laeti\Bureau\
~ %Favorites%=C:\Documents and Settings\Laeti\Favoris\
~ %LocalAppData%=C:\Documents and Settings\Laeti\Local Settings\Application Data\
~ %StartMenu%=C:\Documents and Settings\Laeti\Menu Démarrer\

---\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 8 Go of 115 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 99 Go of 112 Go)
E:\ Hard drive, Flash drive, Thumb drive (Free 4 Go of 6 Go)
F:\ CD-ROM drive (Not Inserted)
G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
I:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
K:\ CD-ROM drive (Not Inserted)



---\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK



---\ Recherche particulière de fichiers génériques
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.13/07/2011 - 03:34:03.) -- C:\WINDOWS\Explorer.exe [1037824]
[MD5.93AD0B78C7357A05F50E594EC7C22300] - (....) (.13/07/2011 - 03:34:20.) -- C:\WINDOWS\system32undll32.exe [33792]
[MD5.42F5E14E33D79C236680468B1E4999F4] - (.Microsoft Corporation - Internet Extensions for Win32.) (.13/07/2011 - 17:06:11.) -- C:\WINDOWS\system32\wininet.dll [916480]
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.13/07/2011 - 03:34:28.) -- C:\WINDOWS\system32\Winlogon.exe [512000]
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/07/2011 - 19:40:30.) -- C:\WINDOWS\system32\drivers\atapi.sys [96512]
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.13/07/2011 - 20:15:53.) -- C:\WINDOWS\system32\drivers
tfs.sys [574976]



---\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 15/57
~ Mes musiques (My Musics) : 239/1190
~ Mes Favoris (My Favorites) : 4/133
~ Mes Documents (My Documents) : 417/23537
~ Mon Bureau (My Desktop) : 2/10
~ Menu demarrer (Programs) : 6/49



---\ Processus lancés
[MD5.D16C826F375A44802BF317982E81A7E2] - (.AVAST Software - avast! Service.) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe   [42184]
[MD5.9C69E6A25F5500501B14AF43311F8D8B] - (.Microsoft Corporation - Media Center Tray Applet.) -- C:\WINDOWS\ehome\ehtray.exe   [64512]
[MD5.9F3287A1CAF6E365ED2B39BB8D44B0EA] - (.Elaborate Bytes AG - Virtual CloneDrive Daemon.) -- C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe   [52168]
[MD5.CA416C33C8F4D6DE53C17AAB7CE2FBD8] - (.TechCity Solutions France - AliceAgent.) -- C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe   [81408]
[MD5.DAEFB050AC8FEE4F1097FCF7CB97220E] - (.Microsoft Corporation - Media Center Media Status Aggregator Servic.) -- C:\WINDOWS\eHome\ehmsas.exe   [46592]
[MD5.93AD0B78C7357A05F50E594EC7C22300] - (...) -- C:\WINDOWS\system32\RUNDLL32.EXE   [33792]
[MD5.13E7CFE8E269ED15E7FC9C3EBBCB7E2B] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe   [254696]
[MD5.E7CF222185411C6A3E68273C452B3283] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\avastUI.exe   [3493720]
[MD5.B9B7084F7DB3D1B036C0B9178472E96A] - (.Logicool - Logicool Desktop Messenger.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe   [20480]
[MD5.A564A22308A3F55235BA2478EE82992D] - (.Hewlett-Packard - hpotdd01.) -- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe   [28672]
[MD5.B75637DA0A24B4B9D12A87D02FC437FE] - (.Logitech Inc. - Logitech SetPoint.) -- C:\Program Files\Logitech\SetPoint\KEM.exe   [581632]
[MD5.32655C9CD64941E6D5E0F031EA9AC34A] - (.Logitech Inc. - Logitech Hardware Abstraction Layer.) -- C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE   [29696]
[MD5.4AC28B51530D3A93B3F27EB7A72F575F] - (...) -- C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe   [630784]
[MD5.5D1347AA5AE6E2F77D7F4F8372D95AC9] - (.Microsoft Corporation - Media Center Receiver Service.) -- C:\WINDOWS\eHome\ehRecvr.exe   [237568]
[MD5.980EEEA91776357518892C5544768E2B] - (.Microsoft Corporation - Service de planification Media Center.) -- C:\WINDOWS\eHome\ehSched.exe   [103424]
[MD5.9DBA73C2F1E76EC4CB837E67C5743596] - (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe   [153376]
[MD5.E75ADCFAFDEF3F4C3AF3332928D59926] - (.Hewlett-Packard Company - LightScribe Service.) -- C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe   [73728]
[MD5.7AEA4DF1CA68FD45DD4BBE1F0243CE7F] - (...) -- C:\Program Files\CDBurnerXP\NMSAccessU.exe   [71096]
[MD5.C501206816F35D20422B4C3F88D62860] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 182.5.) -- C:\WINDOWS\system32
vsvc32.exe   [163908]
[MD5.0DAD93BB0FECF5016AE3C06CBB0A873B] - (.Microsoft Corporation - COM Surrogate.) -- C:\WINDOWS\system32\dllhost.exe   [5120]
[MD5.89C981608FE15F3BAB8389794220C350] - (.Apple Inc. - Safari.) -- C:\Program Files\Safari\Safari.exe   [2388264]
[MD5.00365B3515C30F66CDB938F6729F3D0C] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe   [656896]



---\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
C:\Documents and Settings\Laeti\Local Settings\Application Data\Mozilla\Firefox\Profiles\dx0c1dt4.default\prefs.js
M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins
pdeployJava1.dll
P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins
pnul32.dll
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.4.5".) -- C:\Program Files\Mozilla Firefox\Plugins
ppdf32.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
P2 - FPN: [HKLM] [@google.com/npPicasa3,version=3.0.0] - (.Google, Inc. - Picasa plugin.) -- C:\Program Files\Google\Picasa3
pPicasa3.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_26 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin
ew_plugin
pjp2.dll
P2 - FPN: [HKLM] [@ma-config.com/HardwareDetection] - (.Cybelsoft - Plugin NPAPI Ma-Config.com.) -- C:\Program Files\ma-config.com
phardwaredetection.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@pandonetworks.com/PandoWebPlugin] - (.Pando Networks - Pando Web Plugin.) -- C:\Program Files\Pando Networks\Media Booster
pPandoWebPlugin.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.57
pGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.57
pGoogleUpdate3.dll
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.4.5".) -- C:\Program Files\Adobe\Reader 9.0\Reader\AIR
ppdf32.dll
P2 - FPN: [HKCU] [@unity3d.com/UnityPlayer,version=1.0] - (.Unity Technologies ApS - Unity Player 3.3.0f4.) -- C:\Documents and Settings\Laeti\Local Settings\Application Data\Unity\WebPlayer\loader
pUnity3D32.dll
P2 - FPN: [HKCU] [pandonetworks.com/PandoWebPlugin] - (.Pando Networks - Pando Web Plugin.) -- C:\Program Files\Pando Networks\Media Booster
pPandoWebPlugin.dll



---\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKUS\S-1-5-21-854245398-813497703-725345543-1003\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKUS\S-1-5-21-854245398-813497703-725345543-1003\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.19072 (longhorn_ie8_gdr.110420-1700)) -- C:\WINDOWS\system32\ieframe.dll



---\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <local>;localhost
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll



---\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe,
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"



---\ Browser Helper Objects de navigateur (O2)
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} Clé orpheline
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java(TM) Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll



---\ Internet Explorer Toolbars (O3)
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll



---\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [ehTray] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\WINDOWS\ehome\ehtray.exe 
O4 - HKLM\..\Run: [VirtualCloneDrive] . (.Elaborate Bytes AG - Virtual CloneDrive Daemon.) -- C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe 
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] . (.Logitech Inc. - Logitech Hardware Abstraction Layer.) -- C:\WINDOWS\KHALMNPR.exe 
O4 - HKLM\..\Run: [AliceSAV] . (.TechCity Solutions France - AliceAgent.) -- C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe 
O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32\NvCpl.dll 
O4 - HKLM\..\Run: [NvMediaCenter] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\WINDOWS\system32\NvMcTray.dll 
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent]  bthprops.cpl 
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe 
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe 
O4 - HKLM\..\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\avastUI.exe 
O4 - HKCU\..\Run: [PlayNC Launcher] Clé orpheline 
O4 - HKCU\..\Run: [LDM] . (.Logicool - Logicool Desktop Messenger.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe 
O4 - HKCU\..\Run: [RegistryBooster] . (.Uniblue Systems Limited - Uniblue Launcher.) -- C:\Program Files\Uniblue\RegistryBooster\launcher.exe 
O4 - HKUS\S-1-5-18\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe 
O4 - HKUS\S-1-5-18\..\Run: [LDM] . (.Logicool - Logicool Desktop Messenger.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe 
O4 - HKUS\S-1-5-18\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe 
O4 - HKUS\S-1-5-18\..\Run: [LDM] . (.Logicool - Logicool Desktop Messenger.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe 
O4 - HKUS\S-1-5-21-854245398-813497703-725345543-1003\..\Run: [PlayNC Launcher] Clé orpheline 
O4 - HKUS\S-1-5-21-854245398-813497703-725345543-1003\..\Run: [LDM] . (.Logicool - Logicool Desktop Messenger.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe 
O4 - HKUS\S-1-5-21-854245398-813497703-725345543-1003\..\Run: [RegistryBooster] . (.Uniblue Systems Limited - Uniblue Launcher.) -- C:\Program Files\Uniblue\RegistryBooster\launcher.exe 
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\hpoddt01.exe.lnk . (.Hewlett-Packard.)  -- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Logitech Desktop Messenger.lnk . (.Logitech.)  -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Logitech SetPoint.lnk . (.Logitech Inc..)  -- C:\Program Files\Logitech\SetPoint\KEM.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Post-it® Software Notes Lite.lnk . (.3M.)  -- C:\Program Files\3M\PSNLite\PsnLite.exe
O4 - Global Startup: C:\Documents And Settings\Laeti\Menu Démarrer\Programmes\Démarrage\RocketDock.lnk . (...)  -- C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe



---\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader 9.lnk . (...)  -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A94000000001}\SC_Reader.ico
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Apple Software Update.lnk . (...)  -- C:\WINDOWS\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\AppleSoftwareUpdateIco.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\CDBurnerXP.lnk . (.Canneverbe Limited.)  -- C:\Program Files\CDBurnerXP\cdbxpp.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Media Center.lnk . (.Microsoft Corporation.)  -- C:\WINDOWS\ehome\ehshell.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Post-it® Software Notes Lite.lnk . (.3M.)  -- C:\Program Files\3M\PSNLite\PsnLite.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Safari.lnk . (...)  -- C:\WINDOWS\Installer\{6C1E7AA1-44E9-446D-AAB2-0DE6D9EFEAB1}\SafariIco.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Messenger\msmsgs.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Movie Maker\moviemk.exe
O4 - Global Startup: C:\Documents And Settings\Laeti\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.)  -- C:\WINDOWS\system32cimlby.exe
O4 - Global Startup: C:\Documents And Settings\Laeti\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Documents And Settings\Laeti\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Outlook Express\msimn.exe
O4 - Global Startup: C:\Documents And Settings\Laeti\Menu Démarrer\Programmes\Windows Media Player.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Windows Media Player\wmplayer.exe



---\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: Add to Google Photos Screensa&ver . (.Google Inc. - Google Photos Screensaver.) -- C:\WINDOWS\system32\GPhotos.scr
O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~2\Office12\EXCEL.exe
O8 - Extra context menu item: Google Sidewiki... . (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_43C348BC2E93EB2B.dll



---\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO
O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (...) -- C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO
O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe



---\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\WINDOWS\system32\wshbth.dll



---\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://fichiers.touslesdrivers.com/maconfig/MaConfig_3_5_3_0.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com/activex/ractrl.cab?lmi=100



---\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{BD31365F-0A7B-45A0-AD2C-46E08DD99AF0}: NameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{BD31365F-0A7B-45A0-AD2C-46E08DD99AF0}: NameServer = 192.168.1.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{BD31365F-0A7B-45A0-AD2C-46E08DD99AF0}: NameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{BD31365F-0A7B-45A0-AD2C-46E08DD99AF0}: DhcpNameServer = 192.168.1.1



---\ Protocole additionnel et piratage de protocole (O18)
O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL



---\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\Windows\System32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\Windows\System32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\Windows\System32\cscdll.dll
O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\Windows\System32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\WlNotify.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll



---\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll



---\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: (no name) - {438755C2-A8BA-11D1-B96B-00A0C90312E1} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll



---\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) . (.Hewlett-Packard Company - LightScribe Service.) - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: NMSAccess (NMSAccess) . (...) - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 182.5.) - C:\WINDOWS\system32
vsvc32.exe



---\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) -  (.not file.)



