Mon pc ralentit Fermé

Question

Bonjour, 

depuis quelque temps mon pc rame...le navigateur IE (version 8) est lent donc le moteur de recherche aussi (google) 

comment faire pour que mon pc soit comme avant (sans virus), comme neuf ? 

merci 



Configuration: Windows XP / Internet Explorer 7.0

naoned-breizh · Answer

ajoute de la RAM

Utilisateur anonyme · Answer

n'importe quoi ! arrete de dire des aneries

Yorde03 · Answer

Tu peux commencer par faire un tri de données si tu n'as plus de place, sinon c'est pas utile.

Fait un bon scan complet avec un anti-virus (d'ailleurs tu as quoi?).

Ensuite par ordre de chose à faire:  

-Rogue Killer:ça va faire le tri sur des processus malicieux et cachés, trouver des programmes qui te bouffe de la ressource, tu fais un scan et tu supprime tout ce qui te semble étrange.  

https://www.luanagames.com/index.fr.html   

-Glary Utility:Tu fais des scans tant que tu as des erreurs de registre.  

https://www.commentcamarche.net/telecharger/utilitaires/11165-glary-utilities/   

-CCleaner: tu scan complet et tant que tu as des erreurs tu continue =)  
https://www.commentcamarche.net/telecharger/utilitaires/5647-ccleaner/  

-Antimalware  Pareil, tu fais un scan complet et tu couple avec un anti virus ;)  
https://www.commentcamarche.net/telecharger/securite/14361-malwarebytes-anti-malware/

Utilisateur anonyme · Answer

pour l'antivirus, j'utilise : Microsoft Secutity Essentials.

J'ai fais un scan complet.

Croyez-vous que c'est un bon antivirus ?

merci

Yorde03 · Answer

Je ne pense pas que ce soit le meilleur ^^ 

Tu as utilisé les autres outils cités?

Utilisateur anonyme · Answer

oui , j'ai bien utilises les outils cités. 

Apparemment, mon pc rame moins qu'avant...

Yorde03 · Answer

N'hésite pas à refaire un tour d'anti virus et compagnie pour bien tout nettoyer. Sinon, sauvegarde tes données et retour d'usine pour le pc =O

Fish66 · Answer

Bonjour,

Nous allons effectuer un diagnostic de ton PC: 
*Télécharge ZHPDiag sur ton bureau : 

https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html 
ou : 
http://www.premiumorange.com/zeb-help-process/zhpdiag.html 

* Laisse toi guider lors de l'installation,coche "Ajouter une icône sur le bureau" et décoche la case "Exécuter ZHPDiag" 

/!\Utilisateur de Vista et Seven : Clique droit sur le logo de ZHPdiag, « exécuter en tant qu'Administrateur » 

* Clique sur l'icône représentant une loupe (« Lancer le diagnostic ») 
* Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette 
* Héberge le rapport ZHPDiag.txt sur un des sites ci dessous, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum : http://pjjoint.malekal.com/
Si indisponible, tu peux essayer avec l'un de ces liens: 
https://www.terafiles.net/
https://www.casimages.com/

* Tuto zhpdiag : 
http://www.premiumorange.com/zeb-help-process/zhpdiag.html 

Hébergement de rapport sur pjjoint.malekal.com

Rends toi sur pjjoint.malekal.com  
* Clique sur le bouton Parcourir  
* Sélectionne le fichier que tu veux héberger et clique sur Ouvrir  
* Clique sur le bouton Envoyer  
* Un message de confirmation s'affiche (L'upload a réussi ! - Le lien à transmettre à vos correspondant pour visualiser le fichier est : https://pjjoint.malekal.com/files.php?id=df5ea299241015  

* Copie le lien dans ta prochaine réponse.   

@+

Utilisateur anonyme · Answer

bonjour Fish66, 

J'ai XP et pas vista ni Win 7. 
J'ai Telecharge ZHPdiag. Un icone ZHpfix apparait sur l'ecran.. 
Lorsque j'ouvre ZHPfix, il n'y pas de loupe (pour le scan du PC).

Fish66 · Answer

Re,

ZHPFix on va l'utliser plus tard ..., Lance ZHPDiag depuis le bureau et tu vas trouver la loupe  :-)

@+

Utilisateur anonyme · Answer

voici le rapport de ZHPdiag :

Rapport de ZHPDiag v1.28.34 par Nicolas Coolman, Update du 06/03/2012
Run by laurent at 27/03/2012 09:05:44
Web site :  http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Web site :  http://nicolascoolman.skyrock.com/
State : Nouvelle version disponible


---\ Web Browser
MSIE: Internet Explorer v8.0.6001.18702 (Defaut)

---\ Windows Product Information
~ Langage: Français
Windows XP Home Edition Service Pack 3 (Build 2600)
Windows Automatic Updates : OK
Windows Genuine Advantage : OK

---\ System Information
~ Processor: x86 Family 15 Model 107 Stepping 2, AuthenticAMD
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3311 MB (73% free)
System Restore: Activé (Enable)
System drive C: has 434 GB (93%) free of 466 GB

---\ Logged in mode
~ Computer Name: LAURENT-E380B63
~ User Name: laurent
~ All Users Names: SUPPORT_388945a0, laurent, HelpAssistant, Administrateur, 
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator

---\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Documents and Settings\laurent\Application Data\
~ %Desktop% : C:\Documents and Settings\laurent\Bureau\
~ %Favorites% : C:\Documents and Settings\laurent\Favorites\
~ %LocalAppData% : C:\Documents and Settings\laurent\Local Settings\Application Data\
~ %StartMenu% : C:\Documents and Settings\laurent\Menu Démarrer\
~ %Windir% : C:\WINDOWS\
~ %System% : C:\WINDOWS\system32\

---\ DOS/Devices
A:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
C:\ Hard drive, Flash drive, Thumb drive (Free 434 Go of 466 Go)
D:\ CD-ROM drive (Free 0 Go of 1 Go)
E:\ CD-ROM drive (Not Inserted)
G:\ Hard drive, Flash drive, Thumb drive (Free 451 Go of 466 Go)



---\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services] wscsvc :  OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime :  OK
~ Scan Security Center in 00mn 00s



---\ Recherche particulière de fichiers génériques
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.14/04/2008 - 03:34:03.) -- C:\WINDOWS\Explorer.exe [1037824]
[MD5.93AD0B78C7357A05F50E594EC7C22300] - (.Microsoft Corporation - Exécuter une DLL en tant qu'application.) (.14/04/2008 - 03:34:20.) -- C:\WINDOWS\system32undll32.exe [33792]
[MD5.5C72F65D2F038E0BF481326423F9D266] - (.Microsoft Corporation - Internet Extensions for Win32.) (.17/12/2011 - 20:43:31.) -- C:\WINDOWS\system32\wininet.dll [916992]
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.14/04/2008 - 03:34:28.) -- C:\WINDOWS\system32\Winlogon.exe [512000]
[MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.17/08/2011 - 14:49:54.) -- C:\WINDOWS\system32\drivers\AFD.sys [138496]
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/04/2008 - 19:40:30.) -- C:\WINDOWS\system32\drivers\atapi.sys [96512]
[MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/04/2008 - 20:14:21.) -- C:\WINDOWS\system32\drivers\Cdfs.sys [63744]
[MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.13/04/2008 - 19:40:46.) -- C:\WINDOWS\system32\drivers\Cdrom.sys [62976]
[MD5.31F923EB2170FC172C81ABDA0045D18C] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) (.14/04/2008 - 02:57:38.) -- C:\WINDOWS\system32\drivers\Fips.sys [44672]
[MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.13/04/2008 - 17:36:05.) -- C:\WINDOWS\system32\drivers\HDAudBus.sys [144384]
[MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - (.Microsoft Corporation - Pilote de port i8042.) (.14/04/2008 - 03:00:52.) -- C:\WINDOWS\system32\drivers\i8042prt.sys [54144]
[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.13/04/2008 - 19:40:58.) -- C:\WINDOWS\system32\drivers\Imapi.sys [42112]
[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.13/04/2008 - 19:57:15.) -- C:\WINDOWS\system32\drivers\IpNat.sys [152832]
[MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.13/04/2008 - 20:19:42.) -- C:\WINDOWS\system32\drivers\IPSec.sys [75264]
[MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.15/07/2011 - 14:29:31.) -- C:\WINDOWS\system32\drivers\MRxSmb.sys [456320]
[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.13/04/2008 - 20:21:00.) -- C:\WINDOWS\system32\drivers
etBT.sys [162816]
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.13/04/2008 - 20:15:53.) -- C:\WINDOWS\system32\drivers
tfs.sys [574976]
[MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/04/2008 - 03:09:40.) -- C:\WINDOWS\system32\drivers\Parport.sys [80384]
[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.13/04/2008 - 20:19:43.) -- C:\WINDOWS\system32\drivers\Rasl2tp.sys [51328]
[MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.13/04/2008 - 19:32:51.) -- C:\WINDOWS\system32\driversdpdr.sys [196224]
[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) (.14/04/2008 - 02:57:34.) -- C:\WINDOWS\system32\driversedbook.sys [58752]
[MD5.46DE1126684369BACE4849E4FC8C43CA] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.14/04/2008 - 02:56:04.) -- C:\WINDOWS\system32\drivers\volsnap.sys [53376]
~ Scan Generic Processes in 00mn 00s



---\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/4
~ Mes musiques (My Musics) : 1/2
~ Mes Videos (My Video) : 0/0
~ Mes Favoris (My Favorites) : Non accessible (Not found)
~ Mes Documents (My Documents) : 3/457
~ Mon Bureau (My Desktop) : 0/8
~ Menu demarrer (Programs) : 5/22
~ Scan Hidden Files in 00mn 00s



---\ Processus lancés
[MD5.CFCE43B70CA0CC4DCC8ADB62B792B173] - (.Microsoft Corporation - Antimalware Service Executable.) -- c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe   [11736] [PID.]
[MD5.E6721391BD329F53B2854386DC4CA577] - (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.EXE   [16342528] [PID.1928]
[MD5.C637FC4638A96165256B28D38DE7B953] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\HP\HP Software Update\HPWuSchd2.exe   [49208] [PID.1992]
[MD5.BAF503FEDF00C58C123B100CDA7A7D4F] - (.Vuze Inc. - Pas de description.) -- C:\Program Files\Vuze\Azureus.exe   [232896] [PID.292]
[MD5.5DD9A4D0D3000FF8BB24FB430927B4FB] - (.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files\IncrediMail\bin\IncMail.exe   [366024] [PID.428]
[MD5.4543367E50BD35E7D1269D42841B156E] - (.Hewlett-Packard Development Company, L.P. - HP Digital Imaging Monitor.) -- C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe   [288472] [PID.372]
[MD5.7AEA4DF1CA68FD45DD4BBE1F0243CE7F] - (...) -- C:\Program Files\CDBurnerXP\NMSAccessU.exe   [71096] [PID.]
[MD5.C2688DA657F8881FE8162FB0773031A0] - (.WinZip Computing, S.L. - WinZip Executable.) -- C:\Program Files\WinZip\WZQKPICK32.EXE   [611144] [PID.1348]
[MD5.E9E110CDF6A063A5F9B841C36FB5CC95] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 162.1.) -- C:\WINDOWS\system32
vsvc32.exe   [155716] [PID.]
[MD5.ED78DFAD8EFCDFBC89500492C4D14645] - (...) -- C:\WINDOWS\System32\PAStiSvc.exe   [53248] [PID.]
[MD5.70EB41A4417BA0AA36AE12BF2B4D98F6] - (...) -- C:\Program Files\StartNow Toolbar\ToolbarUpdaterService.exe   [244960] [PID.]
[MD5.537D88280041CFE4C7B9DFF24B0BEEE7] - (.IncrediMail, Ltd. - IncrediMail Tray Application.) -- C:\Program Files\IncrediMail\Bin\ImApp.exe   [263624] [PID.2204]
[MD5.88029974B1C9995CFA3BD9560BBA2EEF] - (.Hewlett-Packard Development Company, L.P. - HP CUE Status.) -- C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe   [239320] [PID.2532]
[MD5.B60DDDD2D63CE41CB8C487FCFBB6419E] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.EXE   [638816] [PID.952]
[MD5.46AE705AC463F50AC714C8084A09A2A3] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe   [2211328] [PID.3420]
[MD5.5E9A6658A2A69AE7EB195113B7A2E7A9] - (.Microsoft Corporation - Application Layer Gateway Service.) -- C:\WINDOWS\System32\alg.exe   [44544] [PID.]
~ Scan Processes Running in 00mn 00s



---\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin
pgeplugin.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.99
pGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.99
pGoogleUpdate3.dll
P2 - FPN: [HKCU] [@adobe.com/Acrobat,version=5.1] - (.Adobe Systems Inc. - Adobe Acrobat Plug-In Version 5.10 for Netscape.) -- C:\Program Files\Adobe\Acrobat 5.0\Reader\Browser
ppdf32.dll
~ Scan Firefox Browser in 00mn 00s



---\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.microsoft.com/fr-fr/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.bing.com/?toHttps=1&redig=17DBE7D168544FA98200E890A8051984
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.19190 (longhorn_ie8_gdr.111214-1715)) -- C:\WINDOWS\system32\ieframe.dll
R3 - URLSearchHook: IncrediMail MediaBar Francais 2 Toolbar - {249d74a3-bd19-4657-b6ce-e62f480a20de} . (.Conduit Ltd. - Conduit Toolbar.) (6.4.0.0) -- C:\Program Files\IncrediMail_MediaBar_Francais_2\prxtbIncr.dll
~ Scan IE Browser in 00mn 00s



---\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s



---\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Scan Keys in 00mn 00s



---\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s
~ Nombre de lignes (Lines number): 20



---\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Pas de propriétaire - AcroIEHelper Module.) -- C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: IncrediMail MediaBar Francais 2 - {249d74a3-bd19-4657-b6ce-e62f480a20de} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\IncrediMail_MediaBar_Francais_2\prxtbIncr.dll
O2 - BHO: StartNow Toolbar Helper - {6E13D095-45C3-4271-9475-F3B48227DD9F} . (.Pas de propriétaire - Toolbar.) -- C:\Program Files\StartNow Toolbar\Toolbar32.dll
~ Scan BHO in 00mn 00s



---\ Internet Explorer Toolbars (O3)
O3 - Toolbar: StartNow Toolbar - {5911488E-9D1E-40ec-8CBB-06B231CC153F} . (.Pas de propriétaire - Toolbar.) -- C:\Program Files\StartNow Toolbar\Toolbar32.dll
O3 - Toolbar: IncrediMail MediaBar Francais 2 Toolbar - {249d74a3-bd19-4657-b6ce-e62f480a20de} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\IncrediMail_MediaBar_Francais_2\prxtbIncr.dll
~ Scan Toolbar in 00mn 00s



