TR/CryptXDR.Gen

mikkal -  
 mikkal -
Bonjour,

Avira detecte un virus TR/CryptXDR.Gen qui meme en quarantaine revient.Comment faire pour m'en débarrasser vraiment?

Merci

5 réponses

  1. Utilisateur anonyme
     
    Bonjour

    On va faire une analyse de ton systéme.

    * Télécharge ZHPDiag ( de Nicolas coolman ).
    ou
    ZHPDiag
    ou
    https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

    Ou le lien FTP en secours :
    ftp://zebulon.fr/ZHPDiag2.exe

    ***********************
    /!\Utilisateurs de Vista et Windows 7 : Clique droit sur le logo de ZHPDiag.exe, " exécuter en tant qu'Administrateur /!\
    * Laisse toi guider lors de l'installation
    * Il se lancera automatiquement à la fin de l'installation
    * Clique sur l'icône représentant une loupe (« Lancer le diagnostic »)
    * Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette
    * Héberge le rapport ZHPDiag.txt sur le site pjjoint.malekal.com ou cijoint.fr ou toofiles puis copie/colle le lien fournit dans ta prochaine réponse sur le forum
    0
    1. mikkal Messages postés 19 Date d'inscription   Statut Membre Dernière intervention  
       
      Bonjour,

      Voilà le résultat zhpdiag

      merci


      Rapport de ZHPDiag v1.28.1353 par Nicolas Coolman, Update du 24/09/2011

      Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html


      ---\\ Web Browser
      MSIE: Internet Explorer v6.0.2900.5512
      MFIE: Mozilla Firefox 6.0.2 v6.0.2
      GCIE: Google Chrome v14.0.835.186 (Defaut)

      ---\\ Windows Product Information
      Windows XP Home Edition Service Pack 3 (Build 2600)
      Windows Automatic Updates : OK
      Windows Genuine Advantage : KO

      ---\\ System Information
      ~ Processor: x86 Family 15 Model 75 Stepping 2, AuthenticAMD
      ~ Operating System: 32 Bits
      Boot mode: Normal (Normal boot)
      Total RAM: 2047 MB (75% free)
      System Restore: Activé (Enable)
      System drive H: has 379 GB (81%) free of 466 GB

      ---\\ Logged in mode
      ~ Computer Name: MARTINE
      ~ User Name: globet
      ~ All Users Names: UpdatusUser, SUPPORT_388945a0, HelpAssistant, globet, Administrateur,
      ~ Unselected Option: O45,O61,O62,O65,O66,O82
      Logged in as Administrator

      ---\\ Environnement Variables
      ~ System Unit : H:\
      ~ %AppData% : H:\Documents and Settings\globet\Application Data\
      ~ %Desktop% : H:\Documents and Settings\globet\Bureau\
      ~ %Favorites% : H:\Documents and Settings\globet\Favoris\
      ~ %LocalAppData% : H:\Documents and Settings\globet\Local Settings\Application Data\
      ~ %StartMenu% : H:\Documents and Settings\globet\Menu Démarrer\
      ~ %Windir% : H:\WINDOWS\
      ~ %System% : H:\WINDOWS\system32\

      ---\\ DOS/Devices
      A:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
      C:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
      D:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
      E:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
      F:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
      G:\ CD-ROM drive (Not Inserted)
      H:\ Hard drive, Flash drive, Thumb drive (Free 379 Go of 466 Go)
      I:\ CD-ROM drive (Not Inserted)



      ---\\ Security Center & Tools Informations
      [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
      [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
      [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
      [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
      [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
      [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
      [HKLM\SYSTEM\CurrentControlSet\Services] wscsvc : OK
      ~ Scan Security Center in 00mn 00s



      ---\\ Recherche particulière de fichiers génériques
      [MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.25/09/2011 - 13:00:00.) -- H:\WINDOWS\Explorer.exe [1037824]
      [MD5.93AD0B78C7357A05F50E594EC7C22300] - (....) (.25/09/2011 - 13:00:00.) -- H:\WINDOWS\system32\rundll32.exe [33792]
      [MD5.C53F33C81D4070E9E7BAFC57FB356AF8] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.25/09/2011 - 14:51:59.) -- H:\WINDOWS\system32\wininet.dll [671232]
      [MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.25/09/2011 - 13:00:00.) -- H:\WINDOWS\system32\Winlogon.exe [512000]
      [MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.25/09/2011 - 13:00:00.) -- H:\WINDOWS\system32\drivers\atapi.sys [96512]
      [MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.25/09/2011 - 13:00:00.) -- H:\WINDOWS\system32\drivers\ntfs.sys [574976]
      ~ Scan Generic Processes in 00mn 00s



      ---\\ Etat des fichiers cachés (Caché/Total)
      ~ Mes images (My Pictures) : 67/3044
      ~ Mes musiques (My Musics) : 1/3
      ~ Mes Favoris (My Favorites) : 2/11
      ~ Mes Documents (My Documents) : 70/3084
      ~ Mon Bureau (My Desktop) : 2/531
      ~ Menu demarrer (Programs) : 6/28
      ~ Scan Hidden Files in 00mn 03s