---\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\FRU Task #Hewlett-Packard#hp psc 1100 series#1253109987.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
[MD5.4D6019BE71C720E2D29F2CE758F7A53B] [APT] [FRU Task #Hewlett-Packard#hp psc 1100 series#1253109987] (...) -- C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpqfrucl.exe
[MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe



---\ Pilotes lancés au démarrage (O41)
O41 - Driver:  (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
O41 - Driver:  (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\System32\DRIVERS\cdrom.sys
O41 - Driver:  (ElbyCDIO) . (.Elaborate Bytes AG - ElbyCD Windows NT/2000/XP I/O driver.) - C:\WINDOWS\System32\Drivers\ElbyCDIO.sys
O41 - Driver:  (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\System32\DRIVERS\i8042prt.sys
O41 - Driver:  (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\System32\DRIVERS\imapi.sys
O41 - Driver:  (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\System32\DRIVERS\intelppm.sys
O41 - Driver:  (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\System32\DRIVERS\ipsec.sys
O41 - Driver:  (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\System32\DRIVERS\kbdclass.sys
O41 - Driver:  (kbdhid) . (.Microsoft Corporation - Pilote de filtre souris HID.) - C:\WINDOWS\System32\DRIVERS\kbdhid.sys
O41 - Driver:  (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\System32\DRIVERS\mouclass.sys
O41 - Driver:  (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\System32\DRIVERS\mrxsmb.sys
O41 - Driver:  (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\System32\DRIVERS
etbios.sys
O41 - Driver:  (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\System32\DRIVERS
etbt.sys
O41 - Driver:  (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\System32\DRIVERSasacd.sys
O41 - Driver:  (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\System32\DRIVERSdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\System32\DRIVERS\RDPCDD.sys
O41 - Driver:  (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\System32\DRIVERSedbook.sys
O41 - Driver:  (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\WINDOWS\System32\DRIVERS\serial.sys
O41 - Driver:  (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\System32\DRIVERS	cpip.sys
O41 - Driver:  (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\System32\DRIVERS	ermdd.sys
O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys



---\ Logiciels installés (O42)
O42 - Logiciel: 7-Zip 4.65 - (.Pas de propriétaire.) [HKLM] -- 7-Zip
O42 - Logiciel: ATI - Utilitaire de désinstallation du logiciel - (.Pas de propriétaire.) [HKLM] -- All ATI Software
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- Adobe AIR
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- {FDB3B167-F4FA-461D-976F-286304A57B2A}
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Reader 9.4.5 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A94000000001}
O42 - Logiciel: Aion (North America) - (.NCsoft.) [HKCU] -- NCsoft-Aion
O42 - Logiciel: Aion - (.NCsoft.) [HKCU] -- NCsoft-AionEU
O42 - Logiciel: Alice Auto-diagnostic - (.Pas de propriétaire.) [HKLM] -- AliceSAV
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {853A4763-6643-4604-8D64-28BDD8925F4C}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
O42 - Logiciel: CCleaner (remove only) - (.Piriform.) [HKLM] -- CCleaner
O42 - Logiciel: CDBurnerXP - (.CDBurnerXP.) [HKLM] -- {7E265513-8CDA-4631-B696-F40D983F3B07}_is1
O42 - Logiciel: Disque de souvenirs HP - (.Hewlett-Packard Company.) [HKLM] -- {B376402D-58EA-45EA-BD50-DD924EB67A70}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: High Definition Audio Driver Package - KB888111 - (.Microsoft Corporation.) [HKLM] -- KB888111WXPSP2
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399
O42 - Logiciel: Hotfix for Windows Media Player 10 (KB903157) - (.Microsoft Corporation.) [HKLM] -- KB903157
O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5
O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5
O42 - Logiciel: Internet Explorer - (.Microsoft Corporation.) [HKLM] -- {4E414048-A9DD-4F60-AA1D-018E716C88C9}
O42 - Logiciel: Java(TM) 6 Update 26 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216017FF}
O42 - Logiciel: K-Lite Codec Pack 4.6.2 (Full) - (.Pas de propriétaire.) [HKLM] -- KLiteCodecPack_is1
O42 - Logiciel: Kit de Connexion Alice ADSL - (.Pas de propriétaire.) [HKLM] -- {3A0221AD-D30B-4320-8F9B-1D0F0E6C6843}
O42 - Logiciel: Lecteur Windows Media 11 - (.Pas de propriétaire.) [HKLM] -- Windows Media Player
O42 - Logiciel: LightScribe System Software  1.14.25.1 - (.LightScribe.) [HKLM] -- {DA9DAC64-C947-47BA-B411-8A1959B177CF}
O42 - Logiciel: Logitech Desktop Messenger - (.Pas de propriétaire.) [HKLM] -- {900B1197-53F5-4F46-A882-2CFFFE2EEDCB}
O42 - Logiciel: Logitech SetPoint - (.Pas de propriétaire.) [HKLM] -- {2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}
O42 - Logiciel: MSN - (.Pas de propriétaire.) [HKLM] -- MSNINST
O42 - Logiciel: MSXML 6 Service Pack 2 (KB973686) - (.Microsoft Corporation.) [HKLM] -- {56EA8BC0-3751-4B93-BC9D-6651CC36E5AA}
O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM] -- {425FFD94-36BD-4933-881B-FE0B9DADF2B7}
O42 - Logiciel: Malwarebytes' Anti-Malware version 1.51.0.1200 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Microsoft .NET Framework 1.0 Hotfix (KB979904) - (.Microsoft Corporation.) [HKLM] -- KB979904
O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Microsoft.) [HKLM] -- {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Pas de propriétaire.) [HKLM] -- Microsoft .NET Framework 1.1  (1033)
O42 - Logiciel: Microsoft .NET Framework 1.1 French Language Pack - (.Microsoft.) [HKLM] -- {9A394342-4A68-4EBA-85A6-55B559F4E700}
O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB2416447) - (.Pas de propriétaire.) [HKLM] -- M2416447
O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB979906) - (.Pas de propriétaire.) [HKLM] -- M979906
O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1
O42 - Logiciel: Microsoft Office Access MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- PROPLUS
O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- Wudf01000
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {7299052b-02a4-4627-81f2-1818da5d550d}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: Moovida - (.Secure Digital Services.) [HKLM] -- {6084C211-01A1-464E-97A0-09772E122B50}
O42 - Logiciel: Mozilla Firefox (3.6.18) - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.6.18)
O42 - Logiciel: Mumble and Murmur - (.Mumble.) [HKLM] -- Mumble
O42 - Logiciel: NCsoft Launcher - (.NCsoft.) [HKLM] -- {5F8E2CBB-949D-4175-AC98-5ADE7F6C9697}
O42 - Logiciel: NVIDIA Drivers - (.NVIDIA Corporation.) [HKLM] -- NVIDIA Drivers
O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM] -- {DD1865F0-AD73-40FB-B23E-1822E02396FF}
O42 - Logiciel: Pack Vista Inspirat 2 1.0 - (.Bricomix.) [HKLM] -- Pack Vista Inspirat 2
O42 - Logiciel: Pando Media Booster - (.Pando Networks Inc..) [HKLM] -- {980A182F-E0A2-4A40-94C1-AE0C1235902E}
O42 - Logiciel: Photo et imagerie HP 2.0 - All-in-One - (.Hewlett-Packard Company.) [HKLM] -- {9867A917-5D17-40DE-83BA-BEA5293194B1}
O42 - Logiciel: Photo et imagerie HP 2.0 - All-in-One Pilote - (.Hewlett-Packard Company.) [HKLM] -- {6ECB39BD-73C2-44DD-B1A0-898207C58D8B}
O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM] -- Picasa 3
O42 - Logiciel: Post-it® Software Notes Lite - (.Pas de propriétaire.) [HKLM] -- PSN
O42 - Logiciel: REALTEK PCIE NIC Driver - (.REALTEK Semiconductor Corp..) [HKLM] -- {17E2F183-BAC4-4D01-BD7A-59F781E17EFA}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Safari - (.Apple Inc..) [HKLM] -- {6C1E7AA1-44E9-446D-AAB2-0DE6D9EFEAB1}
O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473
O42 - Logiciel: Skype(TM) 5.0 - (.Skype Technologies S.A..) [HKLM] -- {E633D396-5188-4E9D-8F6B-BFB8BF3467E8}
O42 - Logiciel: Unity Web Player - (.Unity Technologies ApS.) [HKCU] -- UnityWebPlayer
O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
O42 - Logiciel: VirtualCloneDrive - (.Elaborate Bytes.) [HKLM] -- VirtualCloneDrive
O42 - Logiciel: WinRAR archiver - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver
O42 - Logiciel: Windows Feature Pack for Storage (32-bit) - IMAPI update for Blu-Ray - (.Microsoft Corporation.) [HKLM] -- KB952011
O42 - Logiciel: Windows Imaging Component - (.Microsoft Corporation.) [HKLM] -- WIC
O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8
O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11
O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime
O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11
O42 - Logiciel: Windows XP Media Center Edition 2005 KB2502898 - (.Microsoft Corporation.) [HKLM] -- KB2502898
O42 - Logiciel: Windows XP Media Center Edition 2005 KB925766 - (.Microsoft Corporation.) [HKLM] -- KB925766
O42 - Logiciel: Windows XP Media Center Edition 2005 KB973768 - (.Microsoft Corporation.) [HKLM] -- KB973768
O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service
O42 - Logiciel: XnView 1.97.8 - (.Gougelet Pierre-e.) [HKLM] -- XnView_is1
O42 - Logiciel: avast! Free Antivirus - (.AVAST Software.) [HKLM] -- avast
O42 - Logiciel: hp psc 1100 series - (.Hewlett-Packard Company.) [HKLM] -- {01161F64-6897-4885-93A0-A9F7BE9A4253}
O42 - Logiciel: µTorrent - (.Pas de propriétaire.) [HKLM] -- uTorrent

