Virus par mon flash disque

############################# | UsbFix V 7.080 | [Suppression]
Utilisateur: ch ahmad (Administrateur) # AHMAD
Mis à jour le 25/01/2012 par El Desaparecido
Lancé à 15:57:37 | 28/01/2007
Site Web: https://www.sosvirus.net/
Fichier suspect ? : http://eldesaparecido.com/upload.html
Contact: contact@eldesaparecido.com
PC: AWARD_ (AWRDACPI) (X86-based PC) # Desktop Computer
CPU: Intel(R) Pentium(R) 4 CPU 2.40GHz (2390)
RAM -> [ Total : 1503 | Free : 952 ]
BIOS: Phoenix - AwardBIOS v6.00PG
BOOT: Normal boot
OS: Microsoft Windows XP Professionnel (5.1.2600 32-Bit) # Service Pack 2
WB: Windows Internet Explorer 6.0.2900.2180
SC: Security Center Service [ Enabled ]
WU: Windows Update Service [ Enabled ]
FW: Windows FireWall Service [ Enabled ]
C:\ (%systemdrive%) -> Disque fixe # 20 Go (9 Go libre(s) - 47%) [] # NTFS
D:\ -> Disque fixe # 10 Go (8 Go libre(s) - 85%) [] # NTFS
E:\ -> Disque fixe # 8 Go (4 Go libre(s) - 45%) [] # FAT32
F:\ -> CD-ROM
G:\ -> CD-ROM
H:\ -> Disque amovible # 8 Go (8 Go libre(s) - 99%) [CHAHMA] # FAT32
################## | Processus Actif |
C:\WINDOWS\System32\smss.exe (708)
C:\WINDOWS\system32\winlogon.exe (804)
C:\WINDOWS\system32\services.exe (848)
C:\WINDOWS\system32\lsass.exe (860)
C:\WINDOWS\system32\svchost.exe (1032)
C:\WINDOWS\System32\svchost.exe (1332)
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (1828)
C:\WINDOWS\system32\spoolsv.exe (484)
C:\WINDOWS\Explorer.EXE (1400)
C:\WINDOWS\System32\svchost.exe (1592)
C:\WINDOWS\SOUNDMAN.EXE (1720)
C:\WINDOWS\system32\bgsvcgen.exe (1744)
C:\WINDOWS\system32\keyhook.exe (572)
c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe (584)
C:\WINDOWS\htpatch.exe (1064)
D:\USB Disk Security\USBGuard.exe (1864)
C:\WINDOWS\WebCam\M1000\M1000Mnt.exe (1220)
C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\DATAMN~1.EXE (1168)
C:\WINDOWS\system32\rundll32.exe (1232)
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE (1312)
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (1576)
C:\WINDOWS\system32\svchost.exe (2080)
C:\WINDOWS\system32\rundll32.exe (2664)
C:\program files\real\realplayer\update\realsched.exe (2672)
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe (2712)
C:\WINDOWS\system32\ctfmon.exe (3004)
C:\Program Files\Windows Live\Messenger\msnmsgr.exe (3068)
C:\WINDOWS\system32\CNAB4RPK.EXE (3872)
C:\Documents and Settings\ch ahmad\Local Settings\Application Data\Akamai\netsession_win.exe (3908)
C:\WINDOWS\system32\sistray.exe (1096)
E:\.miro\VideoCamSuiteAutoStart.exe (376)
C:\Documents and Settings\ch ahmad\Local Settings\Application Data\Akamai\netsession_win.exe (1556)
C:\Program Files\Windows Live\Contacts\wlcomm.exe (1508)
C:\Program Files\Avant Browser\avant.exe (1960)
C:\Program Files\Avant Browser\ybrowser.exe (1768)
C:\Program Files\Avant Browser\ybrowser.exe (1568)
C:\UsbFix\Go.exe (1472)
################## | Processus Stoppés |
Stoppé! C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (1828)
Stoppé! C:\WINDOWS\system32\spoolsv.exe (484)
Stoppé! C:\WINDOWS\Explorer.EXE (1400)
Stoppé! C:\WINDOWS\SOUNDMAN.EXE (1720)
<gras></gras>

je m'excuse fish mais j'ai cru que je ai tout copié et je te remercie encore

############################# | UsbFix V 7.080 | [Suppression]
Utilisateur: ch ahmad (Administrateur) # AHMAD
Mis à jour le 25/01/2012 par El Desaparecido
Lancé à 15:57:37 | 28/01/2007
Site Web: https://www.sosvirus.net/
Fichier suspect ? : http://eldesaparecido.com/upload.html
Contact: contact@eldesaparecido.com
PC: AWARD_ (AWRDACPI) (X86-based PC) # Desktop Computer
CPU: Intel(R) Pentium(R) 4 CPU 2.40GHz (2390)
RAM -> [ Total : 1503 | Free : 952 ]
BIOS: Phoenix - AwardBIOS v6.00PG
BOOT: Normal boot
OS: Microsoft Windows XP Professionnel (5.1.2600 32-Bit) # Service Pack 2
WB: Windows Internet Explorer 6.0.2900.2180
SC: Security Center Service [ Enabled ]
WU: Windows Update Service [ Enabled ]
FW: Windows FireWall Service [ Enabled ]
C:\ (%systemdrive%) -> Disque fixe # 20 Go (9 Go libre(s) - 47%) [] # NTFS
D:\ -> Disque fixe # 10 Go (8 Go libre(s) - 85%) [] # NTFS
E:\ -> Disque fixe # 8 Go (4 Go libre(s) - 45%) [] # FAT32
F:\ -> CD-ROM
G:\ -> CD-ROM
H:\ -> Disque amovible # 8 Go (8 Go libre(s) - 99%) [CHAHMA] # FAT32
################## | Processus Actif |
C:\WINDOWS\System32\smss.exe (708)
C:\WINDOWS\system32\winlogon.exe (804)
C:\WINDOWS\system32\services.exe (848)
C:\WINDOWS\system32\lsass.exe (860)
C:\WINDOWS\system32\svchost.exe (1032)
C:\WINDOWS\System32\svchost.exe (1332)
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (1828)
C:\WINDOWS\system32\spoolsv.exe (484)
C:\WINDOWS\Explorer.EXE (1400)
C:\WINDOWS\System32\svchost.exe (1592)
C:\WINDOWS\SOUNDMAN.EXE (1720)
C:\WINDOWS\system32\bgsvcgen.exe (1744)
C:\WINDOWS\system32\keyhook.exe (572)
c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe (584)
C:\WINDOWS\htpatch.exe (1064)
D:\USB Disk Security\USBGuard.exe (1864)
C:\WINDOWS\WebCam\M1000\M1000Mnt.exe (1220)
C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\DATAMN~1.EXE (1168)
C:\WINDOWS\system32\rundll32.exe (1232)
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE (1312)
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (1576)
C:\WINDOWS\system32\svchost.exe (2080)
C:\WINDOWS\system32\rundll32.exe (2664)
C:\program files\real\realplayer\update\realsched.exe (2672)
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe (2712)
C:\WINDOWS\system32\ctfmon.exe (3004)
C:\Program Files\Windows Live\Messenger\msnmsgr.exe (3068)
C:\WINDOWS\system32\CNAB4RPK.EXE (3872)
C:\Documents and Settings\ch ahmad\Local Settings\Application Data\Akamai\netsession_win.exe (3908)
C:\WINDOWS\system32\sistray.exe (1096)
E:\.miro\VideoCamSuiteAutoStart.exe (376)
C:\Documents and Settings\ch ahmad\Local Settings\Application Data\Akamai\netsession_win.exe (1556)
C:\Program Files\Windows Live\Contacts\wlcomm.exe (1508)
C:\Program Files\Avant Browser\avant.exe (1960)
C:\Program Files\Avant Browser\ybrowser.exe (1768)
C:\Program Files\Avant Browser\ybrowser.exe (1568)
C:\UsbFix\Go.exe (1472)
################## | Processus Stoppés |
Stoppé! C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (1828)
Stoppé! C:\WINDOWS\system32\spoolsv.exe (484)
Stoppé! C:\WINDOWS\Explorer.EXE (1400)
Stoppé! C:\WINDOWS\SOUNDMAN.EXE (1720)