      ---\\ Processus lancés
      [MD5.B81F8778F5BB485F3B75114F0C99A49F] - (.Apache Software Foundation - Apache HTTP Server.) -- H:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe [20543] [PID.]
      [MD5.4D31603AAC4BBA1951D6F100F71FEE5C] - (...) -- H:\Program Files\Hotspot Shield\bin\openvpnas.exe [271408] [PID.]
      [MD5.882B18A2E79B3A99C0637F3AC9B28D03] - (.AnchorFree Inc. - Pas de description.) -- H:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe [352304] [PID.]
      [MD5.A6D83894395D9A18F3CE65EDAF614271] - (.NVIDIA Corporation - nSvcLog.) -- H:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe [65605] [PID.]
      [MD5.32F7DEC3729B3BAE66EEBCAB7B03B18F] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 275.3.) -- H:\WINDOWS\system32\nvsvc32.exe [154728] [PID.]
      [MD5.C5A88770B321C956109AA08EE0440B2A] - (...) -- H:\Documents and Settings\All Users\Telechargement\Pc share manager\WiselinkPro.exe [3007488] [PID.]
      [MD5.F8BB9796539F8457E0D51818B7360AFF] - (.NVIDIA Corporation - ActiveArmor Firewall IP Service.) -- H:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe [135233] [PID.]
      [MD5.436DD39EFF399DF808339E70CDEE5CD5] - (...) -- H:\Documents and Settings\All Users\Telechargement\Pc share manager\http_ss_win_pro.exe [409727] [PID.]
      [MD5.D9A546F736F9C4C2C95D8D686E195010] - (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- H:\WINDOWS\RTHDCPL.EXE [16858112] [PID.2628]
      [MD5.3CE3A83B39F83B03CF6B722C32F40DB6] - (.Labtec Inc, - Communications Manager.) -- H:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe [488984] [PID.2752]
      [MD5.93AD0B78C7357A05F50E594EC7C22300] - (...) -- H:\WINDOWS\system32\RunDLL32.exe [33792] [PID.2784]
      [MD5.5D0BBA0E09AC15882A106E6CB6CA4A34] - (...) -- H:\Program Files\Hotspot Shield\bin\openvpntray.exe [108080] [PID.2564]
      [MD5.EC23FDF23952A1942E2578AE8649B31A] - (.Google Inc. - Google Chrome.) -- H:\Documents and Settings\globet\Local Settings\Application Data\Google\Chrome\Application\chrome.exe [1030200] [PID.3804]
      [MD5.C63EF5F83405B1F0C4E2AC2345272EB7] - (.Nicolas Coolman - Nettoyeur de rapport ZHPDiag.) -- H:\Program Files\ZHPDiag\ZHPFix.exe [1428480] [PID.3412]
      [MD5.30FFBC8CB80938E19B73022FCB5EFB2A] - (.Nicolas Coolman - Diagnostic Tool.) -- H:\Program Files\ZHPDiag\ZHPDiag.exe [2122240] [PID.2612]
      [MD5.2CC4E45B0EB4C48392CEC9C83B5B8E3B] - (.NVIDIA Corporation - NVIDIA Settings Update Manager.) -- H:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2214504] [PID.]
      [MD5.5E9A6658A2A69AE7EB195113B7A2E7A9] - (.Microsoft Corporation - Application Layer Gateway Service.) -- H:\WINDOWS\System32\alg.exe [44544] [PID.]
      ~ Scan Processes Running in 00mn 00s



      ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
      H:\Documents and Settings\globet\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences
      G1 - GCS: Preference [User Data\Default] None
      G0 - GCSP: Preference [User Data\Default][HomePage] https://www.google.fr/?gws_rd=ssl
      G2 - GCE: Preference [User Data\Default] [lbmidibnfmdgolpkfjmhfoabmceobhmk] TwonkyBeam v.1.3 (Désactivé)
      G2 - GCE: Preference [User Data\Default] [lifbcibllhkdhoafpjfnlhfpfgnpldfl] Skype Extension v.5.5.0.7280 (Activé)
      ~ Scan Google Browser in 00mn 00s



      ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
      H:\Documents and Settings\globet\Application Data\Mozilla\Firefox\Profiles\a28qh3zn.default\prefs.js
      H:\Documents and Settings\globet\Application Data\Mozilla\Firefox\Profiles\a28qh3zn.default\user.js (.not file.)
      M3 - MFPP: Plugins - [globet] -- H:\Documents and Settings\globet\Application Data\Mozilla\Firefox\Profiles\a28qh3zn.default\searchplugins\bing.xml
      M3 - MFPP: Plugins - [globet] -- H:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
      M3 - MFPP: Plugins - [globet] -- H:\Program Files\Mozilla FireFox\searchplugins\bing.xml
      M3 - MFPP: Plugins - [globet] -- H:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
      M3 - MFPP: Plugins - [globet] -- H:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
      M3 - MFPP: Plugins - [globet] -- H:\Program Files\Mozilla FireFox\searchplugins\fcmdSrchddr.xml
      M3 - MFPP: Plugins - [globet] -- H:\Program Files\Mozilla FireFox\searchplugins\google.xml
      M3 - MFPP: Plugins - [globet] -- H:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
      M3 - MFPP: Plugins - [globet] -- H:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
      M0 - MFSP: prefs.js [globet - a28qh3zn.default] https://www.google.fr/?gws_rd=ssl
      M2 - MFEP: prefs.js [globet - a28qh3zn.default\TwonkyBeamSidebar@pv.com] [] TwonkyBeam v1.3 (.PacketVideo.)
      M2 - MFEP: prefs.js [globet - a28qh3zn.default\vlcplaylist@helgatauscher.de] [] Vlc context menu v0.7.2 (.Helga Tauscher.)
      M2 - MFEP: prefs.js [globet - a28qh3zn.default\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}] [dwhelper] DownloadHelper v4.9.5 (.Michel Gutierrez.)
      P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - np-mswmp.) -- H:\Program Files\Mozilla Firefox\Plugins\np-mswmp.dll
      P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- H:\Program Files\Mozilla Firefox\Plugins\npdeployJava1.dll
      P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - Office Plugin for Netscape Navigator.) -- H:\Program Files\Mozilla Firefox\Plugins\NPOFF12.DLL
      P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.1.) -- H:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll
      P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- H:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
      P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- H:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
      P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_25 for Mozilla browsers.) -- H:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
      P2 - FPN: [HKLM] [@ma-config.com/HardwareDetection] - (.Cybelsoft - Plugin NPAPI Ma-Config.com.) -- H:\Documents and Settings\All Users\Telechargement\MaConfig\nphardwaredetection.dll
      P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- h:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
      P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- H:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll
      P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- H:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll
      P2 - FPN: [HKLM] [@videolan.org/vlc,version=1.1.7] - (.the VideoLAN Team - Version 1.1.7, copyright 1996-2011 The VideoLAN Team<br><a href="http:.) -- H:\Documents and Settings\All Users\Telechargement\Vlc\npvlc.dll
      P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.1.) -- H:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
      P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- H:\Documents and Settings\globet\Local Settings\Application Data\Google\Update\1.3.21.69\npGoogleUpdate3.dll
      P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- H:\Documents and Settings\globet\Local Settings\Application Data\Google\Update\1.3.21.69\npGoogleUpdate3.dll
      ~ Scan Firefox Browser in 00mn 00s



      ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.microsoft.com/fr-fr/
      R0 - HKUS\S-1-5-21-527237240-1645522239-1801674531-1005-527237240-1645522239-1801674531-1004\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://start.facemoods.com
      R1 - HKUS\S-1-5-21-527237240-1645522239-1801674531-1005-527237240-1645522239-1801674531-1004\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
      R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Bibliothèque d'objets et de contrôles de do.) (No version) -- %SystemRoot%\system32\shdocvw.dll
      ~ Scan IE Browser in 00mn 00s