---\ HKCU & HKLM Software Keys
[HKCU\Software\3M]
[HKCU\Software\7-Zip]
[HKCU\Software\ALWIL Software]
[HKCU\Software\AVAST Software]
[HKCU\Software\Ad-Remover]
[HKCU\Software\Adobe]
[HKCU\Software\Aion]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\BitTorrent]
[HKCU\Software\Bugsplat]
[HKCU\Software\Canneverbe Limited]
[HKCU\Software\CeWe Color]
[HKCU\Software\ClassesB]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\CoreVorbis]
[HKCU\Software\Cyberlink]
[HKCU\Software\Digital River]
[HKCU\Software\DivXNetworks]
[HKCU\Software\Elaborate Bytes]
[HKCU\Software\GNU]
[HKCU\Software\GSpot Appliance Corp]
[HKCU\Software\Gabest]
[HKCU\Software\Genesis Digital Innovations]
[HKCU\Software\Google]
[HKCU\Software\Haali]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\HookNetwork]
[HKCU\Software\INCAInternet]
[HKCU\Software\Intel]
[HKCU\Software\JEDI-VCL]
[HKCU\Software\JavaSoft]
[HKCU\Software\Jitit Virtual Registry]
[HKCU\Software\Lavalys]
[HKCU\Software\LightScribe]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\LogMeIn]
[HKCU\Software\Logitech]
[HKCU\Software\MUSICMATCH]
[HKCU\Software\Macromedia]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\MediaInfo]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Mumble]
[HKCU\Software\NCsoft]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\Oak Technology]
[HKCU\Software\Pando Networks]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\Realtek]
[HKCU\Software\Revenger inc.]
[HKCU\Software\RocketDock]
[HKCU\Software\SkypeApps]
[HKCU\Software\Skype]
[HKCU\Software\SoftVTU]
[HKCU\Software\Trolltech]
[HKCU\Software\UberIcon-v1.0.0]
[HKCU\Software\Unity]
[HKCU\Software\Usbfix]
[HKCU\Software\VSO]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\Yahoo]
[HKCU\Software\cybelsoft]
[HKLM\Software\3M]
[HKLM\Software\AGEIA Technologies]
[HKLM\Software\ALWIL Software]
[HKLM\Software\ATI Technologies Inc.]
[HKLM\Software\ATI Technologies]
[HKLM\Software\AVAST Software]
[HKLM\Software\Adobe]
[HKLM\Software\Alice ADSL]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\BackWeb]
[HKLM\Software\Bricomix.net]
[HKLM\Software\C07ft5Y]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Codec Tweak Tool]
[HKLM\Software\Cyberlink]
[HKLM\Software\DIOC]
[HKLM\Software\DivXNetworks]
[HKLM\Software\Dofus 2]
[HKLM\Software\Elaborate Bytes]
[HKLM\Software\GNU]
[HKLM\Software\Gabest]
[HKLM\Software\GalaNetEu]
[HKLM\Software\Gemplus]
[HKLM\Software\Google]
[HKLM\Software\HPS]
[HKLM\Software\HaaliMkx]
[HKLM\Software\Hewlett-Packard]
[HKLM\Software\Intel]
[HKLM\Software\InterVideo]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\KLCodecPack]
[HKLM\Software\LanSetup]
[HKLM\Software\LightScribe]
[HKLM\Software\Macromedia]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\MimarSinan]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\NCsoft]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\ODBC]
[HKLM\Software\Oak Technology]
[HKLM\Software\Pando Networks]
[HKLM\Software\Policies]
[HKLM\Software\Program Groups]
[HKLM\Software\REALTEK Semiconductor Corporation]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Revenger inc.]
[HKLM\Software\S3R521]
[HKLM\Software\Schlumberger]
[HKLM\Software\Secure]
[HKLM\Software\Set8168]
[HKLM\Software\Skype]
[HKLM\Software\Sonic]
[HKLM\Software\TechCity]
[HKLM\Software\TrendMicro]
[HKLM\Software\Uniblue]
[HKLM\Software\VSO]
[HKLM\Software\Windows 3.1 Migration Status]
[HKLM\Software\Windows]
[HKLM\Software\XnView]
[HKLM\Software\Yahoo]
[HKLM\Software\cybelsoft]
[HKLM\Software\iColorFolder]
[HKLM\Software\knight]
[HKLM\Software\logitech]
[HKLM\Software\mozilla.org]



