Mon pc ralentit

Utilisateur anonyme -  
Bonjour,

depuis quelque temps mon pc rame...le navigateur IE (version 8) est lent donc le moteur de recherche aussi (google)

comment faire pour que mon pc soit comme avant (sans virus), comme neuf ?

merci

17 réponses

  • Votes
  • Date
  • Date décroissante
  2. Utilisateur anonyme
    n'importe quoi ! arrete de dire des aneries
    1. naoned-breizh
      Des conneries ? à 90% les baisses de performances d'un PC viennes d'une RAM pas assez réactive , mal appropriée, fatiguée ou insuffisante, à 90% des cas, rajouter de la RAM solutionne instantanément le problème maintenant si tu pense mieux savoir que tout le monde qu'est-ce que tu fait ici?
  3. Yorde03
    Tu peux commencer par faire un tri de données si tu n'as plus de place, sinon c'est pas utile.

    Fait un bon scan complet avec un anti-virus (d'ailleurs tu as quoi?).

    Ensuite par ordre de chose à faire:

    -Rogue Killer:ça va faire le tri sur des processus malicieux et cachés, trouver des programmes qui te bouffe de la ressource, tu fais un scan et tu supprime tout ce qui te semble étrange.

    https://www.luanagames.com/index.fr.html

    -Glary Utility:Tu fais des scans tant que tu as des erreurs de registre.

    https://www.commentcamarche.net/telecharger/utilitaires/11165-glary-utilities/

    -CCleaner: tu scan complet et tant que tu as des erreurs tu continue =)
    https://www.commentcamarche.net/telecharger/utilitaires/5647-ccleaner/

    -Antimalware Pareil, tu fais un scan complet et tu couple avec un anti virus ;)
    https://www.commentcamarche.net/telecharger/securite/14361-malwarebytes-anti-malware/
    1. Utilisateur anonyme
      pour l'antivirus, j'utilise : Microsoft Secutity Essentials.

      J'ai fais un scan complet.

      Croyez-vous que c'est un bon antivirus ?

      merci
      2. Yorde03
        Je ne pense pas que ce soit le meilleur ^^

        Tu as utilisé les autres outils cités?
        1. Utilisateur anonyme
          oui , j'ai bien utilises les outils cités.

          Apparemment, mon pc rame moins qu'avant...
          1. Fish66 Contributeur sécurité
            Bonjour,

            Nous allons effectuer un diagnostic de ton PC:
            *Télécharge ZHPDiag sur ton bureau :

            https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html
            ou :
            http://www.premiumorange.com/zeb-help-process/zhpdiag.html

            * Laisse toi guider lors de l'installation,coche "Ajouter une icône sur le bureau" et décoche la case "Exécuter ZHPDiag"

            /!\Utilisateur de Vista et Seven : Clique droit sur le logo de ZHPdiag, « exécuter en tant qu'Administrateur »

            * Clique sur l'icône représentant une loupe (« Lancer le diagnostic »)
            * Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette
            * Héberge le rapport ZHPDiag.txt sur un des sites ci dessous, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum : http://pjjoint.malekal.com/
            Si indisponible, tu peux essayer avec l'un de ces liens:
            https://www.terafiles.net/
            https://www.casimages.com/

            * Tuto zhpdiag :
            http://www.premiumorange.com/zeb-help-process/zhpdiag.html

            Hébergement de rapport sur pjjoint.malekal.com

            Rends toi sur pjjoint.malekal.com
            * Clique sur le bouton Parcourir
            * Sélectionne le fichier que tu veux héberger et clique sur Ouvrir
            * Clique sur le bouton Envoyer
            * Un message de confirmation s'affiche (L'upload a réussi ! - Le lien à transmettre à vos correspondant pour visualiser le fichier est : https://pjjoint.malekal.com/files.php?id=df5ea299241015

            * Copie le lien dans ta prochaine réponse.

            @+
            1. Utilisateur anonyme
              bonjour Fish66,

              J'ai XP et pas vista ni Win 7.
              J'ai Telecharge ZHPdiag. Un icone ZHpfix apparait sur l'ecran..
              Lorsque j'ouvre ZHPfix, il n'y pas de loupe (pour le scan du PC).
              1. Fish66 Contributeur sécurité
                Re,

                ZHPFix on va l'utliser plus tard ..., Lance ZHPDiag depuis le bureau et tu vas trouver la loupe :-)

                @+
                1. Utilisateur anonyme
                  voici le rapport de ZHPdiag :

                  Rapport de ZHPDiag v1.28.34 par Nicolas Coolman, Update du 06/03/2012
                  Run by laurent at 27/03/2012 09:05:44
                  Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
                  Web site : http://nicolascoolman.skyrock.com/
                  State : Nouvelle version disponible

                  ---\\ Web Browser
                  MSIE: Internet Explorer v8.0.6001.18702 (Defaut)

                  ---\\ Windows Product Information
                  ~ Langage: Français
                  Windows XP Home Edition Service Pack 3 (Build 2600)
                  Windows Automatic Updates : OK
                  Windows Genuine Advantage : OK

                  ---\\ System Information
                  ~ Processor: x86 Family 15 Model 107 Stepping 2, AuthenticAMD
                  ~ Operating System: 32 Bits
                  Boot mode: Normal (Normal boot)
                  Total RAM: 3311 MB (73% free)
                  System Restore: Activé (Enable)
                  System drive C: has 434 GB (93%) free of 466 GB

                  ---\\ Logged in mode
                  ~ Computer Name: LAURENT-E380B63
                  ~ User Name: laurent
                  ~ All Users Names: SUPPORT_388945a0, laurent, HelpAssistant, Administrateur,
                  ~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
                  Logged in as Administrator

                  ---\\ Environnement Variables
                  ~ System Unit : C:\
                  ~ %AppData% : C:\Documents and Settings\laurent\Application Data\
                  ~ %Desktop% : C:\Documents and Settings\laurent\Bureau\
                  ~ %Favorites% : C:\Documents and Settings\laurent\Favorites\
                  ~ %LocalAppData% : C:\Documents and Settings\laurent\Local Settings\Application Data\
                  ~ %StartMenu% : C:\Documents and Settings\laurent\Menu Démarrer\
                  ~ %Windir% : C:\WINDOWS\
                  ~ %System% : C:\WINDOWS\system32\

                  ---\\ DOS/Devices
                  A:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
                  C:\ Hard drive, Flash drive, Thumb drive (Free 434 Go of 466 Go)
                  D:\ CD-ROM drive (Free 0 Go of 1 Go)
                  E:\ CD-ROM drive (Not Inserted)
                  G:\ Hard drive, Flash drive, Thumb drive (Free 451 Go of 466 Go)

                  ---\\ Security Center & Tools Informations
                  [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
                  [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
                  [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
                  [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
                  [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
                  [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
                  [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
                  [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
                  [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
                  [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
                  [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
                  [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
                  [HKLM\SYSTEM\CurrentControlSet\Services] wscsvc : OK
                  [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
                  ~ Scan Security Center in 00mn 00s

                  ---\\ Recherche particulière de fichiers génériques
                  [MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.14/04/2008 - 03:34:03.) -- C:\WINDOWS\Explorer.exe [1037824]
                  [MD5.93AD0B78C7357A05F50E594EC7C22300] - (.Microsoft Corporation - Exécuter une DLL en tant qu'application.) (.14/04/2008 - 03:34:20.) -- C:\WINDOWS\system32\rundll32.exe [33792]
                  [MD5.5C72F65D2F038E0BF481326423F9D266] - (.Microsoft Corporation - Internet Extensions for Win32.) (.17/12/2011 - 20:43:31.) -- C:\WINDOWS\system32\wininet.dll [916992]
                  [MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.14/04/2008 - 03:34:28.) -- C:\WINDOWS\system32\Winlogon.exe [512000]
                  [MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.17/08/2011 - 14:49:54.) -- C:\WINDOWS\system32\drivers\AFD.sys [138496]
                  [MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/04/2008 - 19:40:30.) -- C:\WINDOWS\system32\drivers\atapi.sys [96512]
                  [MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/04/2008 - 20:14:21.) -- C:\WINDOWS\system32\drivers\Cdfs.sys [63744]
                  [MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.13/04/2008 - 19:40:46.) -- C:\WINDOWS\system32\drivers\Cdrom.sys [62976]
                  [MD5.31F923EB2170FC172C81ABDA0045D18C] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) (.14/04/2008 - 02:57:38.) -- C:\WINDOWS\system32\drivers\Fips.sys [44672]
                  [MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.13/04/2008 - 17:36:05.) -- C:\WINDOWS\system32\drivers\HDAudBus.sys [144384]
                  [MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - (.Microsoft Corporation - Pilote de port i8042.) (.14/04/2008 - 03:00:52.) -- C:\WINDOWS\system32\drivers\i8042prt.sys [54144]
                  [MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.13/04/2008 - 19:40:58.) -- C:\WINDOWS\system32\drivers\Imapi.sys [42112]
                  [MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.13/04/2008 - 19:57:15.) -- C:\WINDOWS\system32\drivers\IpNat.sys [152832]
                  [MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.13/04/2008 - 20:19:42.) -- C:\WINDOWS\system32\drivers\IPSec.sys [75264]
                  [MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.15/07/2011 - 14:29:31.) -- C:\WINDOWS\system32\drivers\MRxSmb.sys [456320]
                  [MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.13/04/2008 - 20:21:00.) -- C:\WINDOWS\system32\drivers\netBT.sys [162816]
                  [MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.13/04/2008 - 20:15:53.) -- C:\WINDOWS\system32\drivers\ntfs.sys [574976]
                  [MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/04/2008 - 03:09:40.) -- C:\WINDOWS\system32\drivers\Parport.sys [80384]
                  [MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.13/04/2008 - 20:19:43.) -- C:\WINDOWS\system32\drivers\Rasl2tp.sys [51328]
                  [MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.13/04/2008 - 19:32:51.) -- C:\WINDOWS\system32\drivers\rdpdr.sys [196224]
                  [MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) (.14/04/2008 - 02:57:34.) -- C:\WINDOWS\system32\drivers\redbook.sys [58752]
                  [MD5.46DE1126684369BACE4849E4FC8C43CA] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.14/04/2008 - 02:56:04.) -- C:\WINDOWS\system32\drivers\volsnap.sys [53376]
                  ~ Scan Generic Processes in 00mn 00s

                  ---\\ Etat des fichiers cachés (Caché/Total)
                  ~ Mes images (My Pictures) : 1/4
                  ~ Mes musiques (My Musics) : 1/2
                  ~ Mes Videos (My Video) : 0/0
                  ~ Mes Favoris (My Favorites) : Non accessible (Not found)
                  ~ Mes Documents (My Documents) : 3/457
                  ~ Mon Bureau (My Desktop) : 0/8
                  ~ Menu demarrer (Programs) : 5/22
                  ~ Scan Hidden Files in 00mn 00s

                  ---\\ Processus lancés
                  [MD5.CFCE43B70CA0CC4DCC8ADB62B792B173] - (.Microsoft Corporation - Antimalware Service Executable.) -- c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [11736] [PID.]
                  [MD5.E6721391BD329F53B2854386DC4CA577] - (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.EXE [16342528] [PID.1928]
                  [MD5.C637FC4638A96165256B28D38DE7B953] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49208] [PID.1992]
                  [MD5.BAF503FEDF00C58C123B100CDA7A7D4F] - (.Vuze Inc. - Pas de description.) -- C:\Program Files\Vuze\Azureus.exe [232896] [PID.292]
                  [MD5.5DD9A4D0D3000FF8BB24FB430927B4FB] - (.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files\IncrediMail\bin\IncMail.exe [366024] [PID.428]
                  [MD5.4543367E50BD35E7D1269D42841B156E] - (.Hewlett-Packard Development Company, L.P. - HP Digital Imaging Monitor.) -- C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [288472] [PID.372]
                  [MD5.7AEA4DF1CA68FD45DD4BBE1F0243CE7F] - (...) -- C:\Program Files\CDBurnerXP\NMSAccessU.exe [71096] [PID.]
                  [MD5.C2688DA657F8881FE8162FB0773031A0] - (.WinZip Computing, S.L. - WinZip Executable.) -- C:\Program Files\WinZip\WZQKPICK32.EXE [611144] [PID.1348]
                  [MD5.E9E110CDF6A063A5F9B841C36FB5CC95] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 162.1.) -- C:\WINDOWS\system32\nvsvc32.exe [155716] [PID.]
                  [MD5.ED78DFAD8EFCDFBC89500492C4D14645] - (...) -- C:\WINDOWS\System32\PAStiSvc.exe [53248] [PID.]
                  [MD5.70EB41A4417BA0AA36AE12BF2B4D98F6] - (...) -- C:\Program Files\StartNow Toolbar\ToolbarUpdaterService.exe [244960] [PID.]
                  [MD5.537D88280041CFE4C7B9DFF24B0BEEE7] - (.IncrediMail, Ltd. - IncrediMail Tray Application.) -- C:\Program Files\IncrediMail\Bin\ImApp.exe [263624] [PID.2204]
                  [MD5.88029974B1C9995CFA3BD9560BBA2EEF] - (.Hewlett-Packard Development Company, L.P. - HP CUE Status.) -- C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe [239320] [PID.2532]
                  [MD5.B60DDDD2D63CE41CB8C487FCFBB6419E] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.EXE [638816] [PID.952]
                  [MD5.46AE705AC463F50AC714C8084A09A2A3] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [2211328] [PID.3420]
                  [MD5.5E9A6658A2A69AE7EB195113B7A2E7A9] - (.Microsoft Corporation - Application Layer Gateway Service.) -- C:\WINDOWS\System32\alg.exe [44544] [PID.]
                  ~ Scan Processes Running in 00mn 00s

                  ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
                  P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
                  P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
                  P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll
                  P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll
                  P2 - FPN: [HKCU] [@adobe.com/Acrobat,version=5.1] - (.Adobe Systems Inc. - Adobe Acrobat Plug-In Version 5.10 for Netscape.) -- C:\Program Files\Adobe\Acrobat 5.0\Reader\Browser\nppdf32.dll
                  ~ Scan Firefox Browser in 00mn 00s

                  ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
                  R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                  R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.microsoft.com/fr-fr/
                  R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
                  R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
                  R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
                  R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
                  R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.bing.com/?toHttps=1&redig=17DBE7D168544FA98200E890A8051984
                  R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.19190 (longhorn_ie8_gdr.111214-1715)) -- C:\WINDOWS\system32\ieframe.dll
                  R3 - URLSearchHook: IncrediMail MediaBar Francais 2 Toolbar - {249d74a3-bd19-4657-b6ce-e62f480a20de} . (.Conduit Ltd. - Conduit Toolbar.) (6.4.0.0) -- C:\Program Files\IncrediMail_MediaBar_Francais_2\prxtbIncr.dll
                  ~ Scan IE Browser in 00mn 00s

                  ---\\ Internet Explorer, Proxy Management (R5)
                  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
                  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
                  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
                  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
                  R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
                  ~ Scan Proxy management in 00mn 00s

                  ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
                  F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,
                  F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
                  ~ Scan Keys in 00mn 00s

                  ---\\ Redirection du fichier Hosts (O1)
                  ~ Le fichier hosts est sain (The hosts file is clean).
                  ~ Scan Hosts File in 00mn 00s
                  ~ Nombre de lignes (Lines number): 20

