Ie ne s'ouvre plus

clic droit sur l'archive , extraire ici...

mmmmm....télécharge quoi ? où ? avec quel navigateur ?

ok telecharge-le ici :

https://www.clubic.com/telecharger-fiche242026-windows-xp-service-pack-3.html

mais franchement Malwarebytes payant , c'est atomique !!

mis à jour en temps reel , scan programmable , c'est un programme qui vaut vraiment le coup d'etre acheté comparé à tous les machin booster et compagnie qu'on trouve sur le net pour soi-disant booster/scanner/reparer/etc.....et qui servent à rien !!

bonjour, essqais de démarrer en mode sans echec et fais une restauration système à date et heure avant ton clique sur le fameux IE 8 !!

pour redémarrer en mode sans échec : /!\ Ne jamais démarrer en mode sans échec via MSCONFIG /!\

(attention : pas de connexion possible en mode sans échec , donc copies ou imprimes bien la manipe pour éviter les erreurs ...)

.Cliques sur Démarrer
.Cliques sur Arrêter
.Sélectionnes Redémarrer et au redémarrage
.Appuis sur la touche F8 ou F5 celon les marques de pc sans discontinuer "1 appuis seconde" dès qu'un écran de texte apparaît puis disparaît
.Utilises les touches de direction pour sélectionner mode sans échec
.puis appuis sur ENTRÉE
.Il faudra choisir ta session habituelle, pas le compte "Administrateur" ou une autre
une fois démarré ne t'inquiette pas si les couleurs et les icônes ne sont pas comme d'abitude

tuto:http://www.vista-xp.fr/forum/topic93.html

restauration système

cliques sur démarrer
cliques sur tous les programmes
cliques sur accessoires
cliques sur outils système
cliques sur restauration du système
sur la fenêtre qui s'ouvre cocher restaurer mon ordinateur à une heure antérieur
cliques sur suivant
cliques sur une date ou heure en gras sur le calendrier
tu choisis une date ou heure : avant les problèmes
cliques dessus
cliques sur suivant et sur la fenêtre qui s'ouvre vérifis en haut sur gauche si la date et l'heure corresponde à ce que tu as choisi
cliques sur suivant attends le redémarrage une fois redémarré sur la fenêtre de restauration te disant que votre ordinateur a ètè restauré a date, heure, et nom
cliques sur OK
tu vérifis si ça marche, et pense à faire une mise à jour de tes outils de sécurités

bon, de deux choses l'une : ou je suis très fatiguée ou je deviens complètement sénile !!! je vois que j'ai une réponse de Jacques mais je ne sais pas la lire sur le forum ! et je ne recois pas de notification par mail. elle est où la réponse de Jacues ??? déja qu'il me faut un temps fou pour taper un message sur le mini mini ordi de mon fils et sans souris lol

je n'ai pas la "restauration système" en mode sans echec. J'ai :
assistant tft de fichiers et de parametres
centre de securite
defragmenteur
informations syst
IE (sans module compl)
nettoyage disque
table des caractères
taches planifiees
utilit de sauvegarde

je dois aller où ?

en tout, cas, grand merci de ton aide

voilà, j'ai fait la restauration en mode sans échec mais çà ne change rien au problème. De plus, je constate que je n'ai plus les options internet dans le panneau de configuration. En fait, je ne sais plus rien ouvrir qui concerne IE. Re-help SVP

voilà, j'ai le rapport mais je ne sais pas l'envoyer comme tu le demandes en fin de réponse donc je fais un copié/collé. Pour info, j'ai désinstallé IE7 et suis donc revenue à la version 6 mais mon PC doit avoir un sérieux prob parce qu'à l'ouverture, pas moins de 10 à 15 minutes pour voir apparaitre les icones sur le bureau (quand elles apparaissent sinon je dois rebooter), avast ne réagit pas (image figée que je n'arrive pas à fermer), la fenêtre "démarrer" reste ouverte et impossible de la refermer)...

rapport :Rapport de ZHPDiag v1.27.2406 par Nicolas Coolman, Update du 12/07/2011
Run by Domdom at 14/07/2011 17:03:51
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html

---\\ Web Browser
MSIE: Internet Explorer v6.0.2900.2180 (Defaut)

---\\ System Information
Windows XP Professional Service Pack 2 (Build 2600)
~ Processor: x86 Family 6 Model 6 Stepping 2, AuthenticAMD
~ Operating System: 32 Bits
~ Boot mode: ~ Normal (Normal boot)
Total RAM: 511 MB (35% free)
~ System Restore: Activé (Enable)
System drive C: has 42 GB (55%) free of 75 GB

---\\ Logged in mode
~ Computer Name: DOMINIQUE
~ User Name: Domdom
~ All Users Names: °°°JuStInE°°°, SUPPORT_388945a0, HelpAssistant, Domdom, ASPNET, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O82
~ Logged in as Administrator

---\\ Environnement Variables
~ %AppData%=C:\Documents and Settings\Domdom\Application Data\
~ %Desktop%=C:\Documents and Settings\Domdom\Bureau\
~ %Favorites%=C:\Documents and Settings\Domdom\Favoris\
~ %LocalAppData%=C:\Documents and Settings\Domdom\Local Settings\Application Data\
~ %StartMenu%=C:\Documents and Settings\Domdom\Menu Démarrer\

---\\ DOS/Devices
A:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
C:\ Hard drive, Flash drive, Thumb drive (Free 42 Go of 75 Go)
D:\ CD-ROM drive (Not Inserted)
E:\ Floppy drive, Flash card reader, USB Key (Free 7 Go of 8 Go)

---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: Modified
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK

---\\ Recherche particulière de fichiers génériques
[MD5.D0288319660EDCFED07C7E74C4EA38A5] - (.Microsoft Corporation - Explorateur Windows.) (.14/07/2011 - 14:22:28.) -- C:\WINDOWS\Explorer.exe [1037312]
[MD5.CDD7140C0EAA754C527B983CCC9993CD] - (....) (.14/07/2011 - 00:10:02.) -- C:\WINDOWS\system32\rundll32.exe [33792]
[MD5.4F6A45B54D26708E2C2BF2C43D83EDEA] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.14/07/2011 - 13:57:30.) -- C:\WINDOWS\system32\wininet.dll [669696]
[MD5.123EEA158F74D0F67A51DCDF065D1091] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.14/07/2011 - 00:10:04.) -- C:\WINDOWS\system32\Winlogon.exe [506368]
[MD5.CDFE4411A69C224BD1D11B2DA92DAC51] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.14/07/2011 - 06:59:42.) -- C:\WINDOWS\system32\drivers\atapi.sys [95360]
[MD5.19A811EF5F1ED5C926A028CE107FF1AF] - (.Microsoft Corporation - NT File System Driver.) (.14/07/2011 - 12:10:35.) -- C:\WINDOWS\system32\drivers\ntfs.sys [574464]

---\\ Etat des fichiers cachés (Caché/Total)
~ Mes musiques (My Musics) : 3/70
~ Mes Videos (My Video) : 0/0
~ Mes Favoris (My Favorites) : 4/294
~ Mes Documents (My Documents) : 12/517
~ Mon Bureau (My Desktop) : 81/2125
~ Menu demarrer (Programs) : 11/60

---\\ Processus lancés
[MD5.ABDD5AD016AFFD34AD40E944CE94BF59] - (.SEIKO EPSON CORPORATION - eEBAPI Core Process module.) -- C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe [94208]
[MD5.62E1B62C9DD8F446D224166A4D78B5DD] - (.Lavasoft AB - Ad-Aware 2007 Service.) -- C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe [561152]
[MD5.20F6F19FE9E753F2780DC2FA083AD597] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe [37664]
[MD5.F2060A34C8A75BC24A9222EB4F8C07BD] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [349472]
[MD5.6BBE2AFF7537B4EC95665CB1C73963F5] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 29.42.) -- C:\WINDOWS\System32\nvsvc32.exe [61440]
[MD5.ED78DFAD8EFCDFBC89500492C4D14645] - (...) -- C:\WINDOWS\System32\PAStiSvc.exe [53248]
[MD5.F5F3A19013808113B1F3DADA4379606A] - (.Patchou - Messenger Plus!.) -- C:\Program Files\Messenger Plus! 3\MsgPlus.exe [190024]
[MD5.F12304998EB8BF811691B48BFD0936CF] - (.Pas de propriétaire - PDeviceConn MFC Application.) -- C:\Program Files\Philips\Philips Device Transfer Pop-up\PDeviceConn.exe [299008]
[MD5.FFB2D7833002457D3801AA4422FFB44F] - (.Sun Microsystems, Inc. - Java(TM) 2 Platform Standard Edition binary.) -- C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe [49263]
[MD5.80638A0BD43E0E10BBA267C2F2590E04] - (.Nikon Corporation - Nikon Transfer Monitor.) -- C:\Program Files\Fichiers communs\Nikon\Monitor\NkMonitor.exe [485208]
[MD5.6126AFA8866BA4092A90818BD20364DE] - (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE [98304]
[MD5.8B718E2C3AE1EA0B90BFA793F7B558A7] - (.Ask - Ask Updater.) -- C:\Program Files\Ask.com\Updater\Updater.exe [395144]
[MD5.53D96678FB89F056D5285101481297D9] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [421160]
[MD5.E7CF222185411C6A3E68273C452B3283] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\avastUI.exe [3493720]
[MD5.74E6E96C6F0E2ECA4EDBB7F7A468F259] - (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\MSMSGS.EXE [1694208]
[MD5.77857FD80DBC1C0AABC23FBDADE3FFB2] - (.Shareaza Development Team - Shareaza Ultimate File Sharing.) -- C:\Program Files\Shareaza\Shareaza.exe [4468736]
[MD5.B84A28B3984185EDA8867541AF14CDDB] - (.Apple Inc. - iPodService Module (32-bit).) -- C:\Program Files\iPod\bin\iPodService.exe [820520]
[MD5.385D1644E676C96EB07848ADA63E37FA] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe [93184]
[MD5.00365B3515C30F66CDB938F6729F3D0C] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [656896]

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (...) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@zylom.com/ZylomGamesPlayer] - (.Zylom - Zylom Plugin.) -- C:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll
P2 - FPN: [HKLM] [yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1] - (.Yahoo! Inc. - Yahoo! activeX Plug-in Bridge.) -- C:\Program Files\Yahoo!\Common\npyaxmpb.dll

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://sn136w.snt136.mail.live.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.microsoft.com/fr-fr/
R0 - HKUS\S-1-5-21-1757981266-1383384898-1343024091-1003\Software\Microsoft\Internet Explorer\Main,Start Page = http://sn136w.snt136.mail.live.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.bing.com/?toHttps=1&redig=17DBE7D168544FA98200E890A8051984
R1 - HKUS\S-1-5-21-1757981266-1383384898-1343024091-1003\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = live search
R1 - HKUS\S-1-5-21-1757981266-1383384898-1343024091-1003\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = https://www.bing.com/?fdr=lc&toHttps=1&redig=FA6AD360E0BE4C719380F8C470A3D3A8
R1 - HKUS\S-1-5-21-1757981266-1383384898-1343024091-1003\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} . (.Ask - Ask Toolbar.) (5.12.2.16749) -- C:\Program Files\Ask.com\GenericAskToolbar.dll
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Bibliothèque d'objets et de contrôles de do.) (No version) -- %SystemRoot%\System32\shdocvw.dll
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} . (.Yahoo! Inc. - Yahoo! Toolbar.) (2006, 10, 26, 1) -- C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: midicair Toolbar - {77f8c945-4b74-4bd6-a073-e0d1997edce8} . (.Conduit Ltd. - Conduit Toolbar.) (6.3.2.0) -- C:\Program Files\midicair\prxtbmid0.dll
R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2

---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} . (.Yahoo! Inc. - Yahoo! Toolbar.) -- C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe Acrobat IE Helper Version 6.0 for Act.) -- C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\ConduitEngine\prxConduitEngine.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Sun Microsystems, Inc. - Java(TM) 2 Platform Standard Edition binary.) -- C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O2 - BHO: midicair - {77f8c945-4b74-4bd6-a073-e0d1997edce8} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\midicair\prxtbmid0.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} . (.Microsoft Corporation - st.) -- C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} . (.Microsoft Corporation - MSN Toolbar extension.) -- C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} . (.Ask - Ask Toolbar.) -- C:\Program Files\Ask.com\GenericAskToolbar.dll

---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: (no name) - {CC90CDA0-74A0-45b4-80EF-D89CA8C249B8} . (...) -- (.not file.)
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} . (.Microsoft Corporation - MSN Toolbar extension.) -- C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} . (.Yahoo! Inc. - Yahoo! Toolbar.) -- C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: midicair Toolbar - {77f8c945-4b74-4bd6-a073-e0d1997edce8} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\midicair\prxtbmid0.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\ConduitEngine\prxConduitEngine.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} . (.Ask - Ask Toolbar.) -- C:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O3 - Toolbar: (no name) - {1E796980-9CC5-11D1-A83F-00C04FC99D61} . (...) -- (.not file.)

---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [NvCplDaemon] NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [nwiz] . (.NVIDIA Corporation - NVIDIA nView Wizard, Version 29.42.) -- C:\Windows\System32\nwiz.exe
O4 - HKLM\..\Run: [SysUpd] C:\WINDOWS\sysupd.exe (.not file.)
O4 - HKLM\..\Run: [AT-Watch] Clé orpheline
O4 - HKLM\..\Run: [Anti-Trojan-Watch] C:\Program Files\Anti-Trojan-55\ATWatch.exe (.not file.)
O4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~3.dll (.not file.)
O4 - HKLM\..\Run: [MessengerPlus3] . (.Patchou - Messenger Plus!.) -- C:\Program Files\Messenger Plus! 3\MsgPlus.exe
O4 - HKLM\..\Run: [LaunchPDeviceConn] . (.Pas de propriétaire - PDeviceConn MFC Application.) -- C:\Program Files\Philips\Philips Device Transfer Pop-up\PDeviceConn.exe
O4 - HKLM\..\Run: [CloseDNF] Clé orpheline
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) 2 Platform Standard Edition binary.) -- C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe
O4 - HKLM\..\Run: [spa_start] C:\WINDOWS\system32\sprt_ads.dll (.not file.)
O4 - HKLM\..\Run: [Nikon Transfer Monitor] . (.Nikon Corporation - Nikon Transfer Monitor.) -- C:\Program Files\Fichiers communs\Nikon\Monitor\NkMonitor.exe
O4 - HKLM\..\Run: [EPSON Stylus DX4800 Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.exe
O4 - HKLM\..\Run: [ApnUpdater] . (.Ask - Ask Updater.) -- C:\Program Files\Ask.com\Updater\Updater.exe
O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\qttask.exe
O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\avastUI.exe
O4 - HKCU\..\Run: [MSMSGS] . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\MSMSGS.exe
O4 - HKCU\..\Run: [Instant Access] p2esocks_1019.dll
O4 - HKCU\..\Run: [Shareaza] . (.Shareaza Development Team - Shareaza Ultimate File Sharing.) -- C:\Program Files\Shareaza\Shareaza.exe
O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\System32\CTFMON.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\System32\CTFMON.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\System32\CTFMON.exe
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\System32\CTFMON.exe
O4 - HKUS\S-1-5-21-1757981266-1383384898-1343024091-1003\..\Run: [MSMSGS] . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\MSMSGS.exe
O4 - HKUS\S-1-5-21-1757981266-1383384898-1343024091-1003\..\Run: [Instant Access] p2esocks_1019.dll
O4 - HKUS\S-1-5-21-1757981266-1383384898-1343024091-1003\..\Run: [Shareaza] . (.Shareaza Development Team - Shareaza Ultimate File Sharing.) -- C:\Program Files\Shareaza\Shareaza.exe
O4 - HKUS\S-1-5-21-1757981266-1383384898-1343024091-1003\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Microsoft Office.lnk . (.Microsoft Corporation.) -- C:\Program Files\Microsoft Office\Office10\OSA.EXE

---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader 6.0.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A00000000001}\SC_Reader_PM.ico
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Apple Software Update.lnk . (...) -- C:\WINDOWS\Installer\{C6579A65-9CAE-4B31-8B6B-3306E0630A66}\AppleSoftwareUpdateIco.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Access.lnk . (...) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\accicons.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft FrontPage.lnk . (...) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\misc.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Word.lnk . (...) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\wordicon.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\MSN Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\MSN\MSNCoreFiles\msn6.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk . (.Microsoft Corporation.) -- C:\Program Files\Messenger\msmsgs.exe
O4 - Global Startup: C:\Documents And Settings\Domdom\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe
O4 - Global Startup: C:\Documents And Settings\Domdom\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Documents And Settings\Domdom\Menu Démarrer\Programmes\Lecteur Windows Media.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Documents And Settings\Domdom\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Excel.) -- C:\PROGRA~1\MICROS~2\Office10\EXCEL.exe

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -- Clé orpheline
O9 - Extra button: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} -- Clé orpheline
O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} -- Clé orpheline
O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe

---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll

---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {0594AF7E-573B-40DF-8165-E47AB2EAEFE8} () - https://www.afternic.com/domains/downloadv3.com
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} () - http://ak.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCentralInitialSetup1.0.0.8.cab
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} () - http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB
O16 - DPF: {469C7080-8EC8-43A6-AD97-45848113743C} () - https://www.afternic.com/domains/downloadv3.com
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://belgacom.extrafilm.be/ImageUploader5.cab
O16 - DPF: {7DBFDA8E-D33B-11D4-9269-00600868E56E} (WWWInstall Class) - http://go.securelive.com/speed/WebInstall.dll
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} () - http://www.coupdepoucepc.com/scan/Msie/bitdefender.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} () - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38014.3210185185
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{A5ADFA91-B14C-4C13-A48D-EC517C531BCB}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{A5ADFA91-B14C-4C13-A48D-EC517C531BCB}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\Windows\System32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\Windows\System32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\Windows\System32\cscdll.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\Windows\System32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\WlNotify.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: WgaLogon . (.Microsoft Corporation - Windows Genuine Advantage Notification.) -- C:\Windows\System32\WgaLogon.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - AppInit_DLLs: . (.Patchou - Messenger Plus! Process Monitor.) - C:\Windows\System32\MsgPlusLoader.dll

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\WINDOWS\System32\webcheck.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\System32\stobject.dll

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: (no name) - {438755C2-A8BA-11D1-B96B-00A0C90312E1} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\System32\browseui.dll

---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Ad-Aware 2007 Service (aawservice) . (.Lavasoft AB - Ad-Aware 2007 Service.) - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: EpsonBidirectionalService (EpsonBidirectionalService) . (.SEIKO EPSON CORPORATION - eEBAPI Core Process module.) - C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 29.42.) - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: STI Simulator (STI Simulator) . (...) - C:\WINDOWS\System32\PAStiSvc.exe

---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Desktop Component 0: (no name) - file:http://miss-justine7.m.skyblog.com/pics/36073720.jpg
O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Word.) - C:\Program Files\Microsoft Office\Office10\WINWORD.exe

---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.4B5F5E8F51BE2541CD3E066CE175042A] [APT] [Scheduled Update for Ask Toolbar] (...) -- C:\Program Files\Ask.com\UpdateTask.exe

---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
O41 - Driver: (AmdK7) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\System32\DRIVERS\amdk7.sys
O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\System32\DRIVERS\cdrom.sys
O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\System32\DRIVERS\i8042prt.sys
O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\System32\DRIVERS\ipsec.sys
O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\System32\DRIVERS\kbdclass.sys
O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\System32\DRIVERS\mouclass.sys
O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\System32\DRIVERS\mrxsmb.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\System32\DRIVERS\netbios.sys
O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\System32\DRIVERS\netbt.sys
O41 - Driver: (Processor) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\System32\DRIVERS\processr.sys
O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\System32\DRIVERS\rasacd.sys
O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\System32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\System32\DRIVERS\RDPCDD.sys
O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\System32\DRIVERS\redbook.sys
O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\WINDOWS\System32\DRIVERS\serial.sys
O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\System32\DRIVERS\tcpip.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\System32\DRIVERS\termdd.sys
O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
O41 - Driver: (VIAPFD) . (.VIA Technologies. Inc. - VIA PFD driver.) - C:\WINDOWS\system32\Drivers\VIAPFD.sys
O41 - Driver: Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0 (WS2IFSL) . (.Microsoft Corporation - Winsock2 IFS Layer.) - C:\WINDOWS\system32\drivers\ws2ifsl.sys

---\\ Logiciels installés (O42)
O42 - Logiciel: 22097.zip - (.Pas de propriétaire.) [HKLM] -- 22097.zip
O42 - Logiciel: ASUS WLAN Card Utilities/Driver - (.Pas de propriétaire.) [HKLM] -- {8F722FA9-B994-4C9B-B292-FD32D6206EDF}
O42 - Logiciel: Ad-Aware 2007 - (.Lavasoft.) [HKLM] -- {E31C348B-63A9-4CBF-8D7F-D932ABB63244}
O42 - Logiciel: Ad-aware 6 Personal - (.Lavasoft.) [HKLM] -- Ad-aware 6 Personal
O42 - Logiciel: Adobe Download Manager 1.2 (Supprimer uniquement) - (.Pas de propriétaire.) [HKLM] -- AdobeESD
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Reader 6.0.1 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A00000000001}
O42 - Logiciel: AntiViral Toolkit Pro - (.Pas de propriétaire.) [HKLM] -- AntiViral Toolkit Pro
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {B3575D00-27EF-49C2-B9E0-14B3D954E992}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {C23CD6DA-1958-43A5-ADD0-59396572E02E}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {C6579A65-9CAE-4B31-8B6B-3306E0630A66}
O42 - Logiciel: ArcSoft Camera Suite - (.Pas de propriétaire.) [HKLM] -- {AD708DF0-9F04-4CB3-821A-85804A833B4D}
O42 - Logiciel: Archiveur WinRAR - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver
O42 - Logiciel: Arx Fatalis - (.JoWood.) [HKLM] -- {96443F45-13E2-11D6-AC87-00D0B7A9E540}
O42 - Logiciel: Ask Toolbar - (.Ask.com.) [HKLM] -- {86D4B82A-ABED-442A-BE86-96357B70F4FE}
O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {D6E592B3-67DA-4BBB-9783-E1838FB253A2}
O42 - Logiciel: AviSynth 2.5 - (.Pas de propriétaire.) [HKLM] -- AviSynth
O42 - Logiciel: Barre d'outils MSN - (.Pas de propriétaire.) [HKLM] -- MSN Toolbar
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {C2E4B5BD-32DB-4817-A060-341AB17C3F90}
O42 - Logiciel: Browser Optimizer Dcads - (.Pas de propriétaire.) [HKLM] -- dcads
O42 - Logiciel: Browser Optimizer Superiorads - (.Pas de propriétaire.) [HKLM] -- superiorads
O42 - Logiciel: Business Card Designer Plus 8.5.0.0 - (.CAM Development.) [HKLM] -- BCDP8_is1
O42 - Logiciel: CCleaner (remove only) - (.Pas de propriétaire.) [HKLM] -- CCleaner
O42 - Logiciel: Canon Internet Library for ZoomBrowser EX - (.Canon Inc..) [HKLM] -- InstallShield_{9E75AF24-815C-4BD1-9A05-F96866CC6005}
O42 - Logiciel: Canon PhotoRecord - (.Pas de propriétaire.) [HKLM] -- PhotoRecord
O42 - Logiciel: Canon Utilities File Viewer Utility 1.2 - (.Canon.) [HKLM] -- InstallShield_{755D3B4E-D3A3-4D05-99D8-FC35E26A331C}
O42 - Logiciel: Canon Utilities PhotoStitch 3.1 - (.Canon.) [HKLM] -- InstallShield_{F11A403B-0DE9-4953-B790-7A2F014FBB2B}
O42 - Logiciel: Canon Utilities RemoteCapture 2.7 - (.Canon.) [HKLM] -- InstallShield_{AB3AC39D-9915-435D-ACC4-9881E75326BC}
O42 - Logiciel: Canon Utilities ZoomBrowser EX - (.CISRA.) [HKLM] -- {C1D76D7A-F3BB-47EA-A746-5B1E2FFC1DF2}
O42 - Logiciel: Canon i450 - (.Pas de propriétaire.) [HKLM] -- CANONBJ_Deinstall_CNMCP4w.DLL
O42 - Logiciel: Choice Guard - (.Microsoft Corporation.) [HKLM] -- {8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
O42 - Logiciel: Conduit Engine - (.Conduit Ltd..) [HKLM] -- conduitEngine
O42 - Logiciel: DVD Decoder Pak for Windows XP - (.roddy2000@hotbox.ru.) [HKLM] -- {92C5DB3D-9D6F-4324-BB11-57825F4C2635}
O42 - Logiciel: Dcads Games Collection - (.Pas de propriétaire.) [HKLM] -- DcadsGames
O42 - Logiciel: EPSON Logiciel imprimante - (.SEIKO EPSON Corporation.) [HKLM] -- EPSON Printer and Utilities
O42 - Logiciel: Fenêtre d'appareil photo Canon pour ZoomBrowser EX - (.Canon.) [HKLM] -- InstallShield_{5ADA9741-0570-4096-B5FE-1D55E57537D4}
O42 - Logiciel: Feu vert pour le permis de conduire - (.Pas de propriétaire.) [HKLM] -- {CB004600-C444-11D4-B660-0050BA06A65D}
O42 - Logiciel: File Uploader - (.Nikon.) [HKLM] -- {237CD223-1B9D-47E8-A76C-E478B83CCEA2}
O42 - Logiciel: GoGear Digital Audio Player SA250/255/260 Device Manager - (.Nom de votre société.) [HKLM] -- InstallShield_{1846209D-7D22-4CF4-9EA6-9FD149BC7AD4}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: HLSW v0.4.1 - (.Timo Stripf.) [HKLM] -- HLSW_is1
O42 - Logiciel: Half-Life - (.Pas de propriétaire.) [HKLM] -- Half-Life
O42 - Logiciel: Hotfix for Windows XP (KB915865) - (.Microsoft Corporation.) [HKLM] -- KB915865
O42 - Logiciel: ING Business Plan - (.ING.) [HKLM] -- {E3EFADA7-B36A-4D93-A28E-AFB86AFA7D3E}
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {3CCB732A-E472-4CF9-B1EE-F18365341FE0}
O42 - Logiciel: J2SE Runtime Environment 5.0 Update 8 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0150080}
O42 - Logiciel: Jasc Paint Shop Pro 8 - (.Nom de votre société.) [HKLM] -- {81A34902-9D0B-4920-A25C-4CDC5D14B328}
O42 - Logiciel: Java 2 Runtime Environment, SE v1.4.2 - (.Sun Microsystems, Inc..) [HKLM] -- {7148F0A8-6813-11D6-A77B-00B0D0142000}
O42 - Logiciel: Jewel Quest (Iwin) fr - (.Boonty.) [HKLM] -- {04C2D8AE-A345-47B7-81A9-8156BD13CEFF}_is1
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {4AB8B41B-3AF1-46BE-99B0-0ACD3B300C0A}
O42 - Logiciel: Kaspersky Online Scanner - (.Kaspersky Lab.) [HKLM] -- Kaspersky Online Scanner
O42 - Logiciel: Lecteur Windows Media 10 - (.Pas de propriétaire.) [HKLM] -- Windows Media Player
O42 - Logiciel: LimeWire 4.14.10 - (.Lime Wire, LLC.) [HKLM] -- LimeWire
O42 - Logiciel: MSN Messenger 7.5 - (.Microsoft Corporation.) [HKLM] -- {BAFD3C1E-03EC-11DA-BFBD-00065BBDC0B5}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
O42 - Logiciel: MSXML 4.0 SP2 (KB927978) - (.Microsoft Corporation.) [HKLM] -- {37477865-A3F1-4772-AD43-AAFC6BCFF99F}
O42 - Logiciel: MSXML 4.0 SP2 (KB936181) - (.Microsoft Corporation.) [HKLM] -- {C04E32E0-0416-434D-AFB9-6969D703A9EF}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 6 Service Pack 2 (KB954459) - (.Microsoft Corporation.) [HKLM] -- {1A528690-6A2D-4BC5-B143-8C4AE8D19D96}
O42 - Logiciel: Macromedia Shockwave Player - (.Pas de propriétaire.) [HKLM] -- Macromedia Shockwave Player
O42 - Logiciel: Messenger Plus! 3 - (.Pas de propriétaire.) [HKLM] -- MsgPlus! Plugin
O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Microsoft.) [HKLM] -- {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 1 - (.Microsoft Corporation.) [HKLM] -- {B508B3F1-A24A-32C0-B310-85786919EF28}
O42 - Logiciel: Microsoft .NET Framework 3.0 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.0
O42 - Logiciel: Microsoft .NET Framework 3.0 French Language Pack - (.Microsoft Corporation.) [HKLM] -- {E3C080B0-23F5-49AF-89F8-8E8DBC89E659}
O42 - Logiciel: Microsoft Data Access Components KB870669 - (.Microsoft Corporation.) [HKLM] -- KB870669
O42 - Logiciel: Microsoft Internationalized Domain Names Mitigation APIs - (.Microsoft Corporation.) [HKLM] -- IDNMitigationAPIs
O42 - Logiciel: Microsoft National Language Support Downlevel APIs - (.Microsoft Corporation.) [HKLM] -- NLSDownlevelMapping
O42 - Logiciel: Microsoft Office XP Professional avec FrontPage - (.Microsoft Corporation.) [HKLM] -- {9028040C-6000-11D3-8CFE-0050048383C9}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {7299052b-02a4-4627-81f2-1818da5d550d}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: Microsoft Visual J# .NET Redistributable Package 1.1 - (.Microsoft.) [HKLM] -- {1A655D51-1423-48A3-B748-8F5A0BE294C8}
O42 - Logiciel: Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 2.0 Language Pack - FRA
O42 - Logiciel: Module de prise en charge linguistique du français de Microsoft .NET Framework 3.0 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.0 French Language Pack
O42 - Logiciel: Music Manager - (.Pas de propriétaire.) [HKLM] -- {5AFA4872-16B2-419E-ADCA-8E96E739115D}
O42 - Logiciel: NVIDIA Windows 2000/XP Display Drivers - (.Pas de propriétaire.) [HKLM] -- NVIDIA
O42 - Logiciel: New.net Domains 6.30 - (.New.net, Inc..) [HKLM] -- New.net
O42 - Logiciel: Nikon Message Center - (.Nikon.) [HKLM] -- {D2FCC1AE-6311-47C5-8130-C6C66D77DD71}
O42 - Logiciel: Nikon Transfer - (.Nikon.) [HKLM] -- {E9757890-7EC5-46C8-99AB-B00F07B6525C}
O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}
O42 - Logiciel: Pack PSP - Ri4m - v1.0a - (.Pas de propriétaire.) [HKLM] -- Pack PSP - Ri4m - v1.0a
O42 - Logiciel: Panorama Maker - (.ArcSoft.) [HKLM] -- {D45E8C45-B601-4A80-AFD8-E16338744DE1}
O42 - Logiciel: Philips Device Transfer Pop-up - (.Philips.) [HKLM] -- {7D999C82-259D-47D6-A081-E2DFEFB2EFBE}
O42 - Logiciel: Philips Firmware Manager - (.Philips.) [HKLM] -- {59C06422-F984-4FEA-A5FF-6B32FFD03254}
O42 - Logiciel: Photo Resize Magic 1.1 - (.RealFileTools.) [HKLM] -- Photo Resize Magic
O42 - Logiciel: PhotoFiltre - (.Pas de propriétaire.) [HKLM] -- PhotoFiltre
O42 - Logiciel: Picture Control Utility - (.Nikon.) [HKLM] -- {87441A59-5E64-4096-A170-14EFE67200C3}
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {57752979-A1C9-4C02-856B-FBB27AC4E02C}
O42 - Logiciel: QuickTime Alternative 1.22 - (.Pas de propriétaire.) [HKLM] -- QuicktimeAlt_is1
O42 - Logiciel: RM-X® Player V3 - (.PRODIFF.) [HKLM] -- RM-X® Player V3_is1
O42 - Logiciel: Rainbow Web fr - (.Boonty.) [HKLM] -- {3528A5F0-D69C-4B02-B0E7-821D83150974}_is1
O42 - Logiciel: Ri4m v5.0.1d - (.Pas de propriétaire.) [HKLM] -- Ri4m v5.0.1d
O42 - Logiciel: SAMSUNG CDMA Modem Driver Set - (.Pas de propriétaire.) [HKLM] -- SAMSUNG CDMA Modem
O42 - Logiciel: SAMSUNG Mobile USB Modem 1.0 Software - (.Pas de propriétaire.) [HKLM] -- SAMSUNG Mobile USB Modem 1.0
O42 - Logiciel: SAMSUNG Mobile USB Modem Software - (.Pas de propriétaire.) [HKLM] -- SAMSUNG Mobile USB Modem
O42 - Logiciel: Samsung PC Studio - (.Samsung Electronics Co., Ltd..) [HKLM] -- {C4A4722E-79F9-417C-BD72-8D359A090C97}
O42 - Logiciel: Samsung PC Studio 3 USB Driver Installer - (.Samsung Electronics Co., Ltd..) [HKLM] -- {EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}
O42 - Logiciel: Search Assistant Dcads - (.Pas de propriétaire.) [HKLM] -- DcadsSearchAssistant
O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
O42 - Logiciel: Shareaza version 2.2.3.0 - (.Shareaza Development Team.) [HKLM] -- Shareaza_is1
O42 - Logiciel: TeLL me More - (.Pas de propriétaire.) [HKLM] -- TellmeMoreV50
O42 - Logiciel: Trust WB-1400T Webcam - (.Nom de votre société.) [HKLM] -- InstallShield_{F6CE1230-A694-4B86-B21C-A11A112689DA}
O42 - Logiciel: Ulead GIF Animator 5 Evaluation - (.Pas de propriétaire.) [HKLM] -- {8AF3E926-ED59-11D4-A44B-0000E86D2305}
O42 - Logiciel: Utilitaires Sierra - (.Pas de propriétaire.) [HKLM] -- Utilitaires Sierra
O42 - Logiciel: VDownloader 3.0.733 - (.Vitzo Limited.) [HKLM] -- {A7E19604-93AF-4611-8C9F-CE509C2B286E}_is1
O42 - Logiciel: ViewNX - (.Nikon.) [HKLM] -- {F007CBCE-D714-4C0B-8CE9-9B0D78116468}
O42 - Logiciel: Vodafone 804SS USB driver Software - (.Pas de propriétaire.) [HKLM] -- Vodafone 804SS USB driver
O42 - Logiciel: WMP_do_MP3 version 5.0.1 - (.Soft@l S.I..) [HKLM] -- WMP_do_MP3_is1
O42 - Logiciel: Warkanoid 1.6 - (.Pas de propriétaire.) [HKLM] -- Warkanoid 1.6_is1
O42 - Logiciel: WinPcap 4.1.1 - (.CACE Technologies.) [HKLM] -- WinPcapInst
O42 - Logiciel: Window Active - (.Pas de propriétaire.) [HKLM] -- WinActive
O42 - Logiciel: Windows Communication Foundation - (.Microsoft Corporation.) [HKLM] -- {491DD792-AD81-429C-9EB4-86DD3D22E333}
O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474) - (.Microsoft Corporation.) [HKLM] -- WgaNotify
O42 - Logiciel: Windows Imaging Component - (.Microsoft Corporation.) [HKLM] -- WIC
O42 - Logiciel: Windows Installer 3.1 (KB893803) - (.Microsoft Corporation.) [HKLM] -- KB893803v2
O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {01523985-2098-43AF-9C97-12B07BE02A9B}
O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {F69E83CF-B440-43F8-89E6-6EA80712109B}
O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {63DC2DA0-2A6C-4C38-9249-B75395458657}
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {059C042E-796A-4ACC-A81A-ECC2010BB78C}
O42 - Logiciel: Windows Media Format Runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime
O42 - Logiciel: Windows Presentation Foundation - (.Microsoft Corporation.) [HKLM] -- {BAF78226-3200-4DB4-BE33-4D922A799840}
O42 - Logiciel: Windows Presentation Foundation Language Pack (FRA) - (.Microsoft Corporation.) [HKLM] -- {6901DD22-527A-41EF-9059-E81FEDE9E494}
O42 - Logiciel: Windows Workflow Foundation - (.Microsoft Corporation.) [HKLM] -- {7D1B85BD-AA07-48B8-808D-67A4067FC6BD}
O42 - Logiciel: Windows Workflow Foundation FR Language Pack - (.Microsoft Corporation.) [HKLM] -- {B84C141C-9A13-44BE-9A69-301D7B11D836}
O42 - Logiciel: Windows XP Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service Pack
O42 - Logiciel: XML Paper Specification Shared Components Language Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- XPSEPSCLP
O42 - Logiciel: XML Paper Specification Shared Components Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- XpsEPSC
O42 - Logiciel: Yahoo! Install Manager - (.Pas de propriétaire.) [HKLM] -- YInstHelper
O42 - Logiciel: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - (.Pas de propriétaire.) [HKLM] -- Yahoo! Companion
O42 - Logiciel: Zuma Deluxe - (.Zylom Games.) [HKLM] -- Zuma Deluxe
O42 - Logiciel: Zylom Games Player Plugin - (.Zylom Games.) [HKLM] -- Zylom Games Player Plugin
O42 - Logiciel: avast! Free Antivirus - (.AVAST Software.) [HKLM] -- avast
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {C897FCB3-2F8B-4185-8035-79E2AF3A92A4}
O42 - Logiciel: midicair Toolbar - (.midicair.) [HKLM] -- midicair Toolbar
O42 - Logiciel: mslagent - (.Pas de propriétaire.) [HKLM] -- mslagent

