Plantage de PC sous Vista SP2 .

aldebaran95 Messages postés 265 Statut Membre -  
jacques.gache Messages postés 34829 Statut Contributeur sécurité -
Bonjour,

Cette nuit mon pc a visiblement bugué car le laissant allumé toutes les nuits,je l'ai retrouvé sur la page d'accueil windows ce matin (la page où on nous demande le mot de passe).
J'ai donc entré mon mot de passe et là,gros lag. Le pc ne se bootait pas.J'ai dû l'éteindre 2 fois manuellement pour qu'il affiche enfin le bureau après plusieurs minutes laborieuses.
Là,plus moyen de lancer internet ou d'ouvrir un document, l'icône de la souris reste en recherche et le disque dur semble avoir dur mal a tourner,il fait un petit bruit de frottement.

J'ai voulu faire une restauration système,plus rien ! tous mes points de restauration ont été éffacés .
J'ai nettoyé le disque dur,j'ai passé Ccleaner (en nettoyage système et en registre),rien n'y fait.

Mon antivirus c'est Avast et j'ai Ad Aware en protection résidente en plus du pare-feu windows.

Là je suis actuellement en mode sans échec avec prise en charge du réseau,tout marche nickel , le disque dur ne fait aucun bruit ,je suppose donc que le disque dur est hors de cause ...

Auriez vous une solution ?

Merci.

A voir également:

6 réponses

aldebaran95 Messages postés 265 Statut Membre 13
 
Ok merci.

J'ai justement partitioné mon DD comme indiqué .
Quant à l'image,le seul pc sur lequel j'ai oublié de le faire,c'est celui ci ....

Sinon,il n'y a pas un moyen de réparer le registre ? j'avais fait une manip via la console et le pc avait remit les clés de registre en état mais plus moyen de me rappeler la manip.

Un rapport Hijackthis serait utile ?
0
aldebaran95 Messages postés 265 Statut Membre 13
 
Je joint un rapport Hijackthis a tout hasard :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:22:56, on 07/06/2012
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Safe mode with network support

Running processes:
C:\Windows\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Users\OLIVE\Downloads\hijackthis_telechargement_01net.exe
C:\Users\OLIVE\AppData\Local\Temp\01net\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.asus.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT1060933&SSPV=IENOSGTB
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.asus.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll
R3 - URLSearchHook: (no name) - {05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} - (no file)
R3 - URLSearchHook: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\prxtbFree.dll
O1 - Hosts: ::1 localhost
O2 - BHO: uTorrentBar_FR - {05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} - (no file)
O2 - BHO: Complitly - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Users\OLIVE\AppData\Roaming\Complitly\Complitly.dll
O2 - BHO: Freecorder - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\prxtbFree.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: ASUS Security Protect Manager - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItIEAddIn.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: (no name) - {05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} - (no file)
O3 - Toolbar: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\prxtbFree.dll
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [Advanced SystemCare 5] "C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe" /AutoStart
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [Advanced SystemCare 5] "C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe" /AutoStart (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Advanced SystemCare 5] "C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe" /AutoStart (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Lancer Voissa Anonymo - {C80DDAAA-310C-459B-9535-8370B4EBDA1F} - C:\Program Files\Voissa anonymo\Voissaanonymo.exe
O9 - Extra 'Tools' menuitem: Tools Menu Item - {C80DDAAA-310C-459B-9535-8370B4EBDA1F} - C:\Program Files\Voissa anonymo\Voissaanonymo.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O13 - Gopher Prefix:
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} ("Ma-Config.com control) - http://fichiers2.touslesdrivers.com/maconfig/MaConfig_5_2_2_0.cab
O20 - AppInit_DLLs: APSHook.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ADSM Service (ADSMService) - Unknown owner - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: Advanced SystemCare Service 5 (AdvancedSystemCareService5) - IObit - C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: AuthenTec Fingerprint Service (ATService) - AuthenTec, Inc. - C:\Program Files\Fingerprint Sensor\AtService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Service Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft Limited - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
0
jacques.gache Messages postés 34829 Statut Contributeur sécurité 1 618
 
bonjour, perso je préfèrerais avoir un zhpdig il sera plus complet , mais déjà arrête de télécharger sur 01.net pour info ils modifient les outils en y intégrant des choses comme une toolbar et sont rémunéré à chaque installation

bon tu pourrais faire se qui suit , merci


1) passes pré scan

telecharge et enregistre Pre_Scan sur ton bureau :

http://forums-fec.be/gen-hackman/Pre_Scan.exe
http://general-changelog-team.fr/fr/downloads/viewdownload/41-outils-de-gen-hackman/52-pre-scan