                  ---\\ Browser Helper Objects de navigateur (O2)
                  O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Pas de propriétaire - AcroIEHelper Module.) -- C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
                  O2 - BHO: IncrediMail MediaBar Francais 2 - {249d74a3-bd19-4657-b6ce-e62f480a20de} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\IncrediMail_MediaBar_Francais_2\prxtbIncr.dll
                  O2 - BHO: StartNow Toolbar Helper - {6E13D095-45C3-4271-9475-F3B48227DD9F} . (.Pas de propriétaire - Toolbar.) -- C:\Program Files\StartNow Toolbar\Toolbar32.dll
                  ~ Scan BHO in 00mn 00s

                  ---\\ Internet Explorer Toolbars (O3)
                  O3 - Toolbar: StartNow Toolbar - {5911488E-9D1E-40ec-8CBB-06B231CC153F} . (.Pas de propriétaire - Toolbar.) -- C:\Program Files\StartNow Toolbar\Toolbar32.dll
                  O3 - Toolbar: IncrediMail MediaBar Francais 2 Toolbar - {249d74a3-bd19-4657-b6ce-e62f480a20de} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\IncrediMail_MediaBar_Francais_2\prxtbIncr.dll
                  ~ Scan Toolbar in 00mn 00s

                  ---\\ Applications démarrées par registre & par dossier (O4)
                  O4 - HKLM\..\Run: [RTHDCPL] . (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.exe
                  O4 - HKLM\..\Run: [Alcmtr] . (.Realtek Semiconductor Corp. - Realtek Azalia Audio - Event Monitor.) -- C:\WINDOWS\Alcmtr.exe
                  O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32\nvcpl.dll
                  O4 - HKLM\..\Run: [nwiz] . (...) -- C:\WINDOWS\system32\nwiz.exe
                  O4 - HKLM\..\Run: [WinSys2] . (.Pas de propriétaire - DOT MFC Application.) -- C:\WINDOWS\system32\WinSys2.exe
                  O4 - HKLM\..\Run: [NvMediaCenter] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\WINDOWS\system32\nvmctray.dll
                  O4 - HKLM\..\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\HP\HP Software Update\hpwuschd2.exe
                  O4 - HKLM\..\Run: [PCLEPCI] . (.Pinnacle Systems GmbH - Pinnacle Performance Enhancer - PCI Tool.) -- C:\Program Files\Pinnacle\PPE\PPE.exe
                  O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- C:\Program Files\Microsoft Security Client\msseces.exe
                  O4 - HKCU\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
                  O4 - HKCU\..\Run: [Azureus] . (.Vuze Inc. - Pas de description.) -- C:\Program Files\Vuze\Azureus.exe
                  O4 - HKCU\..\Run: [IncrediMail] . (.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files\IncrediMail\Bin\IncMail.exe
                  O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
                  O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
                  O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
                  O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
                  O4 - HKUS\S-1-5-21-854245398-796845957-682003330-1004\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
                  O4 - HKUS\S-1-5-21-854245398-796845957-682003330-1004\..\Run: [Azureus] . (.Vuze Inc. - Pas de description.) -- C:\Program Files\Vuze\Azureus.exe
                  O4 - HKUS\S-1-5-21-854245398-796845957-682003330-1004\..\Run: [IncrediMail] . (.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files\IncrediMail\Bin\IncMail.exe
                  ~ Scan Application in 00mn 00s

                  ---\\ Autres liens utilisateurs (O4)
                  O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Acrobat Reader 5.1.lnk . (.Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Acrobat 5.0\Reader\AcroRd32.exe
                  O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\CDBurnerXP.lnk . (.Canneverbe Limited.) -- C:\Program Files\CDBurnerXP\cdbxpp.exe
                  O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\IncrediMail.lnk . (.IncrediMail, Ltd..) -- C:\Program Files\IncrediMail\Bin\IncMail.exe
                  O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Security Essentials.lnk . (.Microsoft Corporation.) -- C:\Program Files\Microsoft Security Client\msseces.exe
                  O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\MSN.lnk . (.Microsoft Corporation.) -- C:\Program Files\MSN\MSNCoreFiles\Install\msnsusii.exe
                  O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Vuze.lnk . (.Vuze Inc..) -- C:\Program Files\Vuze\Azureus.exe
                  O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk . (.Microsoft Corporation.) -- C:\Program Files\Messenger\msmsgs.exe
                  O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Movie Maker\moviemk.exe
                  O4 - Global Startup: C:\Documents And Settings\laurent\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe
                  O4 - Global Startup: C:\Documents And Settings\laurent\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
                  O4 - Global Startup: C:\Documents And Settings\laurent\Menu Démarrer\Programmes\Lecteur Windows Media.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
                  O4 - Global Startup: C:\Documents And Settings\laurent\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe
                  O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Acrobat Reader 5.1.lnk . (.Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Acrobat 5.0\Reader\AcroRd32.exe
                  O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\CDBurnerXP.lnk . (.Canneverbe Limited.) -- C:\Program Files\CDBurnerXP\cdbxpp.exe
                  O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\IncrediMail.lnk . (.IncrediMail, Ltd..) -- C:\Program Files\IncrediMail\Bin\IncMail.exe
                  O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Security Essentials.lnk . (.Microsoft Corporation.) -- C:\Program Files\Microsoft Security Client\msseces.exe
                  O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\MSN.lnk . (.Microsoft Corporation.) -- C:\Program Files\MSN\MSNCoreFiles\Install\msnsusii.exe
                  O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Vuze.lnk . (.Vuze Inc..) -- C:\Program Files\Vuze\Azureus.exe
                  O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk . (.Microsoft Corporation.) -- C:\Program Files\Messenger\msmsgs.exe
                  O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Movie Maker\moviemk.exe
                  O4 - Global Startup: C:\Documents And Settings\laurent\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe
                  O4 - Global Startup: C:\Documents And Settings\laurent\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
                  O4 - Global Startup: C:\Documents And Settings\laurent\Menu Démarrer\Programmes\Lecteur Windows Media.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
                  O4 - Global Startup: C:\Documents And Settings\laurent\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe
                  ~ Scan Global Startup in 00mn 00s

                  ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
                  O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                  O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
                  ~ Scan IE Extra Buttons in 00mn 00s

                  ---\\ Winsock hijacker (Layered Service Provider) (O10)
                  O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
                  O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
                  O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
                  ~ Scan Winsock in 00mn 00s

                  ---\\ Objets ActiveX (Downloaded Program Files)(O16)
                  O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1332594387359
                  O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                  ~ Scan Objets ActiveX in 00mn 00s

                  ---\\ Modification Domaine/Adresses DNS (O17)
                  O17 - HKLM\System\CCS\Services\Tcpip\..\{853A6E3C-EFA8-4D98-85F8-A2F9DDFFD848}: DhcpNameServer = 192.168.1.1
                  O17 - HKLM\System\CS1\Services\Tcpip\..\{853A6E3C-EFA8-4D98-85F8-A2F9DDFFD848}: DhcpNameServer = 192.168.1.1
                  O17 - HKLM\System\CS3\Services\Tcpip\..\{853A6E3C-EFA8-4D98-85F8-A2F9DDFFD848}: DhcpNameServer = 192.168.1.1
                  ~ Scan Domain in 00mn 00s

                  ---\\ Protocole additionnel (O18)
                  O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
                  O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
                  O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll
                  O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
                  O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
                  O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
                  O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
                  O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
                  O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll
                  O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
                  O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
                  O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
                  O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- C:\WINDOWS\system32\inetcomm.dll
                  O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
                  O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll
                  O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
                  O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
                  O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll
                  O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
                  O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll
                  O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll
                  O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll
                  O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll
                  O18 - Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
                  O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
                  O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
                  O18 - Filter: lzdhtml - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
                  O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
                  ~ Scan Protocole Additionnel in 00mn 00s

                  ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
                  O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll
                  O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll
                  O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\WINDOWS\system32\cscdll.dll
                  O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\system32\dimsntfy.dll
                  O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
                  O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
                  O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll
                  O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll
                  O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
                  O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
                  ~ Scan Winlogon in 00mn 00s

                  ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
                  O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
                  O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
                  O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
                  O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
                  ~ Scan SSODL in 00mn 00s

                  ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
                  O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll
                  ~ Scan STS/SSO in 00mn 00s

                  ---\\ Liste des services NT non Microsoft et non désactivés (O23)
                  O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
                  O23 - Service: NMSAccess (NMSAccess) . (...) - C:\Program Files\CDBurnerXP\NMSAccessU.exe
                  O23 - Service: NVIDIA Display Driver Service (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 162.1.) - C:\WINDOWS\system32\nvsvc32.exe
                  O23 - Service: Pml Driver HPZ12 (Pml Driver HPZ12) . (.HP - PML Driver.) - C:\WINDOWS\system32\HPZipm12.exe
                  O23 - Service: STI Simulator (STI Simulator) . (...) - C:\WINDOWS\system32\PAStiSvc.exe
                  O23 - Service: Updater Service for StartNow Toolbar (Updater Service for StartNow Toolbar) . (...) - C:\Program Files\StartNow Toolbar\ToolbarUpdaterService.exe
                  ~ Scan Services in 00mn 00s

                  ---\\ Enumération Active Desktop & MHTML Editor (O24)
                  O24 - Default MHTML Editor: Last - .(...) - (.not file.)
                  ~ Scan Desktop Component in 00mn 00s

                  ---\\ BootExecute (O34)
                  O34 - HKLM BootExecute: (autocheck autochk *) - File not found
                  ~ Scan Keys in 00mn 00s

                  ---\\ Tâches planifiées en automatique (O39)
                  O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
                  O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
                  O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\MP Scheduled Scan.job
                  O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\User_Feed_Synchronization-{E10325A0-523E-4A94-9BF7-B5D1E1C51109}.job
                  ~ Scan Scheduled Task in 00mn 00s

                  ---\\ Composants installés (ActiveSetup Installed Components) (O40)
                  O40 - ASIC: Mise à jour de la version d'Internet Explorer - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} . (.Microsoft Corporation - IE Per User Active Setup Uninstall Utility.) -- C:\WINDOWS\system32\ieudinit.exe
                  O40 - ASIC: Lecteur Windows Media - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Utilitaire d'installation du Lecteur Windows Media Microsoft.) -- C:\WINDOWS\inf\unregmp2.exe
                  O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\WINDOWS\system32\ie4uinit.exe.mui
                  O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - IEAK branding.) -- C:\WINDOWS\system32\iedkcs32.dll
                  O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} . (.Microsoft Corporation - Windows Media 6.4 Player Shim.) -- C:\WINDOWS\system32\wmpdxm.dll
                  O40 - ASIC: Lecteur Windows Media Microsoft 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (...) -- C:\WINDOWS\INF\mswmp.inf
                  O40 - ASIC: DirectAnimation - {283807B5-2C60-11D0-A31D-00AA00B92C03} . (.Microsoft Corporation - DirectX Media -- DirectAnimation.) -- C:\WINDOWS\system32\danim.dll
                  O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (...) -- C:\WINDOWS\INF\msnetmtg.inf
                  O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (...) -- C:\WINDOWS\INF\msmsgs.inf
                  O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\WINDOWS\system32\msieftp.dll
                  O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (...) -- C:\WINDOWS\INF\wmp.inf
                  O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\WINDOWS\system32\ie4uinit.exe.mui
                  O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\WINDOWS\system32\mscories.dll
                  O40 - ASIC: Macromedia Shockwave Flash - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 11.1 r102.) -- C:\WINDOWS\system32\Macromed\Flash\Flash11g.ocx
                  ~ Scan Active Setup in 00mn 00s

                  ---\\ Pilotes lancés au démarrage (O41)
                  O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
                  O41 - Driver: (AmdK8) . (.Advanced Micro Devices - AMD Processor Driver.) - C:\WINDOWS\system32\DRIVERS\AmdK8.sys
                  O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys
                  O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
                  O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys
                  O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys
                  O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys
                  O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys
                  O41 - Driver: (MpFilter) . (.Microsoft Corporation - Microsoft antimalware file system filter dr.) - C:\WINDOWS\system32\DRIVERS\MpFilter.sys
                  O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
                  O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS\netbios.sys
                  O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS\netbt.sys
                  O41 - Driver: (Processor) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\system32\DRIVERS\processr.sys
                  O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERS\rasacd.sys
                  O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERS\rdbss.sys
                  O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
                  O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\system32\DRIVERS\redbook.sys
                  O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\WINDOWS\system32\DRIVERS\serial.sys
                  O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS\tcpip.sys
                  O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS\termdd.sys
                  O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
                  ~ Scan Drivers in 00mn 00s