############################## | UsbFix V 7.080 | [Suppression]

Utilisateur: ch ahmad (Administrateur) # AHMAD
Mis à jour le 25/01/2012 par El Desaparecido
Lancé à 18:22:53 | 28/01/2007

Site Web: https://www.sosvirus.net/
Fichier suspect ? : http://eldesaparecido.com/upload.html
Contact: contact@eldesaparecido.com

PC: AWARD_ (AWRDACPI) (X86-based PC) # Desktop Computer
CPU: Intel(R) Pentium(R) 4 CPU 2.40GHz (2390)
RAM -> [ Total : 1503 | Free : 1024 ]
BIOS: Phoenix - AwardBIOS v6.00PG
BOOT: Normal boot

OS: Microsoft Windows XP Professionnel (5.1.2600 32-Bit) # Service Pack 2
WB: Windows Internet Explorer 6.0.2900.2180

SC: Security Center Service [ Enabled ]
WU: Windows Update Service [ Enabled ]
FW: Windows FireWall Service [ Enabled ]

C:\ (%systemdrive%) -> Disque fixe # 20 Go (9 Go libre(s) - 48%) [] # NTFS
D:\ -> Disque fixe # 10 Go (8 Go libre(s) - 85%) [] # NTFS
E:\ -> Disque fixe # 8 Go (4 Go libre(s) - 45%) [] # FAT32
F:\ -> CD-ROM
G:\ -> CD-ROM
I:\ -> Disque amovible # 4 Go (4 Go libre(s) - 100%) [AHMED] # FAT32
J:\ -> Disque amovible # 124 Mo (11 Mo libre(s) - 9%) [HMIDOUNE] # FAT32

################## | Processus Actif |

C:\WINDOWS\System32\smss.exe (716)
C:\WINDOWS\system32\winlogon.exe (812)
C:\WINDOWS\system32\services.exe (856)
C:\WINDOWS\system32\lsass.exe (868)
C:\WINDOWS\system32\svchost.exe (1028)
C:\WINDOWS\System32\svchost.exe (1328)
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (1832)
C:\WINDOWS\system32\spoolsv.exe (516)
C:\WINDOWS\Explorer.EXE (1232)
C:\WINDOWS\System32\svchost.exe (1500)
C:\WINDOWS\system32\bgsvcgen.exe (1528)
c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe (348)
C:\WINDOWS\SOUNDMAN.EXE (936)
C:\WINDOWS\system32\keyhook.exe (1012)
C:\WINDOWS\htpatch.exe (1036)
D:\USB Disk Security\USBGuard.exe (1220)
C:\WINDOWS\WebCam\M1000\M1000Mnt.exe (1044)
C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\DATAMN~1.EXE (1376)
C:\WINDOWS\system32\rundll32.exe (1380)
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE (1428)
C:\program files\real\realplayer\update\realsched.exe (1212)
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe (1356)
C:\WINDOWS\system32\ctfmon.exe (1668)
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (1864)
C:\WINDOWS\system32\svchost.exe (2248)
C:\Program Files\Windows Live\Messenger\msnmsgr.exe (2256)
C:\WINDOWS\system32\rundll32.exe (2812)
C:\Documents and Settings\ch ahmad\Local Settings\Application Data\Akamai\netsession_win.exe (2908)
C:\WINDOWS\system32\sistray.exe (3044)
E:\.miro\VideoCamSuiteAutoStart.exe (3248)
C:\Documents and Settings\ch ahmad\Local Settings\Application Data\Akamai\netsession_win.exe (3304)
C:\WINDOWS\system32\CNAB4RPK.EXE (3472)
C:\WINDOWS\system32\wuauclt.exe (3184)
C:\Program Files\Windows Live\Toolbar\wltuser.exe (3280)
C:\Program Files\Avant Browser\avant.exe (3064)
C:\Program Files\Avant Browser\ybrowser.exe (3236)
D:\Microsoft Office\Office12\WINWORD.EXE (4068)
C:\Program Files\Microsoft\Office Live\OfficeLiveSignIn.exe (2112)
C:\UsbFix\Go.exe (652)

################## | Processus Stoppés |

Stoppé! C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (1832)
Stoppé! C:\WINDOWS\system32\spoolsv.exe (516)
Stoppé! C:\WINDOWS\Explorer.EXE (1232)
Stoppé! C:\WINDOWS\system32\bgsvcgen.exe (1528)
Stoppé! c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe (348)
Stoppé! C:\WINDOWS\SOUNDMAN.EXE (936)
Stoppé! C:\WINDOWS\system32\keyhook.exe (1012)
Stoppé! C:\WINDOWS\htpatch.exe (1036)
Stoppé! D:\USB Disk Security\USBGuard.exe (1220)
Stoppé! C:\WINDOWS\WebCam\M1000\M1000Mnt.exe (1044)
Stoppé! C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\DATAMN~1.EXE (1376)
Stoppé! C:\WINDOWS\system32\rundll32.exe (1380)
Stoppé! C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE (1428)
Stoppé! C:\program files\real\realplayer\update\realsched.exe (1212)
Stoppé! C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe (1356)
Stoppé! C:\WINDOWS\system32\ctfmon.exe (1668)
Stoppé! C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (1864)
Stoppé! C:\Program Files\Windows Live\Messenger\msnmsgr.exe (2256)
Stoppé! C:\WINDOWS\system32\rundll32.exe (2812)
Stoppé! C:\Documents and Settings\ch ahmad\Local Settings\Application Data\Akamai\netsession_win.exe (2908)
Stoppé! C:\WINDOWS\system32\sistray.exe (3044)
Stoppé! E:\.miro\VideoCamSuiteAutoStart.exe (3248)
Stoppé! C:\Documents and Settings\ch ahmad\Local Settings\Application Data\Akamai\netsession_win.exe (3304)
Stoppé! C:\WINDOWS\system32\CNAB4RPK.EXE (3472)
Stoppé! C:\WINDOWS\system32\wuauclt.exe (3184)
Stoppé! C:\Program Files\Windows Live\Toolbar\wltuser.exe (3280)
Stoppé! C:\Program Files\Avant Browser\avant.exe (3064)
Stoppé! C:\Program Files\Avant Browser\ybrowser.exe (3236)
Stoppé! D:\Microsoft Office\Office12\WINWORD.EXE (4068)
Stoppé! C:\Program Files\Microsoft\Office Live\OfficeLiveSignIn.exe (2112)

################## | Eléments infectieux |

Supprimé! C:\Recycler\S-1-5-21-1960408961-776561741-725345543-1003
Supprimé! D:\Recycler\S-1-5-21-1960408961-776561741-725345543-1003

(!) Fichiers temporaires supprimés.