---\\ HKCU & HKLM Software Keys
[HKCU\Software\3M]
[HKCU\Software\?? ?? ???? ????? ??? ?? ????]
[HKCU\Software\ALWIL Software]
[HKCU\Software\APN]
[HKCU\Software\ASProtect]
[HKCU\Software\ASUS]
[HKCU\Software\AVAST Software]
[HKCU\Software\Adobe]
[HKCU\Software\Ahead]
[HKCU\Software\Andrei Jefremov]
[HKCU\Software\AppDataLow\AskToolbarInfo]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\ArcSoft]
[HKCU\Software\Arkane_Studios]
[HKCU\Software\Ask.com]
[HKCU\Software\AskToolbar]
[HKCU\Software\Auralog]
[HKCU\Software\Aurigma]
[HKCU\Software\BST]
[HKCU\Software\Bass]
[HKCU\Software\Bubble Noise]
[HKCU\Software\CAM Development]
[HKCU\Software\CDDB]
[HKCU\Software\CISRA]
[HKCU\Software\CLSID]
[HKCU\Software\Canon]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Conduit]
[HKCU\Software\Cygnus Solutions]
[HKCU\Software\DVD Decrypter]
[HKCU\Software\DivXNetworks]
[HKCU\Software\EPSON]
[HKCU\Software\First]
[HKCU\Software\Freeware]
[HKCU\Software\Gabest]
[HKCU\Software\GameHouse]
[HKCU\Software\Google]
[HKCU\Software\HLSW]
[HKCU\Software\Hotbar]
[HKCU\Software\IM Providers]
[HKCU\Software\InstallShield]
[HKCU\Software\Intel]
[HKCU\Software\JEDI-VCL]
[HKCU\Software\Jasc]
[HKCU\Software\JavaSoft]
[HKCU\Software\Jitit]
[HKCU\Software\K++]
[HKCU\Software\K-Dat]
[HKCU\Software\K-Sig]
[HKCU\Software\KLExtensions]
[HKCU\Software\KaZuperNodes]
[HKCU\Software\KasperskyLab]
[HKCU\Software\Kazaa]
[HKCU\Software\KraiSoft]
[HKCU\Software\Lavasoft]
[HKCU\Software\Licenses]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\Macromedia]
[HKCU\Software\Magnet]
[HKCU\Software\MyWebSearch]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Netscape]
[HKCU\Software\New.net]
[HKCU\Software\Nikon]
[HKCU\Software\ODBC]
[HKCU\Software\Patchou]
[HKCU\Software\Policies]
[HKCU\Software\PopCap]
[HKCU\Software\PreviewSoft]
[HKCU\Software\Prodiff]
[HKCU\Software\RealNetworks]
[HKCU\Software\Ripp-it]
[HKCU\Software\Samsung PC Studio]
[HKCU\Software\Samsung]
[HKCU\Software\Shareaza]
[HKCU\Software\Softonic]
[HKCU\Software\SugarGames]
[HKCU\Software\TorrentAid]
[HKCU\Software\Trymedia Systems]
[HKCU\Software\Ulead Systems]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\WAIT CORN POLL]
[HKCU\Software\WinRAR]
[HKCU\Software\Yahoo]
[HKCU\Software\Zylom]
[HKCU\Software\conduitEngine]
[HKCU\Software\iProgress]
[HKCU\Software\midicair]
[HKCU\Software\shockwave.com]
[HKLM\Software\180solutions]
[HKLM\Software\2B9EC021-C823-4f3d-9752-C18522DB7D98]
[HKLM\Software\3M]
[HKLM\Software\ALWIL Software]
[HKLM\Software\APN]
[HKLM\Software\ASUS]
[HKLM\Software\AVAST Software]
[HKLM\Software\Adobe]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\ArcSoft]
[HKLM\Software\Ariad]
[HKLM\Software\Arkane Studios]
[HKLM\Software\AskToolbar]
[HKLM\Software\Auralog]
[HKLM\Software\Aureal]
[HKLM\Software\Boonty]
[HKLM\Software\C07ft5Y]
[HKLM\Software\CAM Development]
[HKLM\Software\CISRA]
[HKLM\Software\Canon]
[HKLM\Software\Carbon]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Clips]
[HKLM\Software\Conduit]
[HKLM\Software\Cygnus Solutions]
[HKLM\Software\De Boeck Multimedia]
[HKLM\Software\Debug]
[HKLM\Software\EPSON]
[HKLM\Software\FocusInteractive]
[HKLM\Software\Fun Web Products]
[HKLM\Software\FunWebProducts]
[HKLM\Software\Funbox]
[HKLM\Software\GEAR Software]
[HKLM\Software\GPL Ghostscript]
[HKLM\Software\Gemplus]
[HKLM\Software\Google]
[HKLM\Software\ImInstaller]
[HKLM\Software\InstallShield]
[HKLM\Software\Intel]
[HKLM\Software\InterVideo]
[HKLM\Software\Jasc]
[HKLM\Software\JavaSoft]
[HKLM\Software\K++]
[HKLM\Software\KLExtensions]
[HKLM\Software\KaZuperNodes]
[HKLM\Software\KasperskyLab]
[HKLM\Software\Kazaa]
[HKLM\Software\Lavasoft]
[HKLM\Software\Licenses]
[HKLM\Software\MCCI]
[HKLM\Software\MDC]
[HKLM\Software\Macromedia]
[HKLM\Software\Magnet]
[HKLM\Software\Matrox]
[HKLM\Software\Maxis]
[HKLM\Software\Mirabilis]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\MyWebSearch]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\NaviSearch]
[HKLM\Software\Nikon]
[HKLM\Software\Nullsoft]
[HKLM\Software\OD2]
[HKLM\Software\ODBC]
[HKLM\Software\On Demand Distribution]
[HKLM\Software\Patchou]
[HKLM\Software\Philips]
[HKLM\Software\Policies]
[HKLM\Software\PopCap]
[HKLM\Software\Program Groups]
[HKLM\Software\RealNetworks]
[HKLM\Software\Samsung Electronics Co., Ltd.]
[HKLM\Software\Samsung]
[HKLM\Software\Schlumberger]
[HKLM\Software\Secure]
[HKLM\Software\Shareaza]
[HKLM\Software\Sierra On-Line]
[HKLM\Software\Sierra OnLine]
[HKLM\Software\SugarGames]
[HKLM\Software\TQ566808]
[HKLM\Software\Trymedia Systems]
[HKLM\Software\Ulead Systems]
[HKLM\Software\Utility_CD]
[HKLM\Software\VDownloader]
[HKLM\Software\Valve]
[HKLM\Software\Via4in1Driver]
[HKLM\Software\WinPcap]
[HKLM\Software\Windows 3.1 Migration Status]
[HKLM\Software\Wise Solutions]
[HKLM\Software\WwGame]
[HKLM\Software\Xing Technology Corp.]
[HKLM\Software\Yahoo]
[HKLM\Software\ahead]
[HKLM\Software\lameme]
[HKLM\Software\lpahep]
[HKLM\Software\midicair]

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 28/01/2004 - 22:35:48 - [54612432] ----D- C:\Program Files\Adobe
O43 - CFD: 04/12/2007 - 20:13:36 - [312] ----D- C:\Program Files\Ahead
O43 - CFD: 13/05/2010 - 08:43:26 - [154427672] ----D- C:\Program Files\Alwil Software
O43 - CFD: 28/03/2009 - 10:08:50 - [0] ----D- C:\Program Files\AntiViral Toolkit Pro
O43 - CFD: 16/06/2011 - 18:40:54 - [2307582] ----D- C:\Program Files\Apple Software Update
O43 - CFD: 03/07/2009 - 14:39:22 - [214597583] ----D- C:\Program Files\ArcSoft
O43 - CFD: 04/06/2011 - 10:01:48 - [2433771] ----D- C:\Program Files\Ask.com
O43 - CFD: 20/06/2006 - 21:30:40 - [13566505] ----D- C:\Program Files\ASUS
O43 - CFD: 15/01/2007 - 15:39:30 - [3697548] ----D- C:\Program Files\AviSynth 2.5
O43 - CFD: 18/04/2004 - 16:41:18 - [32] ----D- C:\Program Files\BagsStartLoud
O43 - CFD: 14/05/2004 - 12:56:10 - [32] ----D- C:\Program Files\Bagswarn
O43 - CFD: 14/08/2008 - 13:42:38 - [506156] ----D- C:\Program Files\BOB
O43 - CFD: 16/06/2011 - 18:37:54 - [620967] ----D- C:\Program Files\Bonjour
O43 - CFD: 30/01/2007 - 21:53:00 - [30902395] ----D- C:\Program Files\BoontyGames
O43 - CFD: 31/08/2005 - 18:39:26 - [10937703] ----D- C:\Program Files\CAM Development
O43 - CFD: 31/01/2004 - 14:40:12 - [100238556] ----D- C:\Program Files\Canon
O43 - CFD: 28/09/2007 - 11:00:42 - [882884] ----D- C:\Program Files\CCleaner
O43 - CFD: 30/01/2004 - 17:31:28 - [0] ----D- C:\Program Files\Common Files
O43 - CFD: 28/01/2004 - 16:50:48 - [0] ----D- C:\Program Files\ComPlus Applications
O43 - CFD: 30/12/2010 - 23:40:36 - [1802528] ----D- C:\Program Files\Conduit
O43 - CFD: 22/05/2011 - 12:55:32 - [8446394] ----D- C:\Program Files\ConduitEngine
O43 - CFD: 04/12/2007 - 20:38:48 - [5440368] ----D- C:\Program Files\Dcads Games Collection
O43 - CFD: 31/01/2004 - 14:45:12 - [0] ----D- C:\Program Files\directx
O43 - CFD: 28/01/2004 - 23:41:04 - [13144] ----D- C:\Program Files\DivX
O43 - CFD: 10/02/2011 - 18:50:32 - [7068732] ----D- C:\Program Files\Driver Whiz
O43 - CFD: 10/02/2011 - 19:25:08 - [29778181] ----D- C:\Program Files\EPSON
O43 - CFD: 29/05/2008 - 15:56:50 - [16144] ----D- C:\Program Files\FBrowsingAdvisor
O43 - CFD: 10/02/2011 - 19:29:16 - [438329744] R--AD- C:\Program Files\Fichiers communs
O43 - CFD: 06/04/2004 - 15:08:16 - [65536] ----D- C:\Program Files\FunWebProducts
O43 - CFD: 07/02/2011 - 20:07:44 - [262221890] ----D- C:\Program Files\Google
O43 - CFD: 10/11/2007 - 18:43:36 - [8075602] ----D- C:\Program Files\GPLGS
O43 - CFD: 02/04/2004 - 16:38:54 - [7930] ----D- C:\Program Files\GSpot(2)
O43 - CFD: 02/04/2004 - 16:38:50 - [56167] ----D- C:\Program Files\HighMAT CD Writing Wizard
O43 - CFD: 11/02/2006 - 11:06:22 - [753403] ----D- C:\Program Files\HLSW
O43 - CFD: 15/08/2004 - 19:24:10 - [1894983] ---AD- C:\Program Files\Hotbar
O43 - CFD: 31/01/2011 - 20:54:18 - [0] ----D- C:\Program Files\Incomplete
O43 - CFD: 30/01/2011 - 23:01:54 - [39415407] ----D- C:\Program Files\ING Business Plan
O43 - CFD: 03/07/2009 - 14:39:20 - [10087829] --H-D- C:\Program Files\InstallShield Installation Information
O43 - CFD: 01/08/2004 - 23:16:22 - [424530] ----D- C:\Program Files\Instant Access
O43 - CFD: 06/06/2004 - 18:28:08 - [2986930] ----D- C:\Program Files\InstantTouch
O43 - CFD: 14/07/2011 - 16:30:34 - [8463981] ----D- C:\Program Files\Internet Explorer
O43 - CFD: 16/06/2011 - 18:59:14 - [1856627] ----D- C:\Program Files\iPod
O43 - CFD: 16/06/2011 - 19:06:16 - [128220815] ----D- C:\Program Files\iTunes
O43 - CFD: 23/07/2004 - 18:13:14 - [186794282] ----D- C:\Program Files\Jasc Software Inc
O43 - CFD: 04/12/2006 - 22:01:48 - [120087945] ----D- C:\Program Files\Java
O43 - CFD: 13/01/2007 - 15:52:12 - [655511424] ----D- C:\Program Files\JoWood
O43 - CFD: 29/05/2008 - 15:56:50 - [11595528] ----D- C:\Program Files\KraiSoft
O43 - CFD: 28/09/2007 - 11:06:30 - [30823548] ----D- C:\Program Files\Lavasoft
O43 - CFD: 09/07/2011 - 20:35:28 - [775025714] ----D- C:\Program Files\LimeWire
O43 - CFD: 17/04/2004 - 20:56:18 - [32] ----D- C:\Program Files\Loud Start
O43 - CFD: 01/02/2004 - 21:01:48 - [2973696] ----D- C:\Program Files\Media Player Classic
O43 - CFD: 14/08/2008 - 13:40:00 - [2237325] ----D- C:\Program Files\Messenger
O43 - CFD: 26/08/2004 - 08:33:28 - [2846720] ----D- C:\Program Files\Messenger Plus! 2
O43 - CFD: 29/09/2006 - 13:44:48 - [11622403] ----D- C:\Program Files\Messenger Plus! 3
O43 - CFD: 31/12/2008 - 20:19:48 - [204432] ----D- C:\Program Files\Microsoft
O43 - CFD: 28/01/2004 - 16:54:30 - [0] ----D- C:\Program Files\microsoft frontpage
O43 - CFD: 28/01/2004 - 17:26:42 - [152864957] ----D- C:\Program Files\Microsoft Office
O43 - CFD: 22/05/2011 - 12:55:40 - [16169328] ----D- C:\Program Files\midicair
O43 - CFD: 29/05/2008 - 15:56:52 - [12783218] ----D- C:\Program Files\Movie Maker
O43 - CFD: 10/11/2007 - 18:35:08 - [12167] ----D- C:\Program Files\MSBuild
O43 - CFD: 04/06/2004 - 19:19:12 - [18494506] ----D- C:\Program Files\MSN
O43 - CFD: 15/11/2005 - 12:33:08 - [20353160] ----D- C:\Program Files\MSN Apps
O43 - CFD: 28/01/2004 - 16:50:18 - [8745735] ----D- C:\Program Files\MSN Gaming Zone
O43 - CFD: 31/12/2008 - 20:25:38 - [9545462] ----D- C:\Program Files\MSN Messenger
O43 - CFD: 12/01/2007 - 23:56:24 - [0] ----D- C:\Program Files\MSXML 4.0
O43 - CFD: 13/11/2007 - 01:18:52 - [6849] ----D- C:\Program Files\MSXML 6.0
O43 - CFD: 12/03/2006 - 23:30:26 - [3096576] ----D- C:\Program Files\Music Manager
O43 - CFD: 05/04/2004 - 17:03:40 - [1631] ----D- C:\Program Files\MyWebSearch
O43 - CFD: 11/04/2008 - 17:52:44 - [5120] ----D- C:\Program Files\NavigationProgram
O43 - CFD: 29/05/2008 - 16:07:28 - [3291205] ----D- C:\Program Files\NetMeeting
O43 - CFD: 21/03/2009 - 10:09:48 - [0] -S-AD- C:\Program Files\NewDotNet
O43 - CFD: 09/07/2011 - 17:12:20 - [0] -S-AD- C:\Program Files\NewDotNet(2)
O43 - CFD: 03/07/2009 - 14:48:52 - [53575658] ----D- C:\Program Files\Nikon
O43 - CFD: 14/06/2007 - 03:02:52 - [4379321] ----D- C:\Program Files\Outlook Express
O43 - CFD: 18/03/2009 - 20:52:14 - [90537828] ----D- C:\Program Files\Panda Security
O43 - CFD: 23/12/2007 - 11:13:34 - [9308213] ----D- C:\Program Files\Philips
O43 - CFD: 29/05/2008 - 16:07:28 - [1531281] ----D- C:\Program Files\Photo Resize Magic
O43 - CFD: 16/06/2006 - 11:32:52 - [3806531] ----D- C:\Program Files\PhotoFiltre
O43 - CFD: 16/06/2011 - 18:46:32 - [77835817] ----D- C:\Program Files\QuickTime
O43 - CFD: 29/05/2008 - 16:07:30 - [196830] ----D- C:\Program Files\QuickTime Alternative
O43 - CFD: 10/11/2007 - 18:28:46 - [24980394] ----D- C:\Program Files\Reference Assemblies
O43 - CFD: 09/01/2007 - 12:48:24 - [45027884] ----D- C:\Program Files\Ripp-it_AM
O43 - CFD: 11/01/2007 - 14:37:54 - [311861894] ----D- C:\Program Files\Samsung
O43 - CFD: 30/01/2004 - 05:22:02 - [1363225] ----D- C:\Program Files\screensandthemes
O43 - CFD: 28/01/2004 - 16:52:50 - [2679] ----D- C:\Program Files\Services en ligne
O43 - CFD: 05/01/2007 - 14:04:32 - [21495131] ----D- C:\Program Files\Shareaza
O43 - CFD: 30/03/2005 - 18:46:26 - [84407] ----D- C:\Program Files\Softal
O43 - CFD: 28/09/2007 - 15:58:02 - [396288] ----D- C:\Program Files\Trend Micro
O43 - CFD: 08/12/2007 - 21:01:06 - [69632] ----D- C:\Program Files\Trust
O43 - CFD: 06/07/2007 - 15:55:34 - [384] ----D- C:\Program Files\Trymedia
O43 - CFD: 20/11/2004 - 21:09:22 - [13226380] ----D- C:\Program Files\Ulead Systems
O43 - CFD: 10/11/2007 - 18:21:34 - [0] --H-D- C:\Program Files\Uninstall Information
O43 - CFD: 30/12/2010 - 23:43:02 - [15003925] ----D- C:\Program Files\VDownloader
O43 - CFD: 20/03/2004 - 16:19:42 - [12110] ----D- C:\Program Files\Webteh
O43 - CFD: 10/12/2006 - 20:40:38 - [10863] ----D- C:\Program Files\Winamp
O43 - CFD: 31/12/2008 - 20:32:54 - [82041487] ----D- C:\Program Files\Wind