      ---\\ Internet Explorer, Proxy Management (R5)
      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
      ~ Scan Proxy management in 00mn 00s



      ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
      F2 - REG:system.ini: UserInit=H:\WINDOWS\system32\userinit.exe,
      F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
      ~ Scan Keys in 00mn 00s



      ---\\ Redirection du fichier Hosts (O1)
      ~ Le fichier hosts est sain (The hosts file is clean).
      ~ Scan Hosts File in 00mn 00s



      ---\\ Browser Helper Objects de navigateur (O2)
      O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- H:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
      O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- H:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Skype Technologies S.A. - Skype add-on for IE.) -- H:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
      O2 - BHO: NTIECatcher Class - {C56CB6B0-0D96-11D6-8C65-B2868B609932} . (.Xi - Net Transport IE Helper Module.) -- H:\Documents and Settings\All Users\Telechargement\Net transport\NetTransport 2\NTIEHelper.dll
      O2 - BHO: TwonkyBeam - {D6E0063B-7B09-45C9-A51D-1FB51840EBE0} Clé orpheline
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- H:\Program Files\Java\jre6\bin\jp2ssv.dll
      O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java(TM) Quick Starter binary.) -- H:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
      O2 - BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} . (.AnchorFree Inc. - Pas de description.) -- H:\Program Files\Hotspot Shield\HssIE\HssIE.dll
      ~ Scan BHO in 00mn 00s



      ---\\ Applications démarrées par registre & par dossier (O4)
      O4 - HKLM\..\Run: [RTHDCPL] . (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- H:\WINDOWS\RTHDCPL.exe
      O4 - HKLM\..\Run: [Alcmtr] . (.Realtek Semiconductor Corp. - Realtek Azalia Audio - Event Monitor.) -- H:\WINDOWS\ALCMTR.exe
      O4 - HKLM\..\Run: [LogitechCommunicationsManager] . (.Labtec Inc, - Communications Manager.) -- H:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
      O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- H:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe
      O4 - HKLM\..\Run: [NvMediaCenter] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- H:\WINDOWS\system32\NvMCTray.dll
      O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- H:\WINDOWS\system32\NvCpl.dll
      O4 - HKLM\..\Run: [nwiz] . (...) -- H:\Program Files\NVIDIA Corporation\nView\nwiz.exe
      O4 - HKCU\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- H:\WINDOWS\system32\ctfmon.exe
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- H:\WINDOWS\system32\CTFMON.exe
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- H:\WINDOWS\system32\CTFMON.exe
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- H:\WINDOWS\system32\CTFMON.exe
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- H:\WINDOWS\system32\CTFMON.exe
      O4 - HKUS\S-1-5-21-527237240-1645522239-1801674531-1005-527237240-1645522239-1801674531-1004\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- H:\WINDOWS\system32\ctfmon.exe
      ~ Scan Application in 00mn 00s



      ---\\ Autres liens utilisateurs (O4)
      O4 - Global Startup: H:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader X.lnk . (...) -- H:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-AA1000000001}\SC_Reader.ico
      O4 - Global Startup: H:\Documents And Settings\All Users\Menu Démarrer\Programmes\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- H:\Program Files\Mozilla Firefox\firefox.exe
      O4 - Global Startup: H:\Documents And Settings\All Users\Menu Démarrer\Programmes\MSN.lnk . (.Microsoft Corporation.) -- H:\Program Files\MSN\MSNCoreFiles\Install\msnsusii.exe
      O4 - Global Startup: H:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk . (.Microsoft Corporation.) -- H:\Program Files\Messenger\msmsgs.exe
      O4 - Global Startup: H:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.) -- H:\Program Files\Movie Maker\moviemk.exe
      O4 - Global Startup: H:\Documents And Settings\globet\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- H:\WINDOWS\system32\rcimlby.exe
      O4 - Global Startup: H:\Documents And Settings\globet\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- H:\Program Files\Internet Explorer\iexplore.exe
      O4 - Global Startup: H:\Documents And Settings\globet\Menu Démarrer\Programmes\Lecteur Windows Media.lnk . (.Microsoft Corporation.) -- H:\Program Files\Windows Media Player\wmplayer.exe
      O4 - Global Startup: H:\Documents And Settings\globet\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- H:\Program Files\Outlook Express\msimn.exe
      ~ Scan Global Startup in 00mn 00s



      ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
      O8 - Extra context menu item: &Télécharger avec NetTransport . (...) -- H:\Documents and Settings\All Users\Telechargement\Net transport\NetTransport 2\NTAddLink.html
      O8 - Extra context menu item: Add to Playlist - (.not file.) - H:\Program Files\PacketVideo\TwonkyBeam\Internet Explorer\TwonkyIEPlugin.dll
      O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- H:\PROGRA~1\MICROS~3\Office12\EXCEL.exe
      O8 - Extra context menu item: Tout t&élécharger avec NetTransport . (...) -- H:\Documents and Settings\All Users\Telechargement\Net transport\NetTransport 2\NTAddList.html
      ~ Scan IE Menu Contextuel in 00mn 00s



      ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
      O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- H:\Program Files\Skype\Toolbars\Internet Explorer\icon.ico
      O9 - Extra button: Skype Plug-In - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- H:\PROGRA~1\MICROS~3\Office12\REFBARH.ICO
      O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (...) -- H:\PROGRA~1\MICROS~3\Office12\REFBARH.ICO
      O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- H:\Program Files\Messenger\msmsgs.exe
      ~ Scan IE Extra Buttons in 00mn 00s



      ---\\ Winsock hijacker (Layered Service Provider) (O10)
      O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- H:\WINDOWS\system32\mswsock.dll
      O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- H:\WINDOWS\system32\winrnr.dll
      O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- H:\WINDOWS\system32\mswsock.dll
      ~ Scan Winsock in 00mn 00s



      ---\\ Objets ActiveX (Downloaded Program Files)(O16)
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
      O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1296999964875
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
      ~ Scan Objets ActiveX in 00mn 00s



      ---\\ Modification Domaine/Adresses DNS (O17)
      O17 - HKLM\System\CCS\Services\Tcpip\..\{9E77F0FB-FB89-48B0-85E7-D48D6B471579}: DhcpNameServer = 212.27.40.241 212.27.40.240
      O17 - HKLM\System\CS1\Services\Tcpip\..\{9E77F0FB-FB89-48B0-85E7-D48D6B471579}: DhcpNameServer = 212.27.40.241 212.27.40.240
      ~ Scan Domain in 00mn 00s