---\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [RTHDCPL] . (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.exe 
O4 - HKLM\..\Run: [Alcmtr] . (.Realtek Semiconductor Corp. - Realtek Azalia Audio - Event Monitor.) -- C:\WINDOWS\Alcmtr.exe 
O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32
vcpl.dll 
O4 - HKLM\..\Run: [nwiz] . (...) -- C:\WINDOWS\system32
wiz.exe 
O4 - HKLM\..\Run: [WinSys2] . (.Pas de propriétaire - DOT MFC Application.) -- C:\WINDOWS\system32\WinSys2.exe 
O4 - HKLM\..\Run: [NvMediaCenter] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\WINDOWS\system32
vmctray.dll 
O4 - HKLM\..\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\HP\HP Software Update\hpwuschd2.exe 
O4 - HKLM\..\Run: [PCLEPCI] . (.Pinnacle Systems GmbH - Pinnacle Performance Enhancer - PCI Tool.) -- C:\Program Files\Pinnacle\PPE\PPE.exe 
O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- C:\Program Files\Microsoft Security Client\msseces.exe 
O4 - HKCU\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe 
O4 - HKCU\..\Run: [Azureus] . (.Vuze Inc. - Pas de description.) -- C:\Program Files\Vuze\Azureus.exe 
O4 - HKCU\..\Run: [IncrediMail] . (.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files\IncrediMail\Bin\IncMail.exe 
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe 
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe 
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe 
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe 
O4 - HKUS\S-1-5-21-854245398-796845957-682003330-1004\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe 
O4 - HKUS\S-1-5-21-854245398-796845957-682003330-1004\..\Run: [Azureus] . (.Vuze Inc. - Pas de description.) -- C:\Program Files\Vuze\Azureus.exe 
O4 - HKUS\S-1-5-21-854245398-796845957-682003330-1004\..\Run: [IncrediMail] . (.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files\IncrediMail\Bin\IncMail.exe 
~ Scan Application in 00mn 00s



---\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Acrobat Reader 5.1.lnk . (.Adobe Systems Incorporated.)  -- C:\Program Files\Adobe\Acrobat 5.0\Reader\AcroRd32.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\CDBurnerXP.lnk . (.Canneverbe Limited.)  -- C:\Program Files\CDBurnerXP\cdbxpp.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\IncrediMail.lnk . (.IncrediMail, Ltd..)  -- C:\Program Files\IncrediMail\Bin\IncMail.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Security Essentials.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Microsoft Security Client\msseces.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\MSN.lnk . (.Microsoft Corporation.)  -- C:\Program Files\MSN\MSNCoreFiles\Install\msnsusii.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Vuze.lnk . (.Vuze Inc..)  -- C:\Program Files\Vuze\Azureus.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Messenger\msmsgs.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Movie Maker\moviemk.exe
O4 - Global Startup: C:\Documents And Settings\laurent\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.)  -- C:\WINDOWS\system32cimlby.exe
O4 - Global Startup: C:\Documents And Settings\laurent\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Documents And Settings\laurent\Menu Démarrer\Programmes\Lecteur Windows Media.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Documents And Settings\laurent\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Outlook Express\msimn.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Acrobat Reader 5.1.lnk . (.Adobe Systems Incorporated.)  -- C:\Program Files\Adobe\Acrobat 5.0\Reader\AcroRd32.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\CDBurnerXP.lnk . (.Canneverbe Limited.)  -- C:\Program Files\CDBurnerXP\cdbxpp.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\IncrediMail.lnk . (.IncrediMail, Ltd..)  -- C:\Program Files\IncrediMail\Bin\IncMail.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Security Essentials.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Microsoft Security Client\msseces.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\MSN.lnk . (.Microsoft Corporation.)  -- C:\Program Files\MSN\MSNCoreFiles\Install\msnsusii.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Vuze.lnk . (.Vuze Inc..)  -- C:\Program Files\Vuze\Azureus.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Messenger\msmsgs.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Movie Maker\moviemk.exe
O4 - Global Startup: C:\Documents And Settings\laurent\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.)  -- C:\WINDOWS\system32cimlby.exe
O4 - Global Startup: C:\Documents And Settings\laurent\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Documents And Settings\laurent\Menu Démarrer\Programmes\Lecteur Windows Media.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Documents And Settings\laurent\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Outlook Express\msimn.exe
~ Scan Global Startup in 00mn 00s



---\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
~ Scan IE Extra Buttons in 00mn 00s



---\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
~ Scan Winsock in 00mn 00s



---\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1332594387359
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
~ Scan Objets ActiveX in 00mn 00s



---\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{853A6E3C-EFA8-4D98-85F8-A2F9DDFFD848}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{853A6E3C-EFA8-4D98-85F8-A2F9DDFFD848}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{853A6E3C-EFA8-4D98-85F8-A2F9DDFFD848}: DhcpNameServer = 192.168.1.1
~ Scan Domain in 00mn 00s



---\ Protocole additionnel (O18)
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- C:\WINDOWS\system32\inetcomm.dll
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll
O18 - Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Filter: lzdhtml - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
~ Scan Protocole Additionnel in 00mn 00s



---\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\WINDOWS\system32\cscdll.dll
O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\system32\dimsntfy.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
~ Scan Winlogon in 00mn 00s



---\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
~ Scan SSODL in 00mn 00s



---\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll
~ Scan STS/SSO in 00mn 00s



---\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: NMSAccess (NMSAccess) . (...) - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 162.1.) - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 (Pml Driver HPZ12) . (.HP - PML Driver.) - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: STI Simulator (STI Simulator) . (...) - C:\WINDOWS\system32\PAStiSvc.exe
O23 - Service: Updater Service for StartNow Toolbar (Updater Service for StartNow Toolbar) . (...) - C:\Program Files\StartNow Toolbar\ToolbarUpdaterService.exe
~ Scan Services in 00mn 00s



---\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) -  (.not file.)
~ Scan Desktop Component in 00mn 00s



---\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ Scan Keys in 00mn 00s



---\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\MP Scheduled Scan.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\User_Feed_Synchronization-{E10325A0-523E-4A94-9BF7-B5D1E1C51109}.job
~ Scan Scheduled Task in 00mn 00s



---\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Mise à jour de la version d'Internet Explorer - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} . (.Microsoft Corporation - IE Per User Active Setup Uninstall Utility.) -- C:\WINDOWS\system32\ieudinit.exe
O40 - ASIC: Lecteur Windows Media - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Utilitaire d'installation du Lecteur Windows Media Microsoft.) -- C:\WINDOWS\inf\unregmp2.exe
O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\WINDOWS\system32\ie4uinit.exe.mui
O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - IEAK branding.) -- C:\WINDOWS\system32\iedkcs32.dll
O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} . (.Microsoft Corporation - Windows Media 6.4 Player Shim.) -- C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: Lecteur Windows Media Microsoft 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (...) -- C:\WINDOWS\INF\mswmp.inf
O40 - ASIC: DirectAnimation - {283807B5-2C60-11D0-A31D-00AA00B92C03} . (.Microsoft Corporation - DirectX Media -- DirectAnimation.) -- C:\WINDOWS\system32\danim.dll
O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (...) -- C:\WINDOWS\INF\msnetmtg.inf
O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (...) -- C:\WINDOWS\INF\msmsgs.inf
O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\WINDOWS\system32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (...) -- C:\WINDOWS\INF\wmp.inf
O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\WINDOWS\system32\ie4uinit.exe.mui
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\WINDOWS\system32\mscories.dll
O40 - ASIC: Macromedia Shockwave Flash - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 11.1 r102.) -- C:\WINDOWS\system32\Macromed\Flash\Flash11g.ocx
~ Scan Active Setup in 00mn 00s



---\ Pilotes lancés au démarrage (O41)
O41 - Driver:  (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
O41 - Driver:  (AmdK8) . (.Advanced Micro Devices - AMD Processor Driver.) - C:\WINDOWS\system32\DRIVERS\AmdK8.sys
O41 - Driver:  (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys
O41 - Driver:  (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
O41 - Driver:  (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys
O41 - Driver:  (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys
O41 - Driver:  (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys
O41 - Driver:  (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys
O41 - Driver:  (MpFilter) . (.Microsoft Corporation - Microsoft antimalware file system filter dr.) - C:\WINDOWS\system32\DRIVERS\MpFilter.sys
O41 - Driver:  (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
O41 - Driver:  (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS
etbios.sys
O41 - Driver:  (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS
etbt.sys
O41 - Driver:  (Processor) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\system32\DRIVERS\processr.sys
O41 - Driver:  (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERSasacd.sys
O41 - Driver:  (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERSdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
O41 - Driver:  (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\system32\DRIVERSedbook.sys
O41 - Driver:  (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\WINDOWS\system32\DRIVERS\serial.sys
O41 - Driver:  (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS	cpip.sys
O41 - Driver:  (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS	ermdd.sys
O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
~ Scan Drivers in 00mn 00s



---\ Logiciels installés (O42)
O42 - Logiciel: Adobe Acrobat 5.0 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Acrobat 5.0
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: ArcSoft VideoImpression 2 - (.ArcSoft.) [HKLM] -- {C765D9FF-4A34-4BF1-9F91-E9A3C60C86FC}
O42 - Logiciel: CDBurnerXP - (.CDBurnerXP.) [HKLM] -- {7E265513-8CDA-4631-B696-F40D983F3B07}_is1
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {7A25D130-4EC8-11E1-BEA4-B8AC6F97B88E}
O42 - Logiciel: HP Customer Participation Program 7.0 - (.HP.) [HKLM] -- HPExtendedCapabilities
O42 - Logiciel: HP Imaging Device Functions 7.0 - (.HP.) [HKLM] -- HP Imaging Device Functions
O42 - Logiciel: HP Photosmart Essential - (.HP.) [HKLM] -- {6994491D-D491-48F1-AE1F-E179C1FFFC2F}
O42 - Logiciel: HP Photosmart, Officejet and Deskjet 7.0.A - (.HP.) [HKLM] -- {BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}
O42 - Logiciel: HP Solution Center 7.0 - (.HP.) [HKLM] -- HP Solution Center & Imaging Support Tools
O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM] -- {2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}
O42 - Logiciel: High Definition Audio Driver Package - KB888111 - (.Microsoft Corporation.) [HKLM] -- KB888111WXPSP2
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5
O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5
O42 - Logiciel: IncrediMail - (.IncrediMail.) [HKLM] -- {5E97F3BD-CDDC-4188-9D98-532E14FABB5D}
O42 - Logiciel: IncrediMail 2.0 - (.IncrediMail Ltd..) [HKLM] -- IncrediMail
O42 - Logiciel: IncrediMail MediaBar Francais 2 Toolbar - (.IncrediMail MediaBar Francais 2.) [HKLM] -- IncrediMail_MediaBar_Francais_2 Toolbar
O42 - Logiciel: K-Lite Codec Pack 8.4.0 (Full) - (.Pas de propriétaire.) [HKLM] -- KLiteCodecPack_is1
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Medi@Show - (.Pas de propriétaire.) [HKLM] -- MediaShow
O42 - Logiciel: Micro Application - Etiquettes CD-DVD 2.0 - (.Pas de propriétaire.) [HKLM] -- {EAAE00DB-412E-467E-B784-F9205ECCD58D}
O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
O42 - Logiciel: Microsoft Antimalware - (.Microsoft Corporation.) [HKLM] -- {05BFB060-4F22-4710-B0A2-2801A1B606C5}
O42 - Logiciel: Microsoft Antimalware Service FR-FR Language Pack - (.Microsoft Corporation.) [HKLM] -- {32E9C1A5-0FDA-4483-987D-DBABF9CC1DD8}
O42 - Logiciel: Microsoft Security Client - (.Microsoft Corporation.) [HKLM] -- {54B6DC7D-8C5B-4DFB-BC15-C010A3326B2B}
O42 - Logiciel: Microsoft Security Client FR-FR Language Pack - (.Microsoft Corporation.) [HKLM] -- {50779A29-834E-4E36-BBEB-B7CABC67A825}
O42 - Logiciel: Microsoft Security Essentials - (.Microsoft Corporation.) [HKLM] -- Microsoft Security Client
O42 - Logiciel: NVIDIA Drivers - (.Pas de propriétaire.) [HKLM] -- NVIDIA Drivers
O42 - Logiciel: Package de pilotes Windows - Advanced Micro Devices (AmdK8) Processor  (05/27/2006 1.3.2.0) - (.Advanced Micro Devices.) [HKLM] -- 3BEF1AFDE8303306594E2ADA27520E6E700820AE
O42 - Logiciel: Photo Notifier and Animation Creator - (.IncrediMail Ltd..) [HKLM] -- Photo Notifier and Animation Creator
O42 - Logiciel: Photo Notifier and Animation Creator - (.Nom de votre société.) [HKLM] -- {6B7F28D4-160E-40C6-B7C8-5EC6B9734DA7}
O42 - Logiciel: Pinnacle Hollywood FX 4.6 - (.Pas de propriétaire.) [HKLM] -- Hollywood FX 4.6
O42 - Logiciel: Pinnacle PCTV - (.Pas de propriétaire.) [HKLM] -- {3C02ED4F-46B0-4E9E-87F7-47AEBA4031C8}
O42 - Logiciel: Pinnacle Systems PCI Performance Enhancer - (.Pas de propriétaire.) [HKLM] -- Pinnacle Systems PCI Performance Enhancer
O42 - Logiciel: Pinnacle TRex - (.Pas de propriétaire.) [HKLM] -- {9313E9A6-03DF-11D5-88F8-005004361016}
O42 - Logiciel: PowerDVD - (.Pas de propriétaire.) [HKLM] -- {6811CAA0-BF12-11D4-9EA1-0050BAE317E1}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2657424
O42 - Logiciel: StartNow Toolbar - (.StartNow.com.) [HKLM] -- StartNow Toolbar
O42 - Logiciel: Studio 8 - (.Pas de propriétaire.) [HKLM] -- {9C440083-6021-41C8-A4E7-FD953C537E3A}
O42 - Logiciel: Trust Webcam 14839 - (.Nom de votre société.) [HKLM] -- InstallShield_{71C8B152-0F63-4FEE-88F4-DC298B6EB446}
O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
O42 - Logiciel: VirtualDub 1.9.6 Fr - (.Trad-Fr.) [HKLM] -- {1FF7993C-23B1-4C91-B1F6-09D13C57A06A}_is1
O42 - Logiciel: VirtualDubMOD 1.5.10.3 Fr - (.Trad-Fr.) [HKLM] -- {B158F76F-76AB-4115-A4F0-4C6EF6956093}_is1
O42 - Logiciel: Vuze - (.Vuze Inc..) [HKLM] -- 8461-7759-5462-8226
O42 - Logiciel: WinDev 9 - (.Pas de propriétaire.) [HKCU] -- WinDev9
O42 - Logiciel: WinZip 16.0 - (.WinZip Computing, S.L. .) [HKLM] -- {CD95F661-A5C4-44F5-A6AA-ECDD91C240CC}
O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130) - (.Microsoft Corporation.) [HKLM] -- KB892130
O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8
O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service