################## | Registre |


################## | Mountpoints2 |


################## | Listing |

[25/08/2011 - 00:52:02 | N | 0] C:\AUTOEXEC.BAT
[28/01/2007 - 17:56:07 | RASHD ] C:\Autorun.inf
[25/08/2011 - 00:45:37 | N | 212] C:\boot.ini
[07/09/2002 - 01:00:00 | N | 4952] C:\Bootfont.bin
[25/08/2011 - 01:28:52 | N | 190] C:\CDSetup.log
[28/01/2007 - 11:30:37 | D ] C:\Config.Msi
[25/08/2011 - 00:52:02 | N | 0] C:\CONFIG.SYS
[25/08/2011 - 00:56:44 | D ] C:\Documents and Settings
[27/10/2011 - 06:50:45 | D ] C:\dvbdream
[25/08/2011 - 00:52:02 | N | 0] C:\IO.SYS
[01/10/2011 - 15:31:01 | D ] C:\MC_TMP
[25/08/2011 - 00:52:02 | N | 0] C:\MSDOS.SYS
[04/08/2004 - 03:38:34 | N | 47564] C:\NTDETECT.COM
[04/08/2004 - 03:59:44 | N | 251712] C:\ntldr
[28/01/2007 - 18:17:53 | ASH | 2145386496] C:\pagefile.sys
[10/01/2012 - 07:31:44 | D ] C:\Program Files
[28/01/2007 - 18:25:30 | SHD ] C:\RECYCLER
[25/08/2011 - 02:57:23 | SHD ] C:\System Volume Information
[28/01/2007 - 18:25:30 | D ] C:\UsbFix
[28/01/2007 - 18:25:31 | A | 5202] C:\UsbFix.txt
[28/01/2007 - 17:56:11 | N | 12227] C:\UsbFix_Upload_Me_AHMAD.zip
[28/01/2007 - 11:28:18 | D ] C:\WINDOWS
[24/10/2011 - 22:03:56 | D ] D:\.miro
[06/01/2012 - 10:13:10 | D ] D:\1.0
[25/08/2011 - 02:07:22 | D ] D:\Adobe
[28/01/2007 - 17:56:07 | RASHD ] D:\Autorun.inf
[29/10/2011 - 11:12:07 | D ] D:\avast
[27/08/2011 - 18:38:00 | D ] D:\Config.Msi
[17/10/2011 - 14:12:33 | D ] D:\JetAudio
[27/08/2011 - 18:28:40 | D ] D:\Microsoft Office
[27/08/2011 - 18:07:53 | RHD ] D:\MSOCache
[24/11/2011 - 07:23:41 | D ] D:\Notepad++
[04/11/2011 - 13:11:46 | D ] D:\RECOVER FILES
[28/01/2007 - 18:25:30 | SHD ] D:\RECYCLER
[25/08/2011 - 18:56:10 | SHD ] D:\System Volume Information
[25/08/2011 - 22:53:19 | D ] D:\USB Disk Security
[25/08/2011 - 01:53:58 | D ] D:\VideoLAN
[25/08/2011 - 02:24:29 | D ] D:\WinRAR
[26/08/2011 - 00:03:45 | D ] D:\Your Uninstaller 2010
[28/01/2007 - 17:56:08 | RASHD ] E:\Autorun.inf
[09/04/2011 - 08:40:54 | D ] E:\TechniSat DVB
[07/03/2011 - 14:35:24 | D ] E:\Mes documents
[16/11/2009 - 20:22:22 | SHD ] E:\System Volume Information
[31/08/2011 - 00:11:28 | D ] E:\.miro
[23/09/2011 - 19:37:42 | N | 94720] E:\ETAT DES FRAIS DU TRANSFO.xls
[29/01/2011 - 21:37:28 | N | 19968] E:\feuille de calcul.xls
[16/03/2010 - 20:22:08 | D ] E:\cartes pilotes
[16/05/2011 - 08:45:06 | SHD ] E:\$RECYCLE.BIN
[25/08/2011 - 01:05:46 | D ] E:\??????? ??????
[16/11/2009 - 21:04:26 | SHD ] E:\Recycled
[25/01/2012 - 21:01:34 | D ] I:\4c70ce52
[26/01/2012 - 07:02:44 | D ] I:\RECYCLER
[28/01/2007 - 17:56:10 | RASHD ] I:\Autorun.inf
[09/01/2012 - 14:19:10 | D ] J:\???????
[26/05/2011 - 15:33:14 | N | 68096] J:\ANNULATIONS 2011.xls
[18/10/2011 - 15:12:28 | N | 43520] J:\chahma timbre.xls
[09/01/2012 - 14:19:22 | D ] J:\compt 2011
[25/08/2011 - 14:37:16 | N | 343040] J:\Comptabilite.xls
[23/04/2011 - 13:50:30 | N | 377856] J:\COMPTE DE GESTION 2010.xls
[08/01/2012 - 08:57:06 | N | 187904] J:\CONSTATATION 10.xls
[13/09/2007 - 00:58:18 | N | 176640] J:\CONSTATATION 11.xls
[14/04/2011 - 15:11:40 | N | 504320] J:\H12 -30-12-2011.xls
[09/01/2012 - 14:19:30 | D ] J:\Project13
[13/09/2007 - 04:56:50 | N | 247296] J:\Récape H10.XLS
[25/08/2011 - 17:41:42 | N | 512000] J:\Récape H9.xls
[01/01/2004 - 07:27:24 | N | 367616] J:\TIMBRES FISsCAU 2011.xls
[10/01/2011 - 11:39:16 | N | 18944] J:\TR 6.xls
[19/01/2012 - 10:42:16 | N | 504320] J:\BURALISTE ANNEE2011.xls
[28/01/2007 - 17:56:10 | RASHD ] J:\Autorun.inf
[14/01/2012 - 15:24:28 | SHD ] J:\RECYCLER
[10/01/2012 - 15:31:06 | N | 140288] J:\D4 au 31-12-2011 Khemisti.xls
[10/01/2012 - 14:59:46 | N | 61952] J:\???????? ???????.xls
[13/09/2007 - 07:26:18 | N | 164352] J:\costatation 2011.xls
[13/09/2007 - 01:30:14 | N | 98304] J:\ANNULATIONS 11.xls
[14/01/2012 - 10:34:24 | D ] J:\TIMBRES 2011
[14/01/2012 - 14:41:44 | D ] J:\Copie de TIMBRES 2012
[23/11/2011 - 11:43:22 | D ] J:\Avira
[23/11/2011 - 11:50:14 | N | 138240] J:\ANNULATIONS 2011_New1.xls
[01/01/2004 - 01:57:50 | D ] J:\IKONA
[14/01/2012 - 15:25:58 | N | 500736] J:\BURALISTE ANNEE2011_New1.xls

################## | Vaccin |

C:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
D:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
E:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
I:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
J:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)

################## | Upload |

Veuillez envoyer le fichier: C:\UsbFix_Upload_Me_AHMAD.zip
http://eldesaparecido.com/upload.html
Merci de votre contribution.

################## | E.O.F |

Rapport de ZHPDiag v1.28.315 par Nicolas Coolman, Update du 22/01/2012
Run by ch ahmad at 28/01/2012 21:21:25
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Web site : http://nicolascoolman.skyrock.com/
State : Your version is update.


---\\ Web Browser
MSIE: Internet Explorer v6.0.2900.2180
OBIE: AvantBrowser v11.9.0.30 (Defaut)
MFIE: Mozilla Firefox 5.0 v5.0
GCIE: Google Chrome v16.0.912.77

---\\ Windows Product Information
~ Langage: Anglais
Windows XP Professional Service Pack 2 (Build 2600)
Windows Automatic Updates : OK
Windows Genuine Advantage : KO

---\\ System Information
~ Processor: x86 Family 15 Model 4 Stepping 1, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 1503 MB (67% free)
System Restore: Activé (Enable)
System drive C: has 9 GB (47%) free of 20 GB

---\\ Logged in mode
~ Computer Name: AHMAD
~ User Name: ch ahmad
~ All Users Names: SUPPORT_388945a0, HelpAssistant, ch ahmad, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Documents and Settings\ch ahmad\Application Data\
~ %Desktop% : C:\Documents and Settings\ch ahmad\Bureau\
~ %Favorites% : C:\Documents and Settings\ch ahmad\Favorites\
~ %LocalAppData% : C:\Documents and Settings\ch ahmad\Local Settings\Application Data\
~ %StartMenu% : C:\Documents and Settings\ch ahmad\Menu Démarrer\
~ %Windir% : C:\WINDOWS\
~ %System% : C:\WINDOWS\system32\

---\\ DOS/Devices
A:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
C:\ Hard drive, Flash drive, Thumb drive (Free 9 Go of 20 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 8 Go of 10 Go)
E:\ Hard drive, Flash drive, Thumb drive (Free 4 Go of 8 Go)
F:\ CD-ROM drive (Not Inserted)
G:\ CD-ROM drive (Not Inserted)
I:\ Floppy drive, Flash card reader, USB Key (Free 4 Go of 4 Go)
J:\ Floppy drive, Flash card reader, USB Key (Free 0 Go of 0 Go)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: Modified
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: Modified
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowMyComputer: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services] wscsvc : OK
~ Scan Security Center in 00mn 00s