                  ---\\ Logiciels installés (O42)
                  O42 - Logiciel: Adobe Acrobat 5.0 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Acrobat 5.0
                  O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
                  O42 - Logiciel: ArcSoft VideoImpression 2 - (.ArcSoft.) [HKLM] -- {C765D9FF-4A34-4BF1-9F91-E9A3C60C86FC}
                  O42 - Logiciel: CDBurnerXP - (.CDBurnerXP.) [HKLM] -- {7E265513-8CDA-4631-B696-F40D983F3B07}_is1
                  O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
                  O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {7A25D130-4EC8-11E1-BEA4-B8AC6F97B88E}
                  O42 - Logiciel: HP Customer Participation Program 7.0 - (.HP.) [HKLM] -- HPExtendedCapabilities
                  O42 - Logiciel: HP Imaging Device Functions 7.0 - (.HP.) [HKLM] -- HP Imaging Device Functions
                  O42 - Logiciel: HP Photosmart Essential - (.HP.) [HKLM] -- {6994491D-D491-48F1-AE1F-E179C1FFFC2F}
                  O42 - Logiciel: HP Photosmart, Officejet and Deskjet 7.0.A - (.HP.) [HKLM] -- {BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}
                  O42 - Logiciel: HP Solution Center 7.0 - (.HP.) [HKLM] -- HP Solution Center & Imaging Support Tools
                  O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM] -- {2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}
                  O42 - Logiciel: High Definition Audio Driver Package - KB888111 - (.Microsoft Corporation.) [HKLM] -- KB888111WXPSP2
                  O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
                  O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
                  O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5
                  O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5
                  O42 - Logiciel: IncrediMail - (.IncrediMail.) [HKLM] -- {5E97F3BD-CDDC-4188-9D98-532E14FABB5D}
                  O42 - Logiciel: IncrediMail 2.0 - (.IncrediMail Ltd..) [HKLM] -- IncrediMail
                  O42 - Logiciel: IncrediMail MediaBar Francais 2 Toolbar - (.IncrediMail MediaBar Francais 2.) [HKLM] -- IncrediMail_MediaBar_Francais_2 Toolbar
                  O42 - Logiciel: K-Lite Codec Pack 8.4.0 (Full) - (.Pas de propriétaire.) [HKLM] -- KLiteCodecPack_is1
                  O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
                  O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
                  O42 - Logiciel: Medi@Show - (.Pas de propriétaire.) [HKLM] -- MediaShow
                  O42 - Logiciel: Micro Application - Etiquettes CD-DVD 2.0 - (.Pas de propriétaire.) [HKLM] -- {EAAE00DB-412E-467E-B784-F9205ECCD58D}
                  O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
                  O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
                  O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
                  O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
                  O42 - Logiciel: Microsoft Antimalware - (.Microsoft Corporation.) [HKLM] -- {05BFB060-4F22-4710-B0A2-2801A1B606C5}
                  O42 - Logiciel: Microsoft Antimalware Service FR-FR Language Pack - (.Microsoft Corporation.) [HKLM] -- {32E9C1A5-0FDA-4483-987D-DBABF9CC1DD8}
                  O42 - Logiciel: Microsoft Security Client - (.Microsoft Corporation.) [HKLM] -- {54B6DC7D-8C5B-4DFB-BC15-C010A3326B2B}
                  O42 - Logiciel: Microsoft Security Client FR-FR Language Pack - (.Microsoft Corporation.) [HKLM] -- {50779A29-834E-4E36-BBEB-B7CABC67A825}
                  O42 - Logiciel: Microsoft Security Essentials - (.Microsoft Corporation.) [HKLM] -- Microsoft Security Client
                  O42 - Logiciel: NVIDIA Drivers - (.Pas de propriétaire.) [HKLM] -- NVIDIA Drivers
                  O42 - Logiciel: Package de pilotes Windows - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0) - (.Advanced Micro Devices.) [HKLM] -- 3BEF1AFDE8303306594E2ADA27520E6E700820AE
                  O42 - Logiciel: Photo Notifier and Animation Creator - (.IncrediMail Ltd..) [HKLM] -- Photo Notifier and Animation Creator
                  O42 - Logiciel: Photo Notifier and Animation Creator - (.Nom de votre société.) [HKLM] -- {6B7F28D4-160E-40C6-B7C8-5EC6B9734DA7}
                  O42 - Logiciel: Pinnacle Hollywood FX 4.6 - (.Pas de propriétaire.) [HKLM] -- Hollywood FX 4.6
                  O42 - Logiciel: Pinnacle PCTV - (.Pas de propriétaire.) [HKLM] -- {3C02ED4F-46B0-4E9E-87F7-47AEBA4031C8}
                  O42 - Logiciel: Pinnacle Systems PCI Performance Enhancer - (.Pas de propriétaire.) [HKLM] -- Pinnacle Systems PCI Performance Enhancer
                  O42 - Logiciel: Pinnacle TRex - (.Pas de propriétaire.) [HKLM] -- {9313E9A6-03DF-11D5-88F8-005004361016}
                  O42 - Logiciel: PowerDVD - (.Pas de propriétaire.) [HKLM] -- {6811CAA0-BF12-11D4-9EA1-0050BAE317E1}
                  O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
                  O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2657424
                  O42 - Logiciel: StartNow Toolbar - (.StartNow.com.) [HKLM] -- StartNow Toolbar
                  O42 - Logiciel: Studio 8 - (.Pas de propriétaire.) [HKLM] -- {9C440083-6021-41C8-A4E7-FD953C537E3A}
                  O42 - Logiciel: Trust Webcam 14839 - (.Nom de votre société.) [HKLM] -- InstallShield_{71C8B152-0F63-4FEE-88F4-DC298B6EB446}
                  O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
                  O42 - Logiciel: VirtualDub 1.9.6 Fr - (.Trad-Fr.) [HKLM] -- {1FF7993C-23B1-4C91-B1F6-09D13C57A06A}_is1
                  O42 - Logiciel: VirtualDubMOD 1.5.10.3 Fr - (.Trad-Fr.) [HKLM] -- {B158F76F-76AB-4115-A4F0-4C6EF6956093}_is1
                  O42 - Logiciel: Vuze - (.Vuze Inc..) [HKLM] -- 8461-7759-5462-8226
                  O42 - Logiciel: WinDev 9 - (.Pas de propriétaire.) [HKCU] -- WinDev9
                  O42 - Logiciel: WinZip 16.0 - (.WinZip Computing, S.L. .) [HKLM] -- {CD95F661-A5C4-44F5-A6AA-ECDD91C240CC}
                  O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130) - (.Microsoft Corporation.) [HKLM] -- KB892130
                  O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8
                  O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service

                  ---\\ HKCU & HKLM Software Keys
                  [HKCU\Software\Adobe]
                  [HKCU\Software\Azureus]
                  [HKCU\Software\Canneverbe Limited]
                  [HKCU\Software\Classes]
                  [HKCU\Software\Conduit]
                  [HKCU\Software\CyberLink]
                  [HKCU\Software\DScaler5]
                  [HKCU\Software\Freeware]
                  [HKCU\Software\GNU]
                  [HKCU\Software\Gabest]
                  [HKCU\Software\Google]
                  [HKCU\Software\Haali]
                  [HKCU\Software\Hewlett-Packard]
                  [HKCU\Software\IM]
                  [HKCU\Software\ImInstaller]
                  [HKCU\Software\IncrediMail]
                  [HKCU\Software\IncrediMail_MediaBar_Francais_2]
                  [HKCU\Software\Intel]
                  [HKCU\Software\LAV]
                  [HKCU\Software\Local AppWizard-Generated Applications]
                  [HKCU\Software\Macromedia]
                  [HKCU\Software\MediaInfo]
                  [HKCU\Software\MozillaPlugins]
                  [HKCU\Software\NVIDIA Corporation]
                  [HKCU\Software\Netscape]
                  [HKCU\Software\Nico Mak Computing]
                  [HKCU\Software\PC SOFT]
                  [HKCU\Software\Pinnacle Systems]
                  [HKCU\Software\Policies]
                  [HKCU\Software\PriceGong]
                  [HKCU\Software\Realtek]
                  [HKCU\Software\StartNow Toolbar]
                  [HKCU\Software\Trolltech]
                  [HKCU\Software\VirtualDub.org]
                  [HKCU\Software\WinZip Computing]
                  [HKCU\Software\Zugo]
                  [HKCU\Software\ej-technologies]
                  [HKCU\Software\madFlac]
                  [HKCU\Software\madshi]
                  [HKLM\Software\AMD]
                  [HKLM\Software\Adobe]
                  [HKLM\Software\ArcSoft]
                  [HKLM\Software\Azureus]
                  [HKLM\Software\BrowserChoice]
                  [HKLM\Software\Bunndle]
                  [HKLM\Software\C07ft5Y]
                  [HKLM\Software\Classes]
                  [HKLM\Software\Clients]
                  [HKLM\Software\Conduit]
                  [HKLM\Software\CyberLink]
                  [HKLM\Software\GNU]
                  [HKLM\Software\Gabest]
                  [HKLM\Software\Gemplus]
                  [HKLM\Software\Google]
                  [HKLM\Software\HP]
                  [HKLM\Software\HaaliMkx]
                  [HKLM\Software\Hewlett-Packard]
                  [HKLM\Software\ICE]
                  [HKLM\Software\ImInstaller]
                  [HKLM\Software\IncrediMail_MediaBar_Francais_2]
                  [HKLM\Software\InstallShield]
                  [HKLM\Software\Intel]
                  [HKLM\Software\InterVideo]
                  [HKLM\Software\KLCodecPack]
                  [HKLM\Software\LAV]
                  [HKLM\Software\MSI]
                  [HKLM\Software\Macromedia]
                  [HKLM\Software\Micro Application]
                  [HKLM\Software\MozillaPlugins]
                  [HKLM\Software\Mozilla]
                  [HKLM\Software\NVIDIA Corporation]
                  [HKLM\Software\Nico Mak Computing]
                  [HKLM\Software\ODBC]
                  [HKLM\Software\Pinnacle Systems]
                  [HKLM\Software\PixArt]
                  [HKLM\Software\Policies]
                  [HKLM\Software\Program Groups]
                  [HKLM\Software\Realtek Semiconductor Corp.]
                  [HKLM\Software\Realtek]
                  [HKLM\Software\RegisteredApplications]
                  [HKLM\Software\Schlumberger]
                  [HKLM\Software\Secure]
                  [HKLM\Software\TQ566808]
                  [HKLM\Software\Trad-FR]
                  [HKLM\Software\Windows 3.1 Migration Status]
                  [HKLM\Software\ej-technologies]
                  [HKLM\Software\magnet]
                  ~ Scan Softwares in 00mn 00s

                  ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
                  O43 - CFD: 24/03/2012 - 12:48:54 - [29,224] ----D- C:\Program Files\Adobe
                  O43 - CFD: 25/03/2012 - 12:50:10 - [15,127] ----D- C:\Program Files\ADULTES sur CD - Ant Movie Catalog 4.1.0.2
                  O43 - CFD: 24/03/2012 - 13:24:06 - [138,479] ----D- C:\Program Files\ArcSoft
                  O43 - CFD: 25/03/2012 - 12:57:06 - [17,312] ----D- C:\Program Files\CDBurnerXP
                  O43 - CFD: 24/03/2012 - 12:13:50 - [0] ----D- C:\Program Files\ComPlus Applications
                  O43 - CFD: 26/03/2012 - 11:22:08 - [0,609] ----D- C:\Program Files\Conduit
                  O43 - CFD: 26/03/2012 - 12:58:48 - [28,604] ----D- C:\Program Files\CyberLink
                  O43 - CFD: 24/03/2012 - 12:41:46 - [2,786] ----D- C:\Program Files\DIFX
                  O43 - CFD: 24/03/2012 - 23:35:18 - [6,510] ----D- C:\Program Files\Driver Whiz
                  O43 - CFD: 24/03/2012 - 13:25:06 - [56,734] ----D- C:\Program Files\Fichiers communs
                  O43 - CFD: 24/03/2012 - 23:38:54 - [137,827] ----D- C:\Program Files\Google
                  O43 - CFD: 24/03/2012 - 13:00:38 - [1,651] ----D- C:\Program Files\Hewlett-Packard
                  O43 - CFD: 25/03/2012 - 13:47:28 - [139,212] ----D- C:\Program Files\HP
                  O43 - CFD: 26/03/2012 - 11:20:32 - [26,338] ----D- C:\Program Files\IncrediMail
                  O43 - CFD: 26/03/2012 - 11:22:04 - [4,795] ----D- C:\Program Files\IncrediMail_MediaBar_Francais_2
                  O43 - CFD: 26/03/2012 - 13:08:32 - [20,024] --H-D- C:\Program Files\InstallShield Installation Information
                  O43 - CFD: 26/03/2012 - 03:04:06 - [4,420] ----D- C:\Program Files\Internet Explorer
                  O43 - CFD: 26/03/2012 - 11:06:00 - [56,244] ----D- C:\Program Files\K-Lite Codec Pack
                  O43 - CFD: 24/03/2012 - 22:24:34 - [2,053] ----D- C:\Program Files\Messenger
                  O43 - CFD: 26/03/2012 - 13:08:34 - [437,842] ----D- C:\Program Files\Micro Application
                  O43 - CFD: 24/03/2012 - 12:16:14 - [0] ----D- C:\Program Files\microsoft frontpage
                  O43 - CFD: 26/03/2012 - 01:22:36 - [17,554] ----D- C:\Program Files\Microsoft Security Client
                  O43 - CFD: 25/03/2012 - 13:51:58 - [9,894] ----D- C:\Program Files\Movie Maker
                  O43 - CFD: 26/03/2012 - 03:08:54 - [0,025] ----D- C:\Program Files\MSBuild
                  O43 - CFD: 24/03/2012 - 12:12:46 - [18,385] ----D- C:\Program Files\MSN
                  O43 - CFD: 24/03/2012 - 12:13:10 - [8,341] ----D- C:\Program Files\MSN Gaming Zone
                  O43 - CFD: 24/03/2012 - 15:25:14 - [0] ----D- C:\Program Files\MSXML 4.0
                  O43 - CFD: 24/03/2012 - 22:16:56 - [3,133] ----D- C:\Program Files\NetMeeting
                  O43 - CFD: 25/03/2012 - 12:50:20 - [15,127] ----D- C:\Program Files\Nouveau dossier
                  O43 - CFD: 24/03/2012 - 12:13:18 - [0,002] ----D- C:\Program Files\Online Services
                  O43 - CFD: 25/03/2012 - 13:50:44 - [4,176] ----D- C:\Program Files\Outlook Express
                  O43 - CFD: 26/03/2012 - 11:22:22 - [2,630] ----D- C:\Program Files\Photo Notifier and Animation Creator
                  O43 - CFD: 26/03/2012 - 09:22:10 - [422,671] ----D- C:\Program Files\Pinnacle
                  O43 - CFD: 24/03/2012 - 12:44:58 - [47,777] ----D- C:\Program Files\Realtek
                  O43 - CFD: 26/03/2012 - 03:08:38 - [34,715] ----D- C:\Program Files\Reference Assemblies
                  O43 - CFD: 24/03/2012 - 12:15:02 - [0,001] ----D- C:\Program Files\Services en ligne
                  O43 - CFD: 26/03/2012 - 11:05:50 - [1,176] ----D- C:\Program Files\StartNow Toolbar
                  O43 - CFD: 24/03/2012 - 13:25:06 - [0,113] ----D- C:\Program Files\Trust
                  O43 - CFD: 24/03/2012 - 12:47:26 - [0,000] --H-D- C:\Program Files\Uninstall Information
                  O43 - CFD: 26/03/2012 - 12:02:02 - [3,947] ----D- C:\Program Files\VirtualDub
                  O43 - CFD: 26/03/2012 - 11:42:56 - [6,041] ----D- C:\Program Files\VirtualDubMOD
                  O43 - CFD: 25/03/2012 - 02:13:24 - [102,162] ----D- C:\Program Files\Vuze
                  O43 - CFD: 26/03/2012 - 12:59:06 - [3,370] ----D- C:\Program Files\Windows Media Player
                  O43 - CFD: 24/03/2012 - 22:16:50 - [3,760] ----D- C:\Program Files\Windows NT
                  O43 - CFD: 24/03/2012 - 12:15:06 - [0] --H-D- C:\Program Files\WindowsUpdate
                  O43 - CFD: 25/03/2012 - 12:15:32 - [81,621] ----D- C:\Program Files\WinZip
                  O43 - CFD: 24/03/2012 - 12:16:14 - [0] ----D- C:\Program Files\xerox
                  O43 - CFD: 27/03/2012 - 09:05:48 - [10,095] ----D- C:\Program Files\ZHPDiag
                  O43 - CFD: 24/03/2012 - 22:46:32 - [0,208] ----D- C:\Program Files\Fichiers Communs\Adobe
                  O43 - CFD: 24/03/2012 - 13:24:24 - [4,015] ----D- C:\Program Files\Fichiers Communs\ArcSoft
                  O43 - CFD: 24/03/2012 - 13:00:26 - [0,436] ----D- C:\Program Files\Fichiers Communs\Hewlett-Packard
                  O43 - CFD: 24/03/2012 - 13:01:34 - [2,264] ----D- C:\Program Files\Fichiers Communs\HP
                  O43 - CFD: 24/03/2012 - 13:24:56 - [7,487] ----D- C:\Program Files\Fichiers Communs\InstallShield
                  O43 - CFD: 24/03/2012 - 13:40:36 - [11,501] ----D- C:\Program Files\Fichiers Communs\Microsoft Shared
                  O43 - CFD: 24/03/2012 - 12:14:24 - [0,271] ----D- C:\Program Files\Fichiers Communs\MSSoap
                  O43 - CFD: 24/03/2012 - 13:04:56 - [0] ----D- C:\Program Files\Fichiers Communs\ODBC
                  O43 - CFD: 24/03/2012 - 13:11:54 - [15,640] ----D- C:\Program Files\Fichiers Communs\PC SOFT
                  O43 - CFD: 24/03/2012 - 13:25:06 - [4,796] ----D- C:\Program Files\Fichiers Communs\PCCamera
                  O43 - CFD: 24/03/2012 - 12:14:28 - [0,008] ----D- C:\Program Files\Fichiers Communs\Services
                  O43 - CFD: 24/03/2012 - 13:04:54 - [3,612] ----D- C:\Program Files\Fichiers Communs\SpeechEngines
                  O43 - CFD: 24/03/2012 - 22:16:48 - [6,496] ----D- C:\Program Files\Fichiers Communs\System
                  O43 - CFD: 25/03/2012 - 02:07:50 - [0,000] ----D- C:\Documents and Settings\laurent\Application Data\Adobe
                  O43 - CFD: 27/03/2012 - 09:03:58 - [14,195] ----D- C:\Documents and Settings\laurent\Application Data\Azureus
                  O43 - CFD: 25/03/2012 - 12:57:18 - [0,001] ----D- C:\Documents and Settings\laurent\Application Data\Canneverbe Limited
                  O43 - CFD: 25/03/2012 - 12:56:26 - [0] ----D- C:\Documents and Settings\laurent\Application Data\GetRightToGo
                  O43 - CFD: 24/03/2012 - 23:39:12 - [2,981] ----D- C:\Documents and Settings\laurent\Application Data\Google
                  O43 - CFD: 24/03/2012 - 13:02:00 - [0,005] ----D- C:\Documents and Settings\laurent\Application Data\HP
                  O43 - CFD: 26/03/2012 - 03:24:04 - [0,033] ----D- C:\Documents and Settings\laurent\Application Data\HpUpdate
                  O43 - CFD: 24/03/2012 - 12:19:28 - [0] ----D- C:\Documents and Settings\laurent\Application Data\Identities
                  O43 - CFD: 24/03/2012 - 12:41:10 - [0] ----D- C:\Documents and Settings\laurent\Application Data\InstallShield
                  O43 - CFD: 24/03/2012 - 12:48:54 - [0] ----D- C:\Documents and Settings\laurent\Application Data\InterTrust
                  O43 - CFD: 25/03/2012 - 02:07:50 - [0,001] ----D- C:\Documents and Settings\laurent\Application Data\Macromedia
                  O43 - CFD: 26/03/2012 - 13:02:52 - [0,000] ----D- C:\Documents and Settings\laurent\Application Data\Media Player Classic
                  O43 - CFD: 24/03/2012 - 12:49:46 - [1,721] -S--D- C:\Documents and Settings\laurent\Application Data\Microsoft
                  O43 - CFD: 27/03/2012 - 09:03:44 - [0,340] ----D- C:\Documents and Settings\laurent\Application Data\PriceGong
                  O43 - CFD: 26/03/2012 - 11:22:04 - [0,187] ----D- C:\Documents and Settings\laurent\Local Settings\Application Data\Conduit
                  O43 - CFD: 24/03/2012 - 23:37:54 - [714,374] ----D- C:\Documents and Settings\laurent\Local Settings\Application Data\Google
                  O43 - CFD: 26/03/2012 - 11:23:52 - [24,856] ----D- C:\Documents and Settings\laurent\Local Settings\Application Data\IM
                  O43 - CFD: 26/03/2012 - 11:25:32 - [5,578] ----D- C:\Documents and Settings\laurent\Local Settings\Application Data\IncrediMail_MediaBar_Francais_2
                  O43 - CFD: 24/03/2012 - 23:34:02 - [1,295] ----D- C:\Documents and Settings\laurent\Local Settings\Application Data\Microsoft
                  O43 - CFD: 24/03/2012 - 23:38:06 - [0,003] ----D- C:\Documents and Settings\laurent\Local Settings\Application Data\PC_Drivers_Headquarters
                  O43 - CFD: 26/03/2012 - 11:22:04 - [0] ----D- C:\Documents and Settings\laurent\Local Settings\Application Data\Temp
                  O43 - CFD: 25/03/2012 - 12:15:38 - [0,250] ----D- C:\Documents and Settings\laurent\Local Settings\Application Data\WinZip
                  ~ Scan Program Folder in 00mn 05s