---\ HKCU & HKLM Software Keys
[HKCU\Software\Adobe]
[HKCU\Software\Azureus]
[HKCU\Software\Canneverbe Limited]
[HKCU\Software\Classes]
[HKCU\Software\Conduit]
[HKCU\Software\CyberLink]
[HKCU\Software\DScaler5]
[HKCU\Software\Freeware]
[HKCU\Software\GNU]
[HKCU\Software\Gabest]
[HKCU\Software\Google]
[HKCU\Software\Haali]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\IM]
[HKCU\Software\ImInstaller]
[HKCU\Software\IncrediMail]
[HKCU\Software\IncrediMail_MediaBar_Francais_2]
[HKCU\Software\Intel]
[HKCU\Software\LAV]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\Macromedia]
[HKCU\Software\MediaInfo]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Netscape]
[HKCU\Software\Nico Mak Computing]
[HKCU\Software\PC SOFT]
[HKCU\Software\Pinnacle Systems]
[HKCU\Software\Policies]
[HKCU\Software\PriceGong]
[HKCU\Software\Realtek]
[HKCU\Software\StartNow Toolbar]
[HKCU\Software\Trolltech]
[HKCU\Software\VirtualDub.org]
[HKCU\Software\WinZip Computing]
[HKCU\Software\Zugo]
[HKCU\Software\ej-technologies]
[HKCU\Software\madFlac]
[HKCU\Software\madshi]
[HKLM\Software\AMD]
[HKLM\Software\Adobe]
[HKLM\Software\ArcSoft]
[HKLM\Software\Azureus]
[HKLM\Software\BrowserChoice]
[HKLM\Software\Bunndle]
[HKLM\Software\C07ft5Y]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Conduit]
[HKLM\Software\CyberLink]
[HKLM\Software\GNU]
[HKLM\Software\Gabest]
[HKLM\Software\Gemplus]
[HKLM\Software\Google]
[HKLM\Software\HP]
[HKLM\Software\HaaliMkx]
[HKLM\Software\Hewlett-Packard]
[HKLM\Software\ICE]
[HKLM\Software\ImInstaller]
[HKLM\Software\IncrediMail_MediaBar_Francais_2]
[HKLM\Software\InstallShield]
[HKLM\Software\Intel]
[HKLM\Software\InterVideo]
[HKLM\Software\KLCodecPack]
[HKLM\Software\LAV]
[HKLM\Software\MSI]
[HKLM\Software\Macromedia]
[HKLM\Software\Micro Application]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\Nico Mak Computing]
[HKLM\Software\ODBC]
[HKLM\Software\Pinnacle Systems]
[HKLM\Software\PixArt]
[HKLM\Software\Policies]
[HKLM\Software\Program Groups]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Schlumberger]
[HKLM\Software\Secure]
[HKLM\Software\TQ566808]
[HKLM\Software\Trad-FR]
[HKLM\Software\Windows 3.1 Migration Status]
[HKLM\Software\ej-technologies]
[HKLM\Software\magnet]
~ Scan Softwares in 00mn 00s



---\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 24/03/2012 - 12:48:54 - [29,224] ----D- C:\Program Files\Adobe
O43 - CFD: 25/03/2012 - 12:50:10 - [15,127] ----D- C:\Program Files\ADULTES sur CD - Ant Movie Catalog 4.1.0.2
O43 - CFD: 24/03/2012 - 13:24:06 - [138,479] ----D- C:\Program Files\ArcSoft
O43 - CFD: 25/03/2012 - 12:57:06 - [17,312] ----D- C:\Program Files\CDBurnerXP
O43 - CFD: 24/03/2012 - 12:13:50 - [0] ----D- C:\Program Files\ComPlus Applications
O43 - CFD: 26/03/2012 - 11:22:08 - [0,609] ----D- C:\Program Files\Conduit
O43 - CFD: 26/03/2012 - 12:58:48 - [28,604] ----D- C:\Program Files\CyberLink
O43 - CFD: 24/03/2012 - 12:41:46 - [2,786] ----D- C:\Program Files\DIFX
O43 - CFD: 24/03/2012 - 23:35:18 - [6,510] ----D- C:\Program Files\Driver Whiz
O43 - CFD: 24/03/2012 - 13:25:06 - [56,734] ----D- C:\Program Files\Fichiers communs
O43 - CFD: 24/03/2012 - 23:38:54 - [137,827] ----D- C:\Program Files\Google
O43 - CFD: 24/03/2012 - 13:00:38 - [1,651] ----D- C:\Program Files\Hewlett-Packard
O43 - CFD: 25/03/2012 - 13:47:28 - [139,212] ----D- C:\Program Files\HP
O43 - CFD: 26/03/2012 - 11:20:32 - [26,338] ----D- C:\Program Files\IncrediMail
O43 - CFD: 26/03/2012 - 11:22:04 - [4,795] ----D- C:\Program Files\IncrediMail_MediaBar_Francais_2
O43 - CFD: 26/03/2012 - 13:08:32 - [20,024] --H-D- C:\Program Files\InstallShield Installation Information
O43 - CFD: 26/03/2012 - 03:04:06 - [4,420] ----D- C:\Program Files\Internet Explorer
O43 - CFD: 26/03/2012 - 11:06:00 - [56,244] ----D- C:\Program Files\K-Lite Codec Pack
O43 - CFD: 24/03/2012 - 22:24:34 - [2,053] ----D- C:\Program Files\Messenger
O43 - CFD: 26/03/2012 - 13:08:34 - [437,842] ----D- C:\Program Files\Micro Application
O43 - CFD: 24/03/2012 - 12:16:14 - [0] ----D- C:\Program Files\microsoft frontpage
O43 - CFD: 26/03/2012 - 01:22:36 - [17,554] ----D- C:\Program Files\Microsoft Security Client
O43 - CFD: 25/03/2012 - 13:51:58 - [9,894] ----D- C:\Program Files\Movie Maker
O43 - CFD: 26/03/2012 - 03:08:54 - [0,025] ----D- C:\Program Files\MSBuild
O43 - CFD: 24/03/2012 - 12:12:46 - [18,385] ----D- C:\Program Files\MSN
O43 - CFD: 24/03/2012 - 12:13:10 - [8,341] ----D- C:\Program Files\MSN Gaming Zone
O43 - CFD: 24/03/2012 - 15:25:14 - [0] ----D- C:\Program Files\MSXML 4.0
O43 - CFD: 24/03/2012 - 22:16:56 - [3,133] ----D- C:\Program Files\NetMeeting
O43 - CFD: 25/03/2012 - 12:50:20 - [15,127] ----D- C:\Program Files\Nouveau dossier
O43 - CFD: 24/03/2012 - 12:13:18 - [0,002] ----D- C:\Program Files\Online Services
O43 - CFD: 25/03/2012 - 13:50:44 - [4,176] ----D- C:\Program Files\Outlook Express
O43 - CFD: 26/03/2012 - 11:22:22 - [2,630] ----D- C:\Program Files\Photo Notifier and Animation Creator
O43 - CFD: 26/03/2012 - 09:22:10 - [422,671] ----D- C:\Program Files\Pinnacle
O43 - CFD: 24/03/2012 - 12:44:58 - [47,777] ----D- C:\Program Files\Realtek
O43 - CFD: 26/03/2012 - 03:08:38 - [34,715] ----D- C:\Program Files\Reference Assemblies
O43 - CFD: 24/03/2012 - 12:15:02 - [0,001] ----D- C:\Program Files\Services en ligne
O43 - CFD: 26/03/2012 - 11:05:50 - [1,176] ----D- C:\Program Files\StartNow Toolbar
O43 - CFD: 24/03/2012 - 13:25:06 - [0,113] ----D- C:\Program Files\Trust
O43 - CFD: 24/03/2012 - 12:47:26 - [0,000] --H-D- C:\Program Files\Uninstall Information
O43 - CFD: 26/03/2012 - 12:02:02 - [3,947] ----D- C:\Program Files\VirtualDub
O43 - CFD: 26/03/2012 - 11:42:56 - [6,041] ----D- C:\Program Files\VirtualDubMOD
O43 - CFD: 25/03/2012 - 02:13:24 - [102,162] ----D- C:\Program Files\Vuze
O43 - CFD: 26/03/2012 - 12:59:06 - [3,370] ----D- C:\Program Files\Windows Media Player
O43 - CFD: 24/03/2012 - 22:16:50 - [3,760] ----D- C:\Program Files\Windows NT
O43 - CFD: 24/03/2012 - 12:15:06 - [0] --H-D- C:\Program Files\WindowsUpdate
O43 - CFD: 25/03/2012 - 12:15:32 - [81,621] ----D- C:\Program Files\WinZip
O43 - CFD: 24/03/2012 - 12:16:14 - [0] ----D- C:\Program Files\xerox
O43 - CFD: 27/03/2012 - 09:05:48 - [10,095] ----D- C:\Program Files\ZHPDiag
O43 - CFD: 24/03/2012 - 22:46:32 - [0,208] ----D- C:\Program Files\Fichiers Communs\Adobe
O43 - CFD: 24/03/2012 - 13:24:24 - [4,015] ----D- C:\Program Files\Fichiers Communs\ArcSoft
O43 - CFD: 24/03/2012 - 13:00:26 - [0,436] ----D- C:\Program Files\Fichiers Communs\Hewlett-Packard
O43 - CFD: 24/03/2012 - 13:01:34 - [2,264] ----D- C:\Program Files\Fichiers Communs\HP
O43 - CFD: 24/03/2012 - 13:24:56 - [7,487] ----D- C:\Program Files\Fichiers Communs\InstallShield
O43 - CFD: 24/03/2012 - 13:40:36 - [11,501] ----D- C:\Program Files\Fichiers Communs\Microsoft Shared
O43 - CFD: 24/03/2012 - 12:14:24 - [0,271] ----D- C:\Program Files\Fichiers Communs\MSSoap
O43 - CFD: 24/03/2012 - 13:04:56 - [0] ----D- C:\Program Files\Fichiers Communs\ODBC
O43 - CFD: 24/03/2012 - 13:11:54 - [15,640] ----D- C:\Program Files\Fichiers Communs\PC SOFT
O43 - CFD: 24/03/2012 - 13:25:06 - [4,796] ----D- C:\Program Files\Fichiers Communs\PCCamera
O43 - CFD: 24/03/2012 - 12:14:28 - [0,008] ----D- C:\Program Files\Fichiers Communs\Services
O43 - CFD: 24/03/2012 - 13:04:54 - [3,612] ----D- C:\Program Files\Fichiers Communs\SpeechEngines
O43 - CFD: 24/03/2012 - 22:16:48 - [6,496] ----D- C:\Program Files\Fichiers Communs\System
O43 - CFD: 25/03/2012 - 02:07:50 - [0,000] ----D- C:\Documents and Settings\laurent\Application Data\Adobe
O43 - CFD: 27/03/2012 - 09:03:58 - [14,195] ----D- C:\Documents and Settings\laurent\Application Data\Azureus
O43 - CFD: 25/03/2012 - 12:57:18 - [0,001] ----D- C:\Documents and Settings\laurent\Application Data\Canneverbe Limited
O43 - CFD: 25/03/2012 - 12:56:26 - [0] ----D- C:\Documents and Settings\laurent\Application Data\GetRightToGo
O43 - CFD: 24/03/2012 - 23:39:12 - [2,981] ----D- C:\Documents and Settings\laurent\Application Data\Google
O43 - CFD: 24/03/2012 - 13:02:00 - [0,005] ----D- C:\Documents and Settings\laurent\Application Data\HP
O43 - CFD: 26/03/2012 - 03:24:04 - [0,033] ----D- C:\Documents and Settings\laurent\Application Data\HpUpdate
O43 - CFD: 24/03/2012 - 12:19:28 - [0] ----D- C:\Documents and Settings\laurent\Application Data\Identities
O43 - CFD: 24/03/2012 - 12:41:10 - [0] ----D- C:\Documents and Settings\laurent\Application Data\InstallShield
O43 - CFD: 24/03/2012 - 12:48:54 - [0] ----D- C:\Documents and Settings\laurent\Application Data\InterTrust
O43 - CFD: 25/03/2012 - 02:07:50 - [0,001] ----D- C:\Documents and Settings\laurent\Application Data\Macromedia
O43 - CFD: 26/03/2012 - 13:02:52 - [0,000] ----D- C:\Documents and Settings\laurent\Application Data\Media Player Classic
O43 - CFD: 24/03/2012 - 12:49:46 - [1,721] -S--D- C:\Documents and Settings\laurent\Application Data\Microsoft
O43 - CFD: 27/03/2012 - 09:03:44 - [0,340] ----D- C:\Documents and Settings\laurent\Application Data\PriceGong
O43 - CFD: 26/03/2012 - 11:22:04 - [0,187] ----D- C:\Documents and Settings\laurent\Local Settings\Application Data\Conduit
O43 - CFD: 24/03/2012 - 23:37:54 - [714,374] ----D- C:\Documents and Settings\laurent\Local Settings\Application Data\Google
O43 - CFD: 26/03/2012 - 11:23:52 - [24,856] ----D- C:\Documents and Settings\laurent\Local Settings\Application Data\IM
O43 - CFD: 26/03/2012 - 11:25:32 - [5,578] ----D- C:\Documents and Settings\laurent\Local Settings\Application Data\IncrediMail_MediaBar_Francais_2
O43 - CFD: 24/03/2012 - 23:34:02 - [1,295] ----D- C:\Documents and Settings\laurent\Local Settings\Application Data\Microsoft
O43 - CFD: 24/03/2012 - 23:38:06 - [0,003] ----D- C:\Documents and Settings\laurent\Local Settings\Application Data\PC_Drivers_Headquarters
O43 - CFD: 26/03/2012 - 11:22:04 - [0] ----D- C:\Documents and Settings\laurent\Local Settings\Application Data\Temp
O43 - CFD: 25/03/2012 - 12:15:38 - [0,250] ----D- C:\Documents and Settings\laurent\Local Settings\Application Data\WinZip
~ Scan Program Folder in 00mn 05s