---\\ Search Generic System Files
[MD5.4C33E5B9A6197B6ED215F6CFBA0A2DAA] - (.Microsoft Corporation - Explorateur Windows.) (.04/08/2004 - 05:54:50.) -- C:\WINDOWS\Explorer.exe [1036288]
[MD5.F5402CD47B7389DDC21F92119A906EEE] - (.Microsoft Corporation - Exécuter une DLL en tant qu'application.) (.04/08/2004 - 05:55:02.) -- C:\WINDOWS\system32\rundll32.exe [33792]
[MD5.58FE94EF42E074F4CAD8BF02E70E6478] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.04/08/2004 - 05:54:46.) -- C:\WINDOWS\system32\wininet.dll [660480]
[MD5.D2DE785AEAB0BB8CA4C14A8A199DBE4E] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.04/08/2004 - 05:55:02.) -- C:\WINDOWS\system32\Winlogon.exe [506368]
[MD5.5AC495F4CB807B2B98AD2AD591E6D92E] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.04/08/2004 - 04:14:16.) -- C:\WINDOWS\system32\drivers\AFD.sys [138496]
[MD5.CDFE4411A69C224BD1D11B2DA92DAC51] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.04/08/2004 - 03:59:44.) -- C:\WINDOWS\system32\drivers\atapi.sys [95360]
[MD5.CD7D5152DF32B47F4E36F710B35AAE02] - (.Microsoft Corporation - CD-ROM File System Driver.) (.04/08/2004 - 04:14:12.) -- C:\WINDOWS\system32\drivers\Cdfs.sys [63744]
[MD5.AF9C19B3100FE010496B1A27181FBF72] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.04/08/2004 - 03:59:54.) -- C:\WINDOWS\system32\drivers\Cdrom.sys [49536]
[MD5.8B121FF880683607AB2AEF0340721718] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) (.07/09/2002 - 01:00:00.) -- C:\WINDOWS\system32\drivers\Fips.sys [35072]
[MD5.D1EFCBD693B5BA21314D06368C471070] - (.Microsoft Corporation - Pilote de port i8042.) (.04/08/2004 - 05:41:24.) -- C:\WINDOWS\system32\drivers\i8042prt.sys [54400]
[MD5.F8AA320C6A0409C0380E5D8A99D76EC6] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.04/08/2004 - 04:00:16.) -- C:\WINDOWS\system32\drivers\Imapi.sys [41856]
[MD5.B5A8E215AC29D24D60B4D1250EF05ACE] - (.Microsoft Corporation - IP Network Address Translator.) (.04/08/2004 - 04:04:52.) -- C:\WINDOWS\system32\drivers\IpNat.sys [134912]
[MD5.64537AA5C003A6AFEEE1DF819062D0D1] - (.Microsoft Corporation - IPSec Driver.) (.04/08/2004 - 04:14:30.) -- C:\WINDOWS\system32\drivers\IPSec.sys [74752]
[MD5.1FD607FC67F7F7C633C3DA65BFC53D18] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.04/08/2004 - 04:15:18.) -- C:\WINDOWS\system32\drivers\MRxSmb.sys [451456]
[MD5.0C80E410CD2F47134407EE7DD19CC86B] - (.Microsoft Corporation - MBT Transport driver.) (.04/08/2004 - 04:14:38.) -- C:\WINDOWS\system32\drivers\netBT.sys [162816]
[MD5.B78BE402C3F63DD55521F73876951CDD] - (.Microsoft Corporation - NT File System Driver.) (.04/08/2004 - 04:15:10.) -- C:\WINDOWS\system32\drivers\ntfs.sys [574592]
[MD5.318696359AC7DF48D1E51974EC527DD2] - (.Microsoft Corporation - Pilote de port parallèle.) (.04/08/2004 - 06:05:42.) -- C:\WINDOWS\system32\drivers\Parport.sys [80384]
[MD5.98FAEB4A4DCF812BA1C6FCA4AA3E115C] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.04/08/2004 - 04:14:24.) -- C:\WINDOWS\system32\drivers\Rasl2tp.sys [51328]
[MD5.A2CAE2C60BC37E0751EF9DDA7CEAF4AD] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.03/08/2004 - 22:01:16.) -- C:\WINDOWS\system32\drivers\rdpdr.sys [196864]
[MD5.2CC30B68DD62B73D444A41322CD7FC4C] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) (.04/08/2004 - 01:39:44.) -- C:\WINDOWS\system32\drivers\redbook.sys [58496]
[MD5.313B1A0D5DB26DFE1C34A6C13B2CE0A7] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.04/08/2004 - 05:44:16.) -- C:\WINDOWS\system32\drivers\volsnap.sys [53376]
~ Scan Generic Processes in 00mn 00s



---\\ Hidden files state (Hidden/Total)
~ Mes images (My Pictures) : 4/75
Mes musiques (My Musics) : 2/2 (Modified)
~ Mes Videos (My Video) : 0/6
~ Mes Favoris (My Favorites) : Non accessible (Not found)
~ Mes Documents (My Documents) : 14/172
~ Mon Bureau (My Desktop) : 0/56
~ Menu demarrer (Programs) : 5/41
~ Scan Hidden Files in 00mn 00s



---\\ Running Processes
[MD5.996E6D052438E8D8DFD501F31560B2E0] - (.AVAST Software - avast! Service.) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [44768] [PID.]
[MD5.F7226AA410954185160067D5FA82F3F2] - (.AVAST Software - avast! Antivirus.) -- C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [3744552] [PID.1356]
[MD5.974B5B657F33E9976C8C8823192A85CB] - (.CANON INC. - Canon Advanced Printing Technology RPC Serv.) -- C:\WINDOWS\system32\CNAB4RPK.EXE [57344] [PID.]
[MD5.F5F945AB625031A276C6A8E8F92C3BDC] - (.McAfee, Inc. - SiteAdvisor.) -- c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe [94880] [PID.]
[MD5.72DDC1726DE3D5B3F3C5F736539D93DA] - (.Avant Force - Avant Browser.) -- C:\Program Files\Avant Browser\avant.exe [1404224] [PID.2940]
[MD5.72963727F810E7E486DE77B69E3BA95E] - (.Avant Force - Avant Browser.) -- C:\Program Files\Avant Browser\ybrowser.exe [1397056] [PID.236]
[MD5.62BB79160F86CD962F312C68C6239BFD] - (.Microsoft Corporation - Windows Update.) -- C:\WINDOWS\system32\wuauclt.exe [53472] [PID.3212]
[MD5.7B2D61A81906852CE38A46D09EFEEE9D] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [2210816] [PID.3520]
[MD5.2FE681D10C5FC343DBBC0610B8DD4D24] - (.Microsoft Corporation - Application Layer Gateway Service.) -- C:\WINDOWS\System32\alg.exe [44544] [PID.]
~ Scan Processes Running in 00mn 02s



---\\ Google Chrome, Start,Search,Extensions (G0,G1,G2)
C:\Documents and Settings\ch ahmad\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences
G1 - GCS: Preference [User Data\Default] None
G0 - GCSP: Preference [User Data\Default][HomePage] https://www.google.com/?gws_rd=ssl
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] YouTube v.4.2.3 (Activé)
G2 - GCE: Preference [User Data\Default] [fheoggkfdfchfphceeifdbepaooicaho] SiteAdvisor v.3.40.135.1 (Activé)
G2 - GCE: Preference [User Data\Default] [jfmjfhklogoienhpfnppmbcbjfjnkonk] RealPlayer HTML5Video Downloader Extension v.1.5 (Activé)
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Gmail v.7 (Activé)
G2 - GCE: Preference [User Data\Default] [pkbbbncikcipejaiiiioboongndhmjgl] Shockwave Flash v.11,0,1,152 (Activé)
~ Scan Google Browser in 00mn 00s