---\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 12/01/2010 - 18:49:14 - [3274392] ----D- C:\Program Files\3M
O43 - CFD: 20/08/2009 - 14:15:10 - [3094515] ----D- C:\Program Files\7-Zip
O43 - CFD: 06/07/2011 - 19:32:40 - [323326021] ----D- C:\Program Files\Ad-Remover
O43 - CFD: 30/10/2010 - 19:06:48 - [163076362] ----D- C:\Program Files\Adobe
O43 - CFD: 12/01/2010 - 16:37:40 - [123222710] ----D- C:\Program Files\AGEIA Technologies
O43 - CFD: 01/07/2010 - 00:08:48 - [0] ----D- C:\Program Files\ALDI
O43 - CFD: 20/08/2009 - 14:07:44 - [1994042] ----D- C:\Program Files\Alice
O43 - CFD: 29/07/2010 - 11:23:30 - [153379006] ----D- C:\Program Files\Alwil Software
O43 - CFD: 08/07/2011 - 16:38:44 - [2428606] ----D- C:\Program Files\Apple Software Update
O43 - CFD: 07/11/2009 - 17:15:44 - [139264] ----D- C:\Program Files\ATI Technologies
O43 - CFD: 16/07/2009 - 17:39:42 - [2355410] ----D- C:\Program Files\CCleaner
O43 - CFD: 09/06/2011 - 22:22:52 - [17887826] ----D- C:\Program Files\CDBurnerXP
O43 - CFD: 16/07/2009 - 22:00:02 - [24619792] ----D- C:\Program Files\Common Files
O43 - CFD: 16/07/2009 - 16:21:36 - [0] ----D- C:\Program Files\ComPlus Applications
O43 - CFD: 01/07/2010 - 00:06:54 - [0] ----D- C:\Program Files\Dofus
O43 - CFD: 21/10/2010 - 18:34:28 - [971232969] ----D- C:\Program Files\Dofus 2
O43 - CFD: 16/07/2009 - 17:40:58 - [1955543] ----D- C:\Program Files\Elaborate Bytes
O43 - CFD: 24/06/2011 - 16:09:56 - [422983495] ----D- C:\Program Files\Fichiers communs
O43 - CFD: 29/01/2010 - 06:47:40 - [96166707] ----D- C:\Program Files\Google
O43 - CFD: 27/07/2009 - 14:42:32 - [2902968620] ----D- C:\Program Files\gPotato.eu
O43 - CFD: 16/09/2009 - 16:04:34 - [383066236] ----D- C:\Program Files\Hewlett-Packard
O43 - CFD: 12/07/2011 - 23:37:00 - [20538172] --H-D- C:\Program Files\InstallShield Installation Information
O43 - CFD: 07/11/2009 - 17:29:00 - [96701] ----D- C:\Program Files\Intel
O43 - CFD: 16/06/2011 - 20:00:08 - [4673988] ----D- C:\Program Files\Internet Explorer
O43 - CFD: 24/06/2011 - 16:09:42 - [81314702] ----D- C:\Program Files\Java
O43 - CFD: 16/07/2009 - 17:42:16 - [37506493] ----D- C:\Program Files\K-Lite Codec Pack
O43 - CFD: 27/07/2009 - 10:31:42 - [40280049] ----D- C:\Program Files\Logitech
O43 - CFD: 07/11/2009 - 17:26:14 - [4935959] ----D- C:\Program Files\ma-config.com
O43 - CFD: 13/07/2011 - 22:09:08 - [7577396] ----D- C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD: 14/01/2010 - 04:54:30 - [2152579] ----D- C:\Program Files\Messenger
O43 - CFD: 16/07/2009 - 16:25:42 - [0] ----D- C:\Program Files\microsoft frontpage
O43 - CFD: 16/07/2009 - 17:47:22 - [551059659] ----D- C:\Program Files\Microsoft Office
O43 - CFD: 16/07/2009 - 17:47:20 - [14904] ----D- C:\Program Files\Microsoft Visual Studio
O43 - CFD: 16/07/2009 - 17:47:34 - [3178824] ----D- C:\Program Files\Microsoft Works
O43 - CFD: 16/07/2009 - 17:46:54 - [8152064] ----D- C:\Program Files\Microsoft.NET
O43 - CFD: 12/08/2010 - 14:18:58 - [10949041] ----D- C:\Program Files\Movie Maker
O43 - CFD: 25/06/2011 - 09:01:24 - [30507528] ----D- C:\Program Files\Mozilla Firefox
O43 - CFD: 15/08/2009 - 03:06:32 - [26521] ----D- C:\Program Files\MSBuild
O43 - CFD: 04/08/2009 - 21:40:18 - [21471461] ----D- C:\Program Files\MSN
O43 - CFD: 16/07/2009 - 16:19:44 - [8745735] ----D- C:\Program Files\MSN Gaming Zone
O43 - CFD: 15/08/2009 - 03:01:26 - [6849] ----D- C:\Program Files\MSXML 6.0
O43 - CFD: 06/04/2010 - 15:48:22 - [37973809] ----D- C:\Program Files\Mumble
O43 - CFD: 16/08/2009 - 13:35:50 - [378999] ----D- C:\Program Files\MUSICMATCH
O43 - CFD: 18/07/2009 - 01:33:22 - [48822055834] ----D- C:\Program Files\NCSoft
O43 - CFD: 14/01/2010 - 04:40:46 - [3285523] ----D- C:\Program Files\NetMeeting
O43 - CFD: 09/08/2009 - 20:33:06 - [0] ----D- C:\Program Files\NOS
O43 - CFD: 16/07/2009 - 16:21:26 - [1804] ----D- C:\Program Files\Online Services
O43 - CFD: 16/12/2010 - 04:00:36 - [4379321] ----D- C:\Program Files\Outlook Express
O43 - CFD: 27/10/2010 - 18:20:58 - [7367542] ----D- C:\Program Files\Pando Networks
O43 - CFD: 12/07/2011 - 23:37:00 - [48346159] ----D- C:\Program Files\Realtek
O43 - CFD: 15/08/2009 - 03:06:22 - [36400897] ----D- C:\Program Files\Reference Assemblies
O43 - CFD: 08/07/2011 - 16:38:22 - [42293002] ----D- C:\Program Files\Safari
O43 - CFD: 16/07/2009 - 16:24:00 - [1025] ----D- C:\Program Files\Services en ligne
O43 - CFD: 12/12/2010 - 17:14:14 - [19057007] R---D- C:\Program Files\Skype
O43 - CFD: 20/08/2009 - 14:07:52 - [393007] ----D- C:\Program Files\TechCity Solutions
O43 - CFD: 12/07/2011 - 23:36:56 - [4129440] ----D- C:\Program Files\Uniblue
O43 - CFD: 16/07/2009 - 16:32:20 - [0] --H-D- C:\Program Files\Uninstall Information
O43 - CFD: 01/01/2011 - 16:11:36 - [399736] ----D- C:\Program Files\uTorrent
O43 - CFD: 12/01/2010 - 16:36:38 - [17098024] ----D- C:\Program Files\VLCPortable
O43 - CFD: 12/07/2011 - 23:36:30 - [117177722] ----D- C:\Program Files\VSO
O43 - CFD: 15/12/2009 - 05:29:52 - [3581070] ----D- C:\Program Files\Windows Media Connect 2
O43 - CFD: 15/12/2009 - 05:29:50 - [9600055] ----D- C:\Program Files\Windows Media Player
O43 - CFD: 14/01/2010 - 04:40:44 - [3942655] ----D- C:\Program Files\Windows NT
O43 - CFD: 16/07/2009 - 16:21:02 - [41055406] ----D- C:\Program Files\Windows Plus
O43 - CFD: 16/07/2009 - 16:24:02 - [0] --H-D- C:\Program Files\WindowsUpdate
O43 - CFD: 16/07/2009 - 17:40:12 - [3892521] ----D- C:\Program Files\WinRAR
O43 - CFD: 16/07/2009 - 16:25:42 - [0] ----D- C:\Program Files\xerox
O43 - CFD: 28/09/2010 - 18:40:14 - [8605678] ----D- C:\Program Files\XnView
O43 - CFD: 13/07/2011 - 23:42:18 - [6245185] ----D- C:\Program Files\ZHPDiag
O43 - CFD: 16/07/2009 - 22:00:02 - [24619792] ----D- C:\Program Files\Common Files\INCA Shared
O43 - CFD: 12/01/2010 - 18:49:28 - [5632] ----D- C:\Documents and Settings\Laeti\Application Data\3M
O43 - CFD: 16/12/2009 - 22:27:54 - [3111875] ----D- C:\Documents and Settings\Laeti\Application Data\Adobe
O43 - CFD: 16/12/2009 - 22:59:34 - [4650] ----D- C:\Documents and Settings\Laeti\Application Data\app
O43 - CFD: 26/03/2011 - 11:37:58 - [11737258] ----D- C:\Documents and Settings\Laeti\Application Data\Apple Computer
O43 - CFD: 18/07/2009 - 18:06:24 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\ATI
O43 - CFD: 08/06/2011 - 22:45:08 - [1695] ----D- C:\Documents and Settings\Laeti\Application Data\Canneverbe Limited
O43 - CFD: 25/06/2011 - 09:51:50 - [82185567] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus 2
O43 - CFD: 12/04/2010 - 10:25:18 - [6896] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus-2.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 12/04/2010 - 11:36:52 - [9402] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus-3.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 12/04/2010 - 20:06:10 - [30] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus-4.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 23/12/2010 - 00:45:14 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus-5.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 27/02/2011 - 10:22:50 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus-6.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 11/04/2010 - 21:10:36 - [16911] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 20/07/2009 - 12:10:56 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Droppix
O43 - CFD: 27/03/2011 - 00:52:52 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\dvdcss
O43 - CFD: 30/06/2010 - 23:43:02 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\FOG Downloader
O43 - CFD: 18/07/2009 - 01:33:08 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\GetRightToGo
O43 - CFD: 09/08/2009 - 14:56:24 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Google
O43 - CFD: 16/01/2011 - 13:38:04 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Help
O43 - CFD: 16/09/2009 - 16:07:08 - [2828] ----D- C:\Documents and Settings\Laeti\Application Data\Hewlett-Packard
O43 - CFD: 19/12/2009 - 23:45:56 - [3638] ----D- C:\Documents and Settings\Laeti\Application Data\Icones
O43 - CFD: 16/07/2009 - 16:32:26 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Identities
O43 - CFD: 17/07/2009 - 17:34:44 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\InstallShield
O43 - CFD: 27/07/2009 - 10:36:56 - [10767] ----D- C:\Documents and Settings\Laeti\Application Data\Logitech
O43 - CFD: 16/07/2009 - 18:43:14 - [58223] ----D- C:\Documents and Settings\Laeti\Application Data\Macromedia
O43 - CFD: 10/07/2011 - 22:00:38 - [11118634] ----D- C:\Documents and Settings\Laeti\Application Data\Malwarebytes
O43 - CFD: 08/06/2011 - 22:15:28 - [16] ----D- C:\Documents and Settings\Laeti\Application Data\Media Player Classic
O43 - CFD: 24/06/2011 - 16:35:40 - [14880169] -S--D- C:\Documents and Settings\Laeti\Application Data\Microsoft
O43 - CFD: 30/10/2010 - 19:11:46 - [3237805] ----D- C:\Documents and Settings\Laeti\Application Data\Mozilla
O43 - CFD: 04/08/2009 - 21:40:40 - [853608] ----D- C:\Documents and Settings\Laeti\Application Data\MSNInstaller
O43 - CFD: 13/11/2010 - 03:41:02 - [435490] ----D- C:\Documents and Settings\Laeti\Application Data\Mumble
O43 - CFD: 16/12/2009 - 22:59:34 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Reg.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 21/05/2011 - 22:22:28 - [6627640] ----D- C:\Documents and Settings\Laeti\Application Data\Skype
O43 - CFD: 21/05/2011 - 22:11:50 - [5544] ----D- C:\Documents and Settings\Laeti\Application Data\skypePM
O43 - CFD: 12/01/2010 - 17:54:34 - [31965402] ----D- C:\Documents and Settings\Laeti\Application Data\Sun
O43 - CFD: 25/04/2010 - 01:23:42 - [38815] ----D- C:\Documents and Settings\Laeti\Application Data	eamspeak2
O43 - CFD: 09/02/2010 - 04:42:32 - [187849] ----D- C:\Documents and Settings\Laeti\Application Data\TS3Client
O43 - CFD: 12/07/2011 - 23:36:58 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Uniblue
O43 - CFD: 19/05/2011 - 23:24:58 - [44] ----D- C:\Documents and Settings\Laeti\Application Data\Unity
O43 - CFD: 14/06/2011 - 03:14:34 - [2913304] ----D- C:\Documents and Settings\Laeti\Application Data\uTorrent
O43 - CFD: 19/10/2010 - 00:51:44 - [475423] ----D- C:\Documents and Settings\Laeti\Application Data\vlc
O43 - CFD: 11/07/2011 - 13:32:48 - [5890] ----D- C:\Documents and Settings\Laeti\Application Data\Vso
O43 - CFD: 28/09/2010 - 18:45:16 - [601052] ----D- C:\Documents and Settings\Laeti\Application Data\XnView
O43 - CFD: 15/08/2009 - 18:04:12 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Yahoo!
O43 - CFD: 30/10/2010 - 19:06:26 - [116670] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Adobe
O43 - CFD: 12/01/2010 - 17:03:58 - [0] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Apple
O43 - CFD: 12/01/2010 - 17:04:42 - [804416259] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Apple Computer
O43 - CFD: 24/06/2011 - 16:36:10 - [11125] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\ApplicationHistory
O43 - CFD: 07/09/2010 - 23:06:32 - [36388416] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\assembly
O43 - CFD: 18/07/2009 - 18:06:24 - [64435] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\ATI
O43 - CFD: 07/07/2011 - 03:39:00 - [190064416] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Google
O43 - CFD: 16/01/2011 - 13:38:04 - [0] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Help
O43 - CFD: 11/06/2011 - 19:55:00 - [44360252] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Microsoft
O43 - CFD: 16/07/2009 - 17:44:50 - [0] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Microsoft Help
O43 - CFD: 30/10/2010 - 19:11:34 - [55373937] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Mozilla
O43 - CFD: 07/07/2011 - 01:30:16 - [0] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\PackageAware
O43 - CFD: 28/10/2010 - 01:28:52 - [160084] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\PMB Files
O43 - CFD: 25/04/2011 - 23:12:16 - [0] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Temp
O43 - CFD: 19/05/2011 - 22:49:36 - [98862506] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Unity

eillane · Answer

Je voulais aussi ous préciser un détail. Depuis que j'ai fais ce point de restauration pour retrouver le son, jai des messages derreur qui s'affiche chaque fois que je redémarre mon PC, j'ai noté, je vous cite :

ERREUR ===> Le module spécifié est introuvable LoadLibrary (Pythondll) failed


ERREUR ===> C:\Program files\Uniblue\Registry Booster\PYTHON26.DLL
Merci encore.

eillane · Answer

RE bonsoir jacques.gache, je me permet de me tourner vers vous pour un autre probleme : nous avons fait lacquisition dun nouvel ordi, un medion, et lorsque nous lavons reçu ce produit cétait dans le but (il est à mon fils ce pc) daller jouer dur "dofus" un jeu en resau assez basique. Nous avons du le renvoyer au SAV car impossible de jouer, aujourdhui nous lavons, mon fils peut jouer à dofus et peut meme sabonner ! mais il ne peut pas aller sur le net, il reçoit toujours un message derreur, ce qui est fort etonnant puisque 'dofus' est un jeu en ligne ! Me comprenez vous ? me suis je bien exprimée ? acceptez vous de nous aider mon fils et moi sur ce probleme ? Par avance, je vous remercie de lintéret que vous nous porterez.

eillane · Answer

et voilà, pour terminer mon sujet précédent, nous pouvons nous connecter via safari, ou bien internet explorer (mais là c pas le cas hein ) ou autre moteur de recherche , sur le net, mais cela narrive que environ 1 jour par mois, c'est ce que j'ai pu constater. Jessaie de vous donner le max de détails concernant le PC neuf de mon fils, si vous avez besoin de + dinfo, je reste à votre disposition, et je souhaite aussi ajouter que, par mesure "d'avance", jai téléchargé hijackthis, ainsi que ad- remover et malwarebytes (il scan là actuellement), comme ça si demain le net ne fonctionne plus, je pourrais o moins vous fournir les rapports ! Je vous précise aussi, que le PC Medion de mon fils est sous le systeme dexploitation window7. Encore 1 Million de fois MERCI davance pour le temps que vous prenez pour nous aider ! Merci, merci, merci

eillane · Answer

pour faire suite à mes messages précédents = malwarebytes, na rien détecté !
c plutot positif !!!

eillane · Answer

Bon, c cool davoir internet qd on sy attend pas, mais je c que ça va pas durer et ça mattriste, là, TOUT fonctionne NIKEL ! rien à redire ! Mais pour combien de temps ? Jespere vraiment que vous prendrez ma demande en compte, et merci davance pour tout.

eillane · Answer

bonjour, désolé d'avoir tardé à répondre j'étais partie en week end, pour quel ordi je dois faire un zhpdiag ? sachant que le medion ne veut plus aller sur le net... je pense que je reposterais le mois prochain, quand il sera de nouveau décidé à m'autoriser l'acces à une page internet. Merci d'avance.

eillane · Answer

non, sur mon pc dorigine jai acces au net, c sur le second pc "medion" que jai acheté que je nais pas acces au net, mais là, c repartit de plus belle, rien à faire pour se connecter, en ce qui concerne mes problemes de virus sur mon pc dorigine, rien dautre à signaler, mes virus sont ils effacés ? est ce que mon pc à moi est "propre" maintenant ?