      ---\\ Protocole additionnel (O18)
      O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- H:\WINDOWS\system32\mshtml.dll
      O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- H:\WINDOWS\system32\urlmon.dll
      O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- H:\WINDOWS\system32\msvidctl.dll
      O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- H:\WINDOWS\system32\urlmon.dll
      O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- H:\WINDOWS\system32\urlmon.dll
      O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- H:\WINDOWS\system32\urlmon.dll
      O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- H:\WINDOWS\system32\urlmon.dll
      O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- H:\WINDOWS\system32\urlmon.dll
      O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- H:\WINDOWS\system32\itss.dll
      O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- H:\WINDOWS\system32\mshtml.dll
      O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- H:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
      O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- H:\WINDOWS\system32\urlmon.dll
      O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- H:\WINDOWS\system32\mshtml.dll
      O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- H:\WINDOWS\system32\inetcomm.dll
      O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- H:\WINDOWS\system32\urlmon.dll
      O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- H:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
      O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- H:\WINDOWS\system32\itss.dll
      O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- H:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
      O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- H:\WINDOWS\system32\mshtml.dll
      O18 - Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} . (.Skype Technologies S.A. - Skype add-on for IE.) -- H:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
      O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- H:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
      O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- H:\WINDOWS\system32\mshtml.dll
      O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- H:\WINDOWS\system32\msvidctl.dll
      O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- H:\WINDOWS\system32\mshtml.dll
      O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- H:\WINDOWS\system32\wiascr.dll
      O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- H:\WINDOWS\system32\mscoree.dll
      O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- H:\WINDOWS\system32\mscoree.dll
      O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- H:\WINDOWS\system32\mscoree.dll
      O18 - Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- H:\WINDOWS\system32\urlmon.dll
      O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- H:\WINDOWS\system32\urlmon.dll
      O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- H:\WINDOWS\system32\urlmon.dll
      O18 - Filter: lzdhtml - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- H:\WINDOWS\system32\urlmon.dll
      O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- H:\WINDOWS\system32\SHELL32.dll
      O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- H:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
      ~ Scan Protocole Additionnel in 00mn 00s



      ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
      O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- H:\WINDOWS\system32\crypt32.dll
      O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- H:\WINDOWS\system32\cryptnet.dll
      O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- H:\WINDOWS\system32\cscdll.dll
      O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- H:\WINDOWS\System32\dimsntfy.dll
      O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- H:\WINDOWS\system32\wlnotify.dll
      O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- H:\WINDOWS\system32\wlnotify.dll
      O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- H:\WINDOWS\system32\sclgntfy.dll
      O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- H:\WINDOWS\system32\WlNotify.dll
      O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- H:\WINDOWS\system32\wlnotify.dll
      O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- H:\WINDOWS\system32\wlnotify.dll
      ~ Scan Winlogon in 00mn 00s



      ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
      O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- H:\WINDOWS\system32\SHELL32.dll
      O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- H:\WINDOWS\system32\SHELL32.dll
      O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- H:\WINDOWS\system32\webcheck.dll
      O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- H:\WINDOWS\system32\stobject.dll
      O21 - SSODL: UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} . (.Microsoft Corporation - Moniteur et dossier UPNP Tray.) -- H:\WINDOWS\system32\upnpui.dll
      ~ Scan SSODL in 00mn 00s



      ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
      O22 - SharedTaskScheduler: (no name) - {438755C2-A8BA-11D1-B96B-00A0C90312E1} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- H:\WINDOWS\system32\browseui.dll
      O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- H:\WINDOWS\system32\browseui.dll
      ~ Scan STS/SSO in 00mn 00s



      ---\\ Liste des services NT non Microsoft et non désactivés (O23)
      O23 - Service: Forceware Web Interface (ForcewareWebInterface) . (.Apache Software Foundation - Apache HTTP Server.) - H:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
      O23 - Service: Hotspot Shield Service (HotspotShieldService) . (...) - H:\Program Files\Hotspot Shield\bin\openvpnas.exe
      O23 - Service: Hotspot Shield Routing Service (HssSrv) . (.AnchorFree Inc. - Pas de description.) - H:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe
      O23 - Service: ForceWare IP service (nSvcIp) . (.NVIDIA Corporation - ActiveArmor Firewall IP Service.) - H:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
      O23 - Service: ForceWare user log service (nSvcLog) . (.NVIDIA Corporation - nSvcLog.) - H:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
      O23 - Service: NVIDIA Driver Helper Service (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 275.3.) - H:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) . (.NVIDIA Corporation - NVIDIA Settings Update Manager.) - H:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
      O23 - Service: SAMSUNG WiseLinkPro Service (WiselinkPro) . (...) - H:\Documents and Settings\All Users\Telechargement\Pc share manager\WiselinkPro.exe
      ~ Scan Services in 00mn 00s



      ---\\ Enumération Active Desktop & MHTML Editor (O24)
      O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - H:\Program Files\Microsoft Office\Office12\WINWORD.exe
      ~ Scan Desktop Component in 00mn 00s



      ---\\ Tâches planifiées en automatique (O39)
      O39 - APT:Automatic Planified Task - H:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
      O39 - APT:Automatic Planified Task - H:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
      O39 - APT:Automatic Planified Task - H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-527237240-1645522239-1801674531-1004Core.job
      O39 - APT:Automatic Planified Task - H:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-527237240-1645522239-1801674531-1004UA.job
      ~ Scan Scheduled Task in 00mn 00s