---\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.EFE9640C92635D50447FCD012C71EAE6] - 27/03/2012 - 07:30:09 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log   [2007053]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 27/03/2012 - 07:18:32 ---A- . (...) -- C:\WINDOWS\0.log   [0]
O44 - LFC:[MD5.5EECD5DDA9F7859B822ABF79BF714205] - 27/03/2012 - 07:18:12 ---A- . (...) -- C:\WINDOWS\wiaservc.log   [50]
O44 - LFC:[MD5.EFD72270948A04D09ADE5262A8D93BBF] - 27/03/2012 - 07:18:11 ---A- . (...) -- C:\WINDOWS\wiadebug.log   [159]
O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 27/03/2012 - 07:17:54 -S-A- . (...) -- C:\WINDOWS\bootstat.dat   [2048]
O44 - LFC:[MD5.CB635B4A0E549D580AD7604DB1B71E26] - 27/03/2012 - 00:51:13 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt   [32340]
O44 - LFC:[MD5.CC646D5C0360D58CF67061EDA45CF732] - 26/03/2012 - 23:15:59 ---A- . (...) -- C:\WINDOWS\system32\FNTCACHE.DAT   [165912]
O44 - LFC:[MD5.A9BA2979E4FD3E613B3C1424D75FD4F8] - 26/03/2012 - 13:30:54 ---A- . (...) -- C:\WINDOWS\setupapi.log   [977748]
O44 - LFC:[MD5.726632B325ECE7A76C85BA3E0F700FBB] - 26/03/2012 - 12:07:46 ---A- . (...) -- C:\WINDOWS\NAVIGMA.INI   [40]
O44 - LFC:[MD5.8CC8E674EFF3E0B20BF8706899E1808F] - 26/03/2012 - 11:59:04 ---A- . (...) -- C:\WINDOWS\wmsetup.log   [3628]
O44 - LFC:[MD5.89112689A307A65769CA942079CACE9B] - 26/03/2012 - 11:59:04 ---A- . (.The Duck Corporation - TrueMotion 2.0 Decompressor.) -- C:\WINDOWS\system32	m20dec.ax   [140800]
O44 - LFC:[MD5.6D6F4B1886E91EB37ABCCAD19C561EE0] - 26/03/2012 - 11:59:03 ---A- . (...) -- C:\WINDOWS\system32\amcompat.tlb   [16832]
O44 - LFC:[MD5.A32B14BE5EDAE794FCE1A9E970827509] - 26/03/2012 - 11:59:03 ---A- . (...) -- C:\WINDOWS\system32
scompat.tlb   [23392]
O44 - LFC:[MD5.885CDCD31DD7BAE6480399C73D631EEB] - 26/03/2012 - 11:54:28 ---A- . (...) -- C:\WINDOWS\system32\wpa.dbl   [2422]
O44 - LFC:[MD5.F47597B1D3CDA1B9419787C36141730F] - 26/03/2012 - 11:25:49 ---A- . (...) -- C:\WINDOWS\system32\PerfStringBackup.INI   [1049410]
O44 - LFC:[MD5.7163F88ACC82AB6E63F694AC349E6C64] - 26/03/2012 - 11:25:49 ---A- . (...) -- C:\WINDOWS\system32\perfc009.dat   [67312]
O44 - LFC:[MD5.FF143ABA1B0680BC99E0A326EAB043B9] - 26/03/2012 - 11:25:49 ---A- . (...) -- C:\WINDOWS\system32\perfc00C.dat   [80508]
O44 - LFC:[MD5.09A4E325F3862EA40F5C18D3DD10E9EB] - 26/03/2012 - 11:25:49 ---A- . (...) -- C:\WINDOWS\system32\perfh009.dat   [432356]
O44 - LFC:[MD5.D7BF65E0EFBB16528B41185CDB315752] - 26/03/2012 - 11:25:49 ---A- . (...) -- C:\WINDOWS\system32\perfh00C.dat   [500482]
O44 - LFC:[MD5.F9732DECFD8FEE77B0A6504B55EC1184] - 26/03/2012 - 11:18:34 ---A- . (...) -- C:\WINDOWS\KB961118.log   [11438]
O44 - LFC:[MD5.81AA5C72B62533EB2994395E9F591F3F] - 26/03/2012 - 11:18:34 ---A- . (...) -- C:\WINDOWS\comsetup.log   [322095]
O44 - LFC:[MD5.4F939E4CA1F27F8A137F32D3E9B9BD5D] - 26/03/2012 - 11:18:34 ---A- . (...) -- C:\WINDOWS\iis6.log   [204305]
O44 - LFC:[MD5.5F115B1852B8A9F6DC3911B876E5DCBF] - 26/03/2012 - 11:18:34 ---A- . (...) -- C:\WINDOWS\imsins.log   [1374]
O44 - LFC:[MD5.799F08490D82E3974836311B47CA2BD9] - 26/03/2012 - 11:18:34 ---A- . (...) -- C:\WINDOWS
tdtcsetup.log   [192792]
O44 - LFC:[MD5.D8C6ED9EB1ADF962A78BA7337CAFB947] - 26/03/2012 - 11:18:34 ---A- . (...) -- C:\WINDOWS\ocgen.log   [620490]
O44 - LFC:[MD5.F5CCB883A9CC10E5E5DEAE3FC288F64D] - 26/03/2012 - 11:18:34 ---A- . (...) -- C:\WINDOWS\ocmsn.log   [51662]
O44 - LFC:[MD5.96732334173FC841A22287A25857B1E5] - 26/03/2012 - 11:18:34 ---A- . (...) -- C:\WINDOWS	soc.log   [493338]
O44 - LFC:[MD5.C26BD8747378B330046CB7D87224AD74] - 26/03/2012 - 11:18:33 ---A- . (...) -- C:\WINDOWS\FaxSetup.log   [1285198]
O44 - LFC:[MD5.80BCF04351DBD91480C870D94E6F6D15] - 26/03/2012 - 11:18:33 ---A- . (...) -- C:\WINDOWS\msgsocm.log   [64369]
O44 - LFC:[MD5.84B4F61F59A421BD85D97B35D194B42B] - 26/03/2012 - 08:22:22 ---A- . (.MindVision Software - Uninstall application file.) -- C:\WINDOWS\unvise32.exe   [86016]
O44 - LFC:[MD5.DC17DD0189B0C36D863B4DD0A036C10F] - 26/03/2012 - 08:22:00 ---A- . (...) -- C:\WINDOWS\WMSysPr9.prx   [316640]
O44 - LFC:[MD5.181CA4A24D29B27339FD7F678B1E2AA6] - 26/03/2012 - 08:20:20 ---A- . (...) -- C:\WINDOWS\DirectX.log   [2245]
O44 - LFC:[MD5.600F1CE8E71892617B7538351174BC91] - 26/03/2012 - 07:59:59 ---A- . (...) -- C:\WINDOWS\aksdrvsetup.log   [4043]
O44 - LFC:[MD5.D7051CEE60FDF4957739EFD5F854CBAF] - 26/03/2012 - 07:58:26 ---A- . (...) -- C:\WINDOWS\spupdsvc.log   [84501]
O44 - LFC:[MD5.2A3F44533F460C9A2BCB858A29B414FE] - 26/03/2012 - 02:07:56 ---A- . (...) -- C:\WINDOWS\updspapi.log   [200009]
O44 - LFC:[MD5.4AC9F9CCB6BE5A819FCF414109CFC252] - 25/03/2012 - 12:58:10 ---A- . (...) -- C:\WINDOWS\KB2641653.log   [40395]
O44 - LFC:[MD5.04C2C674043C249168388317F19218F0] - 25/03/2012 - 12:58:10 ---A- . (...) -- C:\WINDOWS\imsins.BAK   [1374]
O44 - LFC:[MD5.E097A5DA6C637A0B4CE078E045155CC8] - 25/03/2012 - 12:58:05 ---A- . (...) -- C:\WINDOWS\KB2387149.log   [39981]
O44 - LFC:[MD5.8C2712F8B5D7F7385693477C137FC82F] - 25/03/2012 - 12:57:58 ---A- . (...) -- C:\WINDOWS\KB2479943.log   [54681]
O44 - LFC:[MD5.3BF46DBC478B1B1CA5B4754C08315814] - 25/03/2012 - 12:57:53 ---A- . (...) -- C:\WINDOWS\KB2564958.log   [37084]
O44 - LFC:[MD5.325C9B5640930625F54E29A300CAA032] - 25/03/2012 - 12:57:47 ---A- . (...) -- C:\WINDOWS\KB2478971.log   [52749]
O44 - LFC:[MD5.4CA1C41C714C7E7CFE152258C7F389E6] - 25/03/2012 - 12:57:42 ---A- . (...) -- C:\WINDOWS\KB2544893-v2.log   [53379]
O44 - LFC:[MD5.2B6FD0DCB7F90F88161639306C845794] - 25/03/2012 - 12:57:37 ---A- . (...) -- C:\WINDOWS\KB2345886.log   [52329]
O44 - LFC:[MD5.78816331E275C016D7F9771969725BC8] - 25/03/2012 - 12:57:32 ---A- . (...) -- C:\WINDOWS\KB2536276-v2.log   [37509]
O44 - LFC:[MD5.0D51FEC876C502AD98E2F98B9583A152] - 25/03/2012 - 12:57:26 ---A- . (...) -- C:\WINDOWS\KB2646524.log   [52284]
O44 - LFC:[MD5.3A2FA34D8BA15C84C0C2FF221CA17935] - 25/03/2012 - 12:57:20 ---A- . (...) -- C:\WINDOWS\KB2585542.log   [51804]
O44 - LFC:[MD5.AAED25CB2D25FB800BB36B004C483EE3] - 25/03/2012 - 12:57:14 ---A- . (...) -- C:\WINDOWS\KB2631813.log   [50369]
O44 - LFC:[MD5.3CFD385E10036CA80F5BF8C1551B7F37] - 25/03/2012 - 12:57:08 ---A- . (...) -- C:\WINDOWS\KB2296011.log   [34186]
O44 - LFC:[MD5.2BBAF7D37E938C990E064B4605A580A3] - 25/03/2012 - 12:57:04 ---A- . (...) -- C:\WINDOWS\KB2115168.log   [52297]
O44 - LFC:[MD5.118E888EA1A236FF7252D6B81B81DB3A] - 25/03/2012 - 12:57:00 ---A- . (...) -- C:\WINDOWS\KB975558.log   [35130]
O44 - LFC:[MD5.314CD3E7982DA76AD36731F99E1AAA12] - 25/03/2012 - 12:56:55 ---A- . (...) -- C:\WINDOWS\KB2378111.log   [34395]
O44 - LFC:[MD5.DC13C24C24A3445104685D956A8FFFE7] - 25/03/2012 - 12:56:49 ---A- . (...) -- C:\WINDOWS\KB951978.log   [49715]
O44 - LFC:[MD5.8903D570CD11CDE52B7CB2DE47C76C0E] - 25/03/2012 - 12:56:40 ---A- . (...) -- C:\WINDOWS\KB2443105.log   [47672]
O44 - LFC:[MD5.F02A818507CE17B0D0D4863583F41AC6] - 25/03/2012 - 12:56:36 ---A- . (...) -- C:\WINDOWS\KB2481109.log   [50827]
O44 - LFC:[MD5.E185BDA84E5F03F4E1D8DCA30E

Fish66 · Answer

Bonjour,

C'est bien le rapport mais il est incomplet, héberge le stp comme suit :

Rends toi sur pjjoint.malekal.com  
* Clique sur le bouton Parcourir  
* Sélectionne le fichier que tu veux héberger et clique sur Ouvrir  
* Clique sur le bouton Envoyer  
* Un message de confirmation s'affiche (L'upload a réussi ! - Le lien à transmettre à vos correspondant pour visualiser le fichier est : https://pjjoint.malekal.com/files.php?id=df5ea299241015  

* Copie le lien dans ta prochaine réponse.   

@+

Utilisateur anonyme · Answer

voila ce que j'ai fais dans l'ordre :

1) j'ai fais un scan 
2) j'ai effectué une mise a jour  
3) J'ai fais un copier/coller du rapport du scan 
4) Je l'ai envoye sur l'hebergeur pjjoint.malekal.com  

J'aurai peut etre du faire le contraire ou d'avord commencer par faire la mise à jour puis un scan et l'envoyé sur l'hebergeur pjjoint.malekal.com  
, non ?  