                  ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
                  O44 - LFC:[MD5.EFE9640C92635D50447FCD012C71EAE6] - 27/03/2012 - 07:30:09 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log [2007053]
                  O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 27/03/2012 - 07:18:32 ---A- . (...) -- C:\WINDOWS\0.log [0]
                  O44 - LFC:[MD5.5EECD5DDA9F7859B822ABF79BF714205] - 27/03/2012 - 07:18:12 ---A- . (...) -- C:\WINDOWS\wiaservc.log [50]
                  O44 - LFC:[MD5.EFD72270948A04D09ADE5262A8D93BBF] - 27/03/2012 - 07:18:11 ---A- . (...) -- C:\WINDOWS\wiadebug.log [159]
                  O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 27/03/2012 - 07:17:54 -S-A- . (...) -- C:\WINDOWS\bootstat.dat [2048]
                  O44 - LFC:[MD5.CB635B4A0E549D580AD7604DB1B71E26] - 27/03/2012 - 00:51:13 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt [32340]
                  O44 - LFC:[MD5.CC646D5C0360D58CF67061EDA45CF732] - 26/03/2012 - 23:15:59 ---A- . (...) -- C:\WINDOWS\system32\FNTCACHE.DAT [165912]
                  O44 - LFC:[MD5.A9BA2979E4FD3E613B3C1424D75FD4F8] - 26/03/2012 - 13:30:54 ---A- . (...) -- C:\WINDOWS\setupapi.log [977748]
                  O44 - LFC:[MD5.726632B325ECE7A76C85BA3E0F700FBB] - 26/03/2012 - 12:07:46 ---A- . (...) -- C:\WINDOWS\NAVIGMA.INI [40]
                  O44 - LFC:[MD5.8CC8E674EFF3E0B20BF8706899E1808F] - 26/03/2012 - 11:59:04 ---A- . (...) -- C:\WINDOWS\wmsetup.log [3628]
                  O44 - LFC:[MD5.89112689A307A65769CA942079CACE9B] - 26/03/2012 - 11:59:04 ---A- . (.The Duck Corporation - TrueMotion 2.0 Decompressor.) -- C:\WINDOWS\system32\tm20dec.ax [140800]
                  O44 - LFC:[MD5.6D6F4B1886E91EB37ABCCAD19C561EE0] - 26/03/2012 - 11:59:03 ---A- . (...) -- C:\WINDOWS\system32\amcompat.tlb [16832]
                  O44 - LFC:[MD5.A32B14BE5EDAE794FCE1A9E970827509] - 26/03/2012 - 11:59:03 ---A- . (...) -- C:\WINDOWS\system32\nscompat.tlb [23392]
                  O44 - LFC:[MD5.885CDCD31DD7BAE6480399C73D631EEB] - 26/03/2012 - 11:54:28 ---A- . (...) -- C:\WINDOWS\system32\wpa.dbl [2422]
                  O44 - LFC:[MD5.F47597B1D3CDA1B9419787C36141730F] - 26/03/2012 - 11:25:49 ---A- . (...) -- C:\WINDOWS\system32\PerfStringBackup.INI [1049410]
                  O44 - LFC:[MD5.7163F88ACC82AB6E63F694AC349E6C64] - 26/03/2012 - 11:25:49 ---A- . (...) -- C:\WINDOWS\system32\perfc009.dat [67312]
                  O44 - LFC:[MD5.FF143ABA1B0680BC99E0A326EAB043B9] - 26/03/2012 - 11:25:49 ---A- . (...) -- C:\WINDOWS\system32\perfc00C.dat [80508]
                  O44 - LFC:[MD5.09A4E325F3862EA40F5C18D3DD10E9EB] - 26/03/2012 - 11:25:49 ---A- . (...) -- C:\WINDOWS\system32\perfh009.dat [432356]
                  O44 - LFC:[MD5.D7BF65E0EFBB16528B41185CDB315752] - 26/03/2012 - 11:25:49 ---A- . (...) -- C:\WINDOWS\system32\perfh00C.dat [500482]
                  O44 - LFC:[MD5.F9732DECFD8FEE77B0A6504B55EC1184] - 26/03/2012 - 11:18:34 ---A- . (...) -- C:\WINDOWS\KB961118.log [11438]
                  O44 - LFC:[MD5.81AA5C72B62533EB2994395E9F591F3F] - 26/03/2012 - 11:18:34 ---A- . (...) -- C:\WINDOWS\comsetup.log [322095]
                  O44 - LFC:[MD5.4F939E4CA1F27F8A137F32D3E9B9BD5D] - 26/03/2012 - 11:18:34 ---A- . (...) -- C:\WINDOWS\iis6.log [204305]
                  O44 - LFC:[MD5.5F115B1852B8A9F6DC3911B876E5DCBF] - 26/03/2012 - 11:18:34 ---A- . (...) -- C:\WINDOWS\imsins.log [1374]
                  O44 - LFC:[MD5.799F08490D82E3974836311B47CA2BD9] - 26/03/2012 - 11:18:34 ---A- . (...) -- C:\WINDOWS\ntdtcsetup.log [192792]
                  O44 - LFC:[MD5.D8C6ED9EB1ADF962A78BA7337CAFB947] - 26/03/2012 - 11:18:34 ---A- . (...) -- C:\WINDOWS\ocgen.log [620490]
                  O44 - LFC:[MD5.F5CCB883A9CC10E5E5DEAE3FC288F64D] - 26/03/2012 - 11:18:34 ---A- . (...) -- C:\WINDOWS\ocmsn.log [51662]
                  O44 - LFC:[MD5.96732334173FC841A22287A25857B1E5] - 26/03/2012 - 11:18:34 ---A- . (...) -- C:\WINDOWS\tsoc.log [493338]
                  O44 - LFC:[MD5.C26BD8747378B330046CB7D87224AD74] - 26/03/2012 - 11:18:33 ---A- . (...) -- C:\WINDOWS\FaxSetup.log [1285198]
                  O44 - LFC:[MD5.80BCF04351DBD91480C870D94E6F6D15] - 26/03/2012 - 11:18:33 ---A- . (...) -- C:\WINDOWS\msgsocm.log [64369]
                  O44 - LFC:[MD5.84B4F61F59A421BD85D97B35D194B42B] - 26/03/2012 - 08:22:22 ---A- . (.MindVision Software - Uninstall application file.) -- C:\WINDOWS\unvise32.exe [86016]
                  O44 - LFC:[MD5.DC17DD0189B0C36D863B4DD0A036C10F] - 26/03/2012 - 08:22:00 ---A- . (...) -- C:\WINDOWS\WMSysPr9.prx [316640]
                  O44 - LFC:[MD5.181CA4A24D29B27339FD7F678B1E2AA6] - 26/03/2012 - 08:20:20 ---A- . (...) -- C:\WINDOWS\DirectX.log [2245]
                  O44 - LFC:[MD5.600F1CE8E71892617B7538351174BC91] - 26/03/2012 - 07:59:59 ---A- . (...) -- C:\WINDOWS\aksdrvsetup.log [4043]
                  O44 - LFC:[MD5.D7051CEE60FDF4957739EFD5F854CBAF] - 26/03/2012 - 07:58:26 ---A- . (...) -- C:\WINDOWS\spupdsvc.log [84501]
                  O44 - LFC:[MD5.2A3F44533F460C9A2BCB858A29B414FE] - 26/03/2012 - 02:07:56 ---A- . (...) -- C:\WINDOWS\updspapi.log [200009]
                  O44 - LFC:[MD5.4AC9F9CCB6BE5A819FCF414109CFC252] - 25/03/2012 - 12:58:10 ---A- . (...) -- C:\WINDOWS\KB2641653.log [40395]
                  O44 - LFC:[MD5.04C2C674043C249168388317F19218F0] - 25/03/2012 - 12:58:10 ---A- . (...) -- C:\WINDOWS\imsins.BAK [1374]
                  O44 - LFC:[MD5.E097A5DA6C637A0B4CE078E045155CC8] - 25/03/2012 - 12:58:05 ---A- . (...) -- C:\WINDOWS\KB2387149.log [39981]
                  O44 - LFC:[MD5.8C2712F8B5D7F7385693477C137FC82F] - 25/03/2012 - 12:57:58 ---A- . (...) -- C:\WINDOWS\KB2479943.log [54681]
                  O44 - LFC:[MD5.3BF46DBC478B1B1CA5B4754C08315814] - 25/03/2012 - 12:57:53 ---A- . (...) -- C:\WINDOWS\KB2564958.log [37084]
                  O44 - LFC:[MD5.325C9B5640930625F54E29A300CAA032] - 25/03/2012 - 12:57:47 ---A- . (...) -- C:\WINDOWS\KB2478971.log [52749]
                  O44 - LFC:[MD5.4CA1C41C714C7E7CFE152258C7F389E6] - 25/03/2012 - 12:57:42 ---A- . (...) -- C:\WINDOWS\KB2544893-v2.log [53379]
                  O44 - LFC:[MD5.2B6FD0DCB7F90F88161639306C845794] - 25/03/2012 - 12:57:37 ---A- . (...) -- C:\WINDOWS\KB2345886.log [52329]
                  O44 - LFC:[MD5.78816331E275C016D7F9771969725BC8] - 25/03/2012 - 12:57:32 ---A- . (...) -- C:\WINDOWS\KB2536276-v2.log [37509]
                  O44 - LFC:[MD5.0D51FEC876C502AD98E2F98B9583A152] - 25/03/2012 - 12:57:26 ---A- . (...) -- C:\WINDOWS\KB2646524.log [52284]
                  O44 - LFC:[MD5.3A2FA34D8BA15C84C0C2FF221CA17935] - 25/03/2012 - 12:57:20 ---A- . (...) -- C:\WINDOWS\KB2585542.log [51804]
                  O44 - LFC:[MD5.AAED25CB2D25FB800BB36B004C483EE3] - 25/03/2012 - 12:57:14 ---A- . (...) -- C:\WINDOWS\KB2631813.log [50369]
                  O44 - LFC:[MD5.3CFD385E10036CA80F5BF8C1551B7F37] - 25/03/2012 - 12:57:08 ---A- . (...) -- C:\WINDOWS\KB2296011.log [34186]
                  O44 - LFC:[MD5.2BBAF7D37E938C990E064B4605A580A3] - 25/03/2012 - 12:57:04 ---A- . (...) -- C:\WINDOWS\KB2115168.log [52297]
                  O44 - LFC:[MD5.118E888EA1A236FF7252D6B81B81DB3A] - 25/03/2012 - 12:57:00 ---A- . (...) -- C:\WINDOWS\KB975558.log [35130]
                  O44 - LFC:[MD5.314CD3E7982DA76AD36731F99E1AAA12] - 25/03/2012 - 12:56:55 ---A- . (...) -- C:\WINDOWS\KB2378111.log [34395]
                  O44 - LFC:[MD5.DC13C24C24A3445104685D956A8FFFE7] - 25/03/2012 - 12:56:49 ---A- . (...) -- C:\WINDOWS\KB951978.log [49715]
                  O44 - LFC:[MD5.8903D570CD11CDE52B7CB2DE47C76C0E] - 25/03/2012 - 12:56:40 ---A- . (...) -- C:\WINDOWS\KB2443105.log [47672]
                  O44 - LFC:[MD5.F02A818507CE17B0D0D4863583F41AC6] - 25/03/2012 - 12:56:36 ---A- . (...) -- C:\WINDOWS\KB2481109.log [50827]
                  O44 - LFC:[MD5.E185BDA84E5F03F4E1D8DCA30E
                  1. Fish66 Contributeur sécurité
                    Bonjour,

                    C'est bien le rapport mais il est incomplet, héberge le stp comme suit :

                    Rends toi sur pjjoint.malekal.com
                    * Clique sur le bouton Parcourir
                    * Sélectionne le fichier que tu veux héberger et clique sur Ouvrir
                    * Clique sur le bouton Envoyer
                    * Un message de confirmation s'affiche (L'upload a réussi ! - Le lien à transmettre à vos correspondant pour visualiser le fichier est : https://pjjoint.malekal.com/files.php?id=df5ea299241015

                    * Copie le lien dans ta prochaine réponse.