      ---\\ Pilotes lancés au démarrage (O41)
      O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - H:\WINDOWS\system32\drivers\afd.sys
      O41 - Driver: (AmdK8) . (.Advanced Micro Devices - AMD Processor Driver.) - H:\WINDOWS\system32\DRIVERS\AmdK8.sys
      O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - H:\WINDOWS\system32\DRIVERS\cdrom.sys
      O41 - Driver: (dtsoftbus01) . (.DT Soft Ltd - DAEMON Tools Virtual Bus Driver.) - H:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys
      O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - H:\WINDOWS\system32\DRIVERS\i8042prt.sys
      O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - H:\WINDOWS\system32\DRIVERS\imapi.sys
      O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - H:\WINDOWS\system32\DRIVERS\ipsec.sys
      O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - H:\WINDOWS\system32\DRIVERS\kbdclass.sys
      O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre souris HID.) - H:\WINDOWS\system32\DRIVERS\kbdhid.sys
      O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - H:\WINDOWS\system32\DRIVERS\mouclass.sys
      O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - H:\WINDOWS\system32\DRIVERS\mrxsmb.sys
      O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - H:\WINDOWS\system32\DRIVERS\netbios.sys
      O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - H:\WINDOWS\system32\DRIVERS\netbt.sys
      O41 - Driver: (Processor) . (.Microsoft Corporation - Pilote de périphérique processeur.) - H:\WINDOWS\system32\DRIVERS\processr.sys
      O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - H:\WINDOWS\system32\DRIVERS\rasacd.sys
      O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - H:\WINDOWS\system32\DRIVERS\rdbss.sys
      O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - H:\WINDOWS\system32\DRIVERS\RDPCDD.sys
      O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - H:\WINDOWS\system32\DRIVERS\redbook.sys
      O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - H:\WINDOWS\system32\DRIVERS\serial.sys
      O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - H:\WINDOWS\system32\DRIVERS\tcpip.sys
      O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - H:\WINDOWS\system32\DRIVERS\termdd.sys
      O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - H:\WINDOWS\system32\drivers\vga.sys
      O41 - Driver: (avgio) . (. - .) - H:\Program Files\Avira\AntiVir Desktop\avgio.sys (.not file.)
      O41 - Driver: (avipbb) . (. - .) - H:\WINDOWS\system32\DRIVERS\avipbb.sys (.not file.)
      O41 - Driver: (ssmdrv) . (. - .) - H:\WINDOWS\system32\DRIVERS\ssmdrv.sys (.not file.)
      ~ Scan Drivers in 00mn 00s