essais de le poster par le biais de cijoint car la il est pas complet , merci

aide toi de se tuto j'y ai mise des capture d'écran étape par étape

envoie-le sur : http://www.cijoint.fr/index.php

Cliques sur choisissez un fichier comme sur la capture d'écran : http://sd-1.archive-host.com/membres/images/89820622056365782/cijoint_image_1.jpg

recherche le rapport : http://sd-1.archive-host.com/membres/images/89820622056365782/cijoint_image_2.jpg

sélectionne le rapport soit en cliquand dessus et ouvrir ou en double cliquand dessus

et puis sur " cliquer ici pour déposer le fichier " :http://sd-1.archive-host.com/membres/images/89820622056365782/cijoint_image_3.jpg

un lien bleu de cette forme va apparaitre :

Veuillez noter le lien ci-dessous qui vous permettra d'accéder à ce fichier. 
C'est ce même lien que vous devrez transmettre à vos correspondants
http://www.cijoint.fr/cjlink.php?file=cjge368/cijSKAP5fU.txt 

comme sur l'image:

http://sd-1.archive-host.com/membres/images/89820622056365782/cijoint_image_4.jpg

et c'est ce lien qu'il te faut copier coller sur la discution , merci

voilà le reste du rapport

O43 - CFD: 31/12/2008 - 20:18:16 - [245112] ----D- C:\Program Files\Windows Live SkyDrive
O43 - CFD: 29/05/2008 - 16:07:58 - [8043234] ----D- C:\Program Files\Windows Media Player
O43 - CFD: 29/01/2006 - 12:51:04 - [3937023] ----D- C:\Program Files\Windows NT
O43 - CFD: 30/12/2010 - 23:42:20 - [191216] ----D- C:\Program Files\WinPcap
O43 - CFD: 29/05/2008 - 16:07:58 - [3167412] ----D- C:\Program Files\WinRAR
O43 - CFD: 28/01/2004 - 16:54:30 - [0] ----D- C:\Program Files\xerox
O43 - CFD: 28/09/2007 - 11:00:36 - [1681114] ----D- C:\Program Files\Yahoo!
O43 - CFD: 14/07/2011 - 17:04:20 - [3929376] ----D- C:\Program Files\ZHPDiag
O43 - CFD: 22/01/2011 - 01:01:16 - [59399034] ----D- C:\Program Files\Zylom Games
O43 - CFD: 01/08/2004 - 09:17:34 - [0] ----D- C:\Program Files\Common Files\System
O43 - CFD: 20/02/2005 - 13:27:42 - [521216] ----D- C:\Documents and Settings\Domdom\Application Data\3M
O43 - CFD: 31/10/2008 - 15:50:32 - [5497882] ----D- C:\Documents and Settings\Domdom\Application Data\Adobe
O43 - CFD: 11/04/2011 - 07:18:46 - [0] ----D- C:\Documents and Settings\Domdom\Application Data\AdobeUM
O43 - CFD: 20/03/2004 - 05:46:58 - [181794] ----D- C:\Documents and Settings\Domdom\Application Data\Ahead
O43 - CFD: 16/06/2011 - 19:09:42 - [7370590] ----D- C:\Documents and Settings\Domdom\Application Data\Apple Computer
O43 - CFD: 31/01/2004 - 14:47:12 - [4328] ----D- C:\Documents and Settings\Domdom\Application Data\ArcSoft
O43 - CFD: 25/02/2011 - 13:51:34 - [0] ----D- C:\Documents and Settings\Domdom\Application Data\CoSoSys
O43 - CFD: 07/02/2011 - 20:08:50 - [78253] ----D- C:\Documents and Settings\Domdom\Application Data\Google
O43 - CFD: 02/04/2004 - 00:01:00 - [63] ----D- C:\Documents and Settings\Domdom\Application Data\Help
O43 - CFD: 11/08/2004 - 14:51:14 - [10521063] ----D- C:\Documents and Settings\Domdom\Application Data\Hotbar
O43 - CFD: 21/01/2011 - 20:51:54 - [4610] ----D- C:\Documents and Settings\Domdom\Application Data\Identities
O43 - CFD: 25/07/2004 - 19:36:58 - [4090813] ----D- C:\Documents and Settings\Domdom\Application Data\Jasc Software Inc
O43 - CFD: 13/02/2004 - 18:39:50 - [118142] ----D- C:\Documents and Settings\Domdom\Application Data\Kazaa Lite
O43 - CFD: 04/09/2004 - 16:43:34 - [181863] ----D- C:\Documents and Settings\Domdom\Application Data\Macromedia
O43 - CFD: 10/01/2010 - 23:31:50 - [35038181] -S--D- C:\Documents and Settings\Domdom\Application Data\Microsoft
O43 - CFD: 28/01/2009 - 22:41:20 - [185717] ----D- C:\Documents and Settings\Domdom\Application Data\MSN6
O43 - CFD: 05/07/2009 - 16:37:08 - [4693921] ----D- C:\Documents and Settings\Domdom\Application Data\Nikon
O43 - CFD: 12/03/2006 - 23:36:24 - [13520] ----D- C:\Documents and Settings\Domdom\Application Data\OD2
O43 - CFD: 09/09/2007 - 16:57:20 - [0] ----D- C:\Documents and Settings\Domdom\Application Data\PlayFirst
O43 - CFD: 27/11/2004 - 15:41:50 - [114983] ----D- C:\Documents and Settings\Domdom\Application Data\Real
O43 - CFD: 30/01/2011 - 23:10:24 - [1088596] ----D- C:\Documents and Settings\Domdom\Application Data\Shareaza
O43 - CFD: 28/01/2004 - 22:54:42 - [8122] ----D- C:\Documents and Settings\Domdom\Application Data\Sun
O43 - CFD: 21/01/2011 - 20:51:54 - [3774] ----D- C:\Documents and Settings\Domdom\Application Data\Zylom
O43 - CFD: 28/01/2004 - 22:42:04 - [4113892] ----D- C:\Documents and Settings\Domdom\Local Settings\Application Data\Adobe
O43 - CFD: 16/09/2010 - 12:14:14 - [0] ----D- C:\Documents and Settings\Domdom\Local Settings\Application Data\Apple
O43 - CFD: 21/03/2006 - 13:58:04 - [42661773] ----D- C:\Documents and Settings\Domdom\Local Settings\Application Data\Apple Computer
O43 - CFD: 10/01/2010 - 23:53:08 - [3279] ----D- C:\Documents and Settings\Domdom\Local Settings\Application Data\ApplicationHistory
O43 - CFD: 14/07/2011 - 16:57:30 - [3892119] ----D- C:\Documents and Settings\Domdom\Local Settings\Application Data\AskToolbar
O43 - CFD: 04/03/2011 - 10:02:50 - [3235756] ----D- C:\Documents and Settings\Domdom\Local Settings\Application Data\Conduit
O43 - CFD: 14/07/2011 - 16:57:44 - [8796458] ----D- C:\Documents and Settings\Domdom\Local Settings\Application Data\ConduitEngine
O43 - CFD: 26/04/2011 - 07:12:02 - [134486778] ----D- C:\Documents and Settings\Domdom\Local Settings\Application Data\Google
O43 - CFD: 04/03/2009 - 13:59:24 - [8628] ----D- C:\Documents and Settings\Domdom\Local Settings\Application Data\Help
O43 - CFD: 25/08/2006 - 11:17:24 - [226896] ----D- C:\Documents and Settings\Domdom\Local Settings\Application Data\Identities
O43 - CFD: 09/07/2011 - 22:09:18 - [242177025] ----D- C:\Documents and Settings\Domdom\Local Settings\Application Data\Microsoft
O43 - CFD: 14/07/2011 - 16:57:28 - [14304955] ----D- C:\Documents and Settings\Domdom\Local Settings\Application Data\midicair
O43 - CFD: 10/02/2011 - 18:53:06 - [2188] ----D- C:\Documents and Settings\Domdom\Local Settings\Application Data\PC_Drivers_Headquarters
O43 - CFD: 29/08/2005 - 18:29:30 - [3072] ----D- C:\Documents and Settings\Domdom\Local Settings\Application Data\Shareaza
O43 - CFD: 26/04/2011 - 07:06:44 - [0] ----D- C:\Documents and Settings\Domdom\Local Settings\Application Data\Temp
O43 - CFD: 16/06/2006 - 14:27:56 - [0] ----D- C:\Documents and Settings\Domdom\Local Settings\Application Data\WMTools Downloaded Files

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.10EF1200FEFFFFFF57494E444F577E32] - 14/07/2011 - 15:57:42 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log [1863891]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 14/07/2011 - 15:55:50 ---A- . (...) -- C:\WINDOWS\0.log [0]
O44 - LFC:[MD5.10EF1200FEFFFFFF000000002CF21200] - 14/07/2011 - 15:55:37 ---A- . (...) -- C:\WINDOWS\wiadebug.log [159]
O44 - LFC:[MD5.10EF1200FEFFFFFF000000002CF21200] - 14/07/2011 - 15:55:37 ---A- . (...) -- C:\WINDOWS\wiaservc.log [50]
O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 14/07/2011 - 15:51:01 -S-A- . (...) -- C:\WINDOWS\bootstat.dat [2048]
O44 - LFC:[MD5.B5B3E6DD7EF8239D7748475980B87A78] - 14/07/2011 - 15:41:58 ---A- . (...) -- C:\WINDOWS\iereseticons.log [2861]
O44 - LFC:[MD5.10EF1200FEFFFFFF000000002CF21200] - 14/07/2011 - 15:29:42 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt [32478]
O44 - LFC:[MD5.FBB42671FDB85AFEACDD5FE73FC1D301] - 14/07/2011 - 15:29:23 ---A- . (...) -- C:\WINDOWS\comsetup.log [2057]
O44 - LFC:[MD5.916B43DB2BD6CCC66DAC88D2D154CBBC] - 14/07/2011 - 15:29:23 ---A- . (...) -- C:\WINDOWS\ie7Uninst.log [31629]
O44 - LFC:[MD5.471BBD911B2179C97615BB04ADFA76EB] - 14/07/2011 - 15:29:23 ---A- . (...) -- C:\WINDOWS\iis6.log [6699]
O44 - LFC:[MD5.355528A5FB58C085B7775EE5B09A17EE] - 14/07/2011 - 15:29:23 ---A- . (...) -- C:\WINDOWS\imsins.log [1374]
O44 - LFC:[MD5.A97308A03B93C57795B83D4B711AF11F] - 14/07/2011 - 15:29:23 ---A- . (...) -- C:\WINDOWS\ntdtcsetup.log [1247]
O44 - LFC:[MD5.BA6908146DD96748416C3686C4A7CD06] - 14/07/2011 - 15:29:23 ---A- . (...) -- C:\WINDOWS\ocmsn.log [342]
O44 - LFC:[MD5.D001F43E4C156071B091C86CCE423DCA] - 14/07/2011 - 15:29:23 ---A- . (...) -- C:\WINDOWS\tabletoc.log [311]
O44 - LFC:[MD5.1E3F4D174DA6A07E456E4197231F050D] - 14/07/2011 - 15:29:23 ---A- . (...) -- C:\WINDOWS\tsoc.log [2821]
O44 - LFC:[MD5.EFAE2C672CB97BA88CD8A8C184A9CAE4] - 14/07/2011 - 15:28:32 ---A- . (...) -- C:\WINDOWS\System32\spupdsvc.inf [230]
O44 - LFC:[MD5.CC2988E20615E9E0C3C7EF4ACAC10935] - 14/07/2011 - 15:28:09 ---A- . (...) -- C:\WINDOWS\updspapi.log [24773]
O44 - LFC:[MD5.A3372903FB79884C75A3FAFC4AD87267] - 14/07/2011 - 15:27:31 ---A- . (...) -- C:\WINDOWS\FaxSetup.log [6182]
O44 - LFC:[MD5.06F669C736FDD77E4FEE68756F425570] - 14/07/2011 - 15:27:31 ---A- . (...) -- C:\WINDOWS\MedCtrOC.log [425]
O44 - LFC:[MD5.66DA26F2DC9CAEF4B18E1A2229432A42] - 14/07/2011 - 15:27:31 ---A- . (...) -- C:\WINDOWS\msgsocm.log [309]
O44 - LFC:[MD5.02474C75AF1FD972A78BF0565B209556] - 14/07/2011 - 15:27:31 ---A- . (...) -- C:\WINDOWS\netfxocm.log [1083]
O44 - LFC:[MD5.0BD6336A092415F149E66A69E244B9B8] - 14/07/2011 - 15:27:31 ---A- . (...) -- C:\WINDOWS\ocgen.log [2916]
O44 - LFC:[MD5.A44C72B44773C69BB73DBD664BE56B31] - 14/07/2011 - 15:27:30 ---A- . (...) -- C:\WINDOWS\msmqinst.log [1924]
O44 - LFC:[MD5.849B58F188E1B369673FFDF830E1C427] - 14/07/2011 - 13:01:10 ---A- . (...) -- C:\WINDOWS\setupapi.log [391]
O44 - LFC:[MD5.9501CE82389A3B51720E7B8A4B614216] - 14/07/2011 - 12:02:50 ---A- . (...) -- C:\WINDOWS\System32\CONFIG.NT [3121]
O44 - LFC:[MD5.41F18E588B87B942204E6341B3543549] - 14/07/2011 - 08:42:43 ---A- . (...) -- C:\WINDOWS\ntbtlog.txt [427974]
O44 - LFC:[MD5.3A9A54E9FF21A4825E9B40A89674F085] - 14/07/2011 - 07:27:18 ---A- . (...) -- C:\WINDOWS\setupact.log [60]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 14/07/2011 - 07:27:18 ---A- . (...) -- C:\WINDOWS\setuperr.log [0]
O44 - LFC:[MD5.84E04E01613D9CC8EDA3A7C79E7D2408] - 14/07/2011 - 06:52:40 ---A- . (...) -- C:\WINDOWS\System32\wpa.dbl [2262]
O44 - LFC:[MD5.7E1A81F513F6E926F00351CB49D5B561] - 09/07/2011 - 11:23:38 ---A- . (...) -- C:\WINDOWS\System32\perfc009.dat [85796]
O44 - LFC:[MD5.BC6BDDF9EFC9B61F014EC2393A438E64] - 09/07/2011 - 11:23:38 ---A- . (...) -- C:\WINDOWS\System32\perfc00C.dat [102718]
O44 - LFC:[MD5.A312DE4A171145194785837F074EC92D] - 09/07/2011 - 11:23:38 ---A- . (...) -- C:\WINDOWS\System32\perfh009.dat [513328]
O44 - LFC:[MD5.0BB89EACC76A1F695F22B5C4FC6FA732] - 09/07/2011 - 11:23:38 ---A- . (...) -- C:\WINDOWS\System32\perfh00C.dat [592100]
O44 - LFC:[MD5.2658AF3FBB06D7B5C731F9CC7CBFC1B3] - 04/07/2011 - 12:43:53 ---A- . (.AVAST Software - avast! Screen Saver stub.) -- C:\WINDOWS\avastSS.scr [40112]
O44 - LFC:[MD5.C2E576B23D3969989AF90EF76B2979EA] - 04/07/2011 - 12:43:51 ---A- . (.AVAST Software - avast! start-up scanner.) -- C:\WINDOWS\System32\aswBoot.exe [199304]
O44 - LFC:[MD5.17230708A2028CD995656DF455F2E303] - 04/07/2011 - 12:36:43 ---A- . (.AVAST Software - avast! Virtualization Driver.) -- C:\WINDOWS\System32\drivers\aswSnx.sys [441176]
O44 - LFC:[MD5.DBEDD9D43B00630966EF05D2D8D04CEE] - 04/07/2011 - 12:36:32 ---A- . (.AVAST Software - avast! self protection module.) -- C:\WINDOWS\System32\drivers\aswSP.sys [309848]
O44 - LFC:[MD5.984CFCE2168286C2511695C2F9621475] - 04/07/2011 - 12:35:23 ---A- . (.AVAST Software - avast! TDI Filter Driver.) -- C:\WINDOWS\System32\drivers\aswTdi.sys [43608]
O44 - LFC:[MD5.7857E0B4C817F69FF463EEA2C63E56F9] - 04/07/2011 - 12:35:12 ---A- . (.AVAST Software - avast! File System Filter Driver for Window.) -- C:\WINDOWS\System32\drivers\aswmon2.sys [102616]
O44 - LFC:[MD5.4FAE55469A56AA2B423E5E26FD1449D1] - 04/07/2011 - 12:35:09 ---A- . (.AVAST Software - avast! File System Filter Driver for Window.) -- C:\WINDOWS\System32\drivers\aswmon.sys [96344]
O44 - LFC:[MD5.8DB043BF96BB6D334E5B4888E709E1C7] - 04/07/2011 - 12:32:32 ---A- . (.AVAST Software - avast! TDI RDR Driver.) -- C:\WINDOWS\System32\drivers\aswRdr.sys [25432]
O44 - LFC:[MD5.DFCDD5936CAD0138775D5A105D4C7716] - 04/07/2011 - 12:32:13 ---A- . (.AVAST Software - avast! Base Kernel-Mode Device Driver for W.) -- C:\WINDOWS\System32\drivers\aavmker4.sys [30808]
O44 - LFC:[MD5.861CB512E4E850E87DD2316F88D69330] - 04/07/2011 - 12:32:12 ---A- . (.AVAST Software - avast! File System Access Blocking Driver.) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys [19544]
O44 - LFC:[MD5.83CAFCB53201BBAC04D822F32438E244] - 16/06/2011 - 17:39:38 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\WINDOWS\System32\drivers\usbaapl.sys [42496]
O44 - LFC:[MD5.7394EA0E58008D7B0AB9A3D637F27729] - 16/06/2011 - 17:39:37 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver Resource DLL.) -- C:\WINDOWS\System32\usbaaplrc.dll [4517664]