---\\ Mozilla Firefox,Plugins,Start,Search,Extensions (P2,M0,M1,M2,M3)
C:\Documents and Settings\ch ahmad\Application Data\Mozilla\Firefox\Profiles\nahd6ha2.default\prefs.js
M3 - MFPP: Plugins - [ch ahmad] -- C:\Documents and Settings\ch ahmad\Application Data\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\SearchResults.xml
M3 - MFPP: Plugins - [ch ahmad] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [ch ahmad] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [ch ahmad] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [ch ahmad] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [ch ahmad] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [ch ahmad] -- C:\Program Files\Mozilla FireFox\searchplugins\McSiteAdvisor.xml
M3 - MFPP: Plugins - [ch ahmad] -- C:\Program Files\Mozilla FireFox\searchplugins\SearchResults.xml
M3 - MFPP: Plugins - [ch ahmad] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [ch ahmad] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
M0 - MFSP: prefs.js [ch ahmad - nahd6ha2.default] http://www.searchnu.com/
M2 - MFEP: prefs.js [ch ahmad - nahd6ha2.default\ChoiceGuard@Microsoft] [] Microsoft Choice Guard v2.0 (.Microsoft.)
M2 - MFEP: prefs.js [ch ahmad - nahd6ha2.default\ffxtlbr@babylon.com] [] Babylon v1.1.9 (.Babylon.)
M2 - MFEP: prefs.js [ch ahmad - nahd6ha2.default\ffxtlbr@Facemoods.com] [] Facemoods v1.4.1 (.Volo-Net.)
M2 - MFEP: prefs.js [ch ahmad - nahd6ha2.default\yasearch@yandex.ru] [] ?¯?½?'?µ????.?`?°?€ v6.5.0 (.?¯?½?'?µ????.)
M2 - MFEP: prefs.js [ch ahmad - nahd6ha2.default\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}] [] 4shared.com Community Toolbar v3.3.3.2 (.Conduit Ltd..)
M2 - MFEP: prefs.js [ch ahmad - nahd6ha2.default\{635abd67-4fe9-1b23-4f01-e679fa7484c1}] [yahoo.ytff] Yahoo! Toolbar v2.4.5.20111209014555 (.Yahoo!.)
M2 - MFEP: prefs.js [ch ahmad - nahd6ha2.default\{99079a25-328f-4bd4-be04-00955acaa0a7}] [] Searchqu Toolbar v4.4.1.00 (.Visicom Media Inc..)
P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.6.3.633.) -- C:\WINDOWS\system32\Adobe\Director\np32dsw.dll
P2 - FPN: [HKLM] [@mcafee.com/SAFFPlugin] - (.McAfee, Inc. - SiteAdvisor.) -- C:\Program Files\McAfee\SiteAdvisor\NPMcFFPlg32.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.60531.0.) -- C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/OfficeLive,version=1.3] - (.Microsoft Corp. - Office Live Update v1.3.) -- C:\Program Files\Microsoft\Office Live\npOLW.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=14.0.8117.0416] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@real.com/nppl3260;version=15.0.1.13] - (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll
P2 - FPN: [HKLM] [@real.com/nprjplug;version=15.0.1.13] - (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll
P2 - FPN: [HKLM] [@real.com/nprpchromebrowserrecordext;version=15.0.1.13] - (.RealNetworks, Inc. - RealNetworks(tm) RealPlayer Chrome Background Extension Plug-In.) -- C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlug
P2 - FPN: [HKLM] [@real.com/nprphtml5videoshim;version=15.0.1.13] - (.RealNetworks, Inc. - RealPlayer(tm) HTML5VideoShim Plug-In.) -- C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videosh
P2 - FPN: [HKLM] [@real.com/nprpjplug;version=15.0.1.13] - (.RealNetworks, Inc. - 15.0.1.13.) -- C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll
~ Scan Firefox Browser in 00mn 00s



---\\ Internet Explorer Extensions, Start, Search (R4,R3,R0,R1)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.searchnu.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.searchnu.com/
R3 - URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} . (.McAfee, Inc. - SiteAdvisor.) (3,4,0,135) -- C:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll
R3 - URLSearchHook: 4shared.com Toolbar - {09ec805c-cb2e-4d53-b0d3-a75a428b81c7} . (.Conduit Ltd. - Conduit Toolbar.) (6.3.2.0) -- C:\Program Files\4shared.com\prxtb4sha.dll
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Bibliothèque d'objets et de contrôles de do.) (6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)) -- C:\WINDOWS\system32\shdocvw.dll
~ Scan IE Browser in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1:9421
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s



---\\ Changed inifile Value, Mapped to Registry (F2)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe,
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Scan Keys in 00mn 00s



---\\ Hosts file redirection (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s
~ Nombre de lignes (Lines number): 20



---\\ Browser Helper Objects (O2)
O2 - BHO: 4shared.com - {09ec805c-cb2e-4d53-b0d3-a75a428b81c7} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\4shared.com\prxtb4sha.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: MediaBar - {28387537-e3f9-4ed7-860c-11e69af4a8a0} . (.Unknown owner - dtx Dynamic Link Library.) -- C:\Program Files\iMesh Applications\MediaBar\Datamngr\ToolBar\imeshdtxmltbpi.dll
O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} . (.Babylon BHO - No comment.) -- C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.35.10\bh\BabylonToolbar.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealPlayer - RealPlayer Download and Record Plugin.) -- C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordP
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\ConduitEngine\prxConduitEngine.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Orphean Key
O2 - BHO: facemoods Helper - {64182481-4F71-486b-A045-B233BD0DA8FC} . (.facemoods.com BHO - No comment.) -- C:\Program Files\facemoods.com\facemoods\1.4.17.11\bh\facemoods.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corp. - Microsoft Search Helper Extention.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: UrlHelper Class - {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} . (.MusicLab, LLC - IEHelper.) -- C:\Program Files\BearShare Applications\MediaBar\Datamngr\IEBHO.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} . (.Unknown owner - dtx Dynamic Link Library.) -- C:\Program Files\Windows iLivid Toolbar\Datamngr\ToolBar\searchqudtx.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} . (.McAfee, Inc. - SiteAdvisor.) -- C:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll
O2 - BHO: MediaBar - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} . (.Unknown owner - dtx Dynamic Link Library.) -- C:\Program Files\BearShare Applications\MediaBar\Datamngr\ToolBar\bsdtxmltbpi.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll
~ Scan BHO in 00mn 00s



---\\ Internet Explorer toolbars (O3)
O3 - Toolbar: ??????.??? - {91397D20-1446-11D4-8AF4-0040CA1127B6} . (.??? «??????» - ??????.??? ??? Microsoft Internet Explorer.) -- C:\Program Files\Yandex\YandexBarIE\yndbar.dll
O3 - Toolbar: Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} . (.Babylon Ltd. - No comment.) -- C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.35.10\BabylonToolbarTlbr.dll
O3 - Toolbar: MediaBar - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} . (.Unknown owner - dtx Dynamic Link Library.) -- C:\Program Files\BearShare Applications\MediaBar\Datamngr\ToolBar\bsdtxmltbpi.dll
O3 - Toolbar: MediaBar - {28387537-e3f9-4ed7-860c-11e69af4a8a0} . (.Unknown owner - dtx Dynamic Link Library.) -- C:\Program Files\iMesh Applications\MediaBar\Datamngr\ToolBar\imeshdtxmltbpi.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} . (.Unknown owner - dtx Dynamic Link Library.) -- C:\Program Files\Windows iLivid Toolbar\Datamngr\ToolBar\searchqudtx.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} . (.McAfee, Inc. - SiteAdvisor.) -- C:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll
O3 - Toolbar: 4shared.com Toolbar - {09ec805c-cb2e-4d53-b0d3-a75a428b81c7} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\4shared.com\prxtb4sha.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\ConduitEngine\prxConduitEngine.dll
O3 - Toolbar: facemoods Toolbar - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} . (.facemoods.com - No comment.) -- C:\Program Files\facemoods.com\facemoods\1.4.17.11\facemoodsTlbr.dll
~ Scan Toolbar in 00mn 00s