Quoiqu'il en soit, voici le nouveu rapport , apres la mise à jour :

Rapport de ZHPDiag v1.28.34 par Nicolas Coolman, Update du 06/03/2012  
Run by laurent at 27/03/2012 11:20:45  
Web site :  http://www.premiumorange.com/zeb-help-process/zhpdiag.html  
Web site :  http://nicolascoolman.skyrock.com/  
State : Problème connexion internet  


---\ Web Browser  
MSIE: Internet Explorer v8.0.6001.18702 (Defaut)  

---\ Windows Product Information  
~ Langage: Français  
Windows XP Home Edition Service Pack 3 (Build 2600)  
Windows Automatic Updates : OK  
Windows Genuine Advantage : OK  

---\ System Information  
~ Processor: x86 Family 15 Model 107 Stepping 2, AuthenticAMD  
~ Operating System: 32 Bits  
Boot mode: Normal (Normal boot)  
Total RAM: 3311 MB (67% free)  
System Restore: Activé (Enable)  
System drive C: has 434 GB (93%) free of 466 GB  

---\ Logged in mode  
~ Computer Name: LAURENT-E380B63  
~ User Name: laurent  
~ All Users Names: SUPPORT_388945a0, laurent, HelpAssistant, Administrateur,   
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89  
Logged in as Administrator  

---\ Environnement Variables  
~ System Unit : C:\  
~ %AppData% : C:\Documents and Settings\laurent\Application Data\  
~ %Desktop% : C:\Documents and Settings\laurent\Bureau\  
~ %Favorites% : C:\Documents and Settings\laurent\Favorites\  
~ %LocalAppData% : C:\Documents and Settings\laurent\Local Settings\Application Data\  
~ %StartMenu% : C:\Documents and Settings\laurent\Menu Démarrer\  
~ %Windir% : C:\WINDOWS\  
~ %System% : C:\WINDOWS\system32\  

---\ DOS/Devices  
A:\ Floppy drive, Flash card reader, USB Key (Not Inserted)  
C:\ Hard drive, Flash drive, Thumb drive (Free 434 Go of 466 Go)  
D:\ CD-ROM drive (Free 0 Go of 1 Go)  
E:\ CD-ROM drive (Not Inserted)  
G:\ Hard drive, Flash drive, Thumb drive (Free 451 Go of 466 Go)  



---\ Security Center & Tools Informations  
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK  
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK  
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK  
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK  
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK  
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK  
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK  
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK  
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK  
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK  
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK  
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK  
[HKLM\SYSTEM\CurrentControlSet\Services] wscsvc :  OK  
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime :  OK  
~ Scan Security Center in 00mn 00s  



---\ Recherche particulière de fichiers génériques  
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.14/04/2008 - 03:34:03.) -- C:\WINDOWS\Explorer.exe [1037824]  
[MD5.93AD0B78C7357A05F50E594EC7C22300] - (.Microsoft Corporation - Exécuter une DLL en tant qu'application.) (.14/04/2008 - 03:34:20.) -- C:\WINDOWS\system32undll32.exe [33792]  
[MD5.5C72F65D2F038E0BF481326423F9D266] - (.Microsoft Corporation - Internet Extensions for Win32.) (.17/12/2011 - 20:43:31.) -- C:\WINDOWS\system32\wininet.dll [916992]  
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.14/04/2008 - 03:34:28.) -- C:\WINDOWS\system32\Winlogon.exe [512000]  
[MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.17/08/2011 - 14:49:54.) -- C:\WINDOWS\system32\drivers\AFD.sys [138496]  
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/04/2008 - 19:40:30.) -- C:\WINDOWS\system32\drivers\atapi.sys [96512]  
[MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/04/2008 - 20:14:21.) -- C:\WINDOWS\system32\drivers\Cdfs.sys [63744]  
[MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.13/04/2008 - 19:40:46.) -- C:\WINDOWS\system32\drivers\Cdrom.sys [62976]  
[MD5.31F923EB2170FC172C81ABDA0045D18C] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) (.14/04/2008 - 02:57:38.) -- C:\WINDOWS\system32\drivers\Fips.sys [44672]  
[MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.13/04/2008 - 17:36:05.) -- C:\WINDOWS\system32\drivers\HDAudBus.sys [144384]  
[MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - (.Microsoft Corporation - Pilote de port i8042.) (.14/04/2008 - 03:00:52.) -- C:\WINDOWS\system32\drivers\i8042prt.sys [54144]  
[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.13/04/2008 - 19:40:58.) -- C:\WINDOWS\system32\drivers\Imapi.sys [42112]  
[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.13/04/2008 - 19:57:15.) -- C:\WINDOWS\system32\drivers\IpNat.sys [152832]  
[MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.13/04/2008 - 20:19:42.) -- C:\WINDOWS\system32\drivers\IPSec.sys [75264]  
[MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.15/07/2011 - 14:29:31.) -- C:\WINDOWS\system32\drivers\MRxSmb.sys [456320]  
[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.13/04/2008 - 20:21:00.) -- C:\WINDOWS\system32\drivers
etBT.sys [162816]  
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.13/04/2008 - 20:15:53.) -- C:\WINDOWS\system32\drivers
tfs.sys [574976]  
[MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/04/2008 - 03:09:40.) -- C:\WINDOWS\system32\drivers\Parport.sys [80384]  
[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.13/04/2008 - 20:19:43.) -- C:\WINDOWS\system32\drivers\Rasl2tp.sys [51328]  
[MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.13/04/2008 - 19:32:51.) -- C:\WINDOWS\system32\driversdpdr.sys [196224]  
[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) (.14/04/2008 - 02:57:34.) -- C:\WINDOWS\system32\driversedbook.sys [58752]  
[MD5.46DE1126684369BACE4849E4FC8C43CA] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.14/04/2008 - 02:56:04.) -- C:\WINDOWS\system32\drivers\volsnap.sys [53376]  
~ Scan Generic Processes in 00mn 00s  



---\ Etat des fichiers cachés (Caché/Total)  
~ Mes images (My Pictures) : 1/4  
~ Mes musiques (My Musics) : 1/2  
~ Mes Videos (My Video) : 0/0  
~ Mes Favoris (My Favorites) : Non accessible (Not found)  
~ Mes Documents (My Documents) : 3/458  
~ Mon Bureau (My Desktop) : 0/8  
~ Menu demarrer (Programs) : 5/22  
~ Scan Hidden Files in 00mn 00s  



---\ Processus lancés  
[MD5.CFCE43B70CA0CC4DCC8ADB62B792B173] - (.Microsoft Corporation - Antimalware Service Executable.) -- c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe   [11736] [PID.]  
[MD5.E6721391BD329F53B2854386DC4CA577] - (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.EXE   [16342528] [PID.1928]  
[MD5.C637FC4638A96165256B28D38DE7B953] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\HP\HP Software Update\HPWuSchd2.exe   [49208] [PID.1992]  
[MD5.BAF503FEDF00C58C123B100CDA7A7D4F] - (.Vuze Inc. - Pas de description.) -- C:\Program Files\Vuze\Azureus.exe   [232896] [PID.292]  
[MD5.5DD9A4D0D3000FF8BB24FB430927B4FB] - (.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files\IncrediMail\bin\IncMail.exe   [366024] [PID.428]  
[MD5.4543367E50BD35E7D1269D42841B156E] - (.Hewlett-Packard Development Company, L.P. - HP Digital Imaging Monitor.) -- C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe   [288472] [PID.372]  
[MD5.7AEA4DF1CA68FD45DD4BBE1F0243CE7F] - (...) -- C:\Program Files\CDBurnerXP\NMSAccessU.exe   [71096] [PID.]  
[MD5.C2688DA657F8881FE8162FB0773031A0] - (.WinZip Computing, S.L. - WinZip Executable.) -- C:\Program Files\WinZip\WZQKPICK32.EXE   [611144] [PID.1348]  
[MD5.E9E110CDF6A063A5F9B841C36FB5CC95] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 162.1.) -- C:\WINDOWS\system32
vsvc32.exe   [155716] [PID.]  
[MD5.ED78DFAD8EFCDFBC89500492C4D14645] - (...) -- C:\WINDOWS\System32\PAStiSvc.exe   [53248] [PID.]  
[MD5.70EB41A4417BA0AA36AE12BF2B4D98F6] - (...) -- C:\Program Files\StartNow Toolbar\ToolbarUpdaterService.exe   [244960] [PID.]  
[MD5.537D88280041CFE4C7B9DFF24B0BEEE7] - (.IncrediMail, Ltd. - IncrediMail Tray Application.) -- C:\Program Files\IncrediMail\Bin\ImApp.exe   [263624] [PID.2204]  
[MD5.88029974B1C9995CFA3BD9560BBA2EEF] - (.Hewlett-Packard Development Company, L.P. - HP CUE Status.) -- C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe   [239320] [PID.2532]  
[MD5.B60DDDD2D63CE41CB8C487FCFBB6419E] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.EXE   [638816] [PID.952]  
[MD5.F79EE7BE700771CBFEAC38E4AF32D347] - (.Pinnacle Systems - OOProcServer.) -- C:\PROGRA~1\Pinnacle\SHARED~1\Filter\server.exe   [73728] [PID.3052]  
[MD5.46AE705AC463F50AC714C8084A09A2A3] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe   [2211328] [PID.3584]  
[MD5.5E9A6658A2A69AE7EB195113B7A2E7A9] - (.Microsoft Corporation - Application Layer Gateway Service.) -- C:\WINDOWS\System32\alg.exe   [44544] [PID.]  
~ Scan Processes Running in 00mn 00s  



---\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)  
P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin
pgeplugin.dll  
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll  
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.99
pGoogleUpdate3.dll  
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.99
pGoogleUpdate3.dll  
P2 - FPN: [HKCU] [@adobe.com/Acrobat,version=5.1] - (.Adobe Systems Inc. - Adobe Acrobat Plug-In Version 5.10 for Netscape.) -- C:\Program Files\Adobe\Acrobat 5.0\Reader\Browser
ppdf32.dll  
~ Scan Firefox Browser in 00mn 00s  



---\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)  
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl  
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.microsoft.com/fr-fr/  
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/  
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons  
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk  
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm  
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.bing.com/?toHttps=1&redig=17DBE7D168544FA98200E890A8051984  
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.19190 (longhorn_ie8_gdr.111214-1715)) -- C:\WINDOWS\system32\ieframe.dll  
R3 - URLSearchHook: IncrediMail MediaBar Francais 2 Toolbar - {249d74a3-bd19-4657-b6ce-e62f480a20de} . (.Conduit Ltd. - Conduit Toolbar.) (6.4.0.0) -- C:\Program Files\IncrediMail_MediaBar_Francais_2\prxtbIncr.dll  
~ Scan IE Browser in 00mn 00s  



---\ Internet Explorer, Proxy Management (R5)  
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key  
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0  
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1  
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1  
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll  
~ Scan Proxy management in 00mn 00s  



---\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)  
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,  
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"  
~ Scan Keys in 00mn 00s  



---\ Redirection du fichier Hosts (O1)  
~ Le fichier hosts est sain (The hosts file is clean).  
~ Scan Hosts File in 00mn 00s  
~ Nombre de lignes (Lines number): 20  



---\ Browser Helper Objects de navigateur (O2)  
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Pas de propriétaire - AcroIEHelper Module.) -- C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx  
O2 - BHO: IncrediMail MediaBar Francais 2 - {249d74a3-bd19-4657-b6ce-e62f480a20de} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\IncrediMail_MediaBar_Francais_2\prxtbIncr.dll  
O2 - BHO: StartNow Toolbar Helper - {6E13D095-45C3-4271-9475-F3B48227DD9F} . (.Pas de propriétaire - Toolbar.) -- C:\Program Files\StartNow Toolbar\Toolbar32.dll  
~ Scan BHO in 00mn 00s  



---\ Internet Explorer Toolbars (O3)  
O3 - Toolbar: StartNow Toolbar - {5911488E-9D1E-40ec-8CBB-06B231CC153F} . (.Pas de propriétaire - Toolbar.) -- C:\Program Files\StartNow Toolbar\Toolbar32.dll  
O3 - Toolbar: IncrediMail MediaBar Francais 2 Toolbar - {249d74a3-bd19-4657-b6ce-e62f480a20de} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\IncrediMail_MediaBar_Francais_2\prxtbIncr.dll  
~ Scan Toolbar in 00mn 00s  



---\ Applications démarrées par registre & par dossier (O4)  
O4 - HKLM\..\Run: [RTHDCPL] . (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.exe   
O4 - HKLM\..\Run: [Alcmtr] . (.Realtek Semiconductor Corp. - Realtek Azalia Audio - Event Monitor.) -- C:\WINDOWS\Alcmtr.exe   
O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32
vcpl.dll   
O4 - HKLM\..\Run: [nwiz] . (...) -- C:\WINDOWS\system32
wiz.exe   
O4 - HKLM\..\Run: [WinSys2] . (.Pas de propriétaire - DOT MFC Application.) -- C:\WINDOWS\system32\WinSys2.exe   
O4 - HKLM\..\Run: [NvMediaCenter] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\WINDOWS\system32
vmctray.dll   
O4 - HKLM\..\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\HP\HP Software Update\hpwuschd2.exe   
O4 - HKLM\..\Run: [PCLEPCI] . (.Pinnacle Systems GmbH - Pinnacle Performance Enhancer - PCI Tool.) -- C:\Program Files\Pinnacle\PPE\PPE.exe   
O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- C:\Program Files\Microsoft Security Client\msseces.exe   
O4 - HKCU\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe   
O4 - HKCU\..\Run: [Azureus] . (.Vuze Inc. - Pas de description.) -- C:\Program Files\Vuze\Azureus.exe   
O4 - HKCU\..\Run: [IncrediMail] . (.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files\IncrediMail\Bin\IncMail.exe   
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe   
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe   
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe   
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe   
O4 - HKUS\S-1-5-21-854245398-796845957-682003330-1004\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe   
O4 - HKUS\S-1-5-21-854245398-796845957-682003330-1004\..\Run: [Azureus] . (.Vuze Inc. - Pas de description.) -- C:\Program Files\Vuze\Azureus.exe   
O4 - HKUS\S-1-5-21-854245398-796845957-682003330-1004\..\Run: [IncrediMail] . (.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files\IncrediMail\Bin\IncMail.exe   
~ Scan Application in 00mn 00s  



---\ Autres liens utilisateurs (O4)  
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Acrobat Reader 5.1.lnk . (.Adobe Systems Incorporated.)  -- C:\Program Files\Adobe\Acrobat 5.0\Reader\AcroRd32.exe  
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\CDBurnerXP.lnk . (.Canneverbe Limited.)  -- C:\Program Files\CDBurnerXP\cdbxpp.exe  
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\IncrediMail.lnk . (.IncrediMail, Ltd..)  -- C:\Program Files\IncrediMail\Bin\IncMail.exe  
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Security Essentials.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Microsoft Security Client\msseces.exe  
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\MSN.lnk . (.Microsoft Corporation.)  -- C:\Program Files\MSN\MSNCoreFiles\Install\msnsusii.exe  
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Vuze.lnk . (.Vuze Inc..)  -- C:\Program Files\Vuze\Azureus.exe  
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Messenger\msmsgs.exe  
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Movie Maker\moviemk.exe  
O4 - Global Startup: C:\Documents And Settings\laurent\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.)  -- C:\WINDOWS\system32cimlby.exe  
O4 - Global Startup: C:\Documents And Settings\laurent\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Internet Explorer\iexplore.exe  
O4 - Global Startup: C:\Documents And Settings\laurent\Menu Démarrer\Programmes\Lecteur Windows Media.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Windows Media Player\wmplayer.exe  
O4 - Global Startup: C:\Documents And Settings\laurent\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Outlook Express\msimn.exe  
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Acrobat Reader 5.1.lnk . (.Adobe Systems Incorporated.)  -- C:\Program Files\Adobe\Acrobat 5.0\Reader\AcroRd32.exe  
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\CDBurnerXP.lnk . (.Canneverbe Limited.)  -- C:\Program Files\CDBurnerXP\cdbxpp.exe  
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\IncrediMail.lnk . (.IncrediMail, Ltd..)  -- C:\Program Files\IncrediMail\Bin\IncMail.exe  
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Security Essentials.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Microsoft Security Client\msseces.exe  
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\MSN.lnk . (.Microsoft Corporation.)  -- C:\Program Files\MSN\MSNCoreFiles\Install\msnsusii.exe  
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Vuze.lnk . (.Vuze Inc..)  -- C:\Program Files\Vuze\Azureus.exe  
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Messenger\msmsgs.exe  
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Movie Maker\moviemk.exe  
O4 - Global Startup: C:\Documents And Settings\laurent\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.)  -- C:\WINDOWS\system32cimlby.exe  
O4 - Global Startup: C:\Documents And Settings\laurent\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Internet Explorer\iexplore.exe  
O4 - Global Startup: C:\Documents And Settings\laurent\Menu Démarrer\Programmes\Lecteur Windows Media.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Windows Media Player\wmplayer.exe  
O4 - Global Startup: C:\Documents And Settings\laurent\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Outlook Express\msimn.exe  
~ Scan Global Startup in 00mn 00s  