                    @+
                    1. Utilisateur anonyme
                      voila ce que j'ai fais dans l'ordre :

                      1) j'ai fais un scan
                      2) j'ai effectué une mise a jour
                      3) J'ai fais un copier/coller du rapport du scan
                      4) Je l'ai envoye sur l'hebergeur pjjoint.malekal.com

                      J'aurai peut etre du faire le contraire ou d'avord commencer par faire la mise à jour puis un scan et l'envoyé sur l'hebergeur pjjoint.malekal.com
                      , non ?

                      Quoiqu'il en soit, voici le nouveu rapport , apres la mise à jour :

                      Rapport de ZHPDiag v1.28.34 par Nicolas Coolman, Update du 06/03/2012
                      Run by laurent at 27/03/2012 11:20:45
                      Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
                      Web site : http://nicolascoolman.skyrock.com/
                      State : Problème connexion internet

                      ---\\ Web Browser
                      MSIE: Internet Explorer v8.0.6001.18702 (Defaut)

                      ---\\ Windows Product Information
                      ~ Langage: Français
                      Windows XP Home Edition Service Pack 3 (Build 2600)
                      Windows Automatic Updates : OK
                      Windows Genuine Advantage : OK

                      ---\\ System Information
                      ~ Processor: x86 Family 15 Model 107 Stepping 2, AuthenticAMD
                      ~ Operating System: 32 Bits
                      Boot mode: Normal (Normal boot)
                      Total RAM: 3311 MB (67% free)
                      System Restore: Activé (Enable)
                      System drive C: has 434 GB (93%) free of 466 GB

                      ---\\ Logged in mode
                      ~ Computer Name: LAURENT-E380B63
                      ~ User Name: laurent
                      ~ All Users Names: SUPPORT_388945a0, laurent, HelpAssistant, Administrateur,
                      ~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
                      Logged in as Administrator

                      ---\\ Environnement Variables
                      ~ System Unit : C:\
                      ~ %AppData% : C:\Documents and Settings\laurent\Application Data\
                      ~ %Desktop% : C:\Documents and Settings\laurent\Bureau\
                      ~ %Favorites% : C:\Documents and Settings\laurent\Favorites\
                      ~ %LocalAppData% : C:\Documents and Settings\laurent\Local Settings\Application Data\
                      ~ %StartMenu% : C:\Documents and Settings\laurent\Menu Démarrer\
                      ~ %Windir% : C:\WINDOWS\
                      ~ %System% : C:\WINDOWS\system32\

                      ---\\ DOS/Devices
                      A:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
                      C:\ Hard drive, Flash drive, Thumb drive (Free 434 Go of 466 Go)
                      D:\ CD-ROM drive (Free 0 Go of 1 Go)
                      E:\ CD-ROM drive (Not Inserted)
                      G:\ Hard drive, Flash drive, Thumb drive (Free 451 Go of 466 Go)

                      ---\\ Security Center & Tools Informations
                      [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
                      [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
                      [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
                      [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
                      [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
                      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
                      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
                      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
                      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
                      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
                      [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
                      [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
                      [HKLM\SYSTEM\CurrentControlSet\Services] wscsvc : OK
                      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
                      ~ Scan Security Center in 00mn 00s

                      ---\\ Recherche particulière de fichiers génériques
                      [MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.14/04/2008 - 03:34:03.) -- C:\WINDOWS\Explorer.exe [1037824]
                      [MD5.93AD0B78C7357A05F50E594EC7C22300] - (.Microsoft Corporation - Exécuter une DLL en tant qu'application.) (.14/04/2008 - 03:34:20.) -- C:\WINDOWS\system32\rundll32.exe [33792]
                      [MD5.5C72F65D2F038E0BF481326423F9D266] - (.Microsoft Corporation - Internet Extensions for Win32.) (.17/12/2011 - 20:43:31.) -- C:\WINDOWS\system32\wininet.dll [916992]
                      [MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.14/04/2008 - 03:34:28.) -- C:\WINDOWS\system32\Winlogon.exe [512000]
                      [MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.17/08/2011 - 14:49:54.) -- C:\WINDOWS\system32\drivers\AFD.sys [138496]
                      [MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/04/2008 - 19:40:30.) -- C:\WINDOWS\system32\drivers\atapi.sys [96512]
                      [MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/04/2008 - 20:14:21.) -- C:\WINDOWS\system32\drivers\Cdfs.sys [63744]
                      [MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.13/04/2008 - 19:40:46.) -- C:\WINDOWS\system32\drivers\Cdrom.sys [62976]
                      [MD5.31F923EB2170FC172C81ABDA0045D18C] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) (.14/04/2008 - 02:57:38.) -- C:\WINDOWS\system32\drivers\Fips.sys [44672]
                      [MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.13/04/2008 - 17:36:05.) -- C:\WINDOWS\system32\drivers\HDAudBus.sys [144384]
                      [MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - (.Microsoft Corporation - Pilote de port i8042.) (.14/04/2008 - 03:00:52.) -- C:\WINDOWS\system32\drivers\i8042prt.sys [54144]
                      [MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.13/04/2008 - 19:40:58.) -- C:\WINDOWS\system32\drivers\Imapi.sys [42112]
                      [MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.13/04/2008 - 19:57:15.) -- C:\WINDOWS\system32\drivers\IpNat.sys [152832]
                      [MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.13/04/2008 - 20:19:42.) -- C:\WINDOWS\system32\drivers\IPSec.sys [75264]
                      [MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.15/07/2011 - 14:29:31.) -- C:\WINDOWS\system32\drivers\MRxSmb.sys [456320]
                      [MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.13/04/2008 - 20:21:00.) -- C:\WINDOWS\system32\drivers\netBT.sys [162816]
                      [MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.13/04/2008 - 20:15:53.) -- C:\WINDOWS\system32\drivers\ntfs.sys [574976]
                      [MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/04/2008 - 03:09:40.) -- C:\WINDOWS\system32\drivers\Parport.sys [80384]
                      [MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.13/04/2008 - 20:19:43.) -- C:\WINDOWS\system32\drivers\Rasl2tp.sys [51328]
                      [MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.13/04/2008 - 19:32:51.) -- C:\WINDOWS\system32\drivers\rdpdr.sys [196224]
                      [MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) (.14/04/2008 - 02:57:34.) -- C:\WINDOWS\system32\drivers\redbook.sys [58752]
                      [MD5.46DE1126684369BACE4849E4FC8C43CA] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.14/04/2008 - 02:56:04.) -- C:\WINDOWS\system32\drivers\volsnap.sys [53376]
                      ~ Scan Generic Processes in 00mn 00s

                      ---\\ Etat des fichiers cachés (Caché/Total)
                      ~ Mes images (My Pictures) : 1/4
                      ~ Mes musiques (My Musics) : 1/2
                      ~ Mes Videos (My Video) : 0/0
                      ~ Mes Favoris (My Favorites) : Non accessible (Not found)
                      ~ Mes Documents (My Documents) : 3/458
                      ~ Mon Bureau (My Desktop) : 0/8
                      ~ Menu demarrer (Programs) : 5/22
                      ~ Scan Hidden Files in 00mn 00s

                      ---\\ Processus lancés
                      [MD5.CFCE43B70CA0CC4DCC8ADB62B792B173] - (.Microsoft Corporation - Antimalware Service Executable.) -- c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [11736] [PID.]
                      [MD5.E6721391BD329F53B2854386DC4CA577] - (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.EXE [16342528] [PID.1928]
                      [MD5.C637FC4638A96165256B28D38DE7B953] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49208] [PID.1992]
                      [MD5.BAF503FEDF00C58C123B100CDA7A7D4F] - (.Vuze Inc. - Pas de description.) -- C:\Program Files\Vuze\Azureus.exe [232896] [PID.292]
                      [MD5.5DD9A4D0D3000FF8BB24FB430927B4FB] - (.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files\IncrediMail\bin\IncMail.exe [366024] [PID.428]
                      [MD5.4543367E50BD35E7D1269D42841B156E] - (.Hewlett-Packard Development Company, L.P. - HP Digital Imaging Monitor.) -- C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [288472] [PID.372]
                      [MD5.7AEA4DF1CA68FD45DD4BBE1F0243CE7F] - (...) -- C:\Program Files\CDBurnerXP\NMSAccessU.exe [71096] [PID.]
                      [MD5.C2688DA657F8881FE8162FB0773031A0] - (.WinZip Computing, S.L. - WinZip Executable.) -- C:\Program Files\WinZip\WZQKPICK32.EXE [611144] [PID.1348]
                      [MD5.E9E110CDF6A063A5F9B841C36FB5CC95] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 162.1.) -- C:\WINDOWS\system32\nvsvc32.exe [155716] [PID.]
                      [MD5.ED78DFAD8EFCDFBC89500492C4D14645] - (...) -- C:\WINDOWS\System32\PAStiSvc.exe [53248] [PID.]
                      [MD5.70EB41A4417BA0AA36AE12BF2B4D98F6] - (...) -- C:\Program Files\StartNow Toolbar\ToolbarUpdaterService.exe [244960] [PID.]
                      [MD5.537D88280041CFE4C7B9DFF24B0BEEE7] - (.IncrediMail, Ltd. - IncrediMail Tray Application.) -- C:\Program Files\IncrediMail\Bin\ImApp.exe [263624] [PID.2204]
                      [MD5.88029974B1C9995CFA3BD9560BBA2EEF] - (.Hewlett-Packard Development Company, L.P. - HP CUE Status.) -- C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe [239320] [PID.2532]
                      [MD5.B60DDDD2D63CE41CB8C487FCFBB6419E] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.EXE [638816] [PID.952]
                      [MD5.F79EE7BE700771CBFEAC38E4AF32D347] - (.Pinnacle Systems - OOProcServer.) -- C:\PROGRA~1\Pinnacle\SHARED~1\Filter\server.exe [73728] [PID.3052]
                      [MD5.46AE705AC463F50AC714C8084A09A2A3] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [2211328] [PID.3584]
                      [MD5.5E9A6658A2A69AE7EB195113B7A2E7A9] - (.Microsoft Corporation - Application Layer Gateway Service.) -- C:\WINDOWS\System32\alg.exe [44544] [PID.]
                      ~ Scan Processes Running in 00mn 00s

                      ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
                      P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
                      P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
                      P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll
                      P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll
                      P2 - FPN: [HKCU] [@adobe.com/Acrobat,version=5.1] - (.Adobe Systems Inc. - Adobe Acrobat Plug-In Version 5.10 for Netscape.) -- C:\Program Files\Adobe\Acrobat 5.0\Reader\Browser\nppdf32.dll
                      ~ Scan Firefox Browser in 00mn 00s

                      ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
                      R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                      R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.microsoft.com/fr-fr/
                      R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
                      R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
                      R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
                      R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
                      R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.bing.com/?toHttps=1&redig=17DBE7D168544FA98200E890A8051984
                      R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.19190 (longhorn_ie8_gdr.111214-1715)) -- C:\WINDOWS\system32\ieframe.dll
                      R3 - URLSearchHook: IncrediMail MediaBar Francais 2 Toolbar - {249d74a3-bd19-4657-b6ce-e62f480a20de} . (.Conduit Ltd. - Conduit Toolbar.) (6.4.0.0) -- C:\Program Files\IncrediMail_MediaBar_Francais_2\prxtbIncr.dll
                      ~ Scan IE Browser in 00mn 00s

                      ---\\ Internet Explorer, Proxy Management (R5)
                      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
                      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
                      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
                      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
                      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
                      ~ Scan Proxy management in 00mn 00s

                      ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
                      F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,
                      F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
                      ~ Scan Keys in 00mn 00s

                      ---\\ Redirection du fichier Hosts (O1)
                      ~ Le fichier hosts est sain (The hosts file is clean).
                      ~ Scan Hosts File in 00mn 00s
                      ~ Nombre de lignes (Lines number): 20

                      ---\\ Browser Helper Objects de navigateur (O2)
                      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Pas de propriétaire - AcroIEHelper Module.) -- C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
                      O2 - BHO: IncrediMail MediaBar Francais 2 - {249d74a3-bd19-4657-b6ce-e62f480a20de} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\IncrediMail_MediaBar_Francais_2\prxtbIncr.dll
                      O2 - BHO: StartNow Toolbar Helper - {6E13D095-45C3-4271-9475-F3B48227DD9F} . (.Pas de propriétaire - Toolbar.) -- C:\Program Files\StartNow Toolbar\Toolbar32.dll
                      ~ Scan BHO in 00mn 00s

                      ---\\ Internet Explorer Toolbars (O3)
                      O3 - Toolbar: StartNow Toolbar - {5911488E-9D1E-40ec-8CBB-06B231CC153F} . (.Pas de propriétaire - Toolbar.) -- C:\Program Files\StartNow Toolbar\Toolbar32.dll
                      O3 - Toolbar: IncrediMail MediaBar Francais 2 Toolbar - {249d74a3-bd19-4657-b6ce-e62f480a20de} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\IncrediMail_MediaBar_Francais_2\prxtbIncr.dll
                      ~ Scan Toolbar in 00mn 00s

                      ---\\ Applications démarrées par registre & par dossier (O4)
                      O4 - HKLM\..\Run: [RTHDCPL] . (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.exe
                      O4 - HKLM\..\Run: [Alcmtr] . (.Realtek Semiconductor Corp. - Realtek Azalia Audio - Event Monitor.) -- C:\WINDOWS\Alcmtr.exe
                      O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32\nvcpl.dll
                      O4 - HKLM\..\Run: [nwiz] . (...) -- C:\WINDOWS\system32\nwiz.exe
                      O4 - HKLM\..\Run: [WinSys2] . (.Pas de propriétaire - DOT MFC Application.) -- C:\WINDOWS\system32\WinSys2.exe
                      O4 - HKLM\..\Run: [NvMediaCenter] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\WINDOWS\system32\nvmctray.dll
                      O4 - HKLM\..\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\HP\HP Software Update\hpwuschd2.exe
                      O4 - HKLM\..\Run: [PCLEPCI] . (.Pinnacle Systems GmbH - Pinnacle Performance Enhancer - PCI Tool.) -- C:\Program Files\Pinnacle\PPE\PPE.exe
                      O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- C:\Program Files\Microsoft Security Client\msseces.exe
                      O4 - HKCU\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
                      O4 - HKCU\..\Run: [Azureus] . (.Vuze Inc. - Pas de description.) -- C:\Program Files\Vuze\Azureus.exe
                      O4 - HKCU\..\Run: [IncrediMail] . (.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files\IncrediMail\Bin\IncMail.exe
                      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
                      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
                      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
                      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
                      O4 - HKUS\S-1-5-21-854245398-796845957-682003330-1004\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
                      O4 - HKUS\S-1-5-21-854245398-796845957-682003330-1004\..\Run: [Azureus] . (.Vuze Inc. - Pas de description.) -- C:\Program Files\Vuze\Azureus.exe
                      O4 - HKUS\S-1-5-21-854245398-796845957-682003330-1004\..\Run: [IncrediMail] . (.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files\IncrediMail\Bin\IncMail.exe
                      ~ Scan Application in 00mn 00s