---\\ Auto loading programs from Registry and folders (O4)
O4 - HKLM\..\Run: [IMJPMIG8.1] . (.Microsoft Corporation - Microsoft IME.) -- C:\WINDOWS\ime\IMJP8_1\imjpmig.exe
O4 - HKLM\..\Run: [PHIME2002ASync] . (.Microsoft Corporation - ???????? 2002a.) -- C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe
O4 - HKLM\..\Run: [PHIME2002A] . (.Microsoft Corporation - ???????? 2002a.) -- C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe
O4 - HKLM\..\Run: [SoundMan] . (.Realtek Semiconductor Corp. - Realtek Sound Manager.) -- C:\WINDOWS\SOUNDMAN.exe
O4 - HKLM\..\Run: [SiS Windows KeyHook] . (.Silicon Integrated Systems Corporation - SiS Compatible Super VGA Keyboard Daemon.) -- C:\WINDOWS\system32\Keyhook.exe
O4 - HKLM\..\Run: [HTpatch] . (...) -- C:\WINDOWS\htpatch.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- D:\Adobe\Reader 10.0\Reader\reader_sl.exe
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe
O4 - HKLM\..\Run: [USB Security] . (.Zbshareware Lab - USB Disk Security.) -- D:\USB Disk Security\USBGuard.exe
O4 - HKLM\..\Run: [M1000Mnt] M1000Rmv.exe
O4 - HKLM\..\Run: [DATAMNGR] . (.MusicLab, LLC - Data Manager.) -- C:\Program Files\BearShare Applications\MediaBar\Datamngr\datamngrUI.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] bthprops.cpl
O4 - HKLM\..\Run: [4shared Update] . (.New IT Solutions - 4shared chekUpdate.) -- C:\Program Files\4shared Desktop\checkUpdate.exe
O4 - HKLM\..\Run: [facemoods] . (.facemoods.com - No comment.) -- C:\Program Files\facemoods.com\facemoods\1.4.17.11\facemoodssrv.exe
O4 - HKLM\..\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files\Real\RealPlayer\Update\realsched.exe
O4 - HKLM\..\Run: [avast5] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
O4 - HKCU\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O4 - HKCU\..\Run: [4shared Desktop] . (.New IT Solutions - 4shared Desktop.) -- C:\Program Files\4shared Desktop\desktop.exe
O4 - HKCU\..\Run: [4Sync] . (.New IT Solutions Ltd. - No comment.) -- C:\Program Files\4Sync\4Sync.exe
O4 - HKCU\..\Run: [Akamai NetSession Interface] . (.Akamai Technologies, Inc - Akamai NetSession Client.) -- C:\Documents and Settings\ch ahmad\Local Settings\Application Data\Akamai\netsession_win.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-21-1960408961-776561741-725345543-1003\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O4 - HKUS\S-1-5-21-1960408961-776561741-725345543-1003\..\Run: [4shared Desktop] . (.New IT Solutions - 4shared Desktop.) -- C:\Program Files\4shared Desktop\desktop.exe
O4 - HKUS\S-1-5-21-1960408961-776561741-725345543-1003\..\Run: [4Sync] . (.New IT Solutions Ltd. - No comment.) -- C:\Program Files\4Sync\4Sync.exe
O4 - HKUS\S-1-5-21-1960408961-776561741-725345543-1003\..\Run: [Akamai NetSession Interface] . (.Akamai Technologies, Inc - Akamai NetSession Client.) -- C:\Documents and Settings\ch ahmad\Local Settings\Application Data\Akamai\netsession_win.exe
~ Scan Application in 00mn 01s



---\\ Other User Links (O4)
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader X.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1025-7B44-AA0000000001}\SC_Reader.ico
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\MSN.lnk . (.Microsoft Corporation.) -- C:\Program Files\MSN\MSNCoreFiles\Install\msnsusii.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk . (.Microsoft Corporation.) -- C:\Program Files\Messenger\msmsgs.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Movie Maker\moviemk.exe
O4 - Global Startup: C:\Documents And Settings\ch ahmad\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe
O4 - Global Startup: C:\Documents And Settings\ch ahmad\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\IEXPLORE.EXE
O4 - Global Startup: C:\Documents And Settings\ch ahmad\Menu Démarrer\Programmes\Lecteur Windows Media.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Documents And Settings\ch ahmad\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader X.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1025-7B44-AA0000000001}\SC_Reader.ico
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\MSN.lnk . (.Microsoft Corporation.) -- C:\Program Files\MSN\MSNCoreFiles\Install\msnsusii.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk . (.Microsoft Corporation.) -- C:\Program Files\Messenger\msmsgs.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Movie Maker\moviemk.exe
O4 - Global Startup: C:\Documents And Settings\ch ahmad\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe
O4 - Global Startup: C:\Documents And Settings\ch ahmad\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\IEXPLORE.EXE
O4 - Global Startup: C:\Documents And Settings\ch ahmad\Menu Démarrer\Programmes\Lecteur Windows Media.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Documents And Settings\ch ahmad\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe
~ Scan Global Startup in 00mn 00s



---\\ Extra items in the IE right-click menu (O8)
O8 - Extra context menu item: &Download All using 4shared Desktop . (...) -- C:\Program Files\4shared Desktop\down_all.htm
O8 - Extra context menu item: &Download using 4shared Desktop . (...) -- C:\Program Files\4shared Desktop\down_link.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- D:\MICROS~1\Office12\EXCEL.exe
~ Scan IE Menu Contextuel in 00mn 00s



---\\ Extra buttons on main IE button toolbar, or extra items in IE 'Tools' menu (O9)
O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: &Ajout Direct dans Windows Live Writer - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- D:\Microsoft Office\Office12\REFBARH.ICO
O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
~ Scan IE Extra Buttons in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Service client pour le fournisseur NetWare et DLL d'authentification.) -- C:\WINDOWS\system32\nwprovau.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\WINDOWS\system32\wshbth.dll
~ Scan Winsock in 00mn 00s



---\\ ActiveX Objects (Downloaded Program Files) (O16)
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1327777113796
~ Scan Objets ActiveX in 00mn 00s



---\\ Lop.com/Domain Hijackers (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{4924C051-9AE4-4305-BA43-183E83BA544F}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{4924C051-9AE4-4305-BA43-183E83BA544F}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{4924C051-9AE4-4305-BA43-183E83BA544F}: DhcpNameServer = 192.168.1.1
~ Scan Domain in 00mn 00s



---\\ Extra protocols (O18)
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} . (.McAfee, Inc. - SiteAdvisor.) -- C:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- C:\WINDOWS\system32\inetcomm.dll
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll
O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} . (.McAfee, Inc. - SiteAdvisor.) -- C:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll
O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll
O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll
O18 - Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Filter: lzdhtml - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\MSOXMLMF.dll
~ Scan Protocole Additionnel in 00mn 00s



---\\ AppInit_DLLs Registry value Autorun (O20)
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\WINDOWS\system32\cscdll.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
~ Scan Winlogon in 00mn 00s



---\\ AppInit_DLLs Registry value Autorun (O20)
O20 - AppInit_DLLs: . (.MusicLab, LLC - Data Manager.) - C:\Program Files\BEARSH~1\MediaBar\Datamngr\datamngr.dll
~ Scan AppInit DLL in 00mn 00s



---\\ ShellServiceObjectDelayLoad (O21)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\WINDOWS\system32\webcheck.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
~ Scan SSODL in 00mn 00s



---\\ SharedTaskScheduler (O22)
O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll
~ Scan STS/SSO in 00mn 00s



---\\ non Microsoft non disabled Windows XP/NT/2000 Services (O23)
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: B's Recorder GOLD Library General Servic (bgsvcgen) . (.B.H.A Corporation - B's Recorder GOLD Service Library.) - C:\WINDOWS\system32\bgsvcgen.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: McAfee SiteAdvisor Service (McAfee SiteAdvisor Service) . (.McAfee, Inc. - SiteAdvisor.) - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
~ Scan Services in 00mn 00s



---\\ Windows Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - D:\Microsoft Office\Office12\WINWORD.exe
~ Scan Desktop Component in 00mn 00s



---\\
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (aswBoot.exe /M:138acc1626) - File not found
~ Scan Keys in 00mn 00s