---\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)  
O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe  
O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe  
~ Scan IE Extra Buttons in 00mn 00s  



---\ Winsock hijacker (Layered Service Provider) (O10)  
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll  
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll  
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll  
~ Scan Winsock in 00mn 00s  



---\ Objets ActiveX (Downloaded Program Files)(O16)  
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1332594387359  
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab  
~ Scan Objets ActiveX in 00mn 00s  



---\ Modification Domaine/Adresses DNS (O17)  
O17 - HKLM\System\CCS\Services\Tcpip\..\{853A6E3C-EFA8-4D98-85F8-A2F9DDFFD848}: DhcpNameServer = 192.168.1.1  
O17 - HKLM\System\CS1\Services\Tcpip\..\{853A6E3C-EFA8-4D98-85F8-A2F9DDFFD848}: DhcpNameServer = 192.168.1.1  
O17 - HKLM\System\CS3\Services\Tcpip\..\{853A6E3C-EFA8-4D98-85F8-A2F9DDFFD848}: DhcpNameServer = 192.168.1.1  
~ Scan Domain in 00mn 00s  



---\ Protocole additionnel (O18)  
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll  
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll  
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll  
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll  
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll  
O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll  
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll  
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll  
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll  
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll  
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll  
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll  
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- C:\WINDOWS\system32\inetcomm.dll  
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll  
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll  
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll  
O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll  
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll  
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll  
O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll  
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll  
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll  
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll  
O18 - Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll  
O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll  
O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll  
O18 - Filter: lzdhtml - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll  
O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll  
~ Scan Protocole Additionnel in 00mn 00s  



---\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)  
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll  
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll  
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\WINDOWS\system32\cscdll.dll  
O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\system32\dimsntfy.dll  
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll  
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll  
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll  
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll  
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll  
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll  
~ Scan Winlogon in 00mn 00s  



---\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)  
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll  
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll  
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll  
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll  
~ Scan SSODL in 00mn 00s  



---\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)  
O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll  
~ Scan STS/SSO in 00mn 00s  



---\ Liste des services NT non Microsoft et non désactivés (O23)  
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe  
O23 - Service: NMSAccess (NMSAccess) . (...) - C:\Program Files\CDBurnerXP\NMSAccessU.exe  
O23 - Service: NVIDIA Display Driver Service (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 162.1.) - C:\WINDOWS\system32
vsvc32.exe  
O23 - Service: Pml Driver HPZ12 (Pml Driver HPZ12) . (.HP - PML Driver.) - C:\WINDOWS\system32\HPZipm12.exe  
O23 - Service: STI Simulator (STI Simulator) . (...) - C:\WINDOWS\system32\PAStiSvc.exe  
O23 - Service: Updater Service for StartNow Toolbar (Updater Service for StartNow Toolbar) . (...) - C:\Program Files\StartNow Toolbar\ToolbarUpdaterService.exe  
~ Scan Services in 00mn 00s  



---\ Enumération Active Desktop & MHTML Editor (O24)  
O24 - Default MHTML Editor: Last - .(...) -  (.not file.)  
~ Scan Desktop Component in 00mn 00s  



---\ BootExecute (O34)  
O34 - HKLM BootExecute: (autocheck autochk *) - File not found  
~ Scan Keys in 00mn 00s  



---\ Tâches planifiées en automatique (O39)  
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job  
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job  
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\MP Scheduled Scan.job  
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\User_Feed_Synchronization-{E10325A0-523E-4A94-9BF7-B5D1E1C51109}.job  
~ Scan Scheduled Task in 00mn 00s  



---\ Composants installés (ActiveSetup Installed Components) (O40)  
O40 - ASIC: Mise à jour de la version d'Internet Explorer - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} . (.Microsoft Corporation - IE Per User Active Setup Uninstall Utility.) -- C:\WINDOWS\system32\ieudinit.exe  
O40 - ASIC: Lecteur Windows Media - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Utilitaire d'installation du Lecteur Windows Media Microsoft.) -- C:\WINDOWS\inf\unregmp2.exe  
O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\WINDOWS\system32\ie4uinit.exe.mui  
O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - IEAK branding.) -- C:\WINDOWS\system32\iedkcs32.dll  
O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} . (.Microsoft Corporation - Windows Media 6.4 Player Shim.) -- C:\WINDOWS\system32\wmpdxm.dll  
O40 - ASIC: Lecteur Windows Media Microsoft 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (...) -- C:\WINDOWS\INF\mswmp.inf  
O40 - ASIC: DirectAnimation - {283807B5-2C60-11D0-A31D-00AA00B92C03} . (.Microsoft Corporation - DirectX Media -- DirectAnimation.) -- C:\WINDOWS\system32\danim.dll  
O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (...) -- C:\WINDOWS\INF\msnetmtg.inf  
O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (...) -- C:\WINDOWS\INF\msmsgs.inf  
O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\WINDOWS\system32\msieftp.dll  
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (...) -- C:\WINDOWS\INF\wmp.inf  
O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\WINDOWS\system32\ie4uinit.exe.mui  
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\WINDOWS\system32\mscories.dll  
O40 - ASIC: Macromedia Shockwave Flash - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 11.1 r102.) -- C:\WINDOWS\system32\Macromed\Flash\Flash11g.ocx  
~ Scan Active Setup in 00mn 00s  



---\ Pilotes lancés au démarrage (O41)  
O41 - Driver:  (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys  
O41 - Driver:  (AmdK8) . (.Advanced Micro Devices - AMD Processor Driver.) - C:\WINDOWS\system32\DRIVERS\AmdK8.sys  
O41 - Driver:  (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys  
O41 - Driver:  (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys  
O41 - Driver:  (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys  
O41 - Driver:  (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys  
O41 - Driver:  (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys  
O41 - Driver:  (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys  
O41 - Driver:  (MpFilter) . (.Microsoft Corporation - Microsoft antimalware file system filter dr.) - C:\WINDOWS\system32\DRIVERS\MpFilter.sys  
O41 - Driver:  (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys  
O41 - Driver:  (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS
etbios.sys  
O41 - Driver:  (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS
etbt.sys  
O41 - Driver:  (Processor) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\system32\DRIVERS\processr.sys  
O41 - Driver:  (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERSasacd.sys  
O41 - Driver:  (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERSdbss.sys  
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys  
O41 - Driver:  (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\system32\DRIVERSedbook.sys  
O41 - Driver:  (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\WINDOWS\system32\DRIVERS\serial.sys  
O41 - Driver:  (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS	cpip.sys  
O41 - Driver:  (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS	ermdd.sys  
O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys  
~ Scan Drivers in 00mn 00s  



---\ Logiciels installés (O42)  
O42 - Logiciel: Adobe Acrobat 5.0 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Acrobat 5.0  
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX  
O42 - Logiciel: ArcSoft VideoImpression 2 - (.ArcSoft.) [HKLM] -- {C765D9FF-4A34-4BF1-9F91-E9A3C60C86FC}  
O42 - Logiciel: CDBurnerXP - (.CDBurnerXP.) [HKLM] -- {7E265513-8CDA-4631-B696-F40D983F3B07}_is1  
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}  
O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {7A25D130-4EC8-11E1-BEA4-B8AC6F97B88E}  
O42 - Logiciel: HP Customer Participation Program 7.0 - (.HP.) [HKLM] -- HPExtendedCapabilities  
O42 - Logiciel: HP Imaging Device Functions 7.0 - (.HP.) [HKLM] -- HP Imaging Device Functions  
O42 - Logiciel: HP Photosmart Essential - (.HP.) [HKLM] -- {6994491D-D491-48F1-AE1F-E179C1FFFC2F}  
O42 - Logiciel: HP Photosmart, Officejet and Deskjet 7.0.A - (.HP.) [HKLM] -- {BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}  
O42 - Logiciel: HP Solution Center 7.0 - (.HP.) [HKLM] -- HP Solution Center & Imaging Support Tools  
O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM] -- {2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}  
O42 - Logiciel: High Definition Audio Driver Package - KB888111 - (.Microsoft Corporation.) [HKLM] -- KB888111WXPSP2  
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595  
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484  
O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5  
O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5  
O42 - Logiciel: IncrediMail - (.IncrediMail.) [HKLM] -- {5E97F3BD-CDDC-4188-9D98-532E14FABB5D}  
O42 - Logiciel: IncrediMail 2.0 - (.IncrediMail Ltd..) [HKLM] -- IncrediMail  
O42 - Logiciel: IncrediMail MediaBar Francais 2 Toolbar - (.IncrediMail MediaBar Francais 2.) [HKLM] -- IncrediMail_MediaBar_Francais_2 Toolbar  
O42 - Logiciel: K-Lite Codec Pack 8.4.0 (Full) - (.Pas de propriétaire.) [HKLM] -- KLiteCodecPack_is1  
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}  
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}  
O42 - Logiciel: Medi@Show - (.Pas de propriétaire.) [HKLM] -- MediaShow  
O42 - Logiciel: Micro Application - Etiquettes CD-DVD 2.0 - (.Pas de propriétaire.) [HKLM] -- {EAAE00DB-412E-467E-B784-F9205ECCD58D}  
O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}  
O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}  
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1  
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}  
O42 - Logiciel: Microsoft Antimalware - (.Microsoft Corporation.) [HKLM] -- {05BFB060-4F22-4710-B0A2-2801A1B606C5}  
O42 - Logiciel: Microsoft Antimalware Service FR-FR Language Pack - (.Microsoft Corporation.) [HKLM] -- {32E9C1A5-0FDA-4483-987D-DBABF9CC1DD8}  
O42 - Logiciel: Microsoft Security Client - (.Microsoft Corporation.) [HKLM] -- {54B6DC7D-8C5B-4DFB-BC15-C010A3326B2B}  
O42 - Logiciel: Microsoft Security Client FR-FR Language Pack - (.Microsoft Corporation.) [HKLM] -- {50779A29-834E-4E36-BBEB-B7CABC67A825}  
O42 - Logiciel: Microsoft Security Essentials - (.Microsoft Corporation.) [HKLM] -- Microsoft Security Client  
O42 - Logiciel: NVIDIA Drivers - (.Pas de propriétaire.) [HKLM] -- NVIDIA Drivers  
O42 - Logiciel: Package de pilotes Windows - Advanced Micro Devices (AmdK8) Processor  (05/27/2006 1.3.2.0) - (.Advanced Micro Devices.) [HKLM] -- 3BEF1AFDE8303306594E2ADA27520E6E700820AE  
O42 - Logiciel: Photo Notifier and Animation Creator - (.IncrediMail Ltd..) [HKLM] -- Photo Notifier and Animation Creator  
O42 - Logiciel: Photo Notifier and Animation Creator - (.Nom de votre société.) [HKLM] -- {6B7F28D4-160E-40C6-B7C8-5EC6B9734DA7}  
O42 - Logiciel: Pinnacle Hollywood FX 4.6 - (.Pas de propriétaire.) [HKLM] -- Hollywood FX 4.6  
O42 - Logiciel: Pinnacle PCTV - (.Pas de propriétaire.) [HKLM] -- {3C02ED4F-46B0-4E9E-87F7-47AEBA4031C8}  
O42 - Logiciel: Pinnacle Systems PCI Performance Enhancer - (.Pas de propriétaire.) [HKLM] -- Pinnacle Systems PCI Performance Enhancer  
O42 - Logiciel: Pinnacle TRex - (.Pas de propriétaire.) [HKLM] -- {9313E9A6-03DF-11D5-88F8-005004361016}  
O42 - Logiciel: PowerDVD - (.Pas de propriétaire.) [HKLM] -- {6811CAA0-BF12-11D4-9EA1-0050BAE317E1}  
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}  
O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2657424  
O42 - Logiciel: StartNow Toolbar - (.StartNow.com.) [HKLM] -- StartNow Toolbar  
O42 - Logiciel: Studio 8 - (.Pas de propriétaire.) [HKLM] -- {9C440083-6021-41C8-A4E7-FD953C537E3A}  
O42 - Logiciel: Trust Webcam 14839 - (.Nom de votre société.) [HKLM] -- InstallShield_{71C8B152-0F63-4FEE-88F4-DC298B6EB446}  
O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707  
O42 - Logiciel: VirtualDub 1.9.6 Fr - (.Trad-Fr.) [HKLM] -- {1FF7993C-23B1-4C91-B1F6-09D13C57A06A}_is1  
O42 - Logiciel: VirtualDubMOD 1.5.10.3 Fr - (.Trad-Fr.) [HKLM] -- {B158F76F-76AB-4115-A4F0-4C6EF6956093}_is1  
O42 - Logiciel: Vuze - (.Vuze Inc..) [HKLM] -- 8461-7759-5462-8226  
O42 - Logiciel: WinDev 9 - (.Pas de propriétaire.) [HKCU] -- WinDev9  
O42 - Logiciel: WinZip 16.0 - (.WinZip Computing, S.L. .) [HKLM] -- {CD95F661-A5C4-44F5-A6AA-ECDD91C240CC}  
O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130) - (.Microsoft Corporation.) [HKLM] -- KB892130  
O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8  
O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service  