      ---\\ Logiciels installés (O42)
      O42 - Logiciel: AMD Processor Driver - (.AMD.) [HKLM] -- {C151CE54-E7EA-4804-854B-F515368B0798}
      O42 - Logiciel: Adobe Acrobat 4.0 - (.Pas de propriétaire.) [HKLM] -- Adobe Acrobat 4.0
      O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
      O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
      O42 - Logiciel: Adobe Reader X (10.1.1) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA1000000001}
      O42 - Logiciel: Architecte 3D Ultimate - (.Avanquest software.) [HKLM] -- {A552CCF8-51D3-49D9-AD30-A939626F2299}
      O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
      O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
      O42 - Logiciel: DAEMON Tools Lite - (.DT Soft Ltd.) [HKLM] -- DAEMON Tools Lite
      O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU] -- Google Chrome
      O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
      O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {B3FED300-806C-11E0-A0D0-B8AC6F97B88E}
      O42 - Logiciel: High-Definition Video Playback 10 - (.Nero AG.) [HKLM] -- {237CCB62-8454-43E3-B158-3ACD0134852E}
      O42 - Logiciel: HomePlayer 1.5.9d - (.HomePlayer.) [HKLM] -- HomePlayer
      O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
      O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
      O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB960043) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB960043
      O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5
      O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5
      O42 - Logiciel: Hotspot Shield 1.57 - (.AnchorFree.) [HKLM] -- HotspotShield
      O42 - Logiciel: IZArc 4.1.2 - (.Ivan Zahariev.) [HKLM] -- {97C82B44-D408-4F14-9252-47FC1636D23E}_is1
      O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3
      O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {133742BA-6F46-4D3E-85AF-78631D9AD8B8}
      O42 - Logiciel: JDownloader - (.AppWork UG (haftungsbeschränkt).) [HKLM] -- JDownloader
      O42 - Logiciel: Java(TM) 6 Update 25 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216022FF}
      O42 - Logiciel: Labtec WebCam - (.Labtec, Inc..) [HKLM] -- {995BF1A7-30E5-49E5-A0E4-AD3213D9E330}
      O42 - Logiciel: LightScribe System Software - (.LightScribe.) [HKLM] -- {82EF29B1-9B60-4142-A155-0599216DD053}
      O42 - Logiciel: Logitech Audio Echo Cancellation Component - (.Logitech Inc..) [HKLM] -- {BEF726DD-4037-4214-8C6A-E625C02D2870}
      O42 - Logiciel: Logitech Video Enumerator - (.Logitech Inc..) [HKLM] -- {EA516024-D84D-41F1-814F-83175A6188F2}
      O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
      O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
      O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
      O42 - Logiciel: MVision - (.Logitech Inc..) [HKLM] -- {35725FBC-A136-4A46-9F29-091759D9BB93}
      O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM] -- {81E95872-8357-4363-A764-8F98B28340C5}
      O42 - Logiciel: Malwarebytes' Anti-Malware version 1.51.2.1300 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
      O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
      O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
      O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
      O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
      O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
      O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}_PROPLUS_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
      O42 - Logiciel: Microsoft Office Access MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- PROPLUS
      O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}_PROPLUS_{14809F99-C601-4D4A-9391-F1E8FAA964C5}
      O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}_PROPLUS_{A0516415-ED61-419A-981D-93596DA74165}
      O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}_PROPLUS_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
      O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}_PROPLUS_{F580DDD5-8D37-4998-968E-EBB76BB86787}
      O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}_PROPLUS_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
      O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}_PROPLUS_{187308AB-5FA7-4F14-9AB9-D290383A10D9}
      O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}
      O42 - Logiciel: Microsoft Primary Interoperability Assemblies 2005 - (.Microsoft Corporation.) [HKLM] -- {D24DB8B9-BB6C-4334-9619-BA1C650E13D3}
      O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c}
      O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}
      O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
      O42 - Logiciel: Mises à jour NVIDIA 1.3.5 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update
      O42 - Logiciel: Mozilla Firefox 6.0.2 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 6.0.2 (x86 fr)
      O42 - Logiciel: NVIDIA Drivers - (.Pas de propriétaire.) [HKLM] -- NVIDIA Drivers
      O42 - Logiciel: NVIDIA ForceWare Network Access Manager - (.Nom de votre société.) [HKLM] -- InstallShield_{1F6423DE-7959-4178-80E0-023C7EAA5347}
      O42 - Logiciel: NVIDIA Pilote graphique 275.33 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver
      O42 - Logiciel: NVIDIA nView 135.85 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView
      O42 - Logiciel: NVIDIA nView Desktop Manager - (.NVIDIA Corporation.) [HKLM] -- NVIDIA nView Desktop Manager
      O42 - Logiciel: Nero 10 Menu TemplatePack Basic - (.Nero AG.) [HKLM] -- {63AA3EAB-23BB-48B2-9AD0-44F878075604}
      O42 - Logiciel: Nero 10 Movie ThemePack Basic - (.Nero AG.) [HKLM] -- {F5CB822F-B365-43D1-BCC0-4FDA1A2017A7}
      O42 - Logiciel: Nero BackItUp 10 - (.Nero AG.) [HKLM] -- {68AB6930-5BFF-4FF6-923B-516A91984FE6}
      O42 - Logiciel: Nero BackItUp 10 Help (CHM) - (.Nero AG.) [HKLM] -- {08C8666B-C502-4AB3-B4CB-D74AC42D14FE}
      O42 - Logiciel: Nero BurnRights 10 - (.Nero AG.) [HKLM] -- {943CFD7D-5336-47AF-9418-E02473A5A517}
      O42 - Logiciel: Nero BurnRights 10 Help (CHM) - (.Nero AG.) [HKLM] -- {555868C6-49FB-484F-BB43-8980651A1B00}
      O42 - Logiciel: Nero Burning ROM 10 - (.Nero AG.) [HKLM] -- {7A5D731D-B4B3-490E-B339-75685712BAAB}
      O42 - Logiciel: Nero BurningROM 10 Help (CHM) - (.Nero AG.) [HKLM] -- {9B6B24BE-80E7-46C4-9FA5-B167D5E0F345}
      O42 - Logiciel: Nero Control Center 10 - (.Nero AG.) [HKLM] -- {6DFB899F-17A2-48F0-A533-ED8D6866CF38}
      O42 - Logiciel: Nero ControlCenter 10 Help (CHM) - (.Nero AG.) [HKLM] -- {523B2B1B-D8DB-4B41-90FF-C4D799E2758A}
      O42 - Logiciel: Nero Core Components 10 - (.Nero AG.) [HKLM] -- {2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}
      O42 - Logiciel: Nero CoverDesigner 10 - (.Nero AG.) [HKLM] -- {FCF00A6E-FB58-477A-ABE9-232907105521}
      O42 - Logiciel: Nero CoverDesigner 10 Help (CHM) - (.Nero AG.) [HKLM] -- {C3273C55-E1E4-41FF-8D69-0158090DB8D8}
      O42 - Logiciel: Nero DiscSpeed 10 - (.Nero AG.) [HKLM] -- {34490F4E-48D0-492E-8249-B48BECF0537C}
      O42 - Logiciel: Nero DiscSpeed 10 Help (CHM) - (.Nero AG.) [HKLM] -- {C18A0418-442A-4186-AF98-D08F5054A2FC}
      O42 - Logiciel: Nero Dolby Files 10 - (.Nero AG.) [HKLM] -- {C3580AC4-C827-4332-B935-9A282ED5BB97}
      O42 - Logiciel: Nero Express 10 - (.Nero AG.) [HKLM] -- {70550193-1C22-445C-8FA4-564E155DB1A7}
      O42 - Logiciel: Nero Express 10 Help (CHM) - (.Nero AG.) [HKLM] -- {33643918-7957-4839-92C7-EA96CB621A98}
      O42 - Logiciel: Nero InfoTool 10 - (.Nero AG.) [HKLM] -- {F412B4AF-388C-4FF5-9B2F-33DB1C536953}
      O42 - Logiciel: Nero InfoTool 10 Help (CHM) - (.Nero AG.) [HKLM] -- {66049135-9659-4AAD-9169-9CCA269EBB3E}
      O42 - Logiciel: Nero MediaHub 10 - (.Nero AG.) [HKLM] -- {1F7FB68F-52F6-46A3-B42F-38CE46295AE5}
      O42 - Logiciel: Nero MediaHub 10 Help (CHM) - (.Nero AG.) [HKLM] -- {F467862A-D9CA-47ED-8D81-B4B3C9399272}
      O42 - Logiciel: Nero Multimedia Suite 10 - (.Nero AG.) [HKLM] -- {277C1559-4CF7-44FF-8D07-98AA9C13AABD}
      O42 - Logiciel: Nero Recode 10 - (.Nero AG.) [HKLM] -- {8ECEC853-5C3D-4B10-B5C7-FF11FF724807}
      O42 - Logiciel: Nero Recode 10 Help (CHM) - (.Nero AG.) [HKLM] -- {DB7C1D4A-08BA-4C7E-A8AA-B7F9BB372DCF}
      O42 - Logiciel: Nero RescueAgent 10 - (.Nero AG.) [HKLM] -- {E337E787-CF61-4B7B-B84F-509202A54023}
      O42 - Logiciel: Nero RescueAgent 10 Help (CHM) - (.Nero AG.) [HKLM] -- {92E25238-61A3-4ACD-A407-3C480EEF47A7}
      O42 - Logiciel: Nero SoundTrax 10 - (.Nero AG.) [HKLM] -- {E1EE5339-5D32-458F-BAAB-B19F6301BCE2}
      O42 - Logiciel: Nero SoundTrax 10 Help (CHM) - (.Nero AG.) [HKLM] -- {16987E99-C95C-4513-9239-7B44A0A71DB5}
      O42 - Logiciel: Nero StartSmart 10 - (.Nero AG.) [HKLM] -- {F61D489E-6C44-49AC-AD02-7DA8ACA73A65}
      O42 - Logiciel: Nero StartSmart 10 Help (CHM) - (.Nero AG.) [HKLM] -- {F6117F9C-ADB5-4590-9BE4-12C7BEC28702}
      O42 - Logiciel: Nero Update - (.Nero AG.) [HKLM] -- {65BB0407-4CC8-4DC7-952E-3EEFDF05602A}
      O42 - Logiciel: Nero Vision 10 - (.Nero AG.) [HKLM] -- {9A4297F3-2A51-4ED9-92CA-4BCB8380947E}
      O42 - Logiciel: Nero Vision 10 Help (CHM) - (.Nero AG.) [HKLM] -- {329411A0-19F3-4740-874F-17400B126F27}
      O42 - Logiciel: Nero WaveEditor 10 - (.Nero AG.) [HKLM] -- {EDCDFAD5-DF80-4600-A493-E9DAD6810230}
      O42 - Logiciel: Nero WaveEditor 10 Help (CHM) - (.Nero AG.) [HKLM] -- {7A295D8F-484B-4FFB-89AB-C1FD497591FE}
      O42 - Logiciel: Net Transport 1.94.282 - (.Xi.) [HKLM] -- Net Transport_is1
      O42 - Logiciel: Notification de cadeaux MSN - (.Microsoft.) [HKCU] -- Notification de cadeaux MSN
      O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}
      O42 - Logiciel: Programme de gestion Camera de Labtec® - (.Pas de propriétaire.) [HKLM] -- QcDrv
      O42 - Logiciel: QuickTime - (.Pas de propriétaire.) [HKLM] -- QuickTime
      O42 - Logiciel: RealPlayer Basic - (.Pas de propriétaire.) [HKLM] -- RealPlayer 6.0
      O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
      O42 - Logiciel: SAMSUNG PC Share Manager - (.SAMSUNG.) [HKLM] -- InstallShield_{2A2E822B-3B0E-46C1-9E3B-ACD7D1E95139}
      O42 - Logiciel: SAMSUNG PC Share Manager - (.SAMSUNG.) [HKLM] -- {2A2E822B-3B0E-46C1-9E3B-ACD7D1E95139}
      O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288621) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5C497F0B-2061-4CC9-A61C-6B45B867354D}
      O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288931) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{CD769337-C8AC-46DB-A7DC-643E50089263}
      O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2345043) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{536FB502-775F-4494-BACE-C02CC90B7A5B}
      O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2466156) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{CEF209AB-F96D-404F-B5CC-44057C057CA3}
      O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2509488) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{AD0DE453-0804-4495-9C91-33D0F9AA5463}
      O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB969559) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
      O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB976321) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{7F207DCA-3399-40CB-A968-6E5991B1421A}
      O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906
      O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
      O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473
      O42 - Logiciel: Security Update for Microsoft Office Access 2007 (KB979440) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{1142CCEC-ACA9-484B-BA90-C3A5CA1988C5}
      O42 - Logiciel: Security Update for Microsoft Office Access 2007 (KB979440) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5A4E43D5-858F-49BD-BA72-8F30E1793060}
      O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB2464583) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{151E2FEA-C3A6-4CB6-BE6B-16651FDF04BE}
      O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB979441) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{1109D0B3-EFA3-4553-AAED-4C3E9AD130E8}
      O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB979441) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{8CCB781A-CF6B-4FCB-B6D8-59C64DF5C6DB}
      O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB2535818) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{8588DD11-6BD7-4400-B55C-DD5AB74B43E1}
      O42 - Logiciel: Security Update for Microsoft Office PowerPoint Viewer 2007 (KB2464623) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{D75E6D0C-BADF-4F41-98B2-0C0F02C15062}
      O42 - Logiciel: Security Update for Microsoft Office Publisher 2007 (KB2284697) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3A4CDE54-2403-483D-8D9A-15E3264410DF}
      O42 - Logiciel: Security Update for Microsoft Office Visio Viewer 2007 (KB973709) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
      O42 - Logiciel: Security Update for Microsoft Office Word 2007 (KB2344993) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{7A5B74FA-7A92-4FC9-821A-2DD5D4E73E48}
      O42 - Logiciel: Security Update for Microsoft Office system 2007 (972581) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3D019598-7B59-447A-80AE-815B703B84FF}
      O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB974234) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{FCD742B9-7A55-44BC-A776-F795F21FEDDC}
      O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
      O42 - Logiciel: Skype Toolbars - (.Skype Technologies S.A..) [HKLM] -- {B6CF2967-C81E-40C0-9815-C05774FEF120}
      O42 - Logiciel: Skype(TM) 5.3 - (.Skype Technologies S.A..) [HKLM] -- {5335DADB-34BA-4AE8-A519-648D78498846}
      O42 - Logiciel: TwonkyBeam for Chrome - (.Pas de propriétaire.) [HKLM] -- TwonkyBeam for Chrome
      O42 - Logiciel: TwonkyBeam for Firefox - (.Pas de propriétaire.) [HKLM] -- TwonkyBeam for Firefox
      O42 - Logiciel: TwonkyMedia - (.PacketVideo.) [HKLM] -- TwonkyMediaTwonkyMedia
      O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}
      O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
      O42 - Logiciel: Update for Microsoft Office Outlook 2007 (KB2509470) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{1365864D-4C58-489D-9982-844D75691CCC}
      O42 - Logiciel: Update for Outlook 2007 Junk Email Filter (KB2536413) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{95DF5260-331D-4FFD-A2D5-C64164751945}
      O42 - Logiciel: VLC media player 1.1.7 - (.VideoLAN.) [HKLM] -- VLC media player
      O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130) - (.Microsoft Corporation.) [HKLM] -- KB892130
      O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {B3B487E7-6171-4376-9074-B28082CEB504}
      O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3175E049-F9A9-4A3D-8F19-AC9FB04514D1}
      O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {445B183D-F4F1-45C8-B9DB-F11355CA657B}
      O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}