---\\ Task Planned Automatically(039)
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-1960408961-776561741-725345543-1003.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-1960408961-776561741-725345543-1003.job
[MD5.00000000000000000000000000000000] [APT] [GoogleUpdateTaskMachineCore] (...) -- C:\Program âiles\Google\Update\GoogleUpdate.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [GoogleUpdateTaskMachineUA] (...) -- C:\Program âiles\Google\Update\GoogleUpdate.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [RealUpgradeLogonTaskS-1-5-21-1960408961-776561741-725345543-1003] (...) -- C:\Program âiles\Real\RealUpgrade\realupgrade.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [RealUpgradeScheduledTaskS-1-5-21-1960408961-776561741-725345543-1003] (...) -- C:\Program âiles\Real\RealUpgrade\realupgrade.exe (.not file.)
~ Scan Scheduled Task in 00mn 00s



---\\ ActiveSetup Installed Components (O40)
O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Utilitaire d'installation du Lecteur Windows Media Microsoft.) -- C:\WINDOWS\inf\unregmp2.exe
O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} . (.Microsoft Corporation - Windows Media 6.4 Player Shim.) -- C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: Lecteur Windows Media Microsoft 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media 6.4 Player Shim.) -- C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: DirectAnimation - {283807B5-2C60-11D0-A31D-00AA00B92C03} . (.Microsoft Corporation - DirectX Media -- DirectAnimation.) -- C:\WINDOWS\system32\danim.dll
O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (...) -- C:\WINDOWS\INF\msnetmtg.inf
O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (...) -- C:\WINDOWS\INF\msmsgs.inf
O40 - ASIC: Améliorations pour la navigation - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\WINDOWS\system32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (...) -- C:\WINDOWS\INF\wmp.inf
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\WINDOWS\system32\mscories.dll
O40 - ASIC: Macromedia Shockwave Flash - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 11.1 r102.) -- C:\WINDOWS\system32\Macromed\Flash\Flash11e.ocx
~ Scan Active Setup in 00mn 00s



---\\ Drivers launched at startup (O41)
O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys
O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys
O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\system32\DRIVERS\intelppm.sys
O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys
O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys
O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys
O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS\netbios.sys
O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS\netbt.sys
O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERS\rasacd.sys
O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\system32\DRIVERS\redbook.sys
O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\WINDOWS\system32\DRIVERS\serial.sys
O41 - Driver: (SiSkp) . (.Silicon Integrated Systems Corporation - SiS VGA Driver Manager.) - C:\WINDOWS\system32\DRIVERS\srvkp.sys
O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS\tcpip.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
~ Scan Drivers in 00mn 00s



---\\ Software installed (O42)
O42 - Logiciel: 4Sync - (.Unknown owner.) [HKLM] -- 4Sync
O42 - Logiciel: 4shared Desktop - (.Unknown owner.) [HKLM] -- 4shared Desktop
O42 - Logiciel: 4shared Toolbar - (.Unknown owner.) [HKLM] -- 4shared Toolbar
O42 - Logiciel: 4shared.com Toolbar - (.4shared.com.) [HKLM] -- 4shared.com Toolbar
O42 - Logiciel: ??????.??? 4.3 ??? Internet Explorer - (.??????.) [HKLM] -- {2B9C002D-F3C1-4F8A-B29A-7F9E9B473D4D}
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Reader X - Arabic - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1025-7B44-AA0000000001}
O42 - Logiciel: Adobe Shockwave Player 11.6 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player
O42 - Logiciel: Akamai NetSession Interface - (.Unknown owner.) [HKCU] -- Akamai
O42 - Logiciel: Akamai NetSession Interface Service - (.Unknown owner.) [HKLM] -- Akamai
O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
O42 - Logiciel: Avant Browser (remove only) - (.Avant Force.) [HKLM] -- AvantBrowser
O42 - Logiciel: Babylon toolbar on IE - (.Unknown owner.) [HKLM] -- BabylonToolbar
O42 - Logiciel: BearShare - (.Musiclab, LLC.) [HKLM] -- BearShare
O42 - Logiciel: BearShare - (.Musiclab, LLC.) [HKLM] -- {5F624839-947D-46EA-BD63-FD847C1AC6F1}
O42 - Logiciel: Canon LBP2900 - (.Unknown owner.) [HKLM] -- Canon LBP2900
O42 - Logiciel: Conduit Engine - (.Conduit Ltd..) [HKLM] -- conduitEngine
O42 - Logiciel: DD PlayCam - (.Unknown owner.) [HKLM] -- DD PlayCam
O42 - Logiciel: DVB Dream version 1.4i - (.Unknown owner.) [HKLM] -- DVB Dream_is1
O42 - Logiciel: DVBViewer Technisat Edition - (.CM&V.) [HKLM] -- DVBViewer_is1
O42 - Logiciel: Facemoods Toolbar - (.Unknown owner.) [HKLM] -- facemoods
O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {1EE04769-91C4-4A06-92B7-FCAFE6BABDD9}
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {133742BA-6F46-4D3E-85AF-78631D9AD8B8}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {8E5233E1-7495-44FB-8DEB-4BE906D59619}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
O42 - Logiciel: MSXML 4.0 SP2 Parser and SDK - (.Microsoft Corporation.) [HKLM] -- {716E0306-8318-4364-8B8F-0CC4E9376BAC}
O42 - Logiciel: MainConcept DTV Decoder Standard - (.MainConcept AG.) [HKLM] -- {D4BA029E-0303-48D2-B9F9-2763D468DC64}
O42 - Logiciel: Maxthon 3 - (.Maxthon International Limited.) [HKLM] -- Maxthon3
O42 - Logiciel: McAfee SiteAdvisor - (.McAfee, Inc..) [HKLM] -- {35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}
O42 - Logiciel: MediaBar - (.Musiclab, LLC.) [HKLM] -- BearShare 2 MediaBar
O42 - Logiciel: MediaBar - (.iMesh Inc..) [HKLM] -- iMesh 1 MediaBar
O42 - Logiciel: Microsoft .NET Framework 2.0 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 2.0
O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
O42 - Logiciel: Microsoft Office Access MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Live Add-in 1.3 - (.Microsoft Corporation.) [HKLM] -- {57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}
O42 - Logiciel: Microsoft Office Outlook Connector - (.Microsoft Corporation.) [HKLM] -- {95120000-0122-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- PROPLUS
O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) [HKLM] -- {9C9CEB9D-53FD-49A7-85D2-FE674F72F24E}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {8A74E887-8F0F-4017-AF53-CBA42211AAA5}
O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {7299052b-02a4-4627-81f2-1818da5d550d}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: Miro - (.Participatory Culture Foundation.) [HKLM] -- Miro
O42 - Logiciel: Mozilla Firefox 5.0 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 5.0 (x86 fr)
O42 - Logiciel: Notepad++ - (.Unknown owner.) [HKLM] -- Notepad++
O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}
O42 - Logiciel: RealNetworks - Microsoft Visual C++ 2008 Runtime - (.RealNetworks, Inc.) [HKLM] -- {7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}
O42 - Logiciel: RealPlayer - (.RealNetworks.) [HKLM] -- RealPlayer 15.0
O42 - Logiciel: RealUpgrade 1.1 - (.RealNetworks, Inc..) [HKLM] -- {28C2DED6-325B-4CC7-983A-1777C8F7FBAB}
O42 - Logiciel: Realtek AC'97 Audio - (.Unknown owner.) [HKLM] -- {FB08F381-6533-4108-B7DD-039E11FBC27E}
O42 - Logiciel: SearchCore for Browsers - (.SearchCore.) [HKLM] -- SearchCore for Browsers
O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
O42 - Logiciel: SiS 900 PCI Fast Ethernet Adapter Driver - (.Unknown owner.) [HKLM] -- SiSLan
O42 - Logiciel: SiS VGA Utilities - (.Unknown owner.) [HKLM] -- SiS VGA Driver
O42 - Logiciel: Splash PRO - (.Mirillis.) [HKLM] -- {453E7B8A-8329-4228-8499-DF78F0FC422C}
O42 - Logiciel: Trek 320R - (.Unknown owner.) [HKLM] -- {17202B70-A9FB-483E-81A0-320610F0DE2F}
O42 - Logiciel: USB Disk Security - (.Zbshareware Lab.) [HKLM] -- USB Disk Security_is1
O42 - Logiciel: VLC media player 1.1.7 - (.VideoLAN.) [HKLM] -- VLC media player
O42 - Logiciel: VideoCam Suite 2.0 - (.Panasonic Corporation.) [HKLM] -- {9EDF1A5D-D8E0-413E-9782-75DD4A8C831B}
O42 - Logiciel: WinRAR 4.00 ???? 4 (32-??) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver
O42 - Logiciel: Windows Imaging Component - (.Microsoft Corporation.) [HKLM] -- WIC
O42 - Logiciel: Windows Installer 3.1 (KB893803) - (.Microsoft Corporation.) [HKLM] -- KB893803v2
O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {B3B487E7-6171-4376-9074-B28082CEB504}
O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3175E049-F9A9-4A3D-8F19-AC9FB04514D1}
O42 - Logiciel: Windows Live Contrôle parental - (.Microsoft Corporation.) [HKLM] -- {9FF9FDF7-F84A-4F99-B4BB-066B6F95F33D}
O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM] -- {76810709-A7D3-468D-9167-A1780C1E766C}
O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {5DD76286-9BE7-4894-A990-E905E91AC818}
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {445B183D-F4F1-45C8-B9DB-F11355CA657B}
O42 - Logiciel: Windows Live Toolbar - (.Microsoft Corporation.) [HKLM] -- {9D6524E6-15CF-4852-BF70-04FE973A3DE1}
O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {4634B21A-CC07-4396-890C-2B8168661FEA}
O42 - Logiciel: Windows iLivid Toolbar - (.Bandoo Media, Inc.) [HKLM] -- Searchqu 406 MediaBar
O42 - Logiciel: Your Uninstaller! 2010 - (.URSoft, Inc..) [HKLM] -- YU2010_is1
O42 - Logiciel: avast! Free Antivirus - (.AVAST Software.) [HKLM] -- avast
O42 - Logiciel: iLivid - (.Bandoo Media Inc..) [HKLM] -- iLivid
O42 - Logiciel: iLivid - (.Bandoo Media Inc..) [HKLM] -- {8D15E1B2-D2B7-4A17-B44B-D2DDE5981406}
O42 - Logiciel: iMesh - (.iMesh Inc..) [HKLM] -- iMesh
O42 - Logiciel: iMesh - (.iMesh Inc..) [HKLM] -- {8FB495A1-4A3F-4C1D-BD27-3F3AB2E66763}
O42 - Logiciel: jetAudio Plus VX - (.COWON.) [HKLM] -- {DF8195AF-8E6F-4487-A0EE-196F7E3F4B8A}
O42 - Logiciel: swMSM - (.Adobe Systems, Inc.) [HKLM] -- {612C34C7-5E90-47D8-9B5C-0F717DD82726}
O42 - Logiciel: ???? ??????? ????? Office 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-0401-0000-0000000FF1CE}