---\ HKCU & HKLM Software Keys  
[HKCU\Software\Adobe]  
[HKCU\Software\Azureus]  
[HKCU\Software\Canneverbe Limited]  
[HKCU\Software\Classes]  
[HKCU\Software\Conduit]  
[HKCU\Software\CyberLink]  
[HKCU\Software\DScaler5]  
[HKCU\Software\Freeware]  
[HKCU\Software\GNU]  
[HKCU\Software\Gabest]  
[HKCU\Software\Google]  
[HKCU\Software\Haali]  
[HKCU\Software\Hewlett-Packard]  
[HKCU\Software\IM]  
[HKCU\Software\ImInstaller]  
[HKCU\Software\IncrediMail]  
[HKCU\Software\IncrediMail_MediaBar_Francais_2]  
[HKCU\Software\Intel]  
[HKCU\Software\LAV]  
[HKCU\Software\Local AppWizard-Generated Applications]  
[HKCU\Software\Macromedia]  
[HKCU\Software\MediaInfo]  
[HKCU\Software\MozillaPlugins]  
[HKCU\Software\NVIDIA Corporation]  
[HKCU\Software\Netscape]  
[HKCU\Software\Nico Mak Computing]  
[HKCU\Software\PC SOFT]  
[HKCU\Software\Pinnacle Systems]  
[HKCU\Software\Policies]  
[HKCU\Software\PriceGong]  
[HKCU\Software\Realtek]  
[HKCU\Software\StartNow Toolbar]  
[HKCU\Software\Trolltech]  
[HKCU\Software\VirtualDub.org]  
[HKCU\Software\WinZip Computing]  
[HKCU\Software\Zugo]  
[HKCU\Software\ej-technologies]  
[HKCU\Software\madFlac]  
[HKCU\Software\madshi]  
[HKLM\Software\AMD]  
[HKLM\Software\Adobe]  
[HKLM\Software\ArcSoft]  
[HKLM\Software\Azureus]  
[HKLM\Software\BrowserChoice]  
[HKLM\Software\Bunndle]  
[HKLM\Software\C07ft5Y]  
[HKLM\Software\Classes]  
[HKLM\Software\Clients]  
[HKLM\Software\Conduit]  
[HKLM\Software\CyberLink]  
[HKLM\Software\GNU]  
[HKLM\Software\Gabest]  
[HKLM\Software\Gemplus]  
[HKLM\Software\Google]  
[HKLM\Software\HP]  
[HKLM\Software\HaaliMkx]  
[HKLM\Software\Hewlett-Packard]  
[HKLM\Software\ICE]  
[HKLM\Software\ImInstaller]  
[HKLM\Software\IncrediMail_MediaBar_Francais_2]  
[HKLM\Software\InstallShield]  
[HKLM\Software\Intel]  
[HKLM\Software\InterVideo]  
[HKLM\Software\KLCodecPack]  
[HKLM\Software\LAV]  
[HKLM\Software\MSI]  
[HKLM\Software\Macromedia]  
[HKLM\Software\Micro Application]  
[HKLM\Software\MozillaPlugins]  
[HKLM\Software\Mozilla]  
[HKLM\Software\NVIDIA Corporation]  
[HKLM\Software\Nico Mak Computing]  
[HKLM\Software\ODBC]  
[HKLM\Software\Pinnacle Systems]  
[HKLM\Software\PixArt]  
[HKLM\Software\Policies]  
[HKLM\Software\Program Groups]  
[HKLM\Software\Realtek Semiconductor Corp.]  
[HKLM\Software\Realtek]  
[HKLM\Software\RegisteredApplications]  
[HKLM\Software\Schlumberger]  
[HKLM\Software\Secure]  
[HKLM\Software\TQ566808]  
[HKLM\Software\Trad-FR]  
[HKLM\Software\Windows 3.1 Migration Status]  
[HKLM\Software\ej-technologies]  
[HKLM\Software\magnet]  
~ Scan Softwares in 00mn 00s  



---\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)  
O43 - CFD: 24/03/2012 - 12:48:54 - [29,224] ----D- C:\Program Files\Adobe  
O43 - CFD: 25/03/2012 - 12:50:10 - [15,127] ----D- C:\Program Files\ADULTES sur CD - Ant Movie Catalog 4.1.0.2  
O43 - CFD: 24/03/2012 - 13:24:06 - [138,479] ----D- C:\Program Files\ArcSoft  
O43 - CFD: 25/03/2012 - 12:57:06 - [17,312] ----D- C:\Program Files\CDBurnerXP  
O43 - CFD: 24/03/2012 - 12:13:50 - [0] ----D- C:\Program Files\ComPlus Applications  
O43 - CFD: 26/03/2012 - 11:22:08 - [0,609] ----D- C:\Program Files\Conduit  
O43 - CFD: 26/03/2012 - 12:58:48 - [28,604] ----D- C:\Program Files\CyberLink  
O43 - CFD: 24/03/2012 - 12:41:46 - [2,786] ----D- C:\Program Files\DIFX  
O43 - CFD: 24/03/2012 - 23:35:18 - [6,510] ----D- C:\Program Files\Driver Whiz  
O43 - CFD: 24/03/2012 - 13:25:06 - [56,734] ----D- C:\Program Files\Fichiers communs  
O43 - CFD: 24/03/2012 - 23:38:54 - [137,827] ----D- C:\Program Files\Google  
O43 - CFD: 24/03/2012 - 13:00:38 - [1,651] ----D- C:\Program Files\Hewlett-Packard  
O43 - CFD: 25/03/2012 - 13:47:28 - [139,212] ----D- C:\Program Files\HP  
O43 - CFD: 26/03/2012 - 11:20:32 - [26,338] ----D- C:\Program Files\IncrediMail  
O43 - CFD: 26/03/2012 - 11:22:04 - [4,795] ----D- C:\Program Files\IncrediMail_MediaBar_Francais_2  
O43 - CFD: 26/03/2012 - 13:08:32 - [20,024] --H-D- C:\Program Files\InstallShield Installation Information  
O43 - CFD: 26/03/2012 - 03:04:06 - [4,420] ----D- C:\Program Files\Internet Explorer  
O43 - CFD: 26/03/2012 - 11:06:00 - [56,244] ----D- C:\Program Files\K-Lite Codec Pack  
O43 - CFD: 24/03/2012 - 22:24:34 - [2,053] ----D- C:\Program Files\Messenger  
O43 - CFD: 26/03/2012 - 13:08:34 - [437,842] ----D- C:\Program Files\Micro Application  
O43 - CFD: 24/03/2012 - 12:16:14 - [0] ----D- C:\Program Files\microsoft frontpage  
O43 - CFD: 26/03/2012 - 01:22:36 - [17,554] ----D- C:\Program Files\Microsoft Security Client  
O43 - CFD: 25/03/2012 - 13:51:58 - [9,894] ----D- C:\Program Files\Movie Maker  
O43 - CFD: 26/03/2012 - 03:08:54 - [0,025] ----D- C:\Program Files\MSBuild  
O43 - CFD: 24/03/2012 - 12:12:46 - [18,385] ----D- C:\Program Files\MSN  
O43 - CFD: 24/03/2012 - 12:13:10 - [8,341] ----D- C:\Program Files\MSN Gaming Zone  
O43 - CFD: 24/03/2012 - 15:25:14 - [0] ----D- C:\Program Files\MSXML 4.0  
O43 - CFD: 24/03/2012 - 22:16:56 - [3,133] ----D- C:\Program Files\NetMeeting  
O43 - CFD: 25/03/2012 - 12:50:20 - [15,127] ----D- C:\Program Files\Nouveau dossier  
O43 - CFD: 24/03/2012 - 12:13:18 - [0,002] ----D- C:\Program Files\Online Services  
O43 - CFD: 25/03/2012 - 13:50:44 - [4,176] ----D- C:\Program Files\Outlook Express  
O43 - CFD: 26/03/2012 - 11:22:22 - [2,630] ----D- C:\Program Files\Photo Notifier and Animation Creator  
O43 - CFD: 26/03/2012 - 09:22:10 - [422,671] ----D- C:\Program Files\Pinnacle  
O43 - CFD: 24/03/2012 - 12:44:58 - [47,777] ----D- C:\Program Files\Realtek  
O43 - CFD: 26/03/2012 - 03:08:38 - [34,715] ----D- C:\Program Files\Reference Assemblies  
O43 - CFD: 24/03/2012 - 12:15:02 - [0,001] ----D- C:\Program Files\Services en ligne  
O43 - CFD: 26/03/2012 - 11:05:50 - [1,176] ----D- C:\Program Files\StartNow Toolbar  
O43 - CFD: 24/03/2012 - 13:25:06 - [0,113] ----D- C:\Program Files\Trust  
O43 - CFD: 24/03/2012 - 12:47:26 - [0,000] --H-D- C:\Program Files\Uninstall Information  
O43 - CFD: 26/03/2012 - 12:02:02 - [3,947] ----D- C:\Program Files\VirtualDub  
O43 - CFD: 26/03/2012 - 11:42:56 - [6,041] ----D- C:\Program Files\VirtualDubMOD  
O43 - CFD: 25/03/2012 - 02:13:24 - [102,162] ----D- C:\Program Files\Vuze  
O43 - CFD: 26/03/2012 - 12:59:06 - [3,370] ----D- C:\Program Files\Windows Media Player  
O43 - CFD: 24/03/2012 - 22:16:50 - [3,760] ----D- C:\Program Files\Windows NT  
O43 - CFD: 24/03/2012 - 12:15:06 - [0] --H-D- C:\Program Files\WindowsUpdate  
O43 - CFD: 25/03/2012 - 12:15:32 - [81,621] ----D- C:\Program Files\WinZip  
O43 - CFD: 24/03/2012 - 12:16:14 - [0] ----D- C:\Program Files\xerox  
O43 - CFD: 27/03/2012 - 11:20:48 - [13,817] ----D- C:\Program Files\ZHPDiag  
O43 - CFD: 24/03/2012 - 22:46:32 - [0,208] ----D- C:\Program Files\Fichiers Communs\Adobe  
O43 - CFD: 24/03/2012 - 13:24:24 - [4,015] ----D- C:\Program Files\Fichiers Communs\ArcSoft  
O43 - CFD: 24/03/2012 - 13:00:26 - [0,436] ----D- C:\Program Files\Fichiers Communs\Hewlett-Packard  
O43 - CFD: 24/03/2012 - 13:01:34 - [2,264] ----D- C:\Program Files\Fichiers Communs\HP  
O43 - CFD: 24/03/2012 - 13:24:56 - [7,487] ----D- C:\Program Files\Fichiers Communs\InstallShield  
O43 - CFD: 24/03/2012 - 13:40:36 - [11,501] ----D- C:\Program Files\Fichiers Communs\Microsoft Shared  
O43 - CFD: 24/03/2012 - 12:14:24 - [0,271] ----D- C:\Program Files\Fichiers Communs\MSSoap  
O43 - CFD: 24/03/2012 - 13:04:56 - [0] ----D- C:\Program Files\Fichiers Communs\ODBC  
O43 - CFD: 24/03/2012 - 13:11:54 - [15,640] ----D- C:\Program Files\Fichiers Communs\PC SOFT  
O43 - CFD: 24/03/2012 - 13:25:06 - [4,796] ----D- C:\Program Files\Fichiers Communs\PCCamera  
O43 - CFD: 24/03/2012 - 12:14:28 - [0,008] ----D- C:\Program Files\Fichiers Communs\Services  
O43 - CFD: 24/03/2012 - 13:04:54 - [3,612] ----D- C:\Program Files\Fichiers Communs\SpeechEngines  
O43 - CFD: 24/03/2012 - 22:16:48 - [6,496] ----D- C:\Program Files\Fichiers Communs\System  
O43 - CFD: 25/03/2012 - 02:07:50 - [0,000] ----D- C:\Documents and Settings\laurent\Application Data\Adobe  
O43 - CFD: 27/03/2012 - 11:19:20 - [14,302] ----D- C:\Documents and Settings\laurent\Application Data\Azureus  
O43 - CFD: 25/03/2012 - 12:57:18 - [0,001] ----D- C:\Documents and Settings\laurent\Application Data\Canneverbe Limited  
O43 - CFD: 25/03/2012 - 12:56:26 - [0] ----D- C:\Documents and Settings\laurent\Application Data\GetRightToGo  
O43 - CFD: 24/03/2012 - 23:39:12 - [2,981] ----D- C:\Documents and Settings\laurent\Application Data\Google  
O43 - CFD: 24/03/2012 - 13:02:00 - [0,005] ----D- C:\Documents and Settings\laurent\Application Data\HP  
O43 - CFD: 26/03/2012 - 03:24:04 - [0,033] ----D- C:\Documents and Settings\laurent\Application Data\HpUpdate  
O43 - CFD: 24/03/2012 - 12:19:28 - [0] ----D- C:\Documents and Settings\laurent\Application Data\Identities  
O43 - CFD: 24/03/2012 - 12:41:10 - [0] ----D- C:\Documents and Settings\laurent\Application Data\InstallShield  
O43 - CFD: 24/03/2012 - 12:48:54 - [0] ----D- C:\Documents and Settings\laurent\Application Data\InterTrust  
O43 - CFD: 25/03/2012 - 02:07:50 - [0,001] ----D- C:\Documents and Settings\laurent\Application Data\Macromedia  
O43 - CFD: 26/03/2012 - 13:02:52 - [0,000] ----D- C:\Documents and Settings\laurent\Application Data\Media Player Classic  
O43 - CFD: 24/03/2012 - 12:49:46 - [2,837] -S--D- C:\Documents and Settings\laurent\Application Data\Microsoft  
O43 - CFD: 27/03/2012 - 09:50:02 - [0,340] ----D- C:\Documents and Settings\laurent\Application Data\PriceGong  
O43 - CFD: 26/03/2012 - 11:22:08 - [0,187] ----D- C:\Documents and Settings\laurent\Local Settings\Application Data\Conduit  
O43 - CFD: 24/03/2012 - 23:37:54 - [714,374] ----D- C:\Documents and Settings\laurent\Local Settings\Application Data\Google  
O43 - CFD: 26/03/2012 - 11:23:52 - [25,943] ----D- C:\Documents and Settings\laurent\Local Settings\Application Data\IM  
O43 - CFD: 26/03/2012 - 11:25:32 - [5,578] ----D- C:\Documents and Settings\laurent\Local Settings\Application Data\IncrediMail_MediaBar_Francais_2  
O43 - CFD: 24/03/2012 - 23:34:02 - [1,702] ----D- C:\Documents and Settings\laurent\Local Settings\Application Data\Microsoft  
O43 - CFD: 24/03/2012 - 23:38:06 - [0,003] ----D- C:\Documents and Settings\laurent\Local Settings\Application Data\PC_Drivers_Headquarters  
O43 - CFD: 26/03/2012 - 11:22:04 - [0] ----D- C:\Documents and Settings\laurent\Local Settings\Application Data\Temp  
O43 - CFD: 25/03/2012 - 12:15:38 - [0,250] ----D- C:\Documents and Settings\laurent\Local Settings\Application Data\WinZip  
~ Scan Program Folder in 00mn 00s  