eillane · Answer

pour faire suite a mon message précédent, je vais tester votre façon de faire sur mon nouveau pc, sil pouvait accepter la page internet ce serait fabuleux, jy vais de ce pâs. On se mélange les pinceaux avec mes 2 pc jai limpression !

eillane · Answer

Je vous propose de refaire un scan 'minutieux' avec avast pour voir si mon ordi me trouve encore des virus, je vous tient au courrant dès que le scan minutieu est terminé (je sais que ça prend beaucoup de temps) donc, à demain ! Merci encore de votre aide si précieuse.

eillane · Answer

nos messages ont dû se confondrent ! je te poste donc un zhpdiag de mon pc a moi, on verra + tard pour mon autre pc, celui de mon fils, je nai plus de net... a dans 1 mois environ ! c triste mais c comme ça... il se trouve que jarrive a aller sur le net environ 1 jour par moi ! c incroyable mais vrai !
 et pourtant, mon fils peut jouer a son jeu 'dofus' jeu sur internet, c fou hein !  et il peut meme sabonner ! c encore plus dingue, mais c vrai !

eillane · Answer

"mode sans echac avec prise en charge réseau" dit moi ? en français, ça ve"ut dire quoi ?
je suis désolée de tannoncer que je suis trop novice en la metiere pour comprendre 1/10eme de ce que tu me dis... je suis désolée,n va falloir que tu détailles tout tout tout ! Siunon, je ne comprends pas (triste que je suis et super désolée surtout !)

eillane · Answer

voici donc Rapport de ZHPDiag v1.27.2406 par Nicolas Coolman, Update du 12/07/2011
Run by Laeti at 19/07/2011 01:01:17
Web site :  http://www.premiumorange.com/zeb-help-process/zhpdiag.html


---\ Web Browser
MSIE: Internet Explorer v8.0.6001.18702
MFIE: Mozilla Firefox v (Defaut)

---\ System Information
Windows XP Professional Service Pack 3 (Build 2600)
~ Processor: x86 Family 15 Model 6 Stepping 2, GenuineIntel
~ Operating System: 32 Bits
~ Boot mode: ~ Normal (Normal boot)
Total RAM: 2943 MB (84% free)
~ System Restore: Activé (Enable)
System drive C: has 8 GB (6%) free of 115 GB

---\ Logged in mode
~ Computer Name: SALON
~ User Name: Laeti
~ All Users Names: SUPPORT_388945a0, Laeti, HelpAssistant, ASPNET, Administrateur, 
~ Unselected Option: O45,O61,O62,O65,O66,O82
~ Logged in as Administrator

---\ Environnement Variables
~ %AppData%=C:\Documents and Settings\Laeti\Application Data\
~ %Desktop%=C:\Documents and Settings\Laeti\Bureau\
~ %Favorites%=C:\Documents and Settings\Laeti\Favoris\
~ %LocalAppData%=C:\Documents and Settings\Laeti\Local Settings\Application Data\
~ %StartMenu%=C:\Documents and Settings\Laeti\Menu Démarrer\

---\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 8 Go of 115 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 99 Go of 112 Go)
E:\ Hard drive, Flash drive, Thumb drive (Free 4 Go of 6 Go)
F:\ CD-ROM drive (Not Inserted)
G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
I:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
K:\ CD-ROM drive (Not Inserted)



---\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK



---\ Recherche particulière de fichiers génériques
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.19/07/2011 - 03:34:03.) -- C:\WINDOWS\Explorer.exe [1037824]
[MD5.93AD0B78C7357A05F50E594EC7C22300] - (....) (.19/07/2011 - 03:34:20.) -- C:\WINDOWS\system32undll32.exe [33792]
[MD5.42F5E14E33D79C236680468B1E4999F4] - (.Microsoft Corporation - Internet Extensions for Win32.) (.19/07/2011 - 17:06:11.) -- C:\WINDOWS\system32\wininet.dll [916480]
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.19/07/2011 - 03:34:28.) -- C:\WINDOWS\system32\Winlogon.exe [512000]
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.19/07/2011 - 19:40:30.) -- C:\WINDOWS\system32\drivers\atapi.sys [96512]
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.19/07/2011 - 20:15:53.) -- C:\WINDOWS\system32\drivers
tfs.sys [574976]



---\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 15/57
~ Mes musiques (My Musics) : 239/1190
~ Mes Favoris (My Favorites) : 4/133
~ Mes Documents (My Documents) : 417/23537
~ Mon Bureau (My Desktop) : 2/10
~ Menu demarrer (Programs) : 6/49



---\ Processus lancés
[MD5.D16C826F375A44802BF317982E81A7E2] - (.AVAST Software - avast! Service.) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe   [42184]
[MD5.9C69E6A25F5500501B14AF43311F8D8B] - (.Microsoft Corporation - Media Center Tray Applet.) -- C:\WINDOWS\ehome\ehtray.exe   [64512]
[MD5.9F3287A1CAF6E365ED2B39BB8D44B0EA] - (.Elaborate Bytes AG - Virtual CloneDrive Daemon.) -- C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe   [52168]
[MD5.CA416C33C8F4D6DE53C17AAB7CE2FBD8] - (.TechCity Solutions France - AliceAgent.) -- C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe   [81408]
[MD5.DAEFB050AC8FEE4F1097FCF7CB97220E] - (.Microsoft Corporation - Media Center Media Status Aggregator Servic.) -- C:\WINDOWS\eHome\ehmsas.exe   [46592]
[MD5.93AD0B78C7357A05F50E594EC7C22300] - (...) -- C:\WINDOWS\system32\RUNDLL32.EXE   [33792]
[MD5.13E7CFE8E269ED15E7FC9C3EBBCB7E2B] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe   [254696]
[MD5.E7CF222185411C6A3E68273C452B3283] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\avastUI.exe   [3493720]
[MD5.B9B7084F7DB3D1B036C0B9178472E96A] - (.Logicool - Logicool Desktop Messenger.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe   [20480]
[MD5.A564A22308A3F55235BA2478EE82992D] - (.Hewlett-Packard - hpotdd01.) -- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe   [28672]
[MD5.B75637DA0A24B4B9D12A87D02FC437FE] - (.Logitech Inc. - Logitech SetPoint.) -- C:\Program Files\Logitech\SetPoint\KEM.exe   [581632]
[MD5.32655C9CD64941E6D5E0F031EA9AC34A] - (.Logitech Inc. - Logitech Hardware Abstraction Layer.) -- C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE   [29696]
[MD5.4AC28B51530D3A93B3F27EB7A72F575F] - (...) -- C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe   [630784]
[MD5.5D1347AA5AE6E2F77D7F4F8372D95AC9] - (.Microsoft Corporation - Media Center Receiver Service.) -- C:\WINDOWS\eHome\ehRecvr.exe   [237568]
[MD5.980EEEA91776357518892C5544768E2B] - (.Microsoft Corporation - Service de planification Media Center.) -- C:\WINDOWS\eHome\ehSched.exe   [103424]
[MD5.9DBA73C2F1E76EC4CB837E67C5743596] - (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe   [153376]
[MD5.E75ADCFAFDEF3F4C3AF3332928D59926] - (.Hewlett-Packard Company - LightScribe Service.) -- C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe   [73728]
[MD5.7AEA4DF1CA68FD45DD4BBE1F0243CE7F] - (...) -- C:\Program Files\CDBurnerXP\NMSAccessU.exe   [71096]
[MD5.C501206816F35D20422B4C3F88D62860] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 182.5.) -- C:\WINDOWS\system32
vsvc32.exe   [163908]
[MD5.0DAD93BB0FECF5016AE3C06CBB0A873B] - (.Microsoft Corporation - COM Surrogate.) -- C:\WINDOWS\system32\dllhost.exe   [5120]
[MD5.89C981608FE15F3BAB8389794220C350] - (.Apple Inc. - Safari.) -- C:\Program Files\Safari\Safari.exe   [2388264]
[MD5.00365B3515C30F66CDB938F6729F3D0C] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe   [656896]



---\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
C:\Documents and Settings\Laeti\Local Settings\Application Data\Mozilla\Firefox\Profiles\dx0c1dt4.default\prefs.js
M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins
pdeployJava1.dll
P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins
pnul32.dll
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.4.5".) -- C:\Program Files\Mozilla Firefox\Plugins
ppdf32.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
P2 - FPN: [HKLM] [@google.com/npPicasa3,version=3.0.0] - (.Google, Inc. - Picasa plugin.) -- C:\Program Files\Google\Picasa3
pPicasa3.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_26 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin
ew_plugin
pjp2.dll
P2 - FPN: [HKLM] [@ma-config.com/HardwareDetection] - (.Cybelsoft - Plugin NPAPI Ma-Config.com.) -- C:\Program Files\ma-config.com
phardwaredetection.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@pandonetworks.com/PandoWebPlugin] - (.Pando Networks - Pando Web Plugin.) -- C:\Program Files\Pando Networks\Media Booster
pPandoWebPlugin.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.57
pGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.57
pGoogleUpdate3.dll
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.4.5".) -- C:\Program Files\Adobe\Reader 9.0\Reader\AIR
ppdf32.dll
P2 - FPN: [HKCU] [@unity3d.com/UnityPlayer,version=1.0] - (.Unity Technologies ApS - Unity Player 3.3.0f4.) -- C:\Documents and Settings\Laeti\Local Settings\Application Data\Unity\WebPlayer\loader
pUnity3D32.dll
P2 - FPN: [HKCU] [pandonetworks.com/PandoWebPlugin] - (.Pando Networks - Pando Web Plugin.) -- C:\Program Files\Pando Networks\Media Booster
pPandoWebPlugin.dll



---\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKUS\S-1-5-21-854245398-813497703-725345543-1003\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKUS\S-1-5-21-854245398-813497703-725345543-1003\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.19072 (longhorn_ie8_gdr.110420-1700)) -- C:\WINDOWS\system32\ieframe.dll



---\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <local>;localhost
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll



---\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe,
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"



---\ Browser Helper Objects de navigateur (O2)
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} Clé orpheline
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java(TM) Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll



---\ Internet Explorer Toolbars (O3)
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll



---\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [ehTray] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\WINDOWS\ehome\ehtray.exe 
O4 - HKLM\..\Run: [VirtualCloneDrive] . (.Elaborate Bytes AG - Virtual CloneDrive Daemon.) -- C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe 
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] . (.Logitech Inc. - Logitech Hardware Abstraction Layer.) -- C:\WINDOWS\KHALMNPR.exe 
O4 - HKLM\..\Run: [AliceSAV] . (.TechCity Solutions France - AliceAgent.) -- C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe 
O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32\NvCpl.dll 
O4 - HKLM\..\Run: [NvMediaCenter] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\WINDOWS\system32\NvMcTray.dll 
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent]  bthprops.cpl 
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe 
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe 
O4 - HKLM\..\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\avastUI.exe 
O4 - HKCU\..\Run: [PlayNC Launcher] Clé orpheline 
O4 - HKCU\..\Run: [LDM] . (.Logicool - Logicool Desktop Messenger.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe 
O4 - HKCU\..\Run: [RegistryBooster] . (.Uniblue Systems Limited - Uniblue Launcher.) -- C:\Program Files\Uniblue\RegistryBooster\launcher.exe 
O4 - HKUS\S-1-5-18\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe 
O4 - HKUS\S-1-5-18\..\Run: [LDM] . (.Logicool - Logicool Desktop Messenger.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe 
O4 - HKUS\S-1-5-18\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe 
O4 - HKUS\S-1-5-18\..\Run: [LDM] . (.Logicool - Logicool Desktop Messenger.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe 
O4 - HKUS\S-1-5-21-854245398-813497703-725345543-1003\..\Run: [PlayNC Launcher] Clé orpheline 
O4 - HKUS\S-1-5-21-854245398-813497703-725345543-1003\..\Run: [LDM] . (.Logicool - Logicool Desktop Messenger.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe 
O4 - HKUS\S-1-5-21-854245398-813497703-725345543-1003\..\Run: [RegistryBooster] . (.Uniblue Systems Limited - Uniblue Launcher.) -- C:\Program Files\Uniblue\RegistryBooster\launcher.exe 
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\hpoddt01.exe.lnk . (.Hewlett-Packard.)  -- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Logitech Desktop Messenger.lnk . (.Logitech.)  -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Logitech SetPoint.lnk . (.Logitech Inc..)  -- C:\Program Files\Logitech\SetPoint\KEM.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Post-it® Software Notes Lite.lnk . (.3M.)  -- C:\Program Files\3M\PSNLite\PsnLite.exe
O4 - Global Startup: C:\Documents And Settings\Laeti\Menu Démarrer\Programmes\Démarrage\RocketDock.lnk . (...)  -- C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe



---\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader 9.lnk . (...)  -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A94000000001}\SC_Reader.ico
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Apple Software Update.lnk . (...)  -- C:\WINDOWS\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\AppleSoftwareUpdateIco.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\CDBurnerXP.lnk . (.Canneverbe Limited.)  -- C:\Program Files\CDBurnerXP\cdbxpp.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Media Center.lnk . (.Microsoft Corporation.)  -- C:\WINDOWS\ehome\ehshell.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Post-it® Software Notes Lite.lnk . (.3M.)  -- C:\Program Files\3M\PSNLite\PsnLite.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Safari.lnk . (...)  -- C:\WINDOWS\Installer\{6C1E7AA1-44E9-446D-AAB2-0DE6D9EFEAB1}\SafariIco.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Messenger\msmsgs.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Movie Maker\moviemk.exe
O4 - Global Startup: C:\Documents And Settings\Laeti\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.)  -- C:\WINDOWS\system32cimlby.exe
O4 - Global Startup: C:\Documents And Settings\Laeti\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Documents And Settings\Laeti\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Outlook Express\msimn.exe
O4 - Global Startup: C:\Documents And Settings\Laeti\Menu Démarrer\Programmes\Windows Media Player.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Windows Media Player\wmplayer.exe



---\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: Add to Google Photos Screensa&ver . (.Google Inc. - Google Photos Screensaver.) -- C:\WINDOWS\system32\GPhotos.scr
O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~2\Office12\EXCEL.exe
O8 - Extra context menu item: Google Sidewiki... . (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_43C348BC2E93EB2B.dll



---\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO
O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (...) -- C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO
O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe



---\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\WINDOWS\system32\wshbth.dll



---\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://fichiers.touslesdrivers.com/maconfig/MaConfig_3_5_3_0.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com/activex/ractrl.cab?lmi=100



---\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{BD31365F-0A7B-45A0-AD2C-46E08DD99AF0}: NameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{BD31365F-0A7B-45A0-AD2C-46E08DD99AF0}: NameServer = 192.168.1.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{BD31365F-0A7B-45A0-AD2C-46E08DD99AF0}: NameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{BD31365F-0A7B-45A0-AD2C-46E08DD99AF0}: DhcpNameServer = 192.168.1.1



---\ Protocole additionnel et piratage de protocole (O18)
O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL



---\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\Windows\System32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\Windows\System32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\Windows\System32\cscdll.dll
O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\Windows\System32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\WlNotify.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll



---\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll



---\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: (no name) - {438755C2-A8BA-11D1-B96B-00A0C90312E1} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll



---\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) . (.Hewlett-Packard Company - LightScribe Service.) - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: NMSAccess (NMSAccess) . (...) - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 182.5.) - C:\WINDOWS\system32
vsvc32.exe



---\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) -  (.not file.)



---\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\FRU Task #Hewlett-Packard#hp psc 1100 series#1253109987.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
[MD5.4D6019BE71C720E2D29F2CE758F7A53B] [APT] [FRU Task #Hewlett-Packard#hp psc 1100 series#1253109987] (...) -- C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpqfrucl.exe
[MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe



---\ Pilotes lancés au démarrage (O41)
O41 - Driver:  (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
O41 - Driver:  (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\System32\DRIVERS\cdrom.sys
O41 - Driver:  (ElbyCDIO) . (.Elaborate Bytes AG - ElbyCD Windows NT/2000/XP I/O driver.) - C:\WINDOWS\System32\Drivers\ElbyCDIO.sys
O41 - Driver:  (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\System32\DRIVERS\i8042prt.sys
O41 - Driver:  (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\System32\DRIVERS\imapi.sys
O41 - Driver:  (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\System32\DRIVERS\intelppm.sys
O41 - Driver:  (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\System32\DRIVERS\ipsec.sys
O41 - Driver:  (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\System32\DRIVERS\kbdclass.sys
O41 - Driver:  (kbdhid) . (.Microsoft Corporation - Pilote de filtre souris HID.) - C:\WINDOWS\System32\DRIVERS\kbdhid.sys
O41 - Driver:  (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\System32\DRIVERS\mouclass.sys
O41 - Driver:  (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\System32\DRIVERS\mrxsmb.sys
O41 - Driver:  (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\System32\DRIVERS
etbios.sys
O41 - Driver:  (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\System32\DRIVERS
etbt.sys
O41 - Driver:  (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\System32\DRIVERSasacd.sys
O41 - Driver:  (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\System32\DRIVERSdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\System32\DRIVERS\RDPCDD.sys
O41 - Driver:  (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\System32\DRIVERSedbook.sys
O41 - Driver:  (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\WINDOWS\System32\DRIVERS\serial.sys
O41 - Driver:  (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\System32\DRIVERS	cpip.sys
O41 - Driver:  (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\System32\DRIVERS	ermdd.sys
O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys



---\ Logiciels installés (O42)
O42 - Logiciel: 7-Zip 4.65 - (.Pas de propriétaire.) [HKLM] -- 7-Zip
O42 - Logiciel: ATI - Utilitaire de désinstallation du logiciel - (.Pas de propriétaire.) [HKLM] -- All ATI Software
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- Adobe AIR
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- {FDB3B167-F4FA-461D-976F-286304A57B2A}
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Reader 9.4.5 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A94000000001}
O42 - Logiciel: Aion (North America) - (.NCsoft.) [HKCU] -- NCsoft-Aion
O42 - Logiciel: Aion - (.NCsoft.) [HKCU] -- NCsoft-AionEU
O42 - Logiciel: Alice Auto-diagnostic - (.Pas de propriétaire.) [HKLM] -- AliceSAV
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {853A4763-6643-4604-8D64-28BDD8925F4C}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
O42 - Logiciel: CCleaner (remove only) - (.Piriform.) [HKLM] -- CCleaner
O42 - Logiciel: CDBurnerXP - (.CDBurnerXP.) [HKLM] -- {7E265513-8CDA-4631-B696-F40D983F3B07}_is1
O42 - Logiciel: Disque de souvenirs HP - (.Hewlett-Packard Company.) [HKLM] -- {B376402D-58EA-45EA-BD50-DD924EB67A70}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: High Definition Audio Driver Package - KB888111 - (.Microsoft Corporation.) [HKLM] -- KB888111WXPSP2
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399
O42 - Logiciel: Hotfix for Windows Media Player 10 (KB903157) - (.Microsoft Corporation.) [HKLM] -- KB903157
O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5
O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5
O42 - Logiciel: Internet Explorer - (.Microsoft Corporation.) [HKLM] -- {4E414048-A9DD-4F60-AA1D-018E716C88C9}
O42 - Logiciel: Java(TM) 6 Update 26 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216017FF}
O42 - Logiciel: K-Lite Codec Pack 4.6.2 (Full) - (.Pas de propriétaire.) [HKLM] -- KLiteCodecPack_is1
O42 - Logiciel: Kit de Connexion Alice ADSL - (.Pas de propriétaire.) [HKLM] -- {3A0221AD-D30B-4320-8F9B-1D0F0E6C6843}
O42 - Logiciel: Lecteur Windows Media 11 - (.Pas de propriétaire.) [HKLM] -- Windows Media Player
O42 - Logiciel: LightScribe System Software  1.14.25.1 - (.LightScribe.) [HKLM] -- {DA9DAC64-C947-47BA-B411-8A1959B177CF}
O42 - Logiciel: Logitech Desktop Messenger - (.Pas de propriétaire.) [HKLM] -- {900B1197-53F5-4F46-A882-2CFFFE2EEDCB}
O42 - Logiciel: Logitech SetPoint - (.Pas de propriétaire.) [HKLM] -- {2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}
O42 - Logiciel: MSN - (.Pas de propriétaire.) [HKLM] -- MSNINST
O42 - Logiciel: MSXML 6 Service Pack 2 (KB973686) - (.Microsoft Corporation.) [HKLM] -- {56EA8BC0-3751-4B93-BC9D-6651CC36E5AA}
O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM] -- {425FFD94-36BD-4933-881B-FE0B9DADF2B7}
O42 - Logiciel: Malwarebytes' Anti-Malware version 1.51.0.1200 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Microsoft .NET Framework 1.0 Hotfix (KB979904) - (.Microsoft Corporation.) [HKLM] -- KB979904
O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Microsoft.) [HKLM] -- {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Pas de propriétaire.) [HKLM] -- Microsoft .NET Framework 1.1  (1033)
O42 - Logiciel: Microsoft .NET Framework 1.1 French Language Pack - (.Microsoft.) [HKLM] -- {9A394342-4A68-4EBA-85A6-55B559F4E700}
O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB2416447) - (.Pas de propriétaire.) [HKLM] -- M2416447
O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB979906) - (.Pas de propriétaire.) [HKLM] -- M979906
O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1
O42 - Logiciel: Microsoft Office Access MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- PROPLUS
O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- Wudf01000
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {7299052b-02a4-4627-81f2-1818da5d550d}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: Moovida - (.Secure Digital Services.) [HKLM] -- {6084C211-01A1-464E-97A0-09772E122B50}
O42 - Logiciel: Mozilla Firefox (3.6.18) - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.6.18)
O42 - Logiciel: Mumble and Murmur - (.Mumble.) [HKLM] -- Mumble
O42 - Logiciel: NCsoft Launcher - (.NCsoft.) [HKLM] -- {5F8E2CBB-949D-4175-AC98-5ADE7F6C9697}
O42 - Logiciel: NVIDIA Drivers - (.NVIDIA Corporation.) [HKLM] -- NVIDIA Drivers
O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM] -- {DD1865F0-AD73-40FB-B23E-1822E02396FF}
O42 - Logiciel: Pack Vista Inspirat 2 1.0 - (.Bricomix.) [HKLM] -- Pack Vista Inspirat 2
O42 - Logiciel: Pando Media Booster - (.Pando Networks Inc..) [HKLM] -- {980A182F-E0A2-4A40-94C1-AE0C1235902E}
O42 - Logiciel: Photo et imagerie HP 2.0 - All-in-One - (.Hewlett-Packard Company.) [HKLM] -- {9867A917-5D17-40DE-83BA-BEA5293194B1}
O42 - Logiciel: Photo et imagerie HP 2.0 - All-in-One Pilote - (.Hewlett-Packard Company.) [HKLM] -- {6ECB39BD-73C2-44DD-B1A0-898207C58D8B}
O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM] -- Picasa 3
O42 - Logiciel: Post-it® Software Notes Lite - (.Pas de propriétaire.) [HKLM] -- PSN
O42 - Logiciel: REALTEK PCIE NIC Driver - (.REALTEK Semiconductor Corp..) [HKLM] -- {17E2F183-BAC4-4D01-BD7A-59F781E17EFA}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Safari - (.Apple Inc..) [HKLM] -- {6C1E7AA1-44E9-446D-AAB2-0DE6D9EFEAB1}
O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473
O42 - Logiciel: Skype(TM) 5.0 - (.Skype Technologies S.A..) [HKLM] -- {E633D396-5188-4E9D-8F6B-BFB8BF3467E8}
O42 - Logiciel: Unity Web Player - (.Unity Technologies ApS.) [HKCU] -- UnityWebPlayer
O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
O42 - Logiciel: VirtualCloneDrive - (.Elaborate Bytes.) [HKLM] -- VirtualCloneDrive
O42 - Logiciel: WinRAR archiver - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver
O42 - Logiciel: Windows Feature Pack for Storage (32-bit) - IMAPI update for Blu-Ray - (.Microsoft Corporation.) [HKLM] -- KB952011
O42 - Logiciel: Windows Imaging Component - (.Microsoft Corporation.) [HKLM] -- WIC
O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8
O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11
O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime
O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11
O42 - Logiciel: Windows XP Media Center Edition 2005 KB2502898 - (.Microsoft Corporation.) [HKLM] -- KB2502898
O42 - Logiciel: Windows XP Media Center Edition 2005 KB925766 - (.Microsoft Corporation.) [HKLM] -- KB925766
O42 - Logiciel: Windows XP Media Center Edition 2005 KB973768 - (.Microsoft Corporation.) [HKLM] -- KB973768
O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service
O42 - Logiciel: XnView 1.97.8 - (.Gougelet Pierre-e.) [HKLM] -- XnView_is1
O42 - Logiciel: avast! Free Antivirus - (.AVAST Software.) [HKLM] -- avast
O42 - Logiciel: hp psc 1100 series - (.Hewlett-Packard Company.) [HKLM] -- {01161F64-6897-4885-93A0-A9F7BE9A4253}
O42 - Logiciel: µTorrent - (.Pas de propriétaire.) [HKLM] -- uTorrent