---\\ HKCU & HKLM Software Keys
[HKCU\Software\4shared Toolbar]
[HKCU\Software\4shared.com]
[HKCU\Software\ALWIL Software]
[HKCU\Software\AVAST Software]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\RealNetworks]
[HKCU\Software\AppDataLow]
[HKCU\Software\Avant Browser]
[HKCU\Software\BabylonToolbar]
[HKCU\Software\BearShare]
[HKCU\Software\COWON]
[HKCU\Software\Canon]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Conduit]
[HKCU\Software\DataMngr]
[HKCU\Software\Drivers]
[HKCU\Software\Gabest]
[HKCU\Software\Google]
[HKCU\Software\IM Providers]
[HKCU\Software\InstallCore]
[HKCU\Software\Intel]
[HKCU\Software\Kuma Games]
[HKCU\Software\Liter]
[HKCU\Software\Macromedia]
[HKCU\Software\MainConcept]
[HKCU\Software\Maxthon3]
[HKCU\Software\Mirillis]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\Panasonic]
[HKCU\Software\Policies]
[HKCU\Software\RealNetworks]
[HKCU\Software\Siber Systems]
[HKCU\Software\System32]
[HKCU\Software\Trolltech]
[HKCU\Software\URSoft]
[HKCU\Software\Usbfix]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\Win]
[HKCU\Software\Yahoo]
[HKCU\Software\Yandex]
[HKCU\Software\Zugo]
[HKCU\Software\conduitEngine]
[HKCU\Software\drpsu]
[HKCU\Software\facemoods.com]
[HKCU\Software\iMesh]
[HKCU\Software\ilivid]
[HKCU\Software\mediabarbs]
[HKCU\Software\mediabarim]
[HKCU\Software\nero]
[HKCU\Software\searchqutoolbar]
[HKLM\Software\4shared.com]
[HKLM\Software\ALWIL Software]
[HKLM\Software\AVAST Software]
[HKLM\Software\Adobe]
[HKLM\Software\AppDataLow]
[HKLM\Software\B.H.A]
[HKLM\Software\Babylon]
[HKLM\Software\BearShareMediabarTb]
[HKLM\Software\BisonCam]
[HKLM\Software\C07ft5Y]
[HKLM\Software\CDDB]
[HKLM\Software\COWON]
[HKLM\Software\Canon]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Conduit]
[HKLM\Software\DataMngr]
[HKLM\Software\Debug]
[HKLM\Software\Gemplus]
[HKLM\Software\Google]
[HKLM\Software\InstallShield]
[HKLM\Software\Intel]
[HKLM\Software\KYE]
[HKLM\Software\Licenses]
[HKLM\Software\Macromedia]
[HKLM\Software\McAfee.com]
[HKLM\Software\McAfee]
[HKLM\Software\MimarSinan]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\MusicNet]
[HKLM\Software\NEC]
[HKLM\Software\ODBC]
[HKLM\Software\Panasonic]
[HKLM\Software\Participatory Culture Foundation]
[HKLM\Software\Policies]
[HKLM\Software\Program Groups]
[HKLM\Software\RealNetworks]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Schlumberger]
[HKLM\Software\SearchquMediabarTb]
[HKLM\Software\Secure]
[HKLM\Software\SiS]
[HKLM\Software\Silicon Integrated Systems Corporation]
[HKLM\Software\SiteAdvisor]
[HKLM\Software\TDS]
[HKLM\Software\The Silicon Realms Toolworks]
[HKLM\Software\TrendMicro]
[HKLM\Software\VideoLAN]
[HKLM\Software\WebCam]
[HKLM\Software\WinRAR]
[HKLM\Software\Windows 3.1 Migration Status]
[HKLM\Software\Xing Technology Corp.]
[HKLM\Software\ZbshaLab]
[HKLM\Software\facemoods.com]
[HKLM\Software\genvcam]
[HKLM\Software\iMeshMediabarTb]
[HKLM\Software\ilivid]
[HKLM\Software\magnet]
[HKLM\Software\mcafeeupdater]
[HKLM\Software\mozilla.org]
[HKLM\Software\zbshareware]

J'ai suit les etaps precedentes et j'errive de celà :

TXT_LIEN_RAPPORT https://pjjoint.malekal.com/files.php?id=ZHPDiag_20120211_q11s12c8s15c6

TXT_INFO_FICHIER
TXT_TYPE text/plain
TXT_TAILLE 30356 bytes
TXT_DATE_UPLOAD 2012-02-11 01:07:00

TXT_LIEN_FICHIER
TXT_READ https://pjjoint.malekal.com/files.php?read=ZHPDiag_20120211_q11s12c8s15c6

TXT_READ_FILTRE https://pjjoint.malekal.com/files.php?read=ZHPDiag_20120211_q11s12c8s15c6&html=on&filtre=legitime

TXT_READ_SANSFILTRE https://pjjoint.malekal.com/files.php?read=ZHPDiag_20120211_q11s12c8s15c6&html=on

comment je peux continuer les autre etapes ?