---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)
O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll

---\\ Export de clé d'application autorisée (O47)
O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Messenger\msmsgs.exe" [Enabled] .(.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Internet Explorer\iexplore.exe" [Enabled] .(.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Kazaa Lite K++\KazaaLite.kpp" [Disabled] .(...) -- C:\Program Files\Kazaa Lite K++\KazaaLite.kpp (.not file.)
O47 - AAKE:Key Export SP - "C:\StubInstaller.exe" [Enabled] .(.LimeWire - LimeWire swarmed installer.) -- C:\StubInstaller.exe
O47 - AAKE:Key Export SP - "C:\Program Files\LimeWire\LimeWire.exe" [Enabled] .(.Lime Wire, LLC - LimeWire.) -- C:\Program Files\LimeWire\LimeWire.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Gold Miner\GoldMiner.exe" [Enabled] .(...) -- C:\Program Files\Gold Miner\GoldMiner.exe (.not file.)
O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O47 - AAKE:Key Export SP - "C:\Program Files\MSN Messenger\livecall.exe" [Enabled] .(...) -- C:\Program Files\MSN Messenger\livecall.exe (.not file.)
O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Bonjour\mDNSResponder.exe" [Enabled] .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe
O47 - AAKE:Key Export SP - "C:\Program Files\iTunes\iTunes.exe" [Enabled] .(.Apple Inc. - iTunes.) -- C:\Program Files\iTunes\iTunes.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Shareaza\Shareaza.exe" [Enabled] .(.Shareaza Development Team - Shareaza Ultimate File Sharing.) -- C:\Program Files\Shareaza\Shareaza.exe
O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O47 - AAKE:Key Export DP - "C:\Program Files\MSN Messenger\livecall.exe" [Enabled] .(...) -- C:\Program Files\MSN Messenger\livecall.exe (.not file.)
O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe
O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe

---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\System32\Drivers\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\System32\Drivers\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\System32\Drivers\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (...) -- C:\WINDOWS\System32\Drivers\sermouse.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\System32\Drivers\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\WINDOWS\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\System32\Drivers\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\System32\Drivers\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\System32\Drivers\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys . (.Microsoft Corporation - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\System32\Drivers\ip6fw.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\System32\Drivers\rdpcdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys . (...) -- C:\WINDOWS\System32\Drivers\rdpdd.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOWS\System32\Drivers\rdpwd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (...) -- C:\WINDOWS\System32\Drivers\sermouse.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\System32\Drivers\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\System32\Drivers\tdpipe.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\System32\Drivers\tdtcp.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\WINDOWS\System32\Drivers\vgasave.sys (.not file.)

---\\ Image File Execution Options (IFEO) (O50)
O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d

---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech(TM) DSP Group pour MSACM V3.50.) -- C:\WINDOWS\System32\tssoft32.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\System32\iccvid.dll
O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (...) -- C:\WINDOWS\System32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (...) -- C:\WINDOWS\System32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\System32\ir41_32.ax
O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm
O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\System32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\System32\iac25_32.ax
O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\System32\ir50_32.dll
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\System32\l3codeca.acm
O52 - TDSD: \Drivers32\"vidc.DIVX"="DivX.dll" . (.DivXNetworks, Inc. - DivX® Codec for Windows.) -- C:\WINDOWS\System32\DivX.dll
O52 - TDSD: \Drivers32\"vidc.yv12"="yv12vfw.dll" . (.www.helixcommunity.org - Helix YV12 YUV Codec.) -- C:\WINDOWS\System32\yv12vfw.dll
O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm
O52 - TDSD: \drivers.desc\"C:\WINDOWS\System32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\System32\iac25_32.ax
O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo® video 5.10" . (...) -- (.not file.)
O52 - TDSD: \drivers.desc\"C:\WINDOWS\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"DivX.dll"="DivX 5.02 Codec" . (...) -- (.not file.)
O52 - TDSD: \drivers.desc\"mciaap.drv"="[MCI] Autodesk Animation Player" . (...) -- C:\WINDOWS\System32\mciaap.drv

---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll

---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1

---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145
O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1

---\\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.DFCDD5936CAD0138775D5A105D4C7716] - 14/07/2011 - 12:32:13 ---A- . (.AVAST Software - avast! Base Kernel-Mode Device Driver for Windows NT/2000/XP.) -- C:\WINDOWS\system32\drivers\aavmker4.sys [30808]
O58 - SDL:[MD5.861CB512E4E850E87DD2316F88D69330] - 14/07/2011 - 12:32:12 ---A- . (.AVAST Software - avast! File System Access Blocking Driver.) -- C:\WINDOWS\system32\drivers\aswFsBlk.sys [19544]
O58 - SDL:[MD5.4FAE55469A56AA2B423E5E26FD1449D1] - 14/07/2011 - 12:35:09 ---A- . (.AVAST Software - avast! File System Filter Driver for Windows NT/2000.) -- C:\WINDOWS\system32\drivers\aswmon.sys [96344]
O58 - SDL:[MD5.7857E0B4C817F69FF463EEA2C63E56F9] - 14/07/2011 - 12:35:12 ---A- . (.AVAST Software - avast! File System Filter Driver for Windows XP.) -- C:\WINDOWS\system32\drivers\aswmon2.sys [102616]
O58 - SDL:[MD5.8DB043BF96BB6D334E5B4888E709E1C7] - 14/07/2011 - 12:32:32 ---A- . (.AVAST Software - avast! TDI RDR Driver.) -- C:\WINDOWS\system32\drivers\aswRdr.sys [25432]
O58 - SDL:[MD5.17230708A2028CD995656DF455F2E303] - 14/07/2011 - 12:36:43 ---A- . (.AVAST Software - avast! Virtualization Driver.) -- C:\WINDOWS\system32\drivers\aswSnx.sys [441176]
O58 - SDL:[MD5.DBEDD9D43B00630966EF05D2D8D04CEE] - 14/07/2011 - 12:36:32 ---A- . (.AVAST Software - avast! self protection module.) -- C:\WINDOWS\system32\drivers\aswSP.sys [309848]
O58 - SDL:[MD5.984CFCE2168286C2511695C2F9621475] - 14/07/2011 - 12:35:23 ---A- . (.AVAST Software - avast! TDI Filter Driver.) -- C:\WINDOWS\system32\drivers\aswTdi.sys [43608]
O58 - SDL:[MD5.EC018602809B28520CAA132CD616BB2A] - 14/07/2011 - 14:14:56 ---A- . (.Lavasoft AB - Driver for Ad-Watch Real-Time Process protection.) -- C:\WINDOWS\system32\drivers\AWRTPD.sys [6272]
O58 - SDL:[MD5.5EC54FEFF43BBC8F757788ABD1FDCCF5] - 14/07/2011 - 14:17:02 ---A- . (.Lavasoft AB - Driver for Ad-Watch Real-Time Registry Protection.) -- C:\WINDOWS\system32\drivers\AWRTRD.sys [8320]
O58 - SDL:[MD5.C9B25AE9B8ABD983C5AD3F8CBFAB0F9C] - 14/07/2011 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\drivers\cinemst2.sys [262528]
O58 - SDL:[MD5.9624293E55AD405415862B504CA95B73] - 14/07/2011 - 13:00:00 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\drivers\cpqdap01.sys [11776]
O58 - SDL:[MD5.8182FF89C65E4D38B2DE4BB0FB18564E] - 14/07/2011 - 12:17:00 ---A- . (.GEAR Software Inc. - CD DVD Filter.) -- C:\WINDOWS\system32\drivers\GEARAspiWDM.sys [26600]
O58 - SDL:[MD5.D7010580BF4E45D5E793A1FE75758C69] - 14/07/2011 - 20:30:55 ---A- . (.Meetinghouse Data Communications - IEEE 802.1X Protocol Driver.) -- C:\WINDOWS\system32\drivers\mdc8021x.sys [15781]
O58 - SDL:[MD5.BE984D604D91C217355CDD3737AAD25D] - 14/07/2011 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\nikedrv.sys [12032]
O58 - SDL:[MD5.B9730495E0CF674680121E34BD95A73B] - 14/07/2011 - 03:09:02 ---A- . (.CACE Technologies, Inc. - npf.sys (NT5/6 x86) Kernel Driver.) -- C:\WINDOWS\system32\drivers\npf.sys [50704]
O58 - SDL:[MD5.45D4685A049EE5CAC5840DAFA72E9B83] - 14/07/2011 - 14:18:48 ---A- . (.Lavasoft AB - Driver for Ad-Watch network monitoring.) -- C:\WINDOWS\system32\drivers\NSDriver.sys [9344]
O58 - SDL:[MD5.5E00E941E2BFCDE1DB2EDC02034D987C] - 14/07/2011 - 10:06:00 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Windows 2000 Miniport Driver, Version 29.42.) -- C:\WINDOWS\system32\drivers\nv4_mini.sys [931882]
O58 - SDL:[MD5.3F24EAEB165328E00D687BF3B60A448A] - 14/07/2011 - 12:29:14 ---A- . (...) -- C:\WINDOWS\system32\drivers\PFC027.sys [162176]
O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 14/07/2011 - 13:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\drivers\ptilink.sys [17792]
O58 - SDL:[MD5.A56FE08EC7473E8580A390BB1081CDD7] - 14/07/2011 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\drivers\rio8drv.sys [12032]
O58 - SDL:[MD5.0A854DF84C77A0BE205BFEAB2AE4F0EC] - 14/07/2011 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\riodrv.sys [12032]
O58 - SDL:[MD5.6F6CE24F243458C92B54E0016AD46BD7] - 14/07/2011 - 15:38:18 ---A- . (.Ralink Technology Inc. - Sample Driver for Ralink 802.11g Wireless USB Adapters.) -- C:\WINDOWS\system32\drivers\rt2500usb.sys [140544]
O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 14/07/2011 - 11:25:54 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\drivers\secdrv.sys [20480]
O58 - SDL:[MD5.2D4027C46B4C6E45875E3C4BA3F67492] - 14/07/2011 - 12:24:50 ---A- . (.MCCI - SAMSUNG USB Composite Device Driver.) -- C:\WINDOWS\system32\drivers\sscdbus.sys [80272]
O58 - SDL:[MD5.369B29797C1EB7D9B000CCBB026C515F] - 14/07/2011 - 12:24:52 ---A- . (.MCCI - Windows 2000/XP support functions.) -- C:\WINDOWS\system32\drivers\sscdcm.sys [11877]
O58 - SDL:[MD5.369B29797C1EB7D9B000CCBB026C515F] - 14/07/2011 - 12:24:52 ---A- . (.MCCI - Windows 2000/XP support functions.) -- C:\WINDOWS\system32\drivers\sscdcmnt.sys [11877]
O58 - SDL:[MD5.F548F1EBA107BC19E91189E6A460BD0E] - 14/07/2011 - 12:24:52 ---A- . (.MCCI - SAMSUNG CDMA Modem Filter Driver.) -- C:\WINDOWS\system32\drivers\sscdmdfl.sys [10864]
O58 - SDL:[MD5.71D348D53597379DFE1DE255D70AF13C] - 14/07/2011 - 12:24:52 ---A- . (.MCCI - SAMSUNG CDMA Modem WDM.) -- C:\WINDOWS\system32\drivers\sscdmdm.sys [137884]
O58 - SDL:[MD5.7F5CAC8B445D1789275C4E8999C59B44] - 14/07/2011 - 12:24:54 ---A- . (.MCCI - Windows 2000/XP support functions.) -- C:\WINDOWS\system32\drivers\sscdwh.sys [11188]
O58 - SDL:[MD5.7F5CAC8B445D1789275C4E8999C59B44] - 14/07/2011 - 12:24:54 ---A- . (.MCCI - Windows 2000/XP support functions.) -- C:\WINDOWS\system32\drivers\sscdwhnt.sys [11188]
O58 - SDL:[MD5.D74A8EC75305F1D3CFDE7C7FC1BD62A9] - 14/07/2011 - 13:00:00 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\drivers\tsbvcap.sys [21376]
O58 - SDL:[MD5.83CAFCB53201BBAC04D822F32438E244] - 14/07/2011 - 07:06:08 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\WINDOWS\system32\drivers\usbaapl.sys [42496]
O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 14/07/2011 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\drivers\vdmindvd.sys [58112]
O58 - SDL:[MD5.A5D8B6C8D43786D4215C1DF6FAB0AAE0] - 14/07/2011 - 05:00:00 R--A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\WINDOWS\system32\drivers\viaidexp.sys [6144]
O58 - SDL:[MD5.662626BCCF060F2F4B6D5AF7AC121FF5] - 14/07/2011 - 07:45:04 ---A- . (.VIA Technologies. Inc. - VIA PFD driver.) -- C:\WINDOWS\system32\drivers\VIAPFD.SYS [3279]
O58 - SDL:[MD5.A433B077B8CE49E94368E8DA94DDC786] - 14/07/2011 - 18:50:00 R--A- . (.VIA Technologies, Inc. - VIA AC'97 Enhanced Audio WDM Driver.) -- C:\WINDOWS\system32\drivers\viaudio.sys [43392]
O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 14/07/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys [9037]
O58 - SDL:[MD5.05A56C3156E1B6CC7BBD8E1D54D491F2] - 14/07/2011 - 18:54:06 ---A- . (.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 5.0 Protocol Driver.) -- C:\WINDOWS\system32\ASNDIS5.sys [16269]
O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 14/07/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\country.sys [27097]
O58 - SDL:[MD5.C6D29F29DE7427B1B0775E53E577B623] - 14/07/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\himem.sys [4912]
O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 14/07/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\key01.sys [42809]
O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 14/07/2011 - 05:23:06 ---A- . (...) -- C:\WINDOWS\system32\keyboard.sys [42537]
O58 - SDL:[MD5.7D30A74B5FB9FE3B245A6CE5FBCD71D5] - 14/07/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos.sys [27916]
O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 14/07/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos404.sys [29146]
O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 14/07/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos411.sys [29370]
O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 14/07/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos412.sys [29274]
O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 14/07/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos804.sys [29146]
O58 - SDL:[MD5.CAAA108FD7BF71989946B39704323455] - 14/07/2011 - 23:43:15 ---A- . (...) -- C:\WINDOWS\system32\ntio.sys [34000]
O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 14/07/2011 - 23:43:07 ---A- . (...) -- C:\WINDOWS\system32\ntio404.sys [34560]
O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 14/07/2011 - 23:43:04 ---A- . (...) -- C:\WINDOWS\system32\ntio411.sys [35648]
O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 14/07/2011 - 23:43:09 ---A- . (...) -- C:\WINDOWS\system32\ntio412.sys [35424]
O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 14/07/2011 - 23:43:06 ---A- . (...) -- C:\WINDOWS\system32\ntio804.sys [34560]