---\ HKCU & HKLM Software Keys
[HKCU\Software\3M]
[HKCU\Software\7-Zip]
[HKCU\Software\ALWIL Software]
[HKCU\Software\AVAST Software]
[HKCU\Software\Ad-Remover]
[HKCU\Software\Adobe]
[HKCU\Software\Aion]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\BitTorrent]
[HKCU\Software\Bugsplat]
[HKCU\Software\Canneverbe Limited]
[HKCU\Software\CeWe Color]
[HKCU\Software\ClassesB]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\CoreVorbis]
[HKCU\Software\Cyberlink]
[HKCU\Software\Digital River]
[HKCU\Software\DivXNetworks]
[HKCU\Software\Elaborate Bytes]
[HKCU\Software\GNU]
[HKCU\Software\GSpot Appliance Corp]
[HKCU\Software\Gabest]
[HKCU\Software\Genesis Digital Innovations]
[HKCU\Software\Google]
[HKCU\Software\Haali]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\HookNetwork]
[HKCU\Software\INCAInternet]
[HKCU\Software\Intel]
[HKCU\Software\JEDI-VCL]
[HKCU\Software\JavaSoft]
[HKCU\Software\Jitit Virtual Registry]
[HKCU\Software\Lavalys]
[HKCU\Software\LightScribe]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\LogMeIn]
[HKCU\Software\Logitech]
[HKCU\Software\MUSICMATCH]
[HKCU\Software\Macromedia]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\MediaInfo]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Mumble]
[HKCU\Software\NCsoft]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\Oak Technology]
[HKCU\Software\Pando Networks]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\Realtek]
[HKCU\Software\Revenger inc.]
[HKCU\Software\RocketDock]
[HKCU\Software\SkypeApps]
[HKCU\Software\Skype]
[HKCU\Software\SoftVTU]
[HKCU\Software\Trolltech]
[HKCU\Software\UberIcon-v1.0.0]
[HKCU\Software\Unity]
[HKCU\Software\Usbfix]
[HKCU\Software\VSO]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\Yahoo]
[HKCU\Software\cybelsoft]
[HKLM\Software\3M]
[HKLM\Software\AGEIA Technologies]
[HKLM\Software\ALWIL Software]
[HKLM\Software\ATI Technologies Inc.]
[HKLM\Software\ATI Technologies]
[HKLM\Software\AVAST Software]
[HKLM\Software\Adobe]
[HKLM\Software\Alice ADSL]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\BackWeb]
[HKLM\Software\Bricomix.net]
[HKLM\Software\C07ft5Y]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Codec Tweak Tool]
[HKLM\Software\Cyberlink]
[HKLM\Software\DIOC]
[HKLM\Software\DivXNetworks]
[HKLM\Software\Dofus 2]
[HKLM\Software\Elaborate Bytes]
[HKLM\Software\GNU]
[HKLM\Software\Gabest]
[HKLM\Software\GalaNetEu]
[HKLM\Software\Gemplus]
[HKLM\Software\Google]
[HKLM\Software\HPS]
[HKLM\Software\HaaliMkx]
[HKLM\Software\Hewlett-Packard]
[HKLM\Software\Intel]
[HKLM\Software\InterVideo]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\KLCodecPack]
[HKLM\Software\LanSetup]
[HKLM\Software\LightScribe]
[HKLM\Software\Macromedia]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\MimarSinan]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\NCsoft]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\ODBC]
[HKLM\Software\Oak Technology]
[HKLM\Software\Pando Networks]
[HKLM\Software\Policies]
[HKLM\Software\Program Groups]
[HKLM\Software\REALTEK Semiconductor Corporation]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Revenger inc.]
[HKLM\Software\S3R521]
[HKLM\Software\Schlumberger]
[HKLM\Software\Secure]
[HKLM\Software\Set8168]
[HKLM\Software\Skype]
[HKLM\Software\Sonic]
[HKLM\Software\TechCity]
[HKLM\Software\TrendMicro]
[HKLM\Software\Uniblue]
[HKLM\Software\VSO]
[HKLM\Software\Windows 3.1 Migration Status]
[HKLM\Software\Windows]
[HKLM\Software\XnView]
[HKLM\Software\Yahoo]
[HKLM\Software\cybelsoft]
[HKLM\Software\iColorFolder]
[HKLM\Software\knight]
[HKLM\Software\logitech]
[HKLM\Software\mozilla.org]