                      ---\\ Autres liens utilisateurs (O4)
                      O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Acrobat Reader 5.1.lnk . (.Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Acrobat 5.0\Reader\AcroRd32.exe
                      O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\CDBurnerXP.lnk . (.Canneverbe Limited.) -- C:\Program Files\CDBurnerXP\cdbxpp.exe
                      O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\IncrediMail.lnk . (.IncrediMail, Ltd..) -- C:\Program Files\IncrediMail\Bin\IncMail.exe
                      O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Security Essentials.lnk . (.Microsoft Corporation.) -- C:\Program Files\Microsoft Security Client\msseces.exe
                      O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\MSN.lnk . (.Microsoft Corporation.) -- C:\Program Files\MSN\MSNCoreFiles\Install\msnsusii.exe
                      O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Vuze.lnk . (.Vuze Inc..) -- C:\Program Files\Vuze\Azureus.exe
                      O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk . (.Microsoft Corporation.) -- C:\Program Files\Messenger\msmsgs.exe
                      O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Movie Maker\moviemk.exe
                      O4 - Global Startup: C:\Documents And Settings\laurent\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe
                      O4 - Global Startup: C:\Documents And Settings\laurent\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
                      O4 - Global Startup: C:\Documents And Settings\laurent\Menu Démarrer\Programmes\Lecteur Windows Media.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
                      O4 - Global Startup: C:\Documents And Settings\laurent\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe
                      O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Acrobat Reader 5.1.lnk . (.Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Acrobat 5.0\Reader\AcroRd32.exe
                      O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\CDBurnerXP.lnk . (.Canneverbe Limited.) -- C:\Program Files\CDBurnerXP\cdbxpp.exe
                      O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\IncrediMail.lnk . (.IncrediMail, Ltd..) -- C:\Program Files\IncrediMail\Bin\IncMail.exe
                      O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Security Essentials.lnk . (.Microsoft Corporation.) -- C:\Program Files\Microsoft Security Client\msseces.exe
                      O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\MSN.lnk . (.Microsoft Corporation.) -- C:\Program Files\MSN\MSNCoreFiles\Install\msnsusii.exe
                      O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Vuze.lnk . (.Vuze Inc..) -- C:\Program Files\Vuze\Azureus.exe
                      O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk . (.Microsoft Corporation.) -- C:\Program Files\Messenger\msmsgs.exe
                      O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Movie Maker\moviemk.exe
                      O4 - Global Startup: C:\Documents And Settings\laurent\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe
                      O4 - Global Startup: C:\Documents And Settings\laurent\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
                      O4 - Global Startup: C:\Documents And Settings\laurent\Menu Démarrer\Programmes\Lecteur Windows Media.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
                      O4 - Global Startup: C:\Documents And Settings\laurent\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe
                      ~ Scan Global Startup in 00mn 00s

                      ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
                      O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                      O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
                      ~ Scan IE Extra Buttons in 00mn 00s

                      ---\\ Winsock hijacker (Layered Service Provider) (O10)
                      O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
                      O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
                      O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
                      ~ Scan Winsock in 00mn 00s

                      ---\\ Objets ActiveX (Downloaded Program Files)(O16)
                      O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1332594387359
                      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                      ~ Scan Objets ActiveX in 00mn 00s

                      ---\\ Modification Domaine/Adresses DNS (O17)
                      O17 - HKLM\System\CCS\Services\Tcpip\..\{853A6E3C-EFA8-4D98-85F8-A2F9DDFFD848}: DhcpNameServer = 192.168.1.1
                      O17 - HKLM\System\CS1\Services\Tcpip\..\{853A6E3C-EFA8-4D98-85F8-A2F9DDFFD848}: DhcpNameServer = 192.168.1.1
                      O17 - HKLM\System\CS3\Services\Tcpip\..\{853A6E3C-EFA8-4D98-85F8-A2F9DDFFD848}: DhcpNameServer = 192.168.1.1
                      ~ Scan Domain in 00mn 00s

                      ---\\ Protocole additionnel (O18)
                      O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
                      O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
                      O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll
                      O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
                      O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
                      O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
                      O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
                      O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
                      O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll
                      O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
                      O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
                      O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
                      O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- C:\WINDOWS\system32\inetcomm.dll
                      O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
                      O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll
                      O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
                      O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
                      O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll
                      O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
                      O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll
                      O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll
                      O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll
                      O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll
                      O18 - Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
                      O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
                      O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
                      O18 - Filter: lzdhtml - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
                      O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
                      ~ Scan Protocole Additionnel in 00mn 00s

                      ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
                      O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll
                      O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll
                      O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\WINDOWS\system32\cscdll.dll
                      O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\system32\dimsntfy.dll
                      O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
                      O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
                      O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll
                      O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll
                      O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
                      O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
                      ~ Scan Winlogon in 00mn 00s

                      ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
                      O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
                      O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
                      O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
                      O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
                      ~ Scan SSODL in 00mn 00s

                      ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
                      O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll
                      ~ Scan STS/SSO in 00mn 00s

                      ---\\ Liste des services NT non Microsoft et non désactivés (O23)
                      O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
                      O23 - Service: NMSAccess (NMSAccess) . (...) - C:\Program Files\CDBurnerXP\NMSAccessU.exe
                      O23 - Service: NVIDIA Display Driver Service (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 162.1.) - C:\WINDOWS\system32\nvsvc32.exe
                      O23 - Service: Pml Driver HPZ12 (Pml Driver HPZ12) . (.HP - PML Driver.) - C:\WINDOWS\system32\HPZipm12.exe
                      O23 - Service: STI Simulator (STI Simulator) . (...) - C:\WINDOWS\system32\PAStiSvc.exe
                      O23 - Service: Updater Service for StartNow Toolbar (Updater Service for StartNow Toolbar) . (...) - C:\Program Files\StartNow Toolbar\ToolbarUpdaterService.exe
                      ~ Scan Services in 00mn 00s

                      ---\\ Enumération Active Desktop & MHTML Editor (O24)
                      O24 - Default MHTML Editor: Last - .(...) - (.not file.)
                      ~ Scan Desktop Component in 00mn 00s

                      ---\\ BootExecute (O34)
                      O34 - HKLM BootExecute: (autocheck autochk *) - File not found
                      ~ Scan Keys in 00mn 00s

                      ---\\ Tâches planifiées en automatique (O39)
                      O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
                      O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
                      O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\MP Scheduled Scan.job
                      O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\User_Feed_Synchronization-{E10325A0-523E-4A94-9BF7-B5D1E1C51109}.job
                      ~ Scan Scheduled Task in 00mn 00s

                      ---\\ Composants installés (ActiveSetup Installed Components) (O40)
                      O40 - ASIC: Mise à jour de la version d'Internet Explorer - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} . (.Microsoft Corporation - IE Per User Active Setup Uninstall Utility.) -- C:\WINDOWS\system32\ieudinit.exe
                      O40 - ASIC: Lecteur Windows Media - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Utilitaire d'installation du Lecteur Windows Media Microsoft.) -- C:\WINDOWS\inf\unregmp2.exe
                      O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\WINDOWS\system32\ie4uinit.exe.mui
                      O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - IEAK branding.) -- C:\WINDOWS\system32\iedkcs32.dll
                      O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} . (.Microsoft Corporation - Windows Media 6.4 Player Shim.) -- C:\WINDOWS\system32\wmpdxm.dll
                      O40 - ASIC: Lecteur Windows Media Microsoft 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (...) -- C:\WINDOWS\INF\mswmp.inf
                      O40 - ASIC: DirectAnimation - {283807B5-2C60-11D0-A31D-00AA00B92C03} . (.Microsoft Corporation - DirectX Media -- DirectAnimation.) -- C:\WINDOWS\system32\danim.dll
                      O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (...) -- C:\WINDOWS\INF\msnetmtg.inf
                      O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (...) -- C:\WINDOWS\INF\msmsgs.inf
                      O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\WINDOWS\system32\msieftp.dll
                      O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (...) -- C:\WINDOWS\INF\wmp.inf
                      O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\WINDOWS\system32\ie4uinit.exe.mui
                      O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\WINDOWS\system32\mscories.dll
                      O40 - ASIC: Macromedia Shockwave Flash - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 11.1 r102.) -- C:\WINDOWS\system32\Macromed\Flash\Flash11g.ocx
                      ~ Scan Active Setup in 00mn 00s

                      ---\\ Pilotes lancés au démarrage (O41)
                      O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
                      O41 - Driver: (AmdK8) . (.Advanced Micro Devices - AMD Processor Driver.) - C:\WINDOWS\system32\DRIVERS\AmdK8.sys
                      O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys
                      O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
                      O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys
                      O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys
                      O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys
                      O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys
                      O41 - Driver: (MpFilter) . (.Microsoft Corporation - Microsoft antimalware file system filter dr.) - C:\WINDOWS\system32\DRIVERS\MpFilter.sys
                      O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
                      O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS\netbios.sys
                      O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS\netbt.sys
                      O41 - Driver: (Processor) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\system32\DRIVERS\processr.sys
                      O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERS\rasacd.sys
                      O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERS\rdbss.sys
                      O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
                      O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\system32\DRIVERS\redbook.sys
                      O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\WINDOWS\system32\DRIVERS\serial.sys
                      O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS\tcpip.sys
                      O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS\termdd.sys
                      O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
                      ~ Scan Drivers in 00mn 00s

                      ---\\ Logiciels installés (O42)
                      O42 - Logiciel: Adobe Acrobat 5.0 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Acrobat 5.0
                      O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
                      O42 - Logiciel: ArcSoft VideoImpression 2 - (.ArcSoft.) [HKLM] -- {C765D9FF-4A34-4BF1-9F91-E9A3C60C86FC}
                      O42 - Logiciel: CDBurnerXP - (.CDBurnerXP.) [HKLM] -- {7E265513-8CDA-4631-B696-F40D983F3B07}_is1
                      O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
                      O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {7A25D130-4EC8-11E1-BEA4-B8AC6F97B88E}
                      O42 - Logiciel: HP Customer Participation Program 7.0 - (.HP.) [HKLM] -- HPExtendedCapabilities
                      O42 - Logiciel: HP Imaging Device Functions 7.0 - (.HP.) [HKLM] -- HP Imaging Device Functions
                      O42 - Logiciel: HP Photosmart Essential - (.HP.) [HKLM] -- {6994491D-D491-48F1-AE1F-E179C1FFFC2F}
                      O42 - Logiciel: HP Photosmart, Officejet and Deskjet 7.0.A - (.HP.) [HKLM] -- {BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}
                      O42 - Logiciel: HP Solution Center 7.0 - (.HP.) [HKLM] -- HP Solution Center & Imaging Support Tools
                      O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM] -- {2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}
                      O42 - Logiciel: High Definition Audio Driver Package - KB888111 - (.Microsoft Corporation.) [HKLM] -- KB888111WXPSP2
                      O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
                      O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
                      O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5
                      O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5
                      O42 - Logiciel: IncrediMail - (.IncrediMail.) [HKLM] -- {5E97F3BD-CDDC-4188-9D98-532E14FABB5D}
                      O42 - Logiciel: IncrediMail 2.0 - (.IncrediMail Ltd..) [HKLM] -- IncrediMail
                      O42 - Logiciel: IncrediMail MediaBar Francais 2 Toolbar - (.IncrediMail MediaBar Francais 2.) [HKLM] -- IncrediMail_MediaBar_Francais_2 Toolbar
                      O42 - Logiciel: K-Lite Codec Pack 8.4.0 (Full) - (.Pas de propriétaire.) [HKLM] -- KLiteCodecPack_is1
                      O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
                      O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
                      O42 - Logiciel: Medi@Show - (.Pas de propriétaire.) [HKLM] -- MediaShow
                      O42 - Logiciel: Micro Application - Etiquettes CD-DVD 2.0 - (.Pas de propriétaire.) [HKLM] -- {EAAE00DB-412E-467E-B784-F9205ECCD58D}
                      O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
                      O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
                      O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
                      O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
                      O42 - Logiciel: Microsoft Antimalware - (.Microsoft Corporation.) [HKLM] -- {05BFB060-4F22-4710-B0A2-2801A1B606C5}
                      O42 - Logiciel: Microsoft Antimalware Service FR-FR Language Pack - (.Microsoft Corporation.) [HKLM] -- {32E9C1A5-0FDA-4483-987D-DBABF9CC1DD8}
                      O42 - Logiciel: Microsoft Security Client - (.Microsoft Corporation.) [HKLM] -- {54B6DC7D-8C5B-4DFB-BC15-C010A3326B2B}
                      O42 - Logiciel: Microsoft Security Client FR-FR Language Pack - (.Microsoft Corporation.) [HKLM] -- {50779A29-834E-4E36-BBEB-B7CABC67A825}
                      O42 - Logiciel: Microsoft Security Essentials - (.Microsoft Corporation.) [HKLM] -- Microsoft Security Client
                      O42 - Logiciel: NVIDIA Drivers - (.Pas de propriétaire.) [HKLM] -- NVIDIA Drivers
                      O42 - Logiciel: Package de pilotes Windows - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0) - (.Advanced Micro Devices.) [HKLM] -- 3BEF1AFDE8303306594E2ADA27520E6E700820AE
                      O42 - Logiciel: Photo Notifier and Animation Creator - (.IncrediMail Ltd..) [HKLM] -- Photo Notifier and Animation Creator
                      O42 - Logiciel: Photo Notifier and Animation Creator - (.Nom de votre société.) [HKLM] -- {6B7F28D4-160E-40C6-B7C8-5EC6B9734DA7}
                      O42 - Logiciel: Pinnacle Hollywood FX 4.6 - (.Pas de propriétaire.) [HKLM] -- Hollywood FX 4.6
                      O42 - Logiciel: Pinnacle PCTV - (.Pas de propriétaire.) [HKLM] -- {3C02ED4F-46B0-4E9E-87F7-47AEBA4031C8}
                      O42 - Logiciel: Pinnacle Systems PCI Performance Enhancer - (.Pas de propriétaire.) [HKLM] -- Pinnacle Systems PCI Performance Enhancer
                      O42 - Logiciel: Pinnacle TRex - (.Pas de propriétaire.) [HKLM] -- {9313E9A6-03DF-11D5-88F8-005004361016}
                      O42 - Logiciel: PowerDVD - (.Pas de propriétaire.) [HKLM] -- {6811CAA0-BF12-11D4-9EA1-0050BAE317E1}
                      O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
                      O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2657424
                      O42 - Logiciel: StartNow Toolbar - (.StartNow.com.) [HKLM] -- StartNow Toolbar
                      O42 - Logiciel: Studio 8 - (.Pas de propriétaire.) [HKLM] -- {9C440083-6021-41C8-A4E7-FD953C537E3A}
                      O42 - Logiciel: Trust Webcam 14839 - (.Nom de votre société.) [HKLM] -- InstallShield_{71C8B152-0F63-4FEE-88F4-DC298B6EB446}
                      O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
                      O42 - Logiciel: VirtualDub 1.9.6 Fr - (.Trad-Fr.) [HKLM] -- {1FF7993C-23B1-4C91-B1F6-09D13C57A06A}_is1
                      O42 - Logiciel: VirtualDubMOD 1.5.10.3 Fr - (.Trad-Fr.) [HKLM] -- {B158F76F-76AB-4115-A4F0-4C6EF6956093}_is1
                      O42 - Logiciel: Vuze - (.Vuze Inc..) [HKLM] -- 8461-7759-5462-8226
                      O42 - Logiciel: WinDev 9 - (.Pas de propriétaire.) [HKCU] -- WinDev9
                      O42 - Logiciel: WinZip 16.0 - (.WinZip Computing, S.L. .) [HKLM] -- {CD95F661-A5C4-44F5-A6AA-ECDD91C240CC}
                      O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130) - (.Microsoft Corporation.) [HKLM] -- KB892130
                      O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8
                      O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service