---\\ Liste des outils de nettoyage (O63)
O63 - Logiciel: ZHPDiag 1.27 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1

---\\ Liste des services Legacy (O64)
O64 - Services: CurCS - 06/07/2007 - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe - Ad-Aware 2007 Service(aawservice) .(.Lavasoft AB - Ad-Aware 2007 Service.) - LEGACY_AAWSERVICE
O64 - Services: CurCS - 09/09/2002 - C:\WINDOWS\system32\ASNDIS5.sys - ASNDIS5 Protocol Driver(ASNDIS5) .(.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 5.0 Protocol Driver.) - LEGACY_ASNDIS5
O64 - Services: CurCS - 20/08/2004 - C:\WINDOWS\System32\drivers\dmboot.sys - dmboot(dmboot) .(.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) - LEGACY_DMBOOT
O64 - Services: CurCS - 28/08/2001 - C:\WINDOWS\System32\drivers\dmload.sys - dmload(dmload) .(.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) - LEGACY_DMLOAD
O64 - Services: CurCS - 19/12/2006 - C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe - EpsonBidirectionalService(EpsonBidirectionalService) .(.SEIKO EPSON CORPORATION - eEBAPI Core Process module.) - LEGACY_EPSONBIDIRECTIONALSERVICE
O64 - Services: CurCS - 07/02/2011 - C:\Program Files\Google\Update\GoogleUpdate.exe - Service Google Update (gupdate)(gupdate) .(.Google Inc. - Programme d'installation de Google.) - LEGACY_GUPDATE
O64 - Services: CurCS - 04/04/2005 - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe - InstallDriver Table Manager(IDriverT) .(.Macrovision Corporation - IDriverT Module.) - LEGACY_IDRIVERT
O64 - Services: CurCS - 20/06/2006 - C:\WINDOWS\System32\DRIVERS\mdc8021x.sys - AEGIS Protocol (IEEE 802.1x) v2.3.1.9(MDC8021X) .(.Meetinghouse Data Communications - IEEE 802.1X Protocol Driver.) - LEGACY_MDC8021X
O64 - Services: CurCS - 27/01/2010 - C:\WINDOWS\System32\drivers\npf.sys - NetGroup Packet Filter Driver(npf) .(.CACE Technologies, Inc. - npf.sys (NT5/6 x86) Kernel Driver.) - LEGACY_NPF
O64 - Services: CurCS - 03/05/2002 - C:\WINDOWS\System32\nvsvc32.exe - NVIDIA Driver Helper Service(NVSvc) .(.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 29.42.) - LEGACY_NVSVC
O64 - Services: CurCS - 13/11/2007 - C:\WINDOWS\System32\DRIVERS\secdrv.sys - Secdrv(Secdrv) .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV
O64 - Services: CurCS - 18/12/2001 - C:\WINDOWS\system32\Drivers\VIAPFD.sys - VIAPFD(VIAPFD) .(.VIA Technologies. Inc. - VIA PFD driver.) - LEGACY_VIAPFD

---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (. - .) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (r) Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe
O67 - Shell Spawning: <.com> <>[HKU\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.exe> <>[HKU\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*
O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <htmlfile>[HKCR\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft (r) Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe

---\\ Start Menu Internet (O68)
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O68 - StartMenuInternet: <MSN Explorer> <>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - msn.) -- C:\Program Files\MSN\MSNCoreFiles\MSN6.exe

---\\ Search Browser Infection (O69)
O69 - SBI: SearchScopes [HKCU] {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} - (Ask Search) - http://www.search.ask.com/?o=10148&l=dis
O69 - SBI: SearchScopes [HKCU] {6F4699E1-AD87-45FD-89A6-8735CC186F08} - (Live Search) - https://www.bing.com/?fdr=lc&toHttps=1&redig=FA6AD360E0BE4C719380F8C470A3D3A8
O69 - SBI: SearchScopes [HKCU] {afdbddaa-5d3f-42ee-b79c-185a7020515b} - (midicair Customized Web Search) - http://search.conduit.com

---\\ Recherche particuliere à la racine de certains dossiers (O84)
[MD5.643A12D8558EDF58DDBDB1DA2428F284] [SPRF][10/11/2007] (.Microsoft Corporation - SFX Setup.) -- C:\Documents and Settings\Domdom\Bureau\dotnetfx3setup.exe [2945816]
[MD5.61AF018973A64FB4595FD9CA7CBB1BA1] [SPRF][10/01/2010] (...) -- C:\Documents and Settings\Domdom\Bureau\ingbp_setup_fr.exe [38991008]
[MD5.5BD07A2B2082D34C4EC93512CBC59D5E] [SPRF][16/09/2010] (.Apple Inc. - iTunes Installer.) -- C:\Documents and Settings\Domdom\Bureau\iTunesSetup.exe [74840872]
[MD5.A4E7B4A922CF594F2E0833B25A023DCF] [SPRF][30/01/2006] (.Patchou - Setup of Messenger Plus!.) -- C:\Documents and Settings\Domdom\Bureau\MsgPlus-362.exe [4752968]
[MD5.8D42770AD3357E8AD27EB706774A51EA] [SPRF][28/07/2008] (.SweetIM Technologies Lt - This installer.) -- C:\Documents and Settings\Domdom\Bureau\SweetImSetup.exe [4403816]
[MD5.E39A78D2C0DB2A60C5622AA686EABA82] [SPRF][14/07/2011] (.Nicolas Coolman - ZHPDiag.) -- C:\Documents and Settings\Domdom\Bureau\ZHPDiag2.exe [2538576]
[MD5.BB482DD127289F0FAD474610F5A4C3E3] [SPRF][30/06/2008] (.Panda Security - Panda ActiveScan 2.0 Stub Library.) -- C:\WINDOWS\Downloaded Program Files\as2stubie.dll [128256]
[MD5.29CFE9ED23C55E55838A789EB1182A9B] [SPRF][04/10/2008] (.Adobe Systems Incorporated - Adobe® Flash® Player ActiveX Installer.) -- C:\WINDOWS\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe [1887080]
[MD5.D4B7A651CB12B6C1A4FEB9FB5115CFE7] [SPRF][12/07/2000] (...) -- C:\WINDOWS\Downloaded Program Files\fxfileop.dll [36864]
[MD5.61B207CCE736BF164E1F6B8249F7AF44] [SPRF][29/02/2004] (.Microsoft Corporation - Ressources localisées de contrôle de MSN Chat.) -- C:\WINDOWS\Downloaded Program Files\MsnChat40fr-fr.dll [32768]
[MD5.27A0C3FBB9524BD6AFBF7F4091865B32] [SPRF][31/05/2002] (.Microsoft® Corporation - Outil MSN Téléchargement de photos.) -- C:\WINDOWS\Downloaded Program Files\PURfr-fr.dll [117328]
[MD5.81093A8A1719E11B22B586E10BFDC523] [SPRF][31/10/2001] (...) -- C:\WINDOWS\Downloaded Program Files\uninst.bat [118]

---\\ Scan Additionnel (O88)
Database Version : 8520 - (12/07/2011)
Clés trouvées (Keys found) : 77
Valeurs trouvées (Values found) : 5
Dossiers trouvés (Folders found) : 19
Fichiers trouvés (Files found) : 0

[HKLM\Software\Classes\AppID\GenericAskToolbar.DLL] =>Toolbar.AskSBar
[HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine] =>Toolbar.Conduit
[HKLM\Software\Classes\Conduit.Engine] =>Toolbar.Conduit
[HKLM\Software\Classes\dc_ads.ads] =>Adware.BHO
[HKLM\Software\Classes\dc_ads.ads.1] =>Adware.BHO
[HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd] =>Toolbar.AskSBar
[HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd.1] =>Toolbar.AskSBar
[HKLM\Software\Classes\hbcoresrv.dynamicprop] =>Adware.BHO
[HKLM\Software\Classes\hbcoresrv.dynamicprop.1] =>Adware.BHO
[HKLM\Software\Classes\setup.player.2k2] =>Spyware.MarketScore
[HKLM\Software\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}] =>Toolbar.AskTBar
[HKLM\Software\Microsoft\Code Store Database\Distribution Units\{0594af7e-573b-40df-8165-e47ab2eaefe8}] =>Adware.Navipromo
[HKLM\Software\Classes\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239}] =>Adware.MyWebSearch
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1648E328-3E5A-4EA5-A9C6-E5F09EE272DA}] =>Adware.AdRotator
[HKLM\Software\Classes\CLSID\{1648E328-3E5A-4EA5-A9C6-E5F09EE272DA}] =>Adware.AdRotator
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}] =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}] =>Adware.MyWebSearch
[HKLM\Software\Microsoft\Code Store Database\Distribution Units\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}] =>Adware.MyWebSearch
[HKLM\Software\Classes\CLSID\{1e0004ec-5df0-48c7-a8f0-fbb0488a3d94}] =>Adware.Hotbar
[HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}] =>Toolbar.AskSBar
[HKLM\Software\Classes\Interface\{2e9937fc-cf2f-4f56-af54-5a6a3dd375cc}] =>Adware.MyWebSearch
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}] =>Toolbar.Conduit
[HKLM\Software\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}] =>Toolbar.Conduit
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}] =>Toolbar.Conduit
[HKLM\Software\Classes\CLSID\{3BF72F68-72D8-461D-A884-329D936C5581}] =>PUP.BearShare
[HKLM\Software\Microsoft\Code Store Database\Distribution Units\{469c7080-8ec8-43a6-ad97-45848113743c}] =>Adware.Navipromo
[HKLM\Software\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}] =>Toolbar.Ask
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6fc3c36d-7635-4d43-ba62-0d9d2f2cd06e}] =>Adware.Fotomoto
[HKLM\Software\Classes\CLSID\{6fc3c36d-7635-4d43-ba62-0d9d2f2cd06e}] =>Adware.Fotomoto
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6fc3c36d-7635-4d43-ba62-0d9d2f2cd06e}] =>Adware.Fotomoto
[HKLM\Software\Classes\Interface\{741de825-a6f0-4497-9aa6-8023cf9b0fff}] =>Adware.MyWebSearch
[HKLM\Software\Classes\CLSID\{78E9D883-93CD-4072-BEF3-38EE581E2839}] =>PUP.BearShare
[HKLM\Software\Classes\CLSID\{83AC1413-FCE4-4A46-9DD5-4F31F306E71F}] =>PUP.BearShare
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}] =>Toolbar.AskSBar
[HKLM\Software\Classes\AppID\{8d71eeb8-a1a7-4733-8fa2-1cac015c967d}] =>Adware.MySideSearch
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8e015787-b1e3-404a-95de-3e71e1fa0305}] =>Adware.AdRotator
[HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}] =>Toolbar.Ask
[HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}] =>Toolbar.AskSBar
[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}] =>Toolbar.AskSBar
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}] =>Toolbar.AskSBar
[HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}] =>Toolbar.Ask
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}] =>Toolbar.Conduit
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}] =>Toolbar.AskSBar
[HKLM\Software\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}] =>Toolbar.AskSBar
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}] =>Toolbar.AskSBar
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{f4e04583-354e-4076-be7d-ed6a80fd66da}] =>Trojan.FakeAlert
[HKLM\Software\Classes\CLSID\{f4e04583-354e-4076-be7d-ed6a80fd66da}] =>Trojan.FakeAlert
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{f4e04583-354e-4076-be7d-ed6a80fd66da}] =>Trojan.FakeAlert
[HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF] =>Toolbar.AskSBar
[HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF] =>Toolbar.AskSBar
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF] =>Toolbar.AskSBar
[HKCU\Software\Microsoft\advremotedbg] =>Adware.Agent
[HKLM\Software\180solutions] =>Adware.180Solutions
[HKCU\Software\Ask.com] =>Toolbar.AskBar
[HKCU\Software\Ask.com] =>Toolbar.AskBarDis
[HKCU\Software\AskToolbar] =>Toolbar.AskTBar
[HKLM\Software\AskToolbar] =>Toolbar.AskTBar
[HKCU\Software\AppDataLow\AskToolbarInfo] =>Toolbar.AskTBar
[HKCU\Software\Conduit] =>Toolbar.Conduit
[HKLM\Software\Conduit] =>Toolbar.Conduit
[HKCU\Software\conduitEngine] =>Toolbar.Conduit
[HKLM\Software\conduitEngine] =>Toolbar.Conduit
[HKLM\Software\focusinteractive] =>Adware.MyWebSearch
[HKLM\Software\Fun Web Products] =>Adware.MyWebSearch
[HKLM\Software\FunWebProducts] =>Adware.MyWebSearch
[HKCU\Software\hotbar] =>Adware.Hotbar
[HKCU\Software\PopCap] =>Adware.PopCap
[HKLM\Software\PopCap] =>Adware.PopCap
[HKCU\Software\Prodiff] =>Adware.Locator
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Software\AskToolbar] =>Toolbar.AskTBar
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Toolbar] =>Toolbar.Conduit
[HKCU\Software\Trymedia Systems] =>Adware.Trymedia
[HKLM\Software\Trymedia Systems] =>Adware.Trymedia
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine] =>Toolbar.Conduit
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\dcadsgames] =>Adware.BHO
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\mslagent] =>Trojan.FakeAlert
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\superiorads] =>Adware.BHO
[HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks]:{00000000-6E41-4FD3-8538-502F5495E5FC} =>Adware.ShoppingReport2
[HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]:{30F9B915-B755-4826-820B-08FBA6BD249D} =>Toolbar.Conduit
[HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{30F9B915-B755-4826-820B-08FBA6BD249D} =>Toolbar.Conduit
[HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]:{D4027C7F-154A-4066-A1AD-4243D8127440} =>Toolbar.AskSBar
[HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{D4027C7F-154A-4066-A1AD-4243D8127440} =>Toolbar.AskSBar
C:\Program Files\Ask.com =>Toolbar.AskBar
C:\Program Files\Conduit =>Toolbar.Conduit
C:\Program Files\ConduitEngine =>Toolbar.Conduit
C:\Program Files\Dcads Games Collection =>Adware.AdRotator
C:\Program Files\FBrowsingAdvisor =>Trojan.FBrowsingAdvisor
C:\Program Files\FunWebProducts =>Adware.MyWebSearch
C:\Program Files\Hotbar =>Adware.Hotbar
C:\Program Files\instant access =>Adware.EGDAccess
C:\Program Files\MyWebSearch =>Adware.MyWebSearch
C:\Program Files\NavigationProgram =>Adware.AdRotator
C:\Program Files\NewDotNet =>Adware.Agent
C:\Program Files\Trymedia =>Adware.Trymedia
C:\Documents and Settings\Domdom\Application Data\Hotbar =>Adware.Hotbar
C:\Documents and Settings\Domdom\Local Settings\Application Data\AskToolbar =>Toolbar.AskTBar
C:\Documents and Settings\Domdom\Local Settings\Application Data\Conduit =>Toolbar.Conduit
C:\Documents and Settings\Domdom\Local Settings\Application Data\ConduitEngine =>Toolbar.Conduit
C:\Documents and Settings\Domdom\Local Settings\Application Data\AskToolbar =>Toolbar.AskTBar
C:\Documents and Settings\Domdom\Local Settings\Application Data\Conduit =>Toolbar.Conduit
C:\Documents and Settings\Domdom\Local Settings\Application Data\ConduitEngine =>Toolbar.Conduit

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SR - | Auto 14/07/2011 561152 | (aawservice) . (.Lavasoft AB.) - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
SR - | Auto 14/07/2011 37664 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SS - | Auto 14/07/2011 42184 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
SR - | Auto 14/07/2011 349472 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SS - | Demand 14/07/2011 69120 | (Boonty Games) . (.BOONTY.) - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
SS - | Demand 14/07/2011 225280 | (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\System32\dmadmin.exe
SR - | Auto 14/07/2011 94208 | (EpsonBidirectionalService) . (.SEIKO EPSON CORPORATION.) - C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
SS - | Auto 14/07/2011 136176 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Demand 14/07/2011 136176 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Demand 14/07/2011 69632 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
SR - | Demand 14/07/2011 820520 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
SR - | Auto 14/07/2011 61440 | (NVSvc) . (.NVIDIA Corporation.) - C:\WINDOWS\System32\nvsvc32.exe
SR - | Auto 14/07/2011 53248 | (STI Simulator) . (...) - C:\WINDOWS\System32\PAStiSvc.exe

---\\ Recherche Master Boot Record Infection (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Run by Domdom at 14/07/2011 17:06:01

device: opened successfully
user: MBR read successfully

Disk trace:
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys viaidexp.sys PCIIDEX.SYS
C:\WINDOWS\system32\drivers\viaidexp.sys VIA Technologies, Inc. VIA PCI IDE MINI Driver
1 nt!IofCallDriver[0x804E37C5] -> \Device\Harddisk0\DR0[0x82387AB8]
3 CLASSPNP[0xF857705B] -> nt!IofCallDriver[0x804E37C5] -> \Device\00000060[0x823AC198]
5 ACPI[0xF84EC620] -> nt!IofCallDriver[0x804E37C5] -> \Device\Ide\IdeDeviceP0T0L0-3[0x8238D940]
kernel: MBR read successfully
user & kernel MBR OK

---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by Domdom at 14/07/2011 17:06:03

********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin

End of the scan (1267 lines in 02mn 11s)(0)

pour moi c'est du chinois mais pour l'instant, IE marche mais c'est la galère. Merci à toi de me venir en aide.

ok merci bcp mais suis novice et si tu regardes l'heure de nos messages respectifs, ils se sont croisés. Vais faire tout çà ce soir et essayer de poster correctement.