      ---\\ HKCU & HKLM Software Keys
      [HKCU\Software\ASUS]
      [HKCU\Software\Adobe]
      [HKCU\Software\Ask.com.tmp]
      [HKCU\Software\Avanquest]
      [HKCU\Software\BitDefender]
      [HKCU\Software\Classes]
      [HKCU\Software\Clients]
      [HKCU\Software\DT Soft]
      [HKCU\Software\EasyBits]
      [HKCU\Software\Google]
      [HKCU\Software\HookNetwork]
      [HKCU\Software\HotspotShield]
      [HKCU\Software\IM Providers]
      [HKCU\Software\IZSoftware]
      [HKCU\Software\Intel]
      [HKCU\Software\JavaSoft]
      [HKCU\Software\Labtec]
      [HKCU\Software\LightScribe]
      [HKCU\Software\Logitech]
      [HKCU\Software\Macromedia]
      [HKCU\Software\Malwarebytes' Anti-Malware]
      [HKCU\Software\MozillaPlugins]
      [HKCU\Software\Mozilla]
      [HKCU\Software\NVIDIA Corporation]
      [HKCU\Software\Nero]
      [HKCU\Software\Netscape]
      [HKCU\Software\ODBC]
      [HKCU\Software\PacketVideo]
      [HKCU\Software\Piriform]
      [HKCU\Software\Policies]
      [HKCU\Software\Realtek]
      [HKCU\Software\Skype]
      [HKCU\Software\TUG]
      [HKCU\Software\Trolltech]
      [HKCU\Software\Ulead Systems]
      [HKCU\Software\Xi]
      [HKCU\Software\YahooPartnerToolbar]
      [HKCU\Software\cacaoweb]
      [HKCU\Software\cybelsoft]
      [HKLM\Software\AMD]
      [HKLM\Software\ASUS]
      [HKLM\Software\Adobe]
      [HKLM\Software\Ahead]
      [HKLM\Software\America Online]
      [HKLM\Software\Apple Computer, Inc.]
      [HKLM\Software\Avanquest]
      [HKLM\Software\BrowserChoice]
      [HKLM\Software\C07ft5Y]
      [HKLM\Software\Classes]
      [HKLM\Software\Clients]
      [HKLM\Software\DT Soft]
      [HKLM\Software\Gemplus]
      [HKLM\Software\Google]
      [HKLM\Software\InstallShield]
      [HKLM\Software\Intel]
      [HKLM\Software\JavaSoft]
      [HKLM\Software\JreMetrics]
      [HKLM\Software\Khronos]
      [HKLM\Software\LightScribe]
      [HKLM\Software\Logitech]
      [HKLM\Software\Macromedia]
      [HKLM\Software\Malwarebytes' Anti-Malware]
      [HKLM\Software\MozillaPlugins]
      [HKLM\Software\Mozilla]
      [HKLM\Software\NVIDIA Corporation]
      [HKLM\Software\Nero]
      [HKLM\Software\ODBC]
      [HKLM\Software\Piriform]
      [HKLM\Software\Policies]
      [HKLM\Software\Program Groups]
      [HKLM\Software\Realtek Semiconductor Corp.]
      [HKLM\Software\Realtek]
      [HKLM\Software\RegisteredApplications]
      [HKLM\Software\Schlumberger]
      [HKLM\Software\Secure]
      [HKLM\Software\Skype]
      [HKLM\Software\TrendMicro]
      [HKLM\Software\TwonkyBeam(TM)]
      [HKLM\Software\TwonkyMedia]
      [HKLM\Software\Ulead Systems]
      [HKLM\Software\VideoLAN]
      [HKLM\Software\Windows 3.1 Migration Status]
      [HKLM\Software\Windows]
      [HKLM\Software\Xi]
      [HKLM\Software\ZSMC]
      [HKLM\Software\cybelsoft]
      [HKLM\Software\mozilla.org]
      ~ Scan Softwares in 00mn 00s



      ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
      O43 - CFD: 17/06/2011 - 17:42:14 - [172095663] ----D- H:\Program Files\Adobe
      O43 - CFD: 06/02/2011 - 15:39:48 - [3142953] ----D- H:\Program Files\AMD
      O43 - CFD: 28/07/2011 - 18:33:16 - [6980224216] ----D- H:\Program Files\Avanquest
      O43 - CFD: 06/02/2011 - 18:11:14 - [3736664] ----D- H:\Program Files\Avira
      O43 - CFD: 06/02/2011 - 20:10:10 - [3583520] ----D- H:\Program Files\CCleaner
      O43 - CFD: 06/02/2011 - 14:56:30 - [0] ----D- H:\Program Files\ComPlus Applications
      O43 - CFD:
      0
  2. Utilisateur anonyme
     
    Tu n'as pas suivis mes recommandations.

    * Héberge le rapport ZHPDiag.txt sur le site pjjoint.malekal.com ou cijoint.fr ou toofiles puis copie/colle le lien fournit dans ta prochaine réponse sur le forum
    0
  3. Utilisateur anonyme
     
    Bonjour

    1/

    * Télécharge AdwCleaner sur ton Bureau. (Merci à Xplode)

    *Double-clique sur l'icône AdwCleaner située sur ton Bureau.
    *Sur la page, clique sur le bouton «Suppression»
    *Laisse travailler l'outil.
    *Poste le rapport qui apparaît à la fin.
    (Le rapport est sauvegardé aussi sous C:\ AdwCleaner[SX].Txt)

    2/

    * Télécharge et installe : Malwarebyte's Anti-Malware
    * A la fin de l'installation, veille à ce que l'option « mettre a jour Malwarebyte's Anti-Malware » soit cochée
    * Lance MBAM et laisse les Mises à jour se télécharger (sinon fais les manuellement au lancement du programme)
    * Puis va dans l'onglet "Recherche", coche "Exécuter un examen complet" puis "Rechercher"
    * Sélectionne tes disques durs" puis clique sur "Lancer l'examen"
    * A la fin du scan, clique sur Afficher les résultats
    * Coche tous les éléments détectés puis clique sur Supprimer la sélection
    * Enregistre le rapport
    * S'il t'est demandé de redémarrer, clique sur Yes
    * Poste le rapport de scan après la suppression ici.(poste le rapport, même si rien n'est détecté.)
    * Si tu as besoin d'aide regarde ce tutorial
    https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
    0
  4. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  5. mikkal
     
    Bonjour ,

    Voilà le rapport adwcleaner

    AdwCleaner v1.308 - Rapport créé le 28/09/2011 à 23:33:25
    # Mis à jour le 25/09/11 à 17h par Xplode
    # Système d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits)
    # Nom d'utilisateur : globet - MARTINE (Administrateur)
    # Exécuté depuis : H:\Documents and Settings\All Users\Films\adwcleaner.exe
    # Option [Suppression]

    ***** [KillNav] *****

    # chrome.exe [PID:2940] -> Tué

    ***** [Processus] *****

    ***** [Services] *****

    ***** [Fichiers / Dossiers] *****

    Dossier Supprimé : H:\Documents and Settings\globet\Application Data\cacaoweb

    ***** [Registre] *****

    Clé Supprimée : HKCU\Software\cacaoweb

    ***** [Navigateurs] *****

    -\\ Internet Explorer v6.0.2900.5512

    [OK] Le registre ne contient aucune entrée illégitime.

    -\\ Mozilla Firefox v6.0.2 (fr)

    Profil : a28qh3zn.default
    Fichier : H:\Documents and Settings\globet\Application Data\Mozilla\Firefox\Profiles\a28qh3zn.default\prefs.js

    [OK] Le fichier ne contient aucune entrée illégitime.

    -\\ Google Chrome v14.0.835.186

    Fichier : H:\Documents and Settings\globet\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

    [OK] Le fichier ne contient aucune entrée illégitime.

    *************************

    AdwCleaner[S1].txt - [1245 octets] - [28/09/2011 23:33:25]

    *************************

    Dossier Temporaire : 24 dossier(s) et 125 fichier(s) supprimé(s)

    ########## EOF - H:\AdwCleaner[S1].txt - [1470 octets] ##########

    Par contre je ne peux pas ouvrir malware byte meme après réinstallation

    merci
    0