                      ---\\ HKCU & HKLM Software Keys
                      [HKCU\Software\Adobe]
                      [HKCU\Software\Azureus]
                      [HKCU\Software\Canneverbe Limited]
                      [HKCU\Software\Classes]
                      [HKCU\Software\Conduit]
                      [HKCU\Software\CyberLink]
                      [HKCU\Software\DScaler5]
                      [HKCU\Software\Freeware]
                      [HKCU\Software\GNU]
                      [HKCU\Software\Gabest]
                      [HKCU\Software\Google]
                      [HKCU\Software\Haali]
                      [HKCU\Software\Hewlett-Packard]
                      [HKCU\Software\IM]
                      [HKCU\Software\ImInstaller]
                      [HKCU\Software\IncrediMail]
                      [HKCU\Software\IncrediMail_MediaBar_Francais_2]
                      [HKCU\Software\Intel]
                      [HKCU\Software\LAV]
                      [HKCU\Software\Local AppWizard-Generated Applications]
                      [HKCU\Software\Macromedia]
                      [HKCU\Software\MediaInfo]
                      [HKCU\Software\MozillaPlugins]
                      [HKCU\Software\NVIDIA Corporation]
                      [HKCU\Software\Netscape]
                      [HKCU\Software\Nico Mak Computing]
                      [HKCU\Software\PC SOFT]
                      [HKCU\Software\Pinnacle Systems]
                      [HKCU\Software\Policies]
                      [HKCU\Software\PriceGong]
                      [HKCU\Software\Realtek]
                      [HKCU\Software\StartNow Toolbar]
                      [HKCU\Software\Trolltech]
                      [HKCU\Software\VirtualDub.org]
                      [HKCU\Software\WinZip Computing]
                      [HKCU\Software\Zugo]
                      [HKCU\Software\ej-technologies]
                      [HKCU\Software\madFlac]
                      [HKCU\Software\madshi]
                      [HKLM\Software\AMD]
                      [HKLM\Software\Adobe]
                      [HKLM\Software\ArcSoft]
                      [HKLM\Software\Azureus]
                      [HKLM\Software\BrowserChoice]
                      [HKLM\Software\Bunndle]
                      [HKLM\Software\C07ft5Y]
                      [HKLM\Software\Classes]
                      [HKLM\Software\Clients]
                      [HKLM\Software\Conduit]
                      [HKLM\Software\CyberLink]
                      [HKLM\Software\GNU]
                      [HKLM\Software\Gabest]
                      [HKLM\Software\Gemplus]
                      [HKLM\Software\Google]
                      [HKLM\Software\HP]
                      [HKLM\Software\HaaliMkx]
                      [HKLM\Software\Hewlett-Packard]
                      [HKLM\Software\ICE]
                      [HKLM\Software\ImInstaller]
                      [HKLM\Software\IncrediMail_MediaBar_Francais_2]
                      [HKLM\Software\InstallShield]
                      [HKLM\Software\Intel]
                      [HKLM\Software\InterVideo]
                      [HKLM\Software\KLCodecPack]
                      [HKLM\Software\LAV]
                      [HKLM\Software\MSI]
                      [HKLM\Software\Macromedia]
                      [HKLM\Software\Micro Application]
                      [HKLM\Software\MozillaPlugins]
                      [HKLM\Software\Mozilla]
                      [HKLM\Software\NVIDIA Corporation]
                      [HKLM\Software\Nico Mak Computing]
                      [HKLM\Software\ODBC]
                      [HKLM\Software\Pinnacle Systems]
                      [HKLM\Software\PixArt]
                      [HKLM\Software\Policies]
                      [HKLM\Software\Program Groups]
                      [HKLM\Software\Realtek Semiconductor Corp.]
                      [HKLM\Software\Realtek]
                      [HKLM\Software\RegisteredApplications]
                      [HKLM\Software\Schlumberger]
                      [HKLM\Software\Secure]
                      [HKLM\Software\TQ566808]
                      [HKLM\Software\Trad-FR]
                      [HKLM\Software\Windows 3.1 Migration Status]
                      [HKLM\Software\ej-technologies]
                      [HKLM\Software\magnet]
                      ~ Scan Softwares in 00mn 00s

                      ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
                      O43 - CFD: 24/03/2012 - 12:48:54 - [29,224] ----D- C:\Program Files\Adobe
                      O43 - CFD: 25/03/2012 - 12:50:10 - [15,127] ----D- C:\Program Files\ADULTES sur CD - Ant Movie Catalog 4.1.0.2
                      O43 - CFD: 24/03/2012 - 13:24:06 - [138,479] ----D- C:\Program Files\ArcSoft
                      O43 - CFD: 25/03/2012 - 12:57:06 - [17,312] ----D- C:\Program Files\CDBurnerXP
                      O43 - CFD: 24/03/2012 - 12:13:50 - [0] ----D- C:\Program Files\ComPlus Applications
                      O43 - CFD: 26/03/2012 - 11:22:08 - [0,609] ----D- C:\Program Files\Conduit
                      O43 - CFD: 26/03/2012 - 12:58:48 - [28,604] ----D- C:\Program Files\CyberLink
                      O43 - CFD: 24/03/2012 - 12:41:46 - [2,786] ----D- C:\Program Files\DIFX
                      O43 - CFD: 24/03/2012 - 23:35:18 - [6,510] ----D- C:\Program Files\Driver Whiz
                      O43 - CFD: 24/03/2012 - 13:25:06 - [56,734] ----D- C:\Program Files\Fichiers communs
                      O43 - CFD: 24/03/2012 - 23:38:54 - [137,827] ----D- C:\Program Files\Google
                      O43 - CFD: 24/03/2012 - 13:00:38 - [1,651] ----D- C:\Program Files\Hewlett-Packard
                      O43 - CFD: 25/03/2012 - 13:47:28 - [139,212] ----D- C:\Program Files\HP
                      O43 - CFD: 26/03/2012 - 11:20:32 - [26,338] ----D- C:\Program Files\IncrediMail
                      O43 - CFD: 26/03/2012 - 11:22:04 - [4,795] ----D- C:\Program Files\IncrediMail_MediaBar_Francais_2
                      O43 - CFD: 26/03/2012 - 13:08:32 - [20,024] --H-D- C:\Program Files\InstallShield Installation Information
                      O43 - CFD: 26/03/2012 - 03:04:06 - [4,420] ----D- C:\Program Files\Internet Explorer
                      O43 - CFD: 26/03/2012 - 11:06:00 - [56,244] ----D- C:\Program Files\K-Lite Codec Pack
                      O43 - CFD: 24/03/2012 - 22:24:34 - [2,053] ----D- C:\Program Files\Messenger
                      O43 - CFD: 26/03/2012 - 13:08:34 - [437,842] ----D- C:\Program Files\Micro Application
                      O43 - CFD: 24/03/2012 - 12:16:14 - [0] ----D- C:\Program Files\microsoft frontpage
                      O43 - CFD: 26/03/2012 - 01:22:36 - [17,554] ----D- C:\Program Files\Microsoft Security Client
                      O43 - CFD: 25/03/2012 - 13:51:58 - [9,894] ----D- C:\Program Files\Movie Maker
                      O43 - CFD: 26/03/2012 - 03:08:54 - [0,025] ----D- C:\Program Files\MSBuild
                      O43 - CFD: 24/03/2012 - 12:12:46 - [18,385] ----D- C:\Program Files\MSN
                      O43 - CFD: 24/03/2012 - 12:13:10 - [8,341] ----D- C:\Program Files\MSN Gaming Zone
                      O43 - CFD: 24/03/2012 - 15:25:14 - [0] ----D- C:\Program Files\MSXML 4.0
                      O43 - CFD: 24/03/2012 - 22:16:56 - [3,133] ----D- C:\Program Files\NetMeeting
                      O43 - CFD: 25/03/2012 - 12:50:20 - [15,127] ----D- C:\Program Files\Nouveau dossier
                      O43 - CFD: 24/03/2012 - 12:13:18 - [0,002] ----D- C:\Program Files\Online Services
                      O43 - CFD: 25/03/2012 - 13:50:44 - [4,176] ----D- C:\Program Files\Outlook Express
                      O43 - CFD: 26/03/2012 - 11:22:22 - [2,630] ----D- C:\Program Files\Photo Notifier and Animation Creator
                      O43 - CFD: 26/03/2012 - 09:22:10 - [422,671] ----D- C:\Program Files\Pinnacle
                      O43 - CFD: 24/03/2012 - 12:44:58 - [47,777] ----D- C:\Program Files\Realtek
                      O43 - CFD: 26/03/2012 - 03:08:38 - [34,715] ----D- C:\Program Files\Reference Assemblies
                      O43 - CFD: 24/03/2012 - 12:15:02 - [0,001] ----D- C:\Program Files\Services en ligne
                      O43 - CFD: 26/03/2012 - 11:05:50 - [1,176] ----D- C:\Program Files\StartNow Toolbar
                      O43 - CFD: 24/03/2012 - 13:25:06 - [0,113] ----D- C:\Program Files\Trust
                      O43 - CFD: 24/03/2012 - 12:47:26 - [0,000] --H-D- C:\Program Files\Uninstall Information
                      O43 - CFD: 26/03/2012 - 12:02:02 - [3,947] ----D- C:\Program Files\VirtualDub
                      O43 - CFD: 26/03/2012 - 11:42:56 - [6,041] ----D- C:\Program Files\VirtualDubMOD
                      O43 - CFD: 25/03/2012 - 02:13:24 - [102,162] ----D- C:\Program Files\Vuze
                      O43 - CFD: 26/03/2012 - 12:59:06 - [3,370] ----D- C:\Program Files\Windows Media Player
                      O43 - CFD: 24/03/2012 - 22:16:50 - [3,760] ----D- C:\Program Files\Windows NT
                      O43 - CFD: 24/03/2012 - 12:15:06 - [0] --H-D- C:\Program Files\WindowsUpdate
                      O43 - CFD: 25/03/2012 - 12:15:32 - [81,621] ----D- C:\Program Files\WinZip
                      O43 - CFD: 24/03/2012 - 12:16:14 - [0] ----D- C:\Program Files\xerox
                      O43 - CFD: 27/03/2012 - 11:20:48 - [13,817] ----D- C:\Program Files\ZHPDiag
                      O43 - CFD: 24/03/2012 - 22:46:32 - [0,208] ----D- C:\Program Files\Fichiers Communs\Adobe
                      O43 - CFD: 24/03/2012 - 13:24:24 - [4,015] ----D- C:\Program Files\Fichiers Communs\ArcSoft
                      O43 - CFD: 24/03/2012 - 13:00:26 - [0,436] ----D- C:\Program Files\Fichiers Communs\Hewlett-Packard
                      O43 - CFD: 24/03/2012 - 13:01:34 - [2,264] ----D- C:\Program Files\Fichiers Communs\HP
                      O43 - CFD: 24/03/2012 - 13:24:56 - [7,487] ----D- C:\Program Files\Fichiers Communs\InstallShield
                      O43 - CFD: 24/03/2012 - 13:40:36 - [11,501] ----D- C:\Program Files\Fichiers Communs\Microsoft Shared
                      O43 - CFD: 24/03/2012 - 12:14:24 - [0,271] ----D- C:\Program Files\Fichiers Communs\MSSoap
                      O43 - CFD: 24/03/2012 - 13:04:56 - [0] ----D- C:\Program Files\Fichiers Communs\ODBC
                      O43 - CFD: 24/03/2012 - 13:11:54 - [15,640] ----D- C:\Program Files\Fichiers Communs\PC SOFT
                      O43 - CFD: 24/03/2012 - 13:25:06 - [4,796] ----D- C:\Program Files\Fichiers Communs\PCCamera
                      O43 - CFD: 24/03/2012 - 12:14:28 - [0,008] ----D- C:\Program Files\Fichiers Communs\Services
                      O43 - CFD: 24/03/2012 - 13:04:54 - [3,612] ----D- C:\Program Files\Fichiers Communs\SpeechEngines
                      O43 - CFD: 24/03/2012 - 22:16:48 - [6,496] ----D- C:\Program Files\Fichiers Communs\System
                      O43 - CFD: 25/03/2012 - 02:07:50 - [0,000] ----D- C:\Documents and Settings\laurent\Application Data\Adobe
                      O43 - CFD: 27/03/2012 - 11:19:20 - [14,302] ----D- C:\Documents and Settings\laurent\Application Data\Azureus
                      O43 - CFD: 25/03/2012 - 12:57:18 - [0,001] ----D- C:\Documents and Settings\laurent\Application Data\Canneverbe Limited
                      O43 - CFD: 25/03/2012 - 12:56:26 - [0] ----D- C:\Documents and Settings\laurent\Application Data\GetRightToGo
                      O43 - CFD: 24/03/2012 - 23:39:12 - [2,981] ----D- C:\Documents and Settings\laurent\Application Data\Google
                      O43 - CFD: 24/03/2012 - 13:02:00 - [0,005] ----D- C:\Documents and Settings\laurent\Application Data\HP
                      O43 - CFD: 26/03/2012 - 03:24:04 - [0,033] ----D- C:\Documents and Settings\laurent\Application Data\HpUpdate
                      O43 - CFD: 24/03/2012 - 12:19:28 - [0] ----D- C:\Documents and Settings\laurent\Application Data\Identities
                      O43 - CFD: 24/03/2012 - 12:41:10 - [0] ----D- C:\Documents and Settings\laurent\Application Data\InstallShield
                      O43 - CFD: 24/03/2012 - 12:48:54 - [0] ----D- C:\Documents and Settings\laurent\Application Data\InterTrust
                      O43 - CFD: 25/03/2012 - 02:07:50 - [0,001] ----D- C:\Documents and Settings\laurent\Application Data\Macromedia
                      O43 - CFD: 26/03/2012 - 13:02:52 - [0,000] ----D- C:\Documents and Settings\laurent\Application Data\Media Player Classic
                      O43 - CFD: 24/03/2012 - 12:49:46 - [2,837] -S--D- C:\Documents and Settings\laurent\Application Data\Microsoft
                      O43 - CFD: 27/03/2012 - 09:50:02 - [0,340] ----D- C:\Documents and Settings\laurent\Application Data\PriceGong
                      O43 - CFD: 26/03/2012 - 11:22:08 - [0,187] ----D- C:\Documents and Settings\laurent\Local Settings\Application Data\Conduit
                      O43 - CFD: 24/03/2012 - 23:37:54 - [714,374] ----D- C:\Documents and Settings\laurent\Local Settings\Application Data\Google
                      O43 - CFD: 26/03/2012 - 11:23:52 - [25,943] ----D- C:\Documents and Settings\laurent\Local Settings\Application Data\IM
                      O43 - CFD: 26/03/2012 - 11:25:32 - [5,578] ----D- C:\Documents and Settings\laurent\Local Settings\Application Data\IncrediMail_MediaBar_Francais_2
                      O43 - CFD: 24/03/2012 - 23:34:02 - [1,702] ----D- C:\Documents and Settings\laurent\Local Settings\Application Data\Microsoft
                      O43 - CFD: 24/03/2012 - 23:38:06 - [0,003] ----D- C:\Documents and Settings\laurent\Local Settings\Application Data\PC_Drivers_Headquarters
                      O43 - CFD: 26/03/2012 - 11:22:04 - [0] ----D- C:\Documents and Settings\laurent\Local Settings\Application Data\Temp
                      O43 - CFD: 25/03/2012 - 12:15:38 - [0,250] ----D- C:\Documents and Settings\laurent\Local Settings\Application Data\WinZip
                      ~ Scan Program Folder in 00mn 00s