Grand merci et bonne soirée.

Bonjour,

voilà les deux rapports. Pour info, jamais réussi à redémarrer ni arrêter le PC. J'ai du le rebooter.

Malwarebytes' Anti-Malware 1.51.1.1800
www.malwarebytes.org

Version de la base de données: 7143

Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180

15/07/2011 09:05:25
mbam-log-2011-07-15 (09-05-25).txt

Type d'examen: Examen complet (C:\|)
Elément(s) analysé(s): 253333
Temps écoulé: 34 minute(s), 7 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 4
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 22
Fichier(s) infecté(s): 62

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{4AD44D3E-7316-4251-B754-9B10EC96AF92} (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Tldctl2.URLLink (Adware.NewDotNet) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Tldctl2.URLLink.1 (Adware.NewDotNet) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\mslagent (Adware.EGDAccess) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\SysUpd (Trojan.Vundo) -> Value: SysUpd -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
c:\program files\instant access (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\Center (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\Center\Icons (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\desktopicons (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\desktopicons\instant-access (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\4850290208 (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\4850290208\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\4850290208\exittraffic (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\4850290208\img (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\5071505116 (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\5071505116\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\5071505116\exittraffic (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\5071505116\img (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\6674315833 (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\6674315833\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\6674315833\exittraffic (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\6674315833\img (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\8031342428 (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\8031342428\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\8031342428\exittraffic (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\8031342428\img (Adware.EGDAccess) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
c:\program files\ad-remover\quarantine\C\program files\Hotbar\bin\4.5.1.0\hbcoresrv.dll.vir (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\Hotbar\bin\4.5.1.0\hbtoolbar.dll.vir (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\WINDOWS\system32\dcads-remove.exe.vir (Adware.Fotomoto) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\WINDOWS\system32\whoiscl.exe.vir (Trojan.BHO) -> Quarantined and deleted successfully.
c:\system volume information\_restore{74d54c58-11af-488b-910c-d992cda38b1b}\RP2004\A1027089.exe (Adware.Fotomoto) -> Quarantined and deleted successfully.
c:\system volume information\_restore{74d54c58-11af-488b-910c-d992cda38b1b}\RP2004\A1027093.exe (Trojan.BHO) -> Quarantined and deleted successfully.
c:\system volume information\_restore{74d54c58-11af-488b-910c-d992cda38b1b}\RP2004\A1027127.dll (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\system volume information\_restore{74d54c58-11af-488b-910c-d992cda38b1b}\RP2004\A1027128.dll (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mseggrpid.dll (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\WINDOWS\downloaded program files\EGAUTH.inf (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\WINDOWS\downloaded program files\nethv32.inf (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\WINDOWS\tmlpcert2005 (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\Center\Dealgay.upd (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\Center\instantaccess.upd (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\Center\tray1.ico (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\Center\Icons\Dealgay.lnk (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\Center\Icons\instantaccess.lnk (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\desktopicons\instant-access\Dealgay.lnk (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\desktopicons\instant-access\instantaccess.lnk (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\4850290208\Common\hits.php (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\4850290208\Common\module.php (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\4850290208\Common\show_module.php (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\4850290208\exittraffic\exit.php (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\4850290208\img\2460_p2e.ico (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\4850290208\img\hits_img.bmp (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\4850290208\img\p2e_1_2.bmp (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\4850290208\img\p2e_2_2.bmp (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\4850290208\img\p2e_go_2.bmp (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\4850290208\img\p2e_logo_2.bmp (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\5071505116\Common\hits.php (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\5071505116\Common\module.php (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\5071505116\Common\show_module.php (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\5071505116\exittraffic\exit.php (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\5071505116\img\2460_p2e.ico (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\5071505116\img\hits_img.bmp (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\5071505116\img\p2e_1_2.bmp (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\5071505116\img\p2e_2_2.bmp (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\5071505116\img\p2e_go_2.bmp (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\5071505116\img\p2e_logo_2.bmp (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\6674315833\index.htm (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\6674315833\mainframe.php (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\6674315833\Common\hits.php (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\6674315833\Common\module.php (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\6674315833\Common\show_module.php (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\6674315833\exittraffic\exit.php (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\6674315833\img\banner.bmp (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\6674315833\img\hits_img.bmp (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\6674315833\img\p2e.ico (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\6674315833\img\p2e_1_2.bmp (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\6674315833\img\p2e_2_2.bmp (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\6674315833\img\p2e_go_2.bmp (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\6674315833\img\p2e_logo_2.bmp (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\8031342428\Common\hits.php (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\8031342428\Common\module.php (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\8031342428\Common\show_module.php (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\8031342428\exittraffic\exit.php (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\8031342428\img\2460_p2e.ico (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\8031342428\img\hits_img.bmp (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\8031342428\img\p2e_1_2.bmp (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\8031342428\img\p2e_2_2.bmp (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\8031342428\img\p2e_go_2.bmp (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\P2E\8031342428\img\p2e_logo_2.bmp (Adware.EGDAccess) -> Quarantined and deleted successfully.

======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par TeamXscript le 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 08:10:31 le 15/07/2011, Mode normal

Microsoft Windows XP Professionnel Service Pack 2 (X86)
Domdom@DOMINIQUE ( )

============== ACTION(S) ==============

Fichier supprimé: C:\WINDOWS\system32\dcads-remove.exe
Fichier supprimé: C:\Program Files\Dcads Games Collection\uninstall.exe
Fichier supprimé: C:\WINDOWS\system32\dcads_sidebar_uninstall.exe
Fichier supprimé: C:\WINDOWS\system32\superiorads-uninst.exe
Fichier supprimé: C:\WINDOWS\Downloaded Program Files\hotbar.inf
Fichier supprimé: C:\WINDOWS\system32\ConduitEngine.tmp
Fichier supprimé: C:\WINDOWS\system32\WhoisCL.exe
Dossier supprimé: C:\WINDOWS\mslagent
Fichier supprimé: C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job
Dossier supprimé: C:\Program Files\Ask.com
Dossier supprimé: C:\Documents and Settings\Domdom\Local Settings\Application Data\AskToolbar
Dossier supprimé: C:\Documents and Settings\Domdom\Local Settings\Application Data\Conduit
Dossier supprimé: C:\Program Files\Conduit
Dossier supprimé: C:\Documents and Settings\Domdom\Local Settings\Application Data\ConduitEngine
Dossier supprimé: C:\Program Files\ConduitEngine
Dossier supprimé: C:\Documents and Settings\Domdom\Menu Démarrer\Programmes\Dcads Games Collection
Dossier supprimé: C:\Program Files\Dcads Games Collection
Dossier supprimé: C:\Program Files\FBrowsingAdvisor
Dossier supprimé: C:\Program Files\FunWebProducts
Dossier supprimé: C:\Documents and Settings\Domdom\Application Data\Hotbar
Dossier supprimé: C:\Program Files\Hotbar
Dossier supprimé: C:\Program Files\MyWebSearch
Dossier supprimé: C:\Program Files\NavigationProgram
Dossier supprimé: C:\Program Files\NewDotNet
Dossier supprimé: C:\Program Files\Trymedia

(!) -- Fichiers temporaires supprimés.

Clé supprimée: HKLM\Software\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Clé supprimée: HKLM\Software\Classes\CLSID\{1648E328-3E5A-4EA5-A9C6-E5F09EE272DA}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1648E328-3E5A-4EA5-A9C6-E5F09EE272DA}
Clé supprimée: HKLM\Software\Classes\AppID\{8D71EEB8-A1A7-4733-8FA2-1CAC015C967D}
Clé supprimée: HKLM\Software\Classes\CLSID\{1E0004EC-5DF0-48C7-A8F0-FBB0488A3D94}
Clé supprimée: HKLM\Software\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}
Clé supprimée: HKLM\Software\Classes\CLSID\{315108E4-E3AF-460F-B264-F2ACC9E1ACEB}
Clé supprimée: HKLM\Software\Classes\CLSID\{42EC8164-2342-4F2C-8AC0-D692EBE64C39}
Clé supprimée: HKLM\Software\Classes\CLSID\{664D3A9A-3FE2-4255-AEE5-3EAE0FDE6AF7}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{664D3A9A-3FE2-4255-AEE5-3EAE0FDE6AF7}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{664D3A9A-3FE2-4255-AEE5-3EAE0FDE6AF7}
Clé supprimée: HKLM\Software\Classes\CLSID\{6FC3C36D-7635-4D43-BA62-0D9D2F2CD06E}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6FC3C36D-7635-4D43-BA62-0D9D2F2CD06E}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6FC3C36D-7635-4D43-BA62-0D9D2F2CD06E}
Clé supprimée: HKLM\Software\Classes\CLSID\{79F562E5-768C-4494-8E6C-824ADA4A9C2C}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{79F562E5-768C-4494-8E6C-824ADA4A9C2C}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{79F562E5-768C-4494-8E6C-824ADA4A9C2C}
Clé supprimée: HKLM\Software\Classes\CLSID\{B5533239-2826-4FA8-BCFB-A9A44008FF4B}
Clé supprimée: HKLM\Software\Classes\Interface\{B5533239-2826-4FA8-BCFB-A9A44008FF4B}
Clé supprimée: HKLM\Software\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Clé supprimée: HKLM\Software\Classes\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC}
Clé supprimée: HKLM\Software\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Clé supprimée: HKLM\Software\Classes\Interface\{741DE825-A6F0-4497-9AA6-8023CF9B0FFF}
Clé supprimée: HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Clé supprimée: HKLM\Software\Classes\Interface\{9DD19D39-2CDC-465B-BB21-1D433590BA3D}
Clé supprimée: HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Clé supprimée: HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Clé supprimée: HKLM\Software\Classes\TypeLib\{A471012F-E2E5-48EB-9A8B-9D4090B1D0C7}
Clé supprimée: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\dcads
Clé supprimée: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DcadsGames
Clé supprimée: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DcadsSearchAssistant
Clé supprimée: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\superiorads
Clé supprimée: HKLM\Software\Classes\AdPanel.Panel1
Clé supprimée: HKLM\Software\Classes\AdPanel.Panel1.1
Clé supprimée: HKLM\Software\Classes\Conduit.Engine
Clé supprimée: HKLM\Software\Classes\dc_ads.ads
Clé supprimée: HKLM\Software\Classes\dc_ads.ads.1
Clé supprimée: HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd
Clé supprimée: HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd.1
Clé supprimée: HKLM\Software\Classes\HbCoreSrv.DynamicProp
Clé supprimée: HKLM\Software\Classes\HbCoreSrv.DynamicProp.1
Clé supprimée: HKLM\Software\Classes\Sidebar.SESidebar
Clé supprimée: HKLM\Software\Classes\Sidebar.SESidebar.1
Clé supprimée: HKLM\Software\Classes\Sidebar.SidebarLogic
Clé supprimée: HKLM\Software\Classes\Sidebar.SidebarLogic.1
Clé supprimée: HKLM\Software\Classes\Toolbar.CT2795622
Clé supprimée: HKLM\Software\Classes\AppID\GenericAskToolbar.DLL
Clé supprimée: HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Clé supprimée: HKLM\Software\Classes\AppID\Sidebar.DLL
Clé supprimée: HKLM\Software\AskToolbar
Clé supprimée: HKLM\Software\Conduit
Clé supprimée: HKLM\Software\conduitEngine
Clé supprimée: HKLM\Software\FocusInteractive
Clé supprimée: HKLM\Software\Fun Web Products
Clé supprimée: HKLM\Software\FunWebProducts
Clé supprimée: HKLM\Software\MyWebSearch
Clé supprimée: HKLM\Software\New.net
Clé supprimée: HKLM\Software\PopCap
Clé supprimée: HKLM\Software\Trymedia Systems
Clé supprimée: HKCU\Software\Ask.com
Clé supprimée: HKCU\Software\AskToolbar
Clé supprimée: HKCU\Software\Conduit
Clé supprimée: HKCU\Software\conduitEngine
Clé supprimée: HKCU\Software\Hotbar
Clé supprimée: HKCU\Software\MyWebSearch
Clé supprimée: HKCU\Software\New.net
Clé supprimée: HKCU\Software\PopCap
Clé supprimée: HKCU\Software\Trymedia Systems
Clé supprimée: HKCU\Software\AppDataLow\AskToolbarInfo
Clé supprimée: HKU\.DEFAULT\Software\New.net
Clé supprimée: HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{784B896D-665A-4E72-9080-C4BC9F93696B}
Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\new.net
Clé supprimée: HKCU\Software\Microsoft\AdvRemoteDbg
Clé supprimée: HKCU\Software\Microsoft\dcads
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
Clé supprimée: HKLM\Software\Classes\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239}
Clé supprimée: HKLM\Software\Classes\CLSID\{A4730EBE-43A6-443e-9776-36915D323AD3}
Clé supprimée: HKLM\Software\Microsoft\Code Store Database\Distribution Units\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}

Valeur supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|spa_start
Valeur supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Run|Instant Access
Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{00000000-6E41-4FD3-8538-502F5495E5FC}
Valeur supprimée: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{D4027C7F-154A-4066-A1AD-4243D8127440}
Valeur supprimée: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{30F9B915-B755-4826-820B-08FBA6BD249D}
Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440}
Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{30F9B915-B755-4826-820B-08FBA6BD249D}

============== SCAN ADDITIONNEL ==============

**** Internet Explorer Version [6.0.2900.2180] ****

HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
HKCU_Main|Start Page - hxxp://fr.msn.com/
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Start Page - hxxp://fr.msn.com/
HKCU_URLSearchHooks|{77f8c945-4b74-4bd6-a073-e0d1997edce8} - "midicair Toolbar" (C:\Program Files\midicair\prxtbmid0.dll)
HKCU_Toolbar|{1E796980-9CC5-11D1-A83F-00C04FC99D61} (x)
HKCU_Toolbar\ShellBrowser|{B195B3B3-8A05-11D3-97A4-0004ACA6948E} (x)
HKCU_Toolbar\ShellBrowser|{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} (C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll)
HKCU_Toolbar\WebBrowser|{A19B0200-9B08-2DFE-8502-721D1765383A} (x)
HKCU_Toolbar\WebBrowser|{B195B3B3-8A05-11D3-97A4-0004ACA6948E} (x)
HKCU_Toolbar\WebBrowser|{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} (C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll)
HKCU_Toolbar\WebBrowser|{77F8C945-4B74-4BD6-A073-E0D1997EDCE8} (C:\Program Files\midicair\prxtbmid0.dll)
HKLM_Toolbar|{CC90CDA0-74A0-45b4-80EF-D89CA8C249B8} (x)
HKLM_Toolbar|{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} (C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll)
HKLM_Toolbar|{77f8c945-4b74-4bd6-a073-e0d1997edce8} (C:\Program Files\midicair\prxtbmid0.dll)
HKLM_Toolbar|{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} (C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll)
HKLM_ElevationPolicy\{054BB82D-A673-4AA4-93BC-3545CBDE3F63} - C:\Program Files\midicair\midicairToolbarHelper.exe (?)
HKLM_ElevationPolicy\{13A6856E-AC39-4E5A-8A9C-7C3779306E63} - C:\Documents and Settings\Domdom\Local Settings\Application Data\Conduit\CT2795622\midicairAutoUpdaterHelper.exe (x)
HKLM_Extensions\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - "?" (?)
HKLM_Extensions\{85d1f590-48f4-11d9-9669-0800200c9a66} - "?" (?)
HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?)
BHO\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - "AcroIEHlprObj Class" (C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll)
BHO\{5C255C8A-E604-49b4-9D64-90988571CECB} (?)
BHO\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - "SSVHelper Class" (C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll)
BHO\{77f8c945-4b74-4bd6-a073-e0d1997edce8} - "midicair Toolbar" (C:\Program Files\midicair\prxtbmid0.dll)
BHO\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - "avast! WebRep" (C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll)
BHO\{9394EDE7-C8B5-483E-8773-474BF36AF6E4} - "ST" (C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll)
BHO\{ACB3E0B7-7D0C-40B7-99B3-3EEACDF86BFB} - "?" (C:\WINDOWS\mslagent\4b_1,0,1,1_mslagent.dll) (x)
BHO\{AEECBFDA-12FA-4881-BDCE-8C3E1CE4B344} - "NLS UrlCatcher Class" (C:\WINDOWS\System32\nvms.dll) (x)
BHO\{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - "MSNToolBandBHO" (C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll)
BHO\{CE188402-6EE7-4022-8868-AB25173A3E14} - "CB UrlCatcher Class" (C:\WINDOWS\System32\mscb.dll) (x)
BHO\{F4E04583-354E-4076-BE7D-ED6A80FD66DA} - "ADP UrlCatcher Class" (C:\WINDOWS\System32\msbe.dll) (x)