---\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 12/01/2010 - 18:49:14 - [3274392] ----D- C:\Program Files\3M
O43 - CFD: 20/08/2009 - 14:15:10 - [3094515] ----D- C:\Program Files\7-Zip
O43 - CFD: 06/07/2011 - 19:32:40 - [323326021] ----D- C:\Program Files\Ad-Remover
O43 - CFD: 30/10/2010 - 19:06:48 - [163076362] ----D- C:\Program Files\Adobe
O43 - CFD: 12/01/2010 - 16:37:40 - [123222710] ----D- C:\Program Files\AGEIA Technologies
O43 - CFD: 01/07/2010 - 00:08:48 - [0] ----D- C:\Program Files\ALDI
O43 - CFD: 20/08/2009 - 14:07:44 - [1994042] ----D- C:\Program Files\Alice
O43 - CFD: 29/07/2010 - 11:23:30 - [213188110] ----D- C:\Program Files\Alwil Software
O43 - CFD: 08/07/2011 - 16:38:44 - [2428606] ----D- C:\Program Files\Apple Software Update
O43 - CFD: 07/11/2009 - 17:15:44 - [139264] ----D- C:\Program Files\ATI Technologies
O43 - CFD: 16/07/2009 - 17:39:42 - [2355410] ----D- C:\Program Files\CCleaner
O43 - CFD: 09/06/2011 - 22:22:52 - [17887826] ----D- C:\Program Files\CDBurnerXP
O43 - CFD: 16/07/2009 - 22:00:02 - [24619792] ----D- C:\Program Files\Common Files
O43 - CFD: 16/07/2009 - 16:21:36 - [0] ----D- C:\Program Files\ComPlus Applications
O43 - CFD: 01/07/2010 - 00:06:54 - [0] ----D- C:\Program Files\Dofus
O43 - CFD: 21/10/2010 - 18:34:28 - [971528841] ----D- C:\Program Files\Dofus 2
O43 - CFD: 16/07/2009 - 17:40:58 - [1955543] ----D- C:\Program Files\Elaborate Bytes
O43 - CFD: 24/06/2011 - 16:09:56 - [422983495] ----D- C:\Program Files\Fichiers communs
O43 - CFD: 29/01/2010 - 06:47:40 - [96166707] ----D- C:\Program Files\Google
O43 - CFD: 27/07/2009 - 14:42:32 - [2902968620] ----D- C:\Program Files\gPotato.eu
O43 - CFD: 16/09/2009 - 16:04:34 - [383066236] ----D- C:\Program Files\Hewlett-Packard
O43 - CFD: 12/07/2011 - 23:37:00 - [20538172] --H-D- C:\Program Files\InstallShield Installation Information
O43 - CFD: 07/11/2009 - 17:29:00 - [96701] ----D- C:\Program Files\Intel
O43 - CFD: 16/06/2011 - 20:00:08 - [4673988] ----D- C:\Program Files\Internet Explorer
O43 - CFD: 24/06/2011 - 16:09:42 - [81314702] ----D- C:\Program Files\Java
O43 - CFD: 16/07/2009 - 17:42:16 - [37506493] ----D- C:\Program Files\K-Lite Codec Pack
O43 - CFD: 27/07/2009 - 10:31:42 - [40282453] ----D- C:\Program Files\Logitech
O43 - CFD: 07/11/2009 - 17:26:14 - [4935959] ----D- C:\Program Files\ma-config.com
O43 - CFD: 13/07/2011 - 22:09:08 - [7577396] ----D- C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD: 14/01/2010 - 04:54:30 - [2152579] ----D- C:\Program Files\Messenger
O43 - CFD: 16/07/2009 - 16:25:42 - [0] ----D- C:\Program Files\microsoft frontpage
O43 - CFD: 16/07/2009 - 17:47:22 - [551059659] ----D- C:\Program Files\Microsoft Office
O43 - CFD: 16/07/2009 - 17:47:20 - [14904] ----D- C:\Program Files\Microsoft Visual Studio
O43 - CFD: 16/07/2009 - 17:47:34 - [3178824] ----D- C:\Program Files\Microsoft Works
O43 - CFD: 16/07/2009 - 17:46:54 - [8152064] ----D- C:\Program Files\Microsoft.NET
O43 - CFD: 12/08/2010 - 14:18:58 - [10949041] ----D- C:\Program Files\Movie Maker
O43 - CFD: 25/06/2011 - 09:01:24 - [30507528] ----D- C:\Program Files\Mozilla Firefox
O43 - CFD: 15/08/2009 - 03:06:32 - [26521] ----D- C:\Program Files\MSBuild
O43 - CFD: 04/08/2009 - 21:40:18 - [21471461] ----D- C:\Program Files\MSN
O43 - CFD: 16/07/2009 - 16:19:44 - [8745735] ----D- C:\Program Files\MSN Gaming Zone
O43 - CFD: 15/08/2009 - 03:01:26 - [6849] ----D- C:\Program Files\MSXML 6.0
O43 - CFD: 06/04/2010 - 15:48:22 - [37973809] ----D- C:\Program Files\Mumble
O43 - CFD: 16/08/2009 - 13:35:50 - [378999] ----D- C:\Program Files\MUSICMATCH
O43 - CFD: 18/07/2009 - 01:33:22 - [48822055834] ----D- C:\Program Files\NCSoft
O43 - CFD: 14/01/2010 - 04:40:46 - [3285523] ----D- C:\Program Files\NetMeeting
O43 - CFD: 09/08/2009 - 20:33:06 - [0] ----D- C:\Program Files\NOS
O43 - CFD: 16/07/2009 - 16:21:26 - [1804] ----D- C:\Program Files\Online Services
O43 - CFD: 16/12/2010 - 04:00:36 - [4379321] ----D- C:\Program Files\Outlook Express
O43 - CFD: 27/10/2010 - 18:20:58 - [7367542] ----D- C:\Program Files\Pando Networks
O43 - CFD: 12/07/2011 - 23:37:00 - [48346159] ----D- C:\Program Files\Realtek
O43 - CFD: 15/08/2009 - 03:06:22 - [36400897] ----D- C:\Program Files\Reference Assemblies
O43 - CFD: 08/07/2011 - 16:38:22 - [42293002] ----D- C:\Program Files\Safari
O43 - CFD: 16/07/2009 - 16:24:00 - [1025] ----D- C:\Program Files\Services en ligne
O43 - CFD: 12/12/2010 - 17:14:14 - [19057007] R---D- C:\Program Files\Skype
O43 - CFD: 20/08/2009 - 14:07:52 - [393007] ----D- C:\Program Files\TechCity Solutions
O43 - CFD: 12/07/2011 - 23:36:56 - [4129440] ----D- C:\Program Files\Uniblue
O43 - CFD: 16/07/2009 - 16:32:20 - [0] --H-D- C:\Program Files\Uninstall Information
O43 - CFD: 01/01/2011 - 16:11:36 - [399736] ----D- C:\Program Files\uTorrent
O43 - CFD: 12/01/2010 - 16:36:38 - [17098024] ----D- C:\Program Files\VLCPortable
O43 - CFD: 12/07/2011 - 23:36:30 - [117177722] ----D- C:\Program Files\VSO
O43 - CFD: 15/12/2009 - 05:29:52 - [3581070] ----D- C:\Program Files\Windows Media Connect 2
O43 - CFD: 15/12/2009 - 05:29:50 - [9600055] ----D- C:\Program Files\Windows Media Player
O43 - CFD: 14/01/2010 - 04:40:44 - [3942655] ----D- C:\Program Files\Windows NT
O43 - CFD: 16/07/2009 - 16:21:02 - [41055406] ----D- C:\Program Files\Windows Plus
O43 - CFD: 16/07/2009 - 16:24:02 - [0] --H-D- C:\Program Files\WindowsUpdate
O43 - CFD: 16/07/2009 - 17:40:12 - [3892521] ----D- C:\Program Files\WinRAR
O43 - CFD: 16/07/2009 - 16:25:42 - [0] ----D- C:\Program Files\xerox
O43 - CFD: 28/09/2010 - 18:40:14 - [8605678] ----D- C:\Program Files\XnView
O43 - CFD: 19/07/2011 - 01:01:32 - [6241813] ----D- C:\Program Files\ZHPDiag
O43 - CFD: 16/07/2009 - 22:00:02 - [24619792] ----D- C:\Program Files\Common Files\INCA Shared
O43 - CFD: 12/01/2010 - 18:49:28 - [4096] ----D- C:\Documents and Settings\Laeti\Application Data\3M
O43 - CFD: 16/12/2009 - 22:27:54 - [3111875] ----D- C:\Documents and Settings\Laeti\Application Data\Adobe
O43 - CFD: 16/12/2009 - 22:59:34 - [4648] ----D- C:\Documents and Settings\Laeti\Application Data\app
O43 - CFD: 26/03/2011 - 11:37:58 - [11173515] ----D- C:\Documents and Settings\Laeti\Application Data\Apple Computer
O43 - CFD: 18/07/2009 - 18:06:24 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\ATI
O43 - CFD: 08/06/2011 - 22:45:08 - [1695] ----D- C:\Documents and Settings\Laeti\Application Data\Canneverbe Limited
O43 - CFD: 25/06/2011 - 09:51:50 - [108406871] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus 2
O43 - CFD: 12/04/2010 - 10:25:18 - [6896] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus-2.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 12/04/2010 - 11:36:52 - [9402] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus-3.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 12/04/2010 - 20:06:10 - [30] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus-4.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 23/12/2010 - 00:45:14 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus-5.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 27/02/2011 - 10:22:50 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus-6.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 15/07/2011 - 18:35:46 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus-7.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 15/07/2011 - 18:54:08 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus-8.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 11/04/2010 - 21:10:36 - [16911] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 20/07/2009 - 12:10:56 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Droppix
O43 - CFD: 27/03/2011 - 00:52:52 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\dvdcss
O43 - CFD: 30/06/2010 - 23:43:02 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\FOG Downloader
O43 - CFD: 18/07/2009 - 01:33:08 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\GetRightToGo
O43 - CFD: 09/08/2009 - 14:56:24 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Google
O43 - CFD: 16/01/2011 - 13:38:04 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Help
O43 - CFD: 16/09/2009 - 16:07:08 - [2828] ----D- C:\Documents and Settings\Laeti\Application Data\Hewlett-Packard
O43 - CFD: 19/12/2009 - 23:45:56 - [3638] ----D- C:\Documents and Settings\Laeti\Application Data\Icones
O43 - CFD: 16/07/2009 - 16:32:26 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Identities
O43 - CFD: 17/07/2009 - 17:34:44 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\InstallShield
O43 - CFD: 27/07/2009 - 10:36:56 - [10767] ----D- C:\Documents and Settings\Laeti\Application Data\Logitech
O43 - CFD: 16/07/2009 - 18:43:14 - [58637] ----D- C:\Documents and Settings\Laeti\Application Data\Macromedia
O43 - CFD: 10/07/2011 - 22:00:38 - [11118634] ----D- C:\Documents and Settings\Laeti\Application Data\Malwarebytes
O43 - CFD: 08/06/2011 - 22:15:28 - [16] ----D- C:\Documents and Settings\Laeti\Application Data\Media Player Classic
O43 - CFD: 24/06/2011 - 16:35:40 - [14891755] -S--D- C:\Documents and Settings\Laeti\Application Data\Microsoft
O43 - CFD: 30/10/2010 - 19:11:46 - [3237806] ----D- C:\Documents and Settings\Laeti\Application Data\Mozilla
O43 - CFD: 04/08/2009 - 21:40:40 - [853608] ----D- C:\Documents and Settings\Laeti\Application Data\MSNInstaller
O43 - CFD: 13/11/2010 - 03:41:02 - [435490] ----D- C:\Documents and Settings\Laeti\Application Data\Mumble
O43 - CFD: 16/12/2009 - 22:59:34 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Reg.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 17/07/2011 - 21:35:10 - [6582906] ----D- C:\Documents and Settings\Laeti\Application Data\Skype
O43 - CFD: 21/05/2011 - 22:11:50 - [5544] ----D- C:\Documents and Settings\Laeti\Application Data\skypePM
O43 - CFD: 12/01/2010 - 17:54:34 - [31965402] ----D- C:\Documents and Settings\Laeti\Application Data\Sun
O43 - CFD: 25/04/2010 - 01:23:42 - [38815] ----D- C:\Documents and Settings\Laeti\Application Data	eamspeak2
O43 - CFD: 09/02/2010 - 04:42:32 - [187849] ----D- C:\Documents and Settings\Laeti\Application Data\TS3Client
O43 - CFD: 12/07/2011 - 23:36:58 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Uniblue
O43 - CFD: 19/05/2011 - 23:24:58 - [44] ----D- C:\Documents and Settings\Laeti\Application Data\Unity
O43 - CFD: 14/06/2011 - 03:14:34 - [2913304] ----D- C:\Documents and Settings\Laeti\Application Data\uTorrent
O43 - CFD: 19/10/2010 - 00:51:44 - [475423] ----D- C:\Documents and Settings\Laeti\Application Data\vlc
O43 - CFD: 11/07/2011 - 13:32:48 - [5890] ----D- C:\Documents and Settings\Laeti\Application Data\Vso
O43 - CFD: 28/09/2010 - 18:45:16 - [601052] ----D- C:\Documents and Settings\Laeti\Application Data\XnView
O43 - CFD: 15/08/2009 - 18:04:12 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Yahoo!
O43 - CFD: 30/10/2010 - 19:06:26 - [118713] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Adobe
O43 - CFD: 12/01/2010 - 17:03:58 - [0] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Apple
O43 - CFD: 12/01/2010 - 17:04:42 - [805144702] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Apple Computer
O43 - CFD: 24/06/2011 - 16:36:10 - [11125] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\ApplicationHistory
O43 - CFD: 07/09/2010 - 23:06:32 - [36388416] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\assembly
O43 - CFD: 18/07/2009 - 18:06:24 - [64435] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\ATI
O43 - CFD: 07/07/2011 - 03:39:00 - [190064416] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Google
O43 - CFD: 16/01/2011 - 13:38:04 - [0] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Help
O43 - CFD: 11/06/2011 - 19:55:00 - [44360252] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Microsoft
O43 - CFD: 16/07/2009 - 17:44:50 - [0] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Microsoft Help
O43 - CFD: 30/10/2010 - 19:11:34 - [86608472] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Mozilla
O43 - CFD: 07/07/2011 - 01:30:16 - [0] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\PackageAware
O43 - CFD: 28/10/2010 - 01:28:52 - [160084] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\PMB Files
O43 - CFD: 25/04/2011 - 23:12:16 - [0] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Temp
O43 - CFD: 19/05/2011 - 22:49:36 - [98862506] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Unity



---\ Derniers fichiers modifié

eillane · Answer

c bizarre il bug toujours à 64% tu en penses quoi ?

g3n-h@ckm@n · Answer

c'est toi qui aides sur cnet.france ?

Virus

39 réponses

Discussions similaires