                      ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
                      O44 - LFC:[MD5.EFE9640C92635D50447FCD012C71EAE6] - 27/03/2012 - 07:30:09 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log [2007053]
                      O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 27/03/2012 - 07:18:32 ---A- . (...) -- C:\WINDOWS\0.log [0]
                      O44 - LFC:[MD5.5EECD5DDA9F7859B822ABF79BF714205] - 27/03/2012 - 07:18:12 ---A- . (...) -- C:\WINDOWS\wiaservc.log [50]
                      O44 - LFC:[MD5.EFD72270948A04D09ADE5262A8D93BBF] - 27/03/2012 - 07:18:11 ---A- . (...) -- C:\WINDOWS\wiadebug.log [159]
                      O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 27/03/2012 - 07:17:54 -S-A- . (...) -- C:\WINDOWS\bootstat.dat [2048]
                      O44 - LFC:[MD5.98CB97A829205BB8607A328525C1815E] - 27/03/2012 - 00:51:13 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt [32340]
                      O44 - LFC:[MD5.CC646D5C0360D58CF67061EDA45CF732] - 26/03/2012 - 23:15:59 ---A- . (...) -- C:\WINDOWS\system32\FNTCACHE.DAT [165912]
                      O44 - LFC:[MD5.A9BA2979E4FD3E613B3C1424D75FD4F8] - 26/03/2012 - 13:30:54 ---A- . (...) -- C:\WINDOWS\setupapi.log [977748]
                      O44 - LFC:[MD5.726632B325ECE7A76C85BA3E0F700FBB] - 26/03/2012 - 12:07:46 ---A- . (...) -- C:\WINDOWS\NAVIGMA.INI [40]
                      O44 - LFC:[MD5.8CC8E674EFF3E0B20BF8706899E1808F] - 26/03/2012 - 11:59:04 ---A- . (...) -- C:\WINDOWS\wmsetup.log [3628]
                      O44 - LFC:[MD5.89112689A307A65769CA942079CACE9B] - 26/03/2012 - 11:59:04 ---A- . (.The Duck Corporation - TrueMotion 2.0 Decompressor.) -- C:\WINDOWS\system32\tm20dec.ax [140800]
                      O44 - LFC:[MD5.6D6F4B1886E91EB37ABCCAD19C561EE0] - 26/03/2012 - 11:59:03 ---A- . (...) -- C:\WINDOWS\system32\amcompat.tlb [16832]
                      O44 - LFC:[MD5.A32B14BE5EDAE794FCE1A9E970827509] - 26/03/2012 - 11:59:03 ---A- . (...) -- C:\WINDOWS\system32\nscompat.tlb [23392]
                      O44 - LFC:[MD5.885CDCD31DD7BAE6480399C73D631EEB] - 26/03/2012 - 11:54:28 ---A- . (...) -- C:\WINDOWS\system32\wpa.dbl [2422]
                      O44 - LFC:[MD5.F47597B1D3CDA1B9419787C36141730F] - 26/03/2012 - 11:25:49 ---A- . (...) -- C:\WINDOWS\system32\PerfStringBackup.INI [1049410]
                      O44 - LFC:[MD5.7163F88ACC82AB6E63F694AC349E6C64] - 26/03/2012 - 11:25:49 ---A- . (...) -- C:\WINDOWS\system32\perfc009.dat [67312]
                      O44 - LFC:[MD5.FF143ABA1B0680BC99E0A326EAB043B9] - 26/03/2012 - 11:25:49 ---A- . (...) -- C:\WINDOWS\system32\perfc00C.dat [80508]
                      O44 - LFC:[MD5.09A4E325F3862EA40F5C18D3DD10E9EB] - 26/03/2012 - 11:25:49 ---A- . (...) -- C:\WINDOWS\system32\perfh009.dat [432356]
                      O44 - LFC:[MD5.D7BF65E0EFBB16528B41185CDB315752] - 26/03/2012 - 11:25:49 ---A- . (...) -- C:\WINDOWS\system32\perfh00C.dat [500482]
                      O44 - LFC:[MD5.F9732DECFD8FEE77B0A6504B55EC1184] - 26/03/2012 - 11:18:34 ---A- . (...) -- C:\WINDOWS\KB961118.log [11438]
                      O44 - LFC:[MD5.81AA5C72B62533EB2994395E9F591F3F] - 26/03/2012 - 11:18:34 ---A- . (...) -- C:\WINDOWS\comsetup.log [322095]
                      O44 - LFC:[MD5.4F939E4CA1F27F8A137F32D3E9B9BD5D] - 26/03/2012 - 11:18:34 ---A- . (...) -- C:\WINDOWS\iis6.log [204305]
                      O44 - LFC:[MD5.5F115B1852B8A9F6DC3911B876E5DCBF] - 26/03/2012 - 11:18:34 ---A- . (...) -- C:\WINDOWS\imsins.log [1374]
                      O44 - LFC:[MD5.799F08490D82E3974836311B47CA2BD9] - 26/03/2012 - 11:18:34 ---A- . (...) -- C:\WINDOWS\ntdtcsetup.log [192792]
                      O44 - LFC:[MD5.D8C6ED9EB1ADF962A78BA7337CAFB947] - 26/03/2012 - 11:18:34 ---A- . (...) -- C:\WINDOWS\ocgen.log [620490]
                      O44 - LFC:[MD5.F5CCB883A9CC10E5E5DEAE3FC288F64D] - 26/03/2012 - 11:18:34 ---A- . (...) -- C:\WINDOWS\ocmsn.log [51662]
                      O44 - LFC:[MD5.96732334173FC841A22287A25857B1E5] - 26/03/2012 - 11:18:34 ---A- . (...) -- C:\WINDOWS\tsoc.log [493338]
                      O44 - LFC:[MD5.C26BD8747378B330046CB7D87224AD74] - 26/03/2012 - 11:18:33 ---A- . (...) -- C:\WINDOWS\FaxSetup.log [1285198]
                      O44 - LFC:[MD5.80BCF04351DBD91480C870D94E6F6D15] - 26/03/2012 - 11:18:33 ---A- . (...) -- C:\WINDOWS\msgsocm.log [64369]
                      O44 - LFC:[MD5.84B4F61F59A421BD85D97B35D194B42B] - 26/03/2012 - 08:22:22 ---A- . (.MindVision Software - Uninstall application file.) -- C:\WINDOWS\unvise32.exe [86016]
                      O44 - LFC:[MD5.DC17DD0189B0C36D863B4DD0A036C10F] - 26/03/2012 - 08:22:00 ---A- . (...) -- C:\WINDOWS\WMSysPr9.prx [316640]
                      O44 - LFC:[MD5.181CA4A24D29B27339FD7F678B1E2AA6] - 26/03/2012 - 08:20:20 ---A- . (...) -- C:\WINDOWS\DirectX.log [2245]
                      O44 - LFC:[MD5.600F1CE8E71892617B7538351174BC91] - 26/03/2012 - 07:59:59 ---A- . (...) -- C:\WINDOWS\aksdrvsetup.log [4043]
                      O44 - LFC:[MD5.D7051CEE60FDF4957739EFD5F854CBAF] - 26/03/2012 - 07:58:26 ---A- . (...) -- C:\WINDOWS\spupdsvc.log [84501]
                      O44 - LFC:[MD5.2A3F44533F460C9A2BCB858A29B414FE] - 26/03/2012 - 02:07:56 ---A- . (...) -- C:\WINDOWS\updspapi.log [200009]
                      O44 - LFC:[MD5.4AC9F9CCB6BE5A819FCF414109CFC252] - 25/03/2012 - 12:58:10 ---A- . (...) -- C:\WINDOWS\KB2641653.log [40395]
                      O44 - LFC:[MD5.04C2C674043C249168388317F19218F0] - 25/03/2012 - 12:58:10 ---A- . (...) -- C:\WINDOWS\imsins.BAK [1374]
                      O44 - LFC:[MD5.E097A5DA6C637A0B4CE078E045155CC8] - 25/03/2012 - 12:58:05 ---A- . (...) -- C:\WINDOWS\KB2387149.log [39981]
                      O44 - LFC:[MD5.8C2712F8B5D7F7385693477C137FC82F] - 25/03/2012 - 12:57:58 ---A- . (...) -- C:\WINDOWS\KB2479943.log [54681]
                      O44 - LFC:[MD5.3BF46DBC478B1B1CA5B4754C08315814] - 25/03/2012 - 12:57:53 ---A- . (...) -- C:\WINDOWS\KB2564958.log [37084]
                      O44 - LFC:[MD5.325C9B5640930
                      1. Fish66 Contributeur sécurité
                        Re,

                        Tu as le fichier : ZHPDiag.txt sur ton bureau.

                        Tu vas faire exactement comme expliqué ci-dessous :

                        Rends toi sur pjjoint.malekal.com
                        * Clique sur le bouton Parcourir
                        * Sélectionne le fichier que tu veux héberger : ZHPDiag.txt (celui qui est sur ton bureau) et clique sur Ouvrir
                        * Clique sur le bouton Envoyer
                        * Un message de confirmation s'affiche (L'upload a réussi ! - Le lien à transmettre à vos correspondant pour visualiser le fichier est : https://pjjoint.malekal.com/files.php?id=df5ea299241015

                        * Copie le lien dans ta prochaine réponse.

                        @+

                        _ _ _ Fish66_ _ _ I''"""""I_ _ membre contributeur sécurité_ _I''"""""I_ _ _
                        ¤¤¤ Le meilleur remède pour tous les problèmes, c'est la patience.... ¤¤¤
                        2. Fish66 Contributeur sécurité
                          Re,
                          Tu n'ouvres pas le fichier ZHPDiag.txt mais tu vas l'héberger comme

                          expliqué >>> ICI <<<

                          Je veux uniquement l'adresse du lien c'est tout :-)

                          @+

                          _ _ _ Fish66_ _ _ I''"""""I_ _ membre contributeur sécurité_ _I''"""""I_ _ _
                          ¤¤¤ Le meilleur remède pour tous les problèmes, c'est la patience.... ¤¤¤
                          1. Fish66 Contributeur sécurité
                            Re,
                            Suite ton MP :

                            1/
                            Copie tout le texte présent en gras ci-dessous ( tu le selectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C )

                            [MD5.70EB41A4417BA0AA36AE12BF2B4D98F6] - (...) -- C:\Program Files\StartNow Toolbar\ToolbarUpdaterService.exe [244960] [PID.]
                            R3 - URLSearchHook: IncrediMail MediaBar Francais 2 Toolbar - {249d74a3-bd19-4657-b6ce-e62f480a20de} . (.Conduit Ltd. - Conduit Toolbar.) (6.4.0.0) -- C:\Program Files\IncrediMail_MediaBar_Francais_2\prxtbIncr.dll
                            O2 - BHO: IncrediMail MediaBar Francais 2 - {249d74a3-bd19-4657-b6ce-e62f480a20de} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\IncrediMail_MediaBar_Francais_2\prxtbIncr.dll
                            O3 - Toolbar: IncrediMail MediaBar Francais 2 Toolbar - {249d74a3-bd19-4657-b6ce-e62f480a20de} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\IncrediMail_MediaBar_Francais_2\prxtbIncr.dll
                            O43 - CFD: 26/03/2012 - 11:22:08 - [0,609] ----D- C:\Program Files\Conduit => Toolbar.Conduit
                            O43 - CFD: 26/03/2012 - 11:22:04 - [4,795] ----D- C:\Program Files\IncrediMail_MediaBar_Francais_2 => Toolbar.Conduit
                            O2 - BHO: StartNow Toolbar Helper - {6E13D095-45C3-4271-9475-F3B48227DD9F} . (.Pas de propriétaire - Toolbar.) -- C:\Program Files\StartNow Toolbar\Toolbar32.dll => Infection BT (Adware.Zugo)
                            O43 - CFD: 27/03/2012 - 09:50:02 - [0,340] ----D- C:\Documents and Settings\laurent\Application Data\PriceGong => Infection BT (Adware.PriceGong)
                            O44 - LFC:[MD5.BB8BD0D7171D13B06DEDCE57997A4B09] - 24/03/2012 - 11:50:56 R--A- . (.Pas de propriétaire - DOT MFC Application.) -- C:\WINDOWS\system32\WinSys.exe [200704] => Infection Diverse (FALSU.A.Worm)
                            O69 - SBI: SearchScopes [HKCU] {0388404D-6072-4CEB-B521-8F090FEAEE57} [DefaultScope] - (Yahoo!) - http://klit.startnow.com

                            FirewallRAZ
                            EmptyTemp
                            EmptyFlash

                            Puis Lance ZHPFix depuis le raccourci du bureau .

                            * Une fois l'outil ZHPFix ouvert , clique sur le bouton [ H ] ( "coller les lignes Helper" ) .

                            * Dans l'encadré principal tu verras donc les lignes que tu as copié précédemment apparaitrent .

                            Vérifie que toutes les lignes que je t'ai demandé de copier (et seulement elles) sont dans la fenêtre.

                            Clique sur le bouton GO

                            Copie/Colle le rapport à l'écran dans ton prochain message.

                            2/
                            * Télécharge OTM (OldTimer) sur ton Bureau

                            ICI >> OTM (OldTimer)
                            * Double clic "OTMoveIt3.exe"
                            * Utilisateurs Windows Vista / 7 Clic droit sur "OTMoveIt3.exe" choisis "exécuter en tant qu'administrateur" afin de le lancer.

                            - Copie (Ctrl+C) le texte suivant en gras ci-dessous :

                            :files
                            C:\Program Files\Conduit
                            C:\Program Files\IncrediMail_MediaBar_Francais_2
                            C:\Program Files\StartNow Toolbar
                            C:\Documents and Settings\laurent\Application Data\PriceGong
                            C:\Documents and Settings\laurent\Local Settings\Application Data\Conduit
                            C:\Documents and Settings\laurent\Local Settings\Application Data\IncrediMail_MediaBar_Francais_2

                            :Reg
                            [-HKLM\Software\Classes\AppID\Toolbar.DLL]
                            [-HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{249d74a3-bd19-4657-b6ce-e62f480a20de}]
                            [-HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{249d74a3-bd19-4657-b6ce-e62f480a20de}]
                            [-HKLM\Software\Classes\CLSID\{249d74a3-bd19-4657-b6ce-e62f480a20de}]
                            [-HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{249d74a3-bd19-4657-b6ce-e62f480a20de}]
                            [-HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6E13D095-45C3-4271-9475-F3B48227DD9F}]
                            [-HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6E13D095-45C3-4271-9475-F3B48227DD9F}]
                            [-HKLM\Software\Classes\CLSID\{6E13D095-45C3-4271-9475-F3B48227DD9F}]
                            [-HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6E13D095-45C3-4271-9475-F3B48227DD9F}]
                            [-HKCU\Software\PriceGong]
                            [-HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Toolbar]
                            [-HKCU\Software\Zugo]
                            [-HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\StartNow Toolbar]
                            [-HKLM\Software\Classes\Toolbar.CT2724431]

                            :commands
                            [emptytemp]

                            - Colle (Ctrl+V) le texte précédemment copié dans le cadre: Paste Instructions for Items to be Moved.
                            - Clique maintenant sur le bouton MoveIt!
                            Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
                            Accepte en cliquant sur YES.
                            - Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
                            Le nom du rapport correspond au moment de sa création : date_heure.log

                            @+

                            1. Yorde03
                              N'hésite pas à refaire un tour d'anti virus et compagnie pour bien tout nettoyer. Sinon, sauvegarde tes données et retour d'usine pour le pc =O