========================================

C:\Program Files\Ad-Remover\Quarantine: 513 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 13 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 15/07/2011 08:11:01 (13370 Octet(s))

Fin à: 08:12:34, 15/07/2011

============== E.O.F ==============

Bonne journée.

bon, j'espère que çà va marcher cette fois...

https://www.cjoint.com/?AGpw0jwjaDi

merci bcp pour ta prompte réponse !

voilà les deux rapports demandés

Bon week end ensoleillé :)

Rapport de ZHPFix 1.12.3338 par Nicolas Coolman, Update du 12/07/2011
Fichier d'export Registre :
Run by Domdom at 16/07/2011 10:05:29
Windows XP Professional Service Pack 2 (Build 2600)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html

========== Logiciel(s) ==========
ABSENT Uninstall Process: c:\windows\system32\dcads-remove.exe
ABSENT Uninstall Process: c:\windows\system32\superiorads-uninst.exe
ABSENT Uninstall Process: c:\program files\dcads games collection\uninstall.exe
ABSENT Uninstall Process: c:\program files\rm-x player v3\unins000.exe

========== Clé(s) du Registre ==========
SUPPRIME Partiel Software Key: {86D4B82A-ABED-442A-BE86-96357B70F4FE}
SUPPRIME [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\dcads]
SUPPRIME [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\superiorads]
SUPPRIME [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DcadsGames]
SUPPRIME [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RM-X® Player V3_is1]
SUPPRIME Key: CLSID DPF: {0594AF7E-573B-40DF-8165-E47AB2EAEFE8}
SUPPRIME Key: CLSID DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
SUPPRIME Key: CLSID DPF: {469C7080-8EC8-43A6-AD97-45848113743C}
SUPPRIME Key: Service: Bonjour Service
ABSENT Key: Service: Bonjour Service
SUPPRIME Key: HKCU\Software\Ask.com
SUPPRIME Key: HKCU\Software\AskToolbar
SUPPRIME Key: HKCU\Software\Hotbar
SUPPRIME Key: HKCU\Software\MyWebSearch
SUPPRIME Key: HKCU\Software\PopCap
SUPPRIME Key: HKCU\Software\Prodiff
SUPPRIME Key: HKCU\Software\Trymedia Systems
SUPPRIME Key: HKLM\Software\180solutions
SUPPRIME Key: HKLM\Software\FocusInteractive
SUPPRIME Key: HKLM\Software\Fun Web Products
SUPPRIME Key: HKLM\Software\FunWebProducts
SUPPRIME Key: HKLM\Software\MyWebSearch
SUPPRIME Key: HKLM\Software\NaviSearch
SUPPRIME Key: HKLM\Software\PopCap
SUPPRIME Key: HKLM\Software\Trymedia Systems
SUPPRIME Key: HKLM\Software\Classes\AppID\GenericAskToolbar.DLL
SUPPRIME Key: HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd
SUPPRIME Key: HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd.1
SUPPRIME Key: HKLM\Software\Classes\hbcoresrv.dynamicprop
SUPPRIME Key: HKLM\Software\Classes\hbcoresrv.dynamicprop.1
SUPPRIME Key: HKLM\Software\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
ABSENT Key: HKLM\Software\Microsoft\Code Store Database\Distribution Units\{0594af7e-573b-40df-8165-e47ab2eaefe8}
SUPPRIME Key: HKLM\Software\Classes\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1648E328-3E5A-4EA5-A9C6-E5F09EE272DA}
SUPPRIME Key: HKLM\Software\Classes\CLSID\{1648E328-3E5A-4EA5-A9C6-E5F09EE272DA}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
ABSENT Key: HKLM\Software\Microsoft\Code Store Database\Distribution Units\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
SUPPRIME Key: HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
SUPPRIME Key: HKLM\Software\Classes\Interface\{2e9937fc-cf2f-4f56-af54-5a6a3dd375cc}
ABSENT Key: HKLM\Software\Microsoft\Code Store Database\Distribution Units\{469c7080-8ec8-43a6-ad97-45848113743c}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6fc3c36d-7635-4d43-ba62-0d9d2f2cd06e}
SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6fc3c36d-7635-4d43-ba62-0d9d2f2cd06e}
SUPPRIME Key: HKLM\Software\Classes\Interface\{741de825-a6f0-4497-9aa6-8023cf9b0fff}
SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8e015787-b1e3-404a-95de-3e71e1fa0305}
SUPPRIME Key: HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
SUPPRIME Key: HKLM\Software\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
SUPPRIME Key: HKLM\Software\Classes\CLSID\{f4e04583-354e-4076-be7d-ed6a80fd66da}
SUPPRIME Key: HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
SUPPRIME Key: HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
ABSENT Key: HKLM\Software\focusinteractive
ABSENT Key: HKCU\Software\hotbar
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Software\AskToolbar
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\dcadsgames

========== Valeur(s) du Registre ==========
SUPPRIME URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC}
SUPPRIME Toolbar: {CC90CDA0-74A0-45b4-80EF-D89CA8C249B8}
SUPPRIME Toolbar: {D4027C7F-154A-4066-A1AD-4243D8127440}
SUPPRIME RunValue: New.net Startup
SUPPRIME RunValue: spa_start
SUPPRIME RunValue: ApnUpdater
SUPPRIME RunValue: Instant Access
ABSENT RunValue: Instant Access
SUPPRIME RunValue: NvCplDaemon
SUPPRIME RunValue: nwiz
SUPPRIME RunValue: MessengerPlus3
SUPPRIME RunValue: QuickTime Task
SUPPRIME RunValue: iTunesHelper
SUPPRIME RunValue: ctfmon.exe
ABSENT RunValue: ctfmon.exe
ABSENT [HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks]:{00000000-6E41-4FD3-8538-502F5495E5FC}
SUPPRIME [HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]:{D4027C7F-154A-4066-A1AD-4243D8127440}
ABSENT [HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{D4027C7F-154A-4066-A1AD-4243D8127440}
SUPPRIME FirewallRaz (SP) : C:\Program Files\Kazaa Lite K++\KazaaLite.kpp
SUPPRIME FirewallRaz (SP) : C:\Program Files\Gold Miner\GoldMiner.exe
SUPPRIME FirewallRaz (SP) : C:\Program Files\MSN Messenger\livecall.exe
SUPPRIME FirewallRaz (DP) : C:\Program Files\MSN Messenger\livecall.exe
Aucune valeur présente dans la clé d'exception du registre (FirewallRaz)

========== Elément(s) de donnée du Registre ==========
REMPLACE Value AntiVirusOverride : Good (0) - Bad (1)

========== Dossier(s) ==========
SUPPRIME Flash Cookies: 10
SUPPRIME Temporaires Windows: : 6

========== Fichier(s) ==========
ABSENT File: c:\program files\ask.com
ABSENT File: c:\progra~1\newdot~1\newdot~3.dll
ABSENT File: c:\windows\system32\sprt_ads.dll
ABSENT File: p2esocks_1019.dll
SUPPRIME c:\documents and settings\all users\menu démarrer\programmes\démarrage\microsoft office.lnk
SUPPRIME Flash Cookies: 13
SUPPRIME Temporaires Windows: : 11

========== Fichier HOSTS ==========
Le fichier Hosts est sain

========== Restauration Système ==========
Point de restauration du système créé avec succès

========== Récapitulatif ==========
57 : Clé(s) du Registre
23 : Valeur(s) du Registre
1 : Elément(s) de donnée du Registre
2 : Dossier(s)
7 : Fichier(s)
4 : Logiciel(s)
1 : Fichier HOSTS
1 : Restauration Système

========== Chemin du fichier rapport ==========
C:\Program Files\ZHPDiag\ZHPFixReport.txt

End of the scan in 00mn 33s

-----------\\ ToolBar S&D 1.2.9 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) XP 2000+ )
BIOS : Ver 1.65
USER : Domdom ( Administrator )
BOOT : Normal boot
Antivirus : avast! Antivirus 5.0.100664499 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:74 Go (Free:41 Go)
D:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
Option : [2] ( 16/07/2011|10:12 )

-----------\\ Recherche de Fichiers / Dossiers ...

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="http://sn136w.snt136.mail.live.com/default.aspx?rru=inbox&wa=wsignin1.0"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"SearchMigratedDefaultURL"="https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&src={referrer:source?}"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Start Page"="https://www.msn.com/fr-fr/"

--------------------\\ Recherche d'autres infections

Aucune autre infection trouvée !

1 - "C:\ToolBar SD\TB_1.txt" - 16/07/2011|10:14 - Option : [2]

-----------\\ Fin du rapport a 10:14:51,75

"bon cela me semble pas mal il va comment le pc ?? " :

- au démarrage, les icônes mettent un temps fou à apparaître (quand elles apparaissent, sinon je dois rebooter)
- je n'ai plus de protection : quand j'essaie de rétablir avast, il ne répond pas
- j'ai tjs la version 6 de IE qui est obsolète et donc m'empêche de surfer correctement sur de nombreux sites
- sinon, quand la version 6 est tjs OK pour certains sites, il ne rame plus comme avant.

1. "si l'outil detecte un proxy et que tu n'en as pas installé clique sur "supprimer le proxy"

- c'est quoi exactement un proxy ?

2. si l'outil semble ne pas avoir fonctionné renomme-le winlogon , ou change son extension en .com ou .scr "

- on fait comment ?

Désolée de t'embêter avec mon ignorance mais j'ai trop peur de faire une conne...

gros souci : j'ai lancé le scan, l'ai laissé travailler et quand je suis revenue, m'avait ouvert mes documents. Je ne sais plus rien ouvrir: aucun programme, aucun fichier ! là, suis sur l'ordi de mon fils mais je ne sais pas transmettre le rapport qui se trouve sur mon bureau et plus rien ne répond, donc impossible de le transférer sur une clé. Je fais quoi ?

ok çà m'a permis de copier le rapport qui est là http://www.cijoint.fr/cjlink.php?file=cj201107/cij98yzVLc.txt

pour info, quand je fais "démarrer" "programmes", c'est vide...

http://cjoint.com/?AGqnzqGHpIq

re,

en accord avec Jacques je te donne la suite :)

desinstalle Midicair Conduit toolbar => ramasse trojans
desinstalle Conduit Engine => ramasse trojans
desinstalle MSN Toolbar
desinstalle Yahoo compagnon toolbar
desinstalle AD-Aware il est obsolète
desinstalle Java il te sera proposé de mettre la derniere version en fin de desinfection

==================================

fais glisser une icone n'importe quel fichier sur Pre_scan , pre_script va apparaitre

ouvre Pre_script et colle ce qui suit en gras, à l'interieur du texte qui s'ouvre ,
sans les lignes , en une seule fois en le mettant en surbrillance :
___________________________________________________
Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SysUpd"=-
"AT-Watch"=-
""=-
[-HKEY_CLASSES_ROOT\CLSID\{77f8c945-4b74-4bd6-a073-e0d1997edce8}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{77f8c945-4b74-4bd6-a073-e0d1997edce8}]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ext\settings\{77f8c945-4b74-4bd6-a073-e0d1997edce8}]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ext\stats\{77f8c945-4b74-4bd6-a073-e0d1997edce8}]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{77f8c945-4b74-4bd6-a073-e0d1997edce8}"=-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{77f8c945-4b74-4bd6-a073-e0d1997edce8}"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{77f8c945-4b74-4bd6-a073-e0d1997edce8}"=-
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{77f8c945-4b74-4bd6-a073-e0d1997edce8}"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{77f8c945-4b74-4bd6-a073-e0d1997edce8}"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{77f8c945-4b74-4bd6-a073-e0d1997edce8}"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
"{77f8c945-4b74-4bd6-a073-e0d1997edce8}"=-
[-HKEY_CLASSES_ROOT\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ext\settings\{30F9B915-B755-4826-820B-08FBA6BD249D}]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ext\stats\{30F9B915-B755-4826-820B-08FBA6BD249D}]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"=-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"=-
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"=-
[-HKEY_CLASSES_ROOT\CLSID\{ACB3E0B7-7D0C-40B7-99B3-3EEACDF86BFB}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ACB3E0B7-7D0C-40B7-99B3-3EEACDF86BFB}]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ext\settings\{ACB3E0B7-7D0C-40B7-99B3-3EEACDF86BFB}]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ext\stats\{ACB3E0B7-7D0C-40B7-99B3-3EEACDF86BFB}]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{ACB3E0B7-7D0C-40B7-99B3-3EEACDF86BFB}"=-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{ACB3E0B7-7D0C-40B7-99B3-3EEACDF86BFB}"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{ACB3E0B7-7D0C-40B7-99B3-3EEACDF86BFB}"=-
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{ACB3E0B7-7D0C-40B7-99B3-3EEACDF86BFB}"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{ACB3E0B7-7D0C-40B7-99B3-3EEACDF86BFB}"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{ACB3E0B7-7D0C-40B7-99B3-3EEACDF86BFB}"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
"{ACB3E0B7-7D0C-40B7-99B3-3EEACDF86BFB}"=-
[-HKEY_CLASSES_ROOT\CLSID\{AEECBFDA-12FA-4881-BDCE-8C3E1CE4B344}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AEECBFDA-12FA-4881-BDCE-8C3E1CE4B344}]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ext\settings\{AEECBFDA-12FA-4881-BDCE-8C3E1CE4B344}]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ext\stats\{AEECBFDA-12FA-4881-BDCE-8C3E1CE4B344}]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{AEECBFDA-12FA-4881-BDCE-8C3E1CE4B344}"=-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{AEECBFDA-12FA-4881-BDCE-8C3E1CE4B344}"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{AEECBFDA-12FA-4881-BDCE-8C3E1CE4B344}"=-
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{AEECBFDA-12FA-4881-BDCE-8C3E1CE4B344}"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEECBFDA-12FA-4881-BDCE-8C3E1CE4B344}"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{AEECBFDA-12FA-4881-BDCE-8C3E1CE4B344}"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
"{AEECBFDA-12FA-4881-BDCE-8C3E1CE4B344}"=-
[-HKEY_CLASSES_ROOT\CLSID\{CE188402-6EE7-4022-8868-AB25173A3E14}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CE188402-6EE7-4022-8868-AB25173A3E14}]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ext\settings\{CE188402-6EE7-4022-8868-AB25173A3E14}]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ext\stats\{CE188402-6EE7-4022-8868-AB25173A3E14}]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{CE188402-6EE7-4022-8868-AB25173A3E14}"=-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{CE188402-6EE7-4022-8868-AB25173A3E14}"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{CE188402-6EE7-4022-8868-AB25173A3E14}"=-
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{CE188402-6EE7-4022-8868-AB25173A3E14}"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{CE188402-6EE7-4022-8868-AB25173A3E14}"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{CE188402-6EE7-4022-8868-AB25173A3E14}"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
"{CE188402-6EE7-4022-8868-AB25173A3E14}"=-
[-HKEY_CLASSES_ROOT\CLSID\{F4E04583-354E-4076-BE7D-ED6A80FD66DA}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4E04583-354E-4076-BE7D-ED6A80FD66DA}]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ext\settings\{F4E04583-354E-4076-BE7D-ED6A80FD66DA}]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ext\stats\{F4E04583-354E-4076-BE7D-ED6A80FD66DA}]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{F4E04583-354E-4076-BE7D-ED6A80FD66DA}"=-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{F4E04583-354E-4076-BE7D-ED6A80FD66DA}"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{F4E04583-354E-4076-BE7D-ED6A80FD66DA}"=-
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{F4E04583-354E-4076-BE7D-ED6A80FD66DA}"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{F4E04583-354E-4076-BE7D-ED6A80FD66DA}"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{F4E04583-354E-4076-BE7D-ED6A80FD66DA}"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
"{F4E04583-354E-4076-BE7D-ED6A80FD66DA}"=-
[-HKEY_CURRENT_USER\Software\Conduit]
[-HKEY_CURRENT_USER\Software\conduitEngine]
[-HKEY_CURRENT_USER\Software\WAIT CORN POLL]
[-HKEY_LOCAL_MACHINE\Software\AskToolbar]
[-HKEY_LOCAL_MACHINE\Software\Conduit]
[-HKEY_LOCAL_MACHINE\Software\conduitEngine]
[-HKEY_LOCAL_MACHINE\Software\ImInstaller]
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"1900:UDP"=-
"2869:TCP"=-
"139:TCP"=-
"445:TCP"=-
"137:UDP"=-
"138:UDP"=-

file::
C:\WINDOWS\sysupd.exe
C:\WINDOWS\System32\nvms.dll
C:\WINDOWS\System32\mscb.dll

folder::
C:\WINDOWS\mslagent
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\GAIN Publishing
C:\Documents and Settings\Domdom\Local Settings\Application Data\Conduit
C:\Documents and Settings\Domdom\Local Settings\Application Data\conduitEngine
C:\Program Files\NewDotNet(2)

list::
C:\Program Files\Fichiers communs\patpbtft

attrib::
___________________________________________________

copie-le (ctrl+c ou clique droit sur la selection puis => copier)

puis onglet fichier => enregistrer (pas enregistrer sous...) , puis ferme le texte

des fenetres noires risquent de clignoter , c'est normal , c'est le programme qui travaille

poste Pre_Script.txt qui apparaitra sur le bureau en fin de travail

si ton bureau ne reapparait pas => ctrl+alt+supp , gestionnaire des taches => onglet fichier => nouvelle tache puis tape explorer
¤¤¤¤¤¤¤¤¤¤_g3n-h@ckm@n_developpement_¤¤¤¤¤¤¤¤¤¤
¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤_Pre_scan_¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