---\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)  
O44 - LFC:[MD5.EFE9640C92635D50447FCD012C71EAE6] - 27/03/2012 - 07:30:09 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log   [2007053]  
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 27/03/2012 - 07:18:32 ---A- . (...) -- C:\WINDOWS\0.log   [0]  
O44 - LFC:[MD5.5EECD5DDA9F7859B822ABF79BF714205] - 27/03/2012 - 07:18:12 ---A- . (...) -- C:\WINDOWS\wiaservc.log   [50]  
O44 - LFC:[MD5.EFD72270948A04D09ADE5262A8D93BBF] - 27/03/2012 - 07:18:11 ---A- . (...) -- C:\WINDOWS\wiadebug.log   [159]  
O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 27/03/2012 - 07:17:54 -S-A- . (...) -- C:\WINDOWS\bootstat.dat   [2048]  
O44 - LFC:[MD5.98CB97A829205BB8607A328525C1815E] - 27/03/2012 - 00:51:13 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt   [32340]  
O44 - LFC:[MD5.CC646D5C0360D58CF67061EDA45CF732] - 26/03/2012 - 23:15:59 ---A- . (...) -- C:\WINDOWS\system32\FNTCACHE.DAT   [165912]  
O44 - LFC:[MD5.A9BA2979E4FD3E613B3C1424D75FD4F8] - 26/03/2012 - 13:30:54 ---A- . (...) -- C:\WINDOWS\setupapi.log   [977748]  
O44 - LFC:[MD5.726632B325ECE7A76C85BA3E0F700FBB] - 26/03/2012 - 12:07:46 ---A- . (...) -- C:\WINDOWS\NAVIGMA.INI   [40]  
O44 - LFC:[MD5.8CC8E674EFF3E0B20BF8706899E1808F] - 26/03/2012 - 11:59:04 ---A- . (...) -- C:\WINDOWS\wmsetup.log   [3628]  
O44 - LFC:[MD5.89112689A307A65769CA942079CACE9B] - 26/03/2012 - 11:59:04 ---A- . (.The Duck Corporation - TrueMotion 2.0 Decompressor.) -- C:\WINDOWS\system32	m20dec.ax   [140800]  
O44 - LFC:[MD5.6D6F4B1886E91EB37ABCCAD19C561EE0] - 26/03/2012 - 11:59:03 ---A- . (...) -- C:\WINDOWS\system32\amcompat.tlb   [16832]  
O44 - LFC:[MD5.A32B14BE5EDAE794FCE1A9E970827509] - 26/03/2012 - 11:59:03 ---A- . (...) -- C:\WINDOWS\system32
scompat.tlb   [23392]  
O44 - LFC:[MD5.885CDCD31DD7BAE6480399C73D631EEB] - 26/03/2012 - 11:54:28 ---A- . (...) -- C:\WINDOWS\system32\wpa.dbl   [2422]  
O44 - LFC:[MD5.F47597B1D3CDA1B9419787C36141730F] - 26/03/2012 - 11:25:49 ---A- . (...) -- C:\WINDOWS\system32\PerfStringBackup.INI   [1049410]  
O44 - LFC:[MD5.7163F88ACC82AB6E63F694AC349E6C64] - 26/03/2012 - 11:25:49 ---A- . (...) -- C:\WINDOWS\system32\perfc009.dat   [67312]  
O44 - LFC:[MD5.FF143ABA1B0680BC99E0A326EAB043B9] - 26/03/2012 - 11:25:49 ---A- . (...) -- C:\WINDOWS\system32\perfc00C.dat   [80508]  
O44 - LFC:[MD5.09A4E325F3862EA40F5C18D3DD10E9EB] - 26/03/2012 - 11:25:49 ---A- . (...) -- C:\WINDOWS\system32\perfh009.dat   [432356]  
O44 - LFC:[MD5.D7BF65E0EFBB16528B41185CDB315752] - 26/03/2012 - 11:25:49 ---A- . (...) -- C:\WINDOWS\system32\perfh00C.dat   [500482]  
O44 - LFC:[MD5.F9732DECFD8FEE77B0A6504B55EC1184] - 26/03/2012 - 11:18:34 ---A- . (...) -- C:\WINDOWS\KB961118.log   [11438]  
O44 - LFC:[MD5.81AA5C72B62533EB2994395E9F591F3F] - 26/03/2012 - 11:18:34 ---A- . (...) -- C:\WINDOWS\comsetup.log   [322095]  
O44 - LFC:[MD5.4F939E4CA1F27F8A137F32D3E9B9BD5D] - 26/03/2012 - 11:18:34 ---A- . (...) -- C:\WINDOWS\iis6.log   [204305]  
O44 - LFC:[MD5.5F115B1852B8A9F6DC3911B876E5DCBF] - 26/03/2012 - 11:18:34 ---A- . (...) -- C:\WINDOWS\imsins.log   [1374]  
O44 - LFC:[MD5.799F08490D82E3974836311B47CA2BD9] - 26/03/2012 - 11:18:34 ---A- . (...) -- C:\WINDOWS
tdtcsetup.log   [192792]  
O44 - LFC:[MD5.D8C6ED9EB1ADF962A78BA7337CAFB947] - 26/03/2012 - 11:18:34 ---A- . (...) -- C:\WINDOWS\ocgen.log   [620490]  
O44 - LFC:[MD5.F5CCB883A9CC10E5E5DEAE3FC288F64D] - 26/03/2012 - 11:18:34 ---A- . (...) -- C:\WINDOWS\ocmsn.log   [51662]  
O44 - LFC:[MD5.96732334173FC841A22287A25857B1E5] - 26/03/2012 - 11:18:34 ---A- . (...) -- C:\WINDOWS	soc.log   [493338]  
O44 - LFC:[MD5.C26BD8747378B330046CB7D87224AD74] - 26/03/2012 - 11:18:33 ---A- . (...) -- C:\WINDOWS\FaxSetup.log   [1285198]  
O44 - LFC:[MD5.80BCF04351DBD91480C870D94E6F6D15] - 26/03/2012 - 11:18:33 ---A- . (...) -- C:\WINDOWS\msgsocm.log   [64369]  
O44 - LFC:[MD5.84B4F61F59A421BD85D97B35D194B42B] - 26/03/2012 - 08:22:22 ---A- . (.MindVision Software - Uninstall application file.) -- C:\WINDOWS\unvise32.exe   [86016]  
O44 - LFC:[MD5.DC17DD0189B0C36D863B4DD0A036C10F] - 26/03/2012 - 08:22:00 ---A- . (...) -- C:\WINDOWS\WMSysPr9.prx   [316640]  
O44 - LFC:[MD5.181CA4A24D29B27339FD7F678B1E2AA6] - 26/03/2012 - 08:20:20 ---A- . (...) -- C:\WINDOWS\DirectX.log   [2245]  
O44 - LFC:[MD5.600F1CE8E71892617B7538351174BC91] - 26/03/2012 - 07:59:59 ---A- . (...) -- C:\WINDOWS\aksdrvsetup.log   [4043]  
O44 - LFC:[MD5.D7051CEE60FDF4957739EFD5F854CBAF] - 26/03/2012 - 07:58:26 ---A- . (...) -- C:\WINDOWS\spupdsvc.log   [84501]  
O44 - LFC:[MD5.2A3F44533F460C9A2BCB858A29B414FE] - 26/03/2012 - 02:07:56 ---A- . (...) -- C:\WINDOWS\updspapi.log   [200009]  
O44 - LFC:[MD5.4AC9F9CCB6BE5A819FCF414109CFC252] - 25/03/2012 - 12:58:10 ---A- . (...) -- C:\WINDOWS\KB2641653.log   [40395]  
O44 - LFC:[MD5.04C2C674043C249168388317F19218F0] - 25/03/2012 - 12:58:10 ---A- . (...) -- C:\WINDOWS\imsins.BAK   [1374]  
O44 - LFC:[MD5.E097A5DA6C637A0B4CE078E045155CC8] - 25/03/2012 - 12:58:05 ---A- . (...) -- C:\WINDOWS\KB2387149.log   [39981]  
O44 - LFC:[MD5.8C2712F8B5D7F7385693477C137FC82F] - 25/03/2012 - 12:57:58 ---A- . (...) -- C:\WINDOWS\KB2479943.log   [54681]  
O44 - LFC:[MD5.3BF46DBC478B1B1CA5B4754C08315814] - 25/03/2012 - 12:57:53 ---A- . (...) -- C:\WINDOWS\KB2564958.log   [37084]  
O44 - LFC:[MD5.325C9B5640930

Fish66 · Answer

Re, 

Tu as le fichier : ZHPDiag.txt sur ton bureau. 

Tu vas faire exactement comme expliqué ci-dessous : 

Rends toi sur pjjoint.malekal.com   
* Clique sur le bouton Parcourir   
* Sélectionne le fichier que tu veux héberger :  ZHPDiag.txt (celui qui est sur ton bureau) et clique sur Ouvrir   
* Clique sur le bouton Envoyer   
* Un message de confirmation s'affiche (L'upload a réussi ! - Le lien à transmettre à vos correspondant pour visualiser le fichier est : https://pjjoint.malekal.com/files.php?id=df5ea299241015   

* Copie le lien dans ta prochaine réponse.    

@+ 

  
_  _ _ Fish66_ _ _ I''"""""I_ _  membre contributeur sécurité_  _I''"""""I_ _ _  
 ¤¤¤ Le meilleur remède pour tous les problèmes, c'est la patience.... ¤¤¤

Utilisateur anonyme · Answer

j'ai fais tout ce que vous avez dis.

Fish66 · Answer

Re, Tu n'ouvres pas le fichier ZHPDiag.txt mais tu vas l'héberger comme expliqué >>> ICI <<< Je veux uniquement l'adresse du lien c'est tout :-) @+ _ _ _ Fish66_ _ _ I''"""""I_ _ membre contributeur sécurité_ _I''"""""I_ _ _ ¤¤¤ Le meilleur remède pour tous les problèmes, c'est la patience.... ¤¤¤

Fish66 · Answer

Re,
Suite ton MP :

1/
Copie tout le texte présent en gras ci-dessous ( tu le selectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C ) 




[MD5.70EB41A4417BA0AA36AE12BF2B4D98F6] - (...) -- C:\Program Files\StartNow Toolbar\ToolbarUpdaterService.exe   [244960] [PID.] 
R3 - URLSearchHook: IncrediMail MediaBar Francais 2 Toolbar - {249d74a3-bd19-4657-b6ce-e62f480a20de} . (.Conduit Ltd. - Conduit Toolbar.) (6.4.0.0) -- C:\Program Files\IncrediMail_MediaBar_Francais_2\prxtbIncr.dll
O2 - BHO: IncrediMail MediaBar Francais 2 - {249d74a3-bd19-4657-b6ce-e62f480a20de} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\IncrediMail_MediaBar_Francais_2\prxtbIncr.dll
O3 - Toolbar: IncrediMail MediaBar Francais 2 Toolbar - {249d74a3-bd19-4657-b6ce-e62f480a20de} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\IncrediMail_MediaBar_Francais_2\prxtbIncr.dll
O43 - CFD: 26/03/2012 - 11:22:08 - [0,609] ----D- C:\Program Files\Conduit    => Toolbar.Conduit
O43 - CFD: 26/03/2012 - 11:22:04 - [4,795] ----D- C:\Program Files\IncrediMail_MediaBar_Francais_2    => Toolbar.Conduit
O2 - BHO: StartNow Toolbar Helper - {6E13D095-45C3-4271-9475-F3B48227DD9F} . (.Pas de propriétaire - Toolbar.) -- C:\Program Files\StartNow Toolbar\Toolbar32.dll    => Infection BT (Adware.Zugo)
O43 - CFD: 27/03/2012 - 09:50:02 - [0,340] ----D- C:\Documents and Settings\laurent\Application Data\PriceGong    => Infection BT (Adware.PriceGong)
O44 - LFC:[MD5.BB8BD0D7171D13B06DEDCE57997A4B09] - 24/03/2012 - 11:50:56 R--A- . (.Pas de propriétaire - DOT MFC Application.) -- C:\WINDOWS\system32\WinSys.exe   [200704]    => Infection Diverse (FALSU.A.Worm)
O69 - SBI: SearchScopes [HKCU] {0388404D-6072-4CEB-B521-8F090FEAEE57} [DefaultScope] - (Yahoo!) - http://klit.startnow.com

FirewallRAZ
EmptyTemp
EmptyFlash



Puis Lance ZHPFix depuis le raccourci du bureau . 

* Une fois l'outil ZHPFix ouvert , clique sur le bouton [ H ] ( "coller les lignes Helper" ) . 

* Dans l'encadré principal tu verras donc les lignes que tu as copié précédemment apparaitrent . 

Vérifie que toutes les lignes que je t'ai demandé de copier (et seulement elles) sont dans la fenêtre. 

Clique sur le bouton  GO

Copie/Colle le rapport à l'écran dans ton prochain message.

2/
* Télécharge OTM (OldTimer) sur ton Bureau 

ICI >> OTM (OldTimer) 
* Double clic "OTMoveIt3.exe" 
* Utilisateurs Windows Vista / 7 Clic droit sur "OTMoveIt3.exe" choisis "exécuter en tant qu'administrateur" afin de le lancer. 

- Copie (Ctrl+C) le texte suivant en gras ci-dessous : 



:files 
C:\Program Files\Conduit     
C:\Program Files\IncrediMail_MediaBar_Francais_2     
C:\Program Files\StartNow Toolbar 
C:\Documents and Settings\laurent\Application Data\PriceGong     
C:\Documents and Settings\laurent\Local Settings\Application Data\Conduit     
C:\Documents and Settings\laurent\Local Settings\Application Data\IncrediMail_MediaBar_Francais_2     


:Reg 
[-HKLM\Software\Classes\AppID\Toolbar.DLL] 
[-HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{249d74a3-bd19-4657-b6ce-e62f480a20de}]     
[-HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{249d74a3-bd19-4657-b6ce-e62f480a20de}]     
[-HKLM\Software\Classes\CLSID\{249d74a3-bd19-4657-b6ce-e62f480a20de}]     
[-HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{249d74a3-bd19-4657-b6ce-e62f480a20de}]     
[-HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6E13D095-45C3-4271-9475-F3B48227DD9F}]     
[-HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6E13D095-45C3-4271-9475-F3B48227DD9F}]     
[-HKLM\Software\Classes\CLSID\{6E13D095-45C3-4271-9475-F3B48227DD9F}]     
[-HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6E13D095-45C3-4271-9475-F3B48227DD9F}]     
[-HKCU\Software\PriceGong]     
[-HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Toolbar] 
[-HKCU\Software\Zugo]     
[-HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\StartNow Toolbar] 
[-HKLM\Software\Classes\Toolbar.CT2724431] 

:commands 
[emptytemp] 




- Colle (Ctrl+V) le texte précédemment copié dans le cadre: Paste Instructions for Items to be Moved. 
- Clique maintenant sur le bouton MoveIt! 
Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer. 
Accepte en cliquant sur YES. 
- Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\ 
Le nom du rapport correspond au moment de sa création : date_heure.log

@+