Avertissement :Il y aura une extinction du bureau pendant le scan --> pas de panique.

une fois telechargé lance-le , laisse faire le scan jusqu'à l'apparition de "Pre_scan_la_date_et_l'heure.txt" sur le bureau.

si l'outil est relancé plusieurs fois , il te proposera un menu et qu'aucune option n'est demandée, lance l'option "Kill"

si l'outil est bloqué par l'infection utilise cette version avec extension .pif :

http://forums-fec.be/gen-hackman/Pre_Scan.pif

ou cette version renommée winlogon.exe :

http://forums-fec.be/gen-hackman/winlogon.exe

si l'outil detecte un proxy et que tu n'en as pas installé clique sur "supprimer le proxy"

Il se peut qu'une multitude de fenêtres noires clignotent , laisse-le travailler

Poste Pre_Scan_la_date_et_l'heure.txt qui apparaitra sur le bureau en fin de scan


NE LE POSTE PAS SUR LE FORUM !!! (il est trop long)

Heberge le rapport sur http://pjjoint.malekal.com puis donne le lien obtenu en echange sur le forum où tu te fais aider




2) postes un zhpdiag

Ouvre ce lien et télécharge ZHPDiag :

https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

cliques sur télécharger "celui du bas"

ou directement ici: ftp://zebulon.fr/ZHPDiag2.exe



Enregistres le sur ton Bureau.

Une fois le téléchargement achevé

pour XP, double-clique sur ZHPDiag

pour Vista,et seven tu fais un clic droit sur l'icône et exécute en tant qu'administrateur.

N'oublies pas de cocher la case qui permet de mettre un raccourci sur le Bureau.

/|\ l'outil a créé 2 icônes ZHPDiag et ZHPFix.

Double cliques sur le raccourci ZHPDiag sur ton Bureau pour XP sinon clique droit et en tant que administrateur !!

Cliques sur la loupe pour lancer l'analyse.

si tu as un message te demandant la validation pour SIGCHECK acceptes avec OK cela est pour nous faire un rapport plus complet et pouvoir en faire une lecture plus approfondis

Laisses l'outil travailler, il peut être assez long

A la fin de l'analyse,clique sur l'appareil photo et enregistre le rapport sur ton Bureau.


Fermes ZHPDiag en fin d'analyse.


Pour me le transmettre clique sur ce lien :

https://www.cjoint.com/


Clique sur Parcourir et cherche le fichier C:\Documents and settings\le_nom_de_ta_session\bureau\.ZHPDiag.txt

ou directement en choisissant bureau et ZHPDiag.txt clique dessus

Clique sur Ouvrir.

Clique sur "Cliquez ici pour déposer le fichier".

Un lien de cette forme :

http://www.cijoint.fr/cjlink.php?file=cj200905/cib7SU.txt

est ajouté dans la page.

Copie ce lien dans ta réponse.


et si problème passe par celui ci : http://threat-rc.com/
ou
http://pjjoint.malekal.com/
0
aldebaran95 Messages postés 265 Statut Membre 13
 
Ok,merci Jacques,toujours aussi précis dans les démarches,ça fait plaisir .
Je ferais ça demain car la manoeuvre est assez lourde.

Je te tiens au courant .
0
aldebaran95 Messages postés 265 Statut Membre 13
 
Bon,je m'y suis mis ce matin,ben c'est pas gagné ....

Le pre-scan se lance nickel en mode sans échec mais lorsque le pc redémarre en mode normale ,ça bug .
J'ai insisté plusieurs fois , au mieux le scan winlogon se lance mais se retrouve bloqué dés le début,au pire,explorer plante et je n'ai plus aucune icone.
De plus,aucun rapport n'a été mis sur le bureau, j'ai essayé les 2 versions de winlogo que tu as mis en lien pourtant.

J'ai quand même fait un rapport ZHPdiag mais pas moyen d'envoyer le lien ici,je suppose que le mode sans échec bloque cette possibilité.
J'ai voulu l'envoyer par mail sur le pc de ma femme,impossible aussi de joindre un fichier.
Je te le transmet donc en copier/collé,je n'ai pas le choix.

Rapport de ZHPDiag v1.31.095 par Nicolas Coolman, Update du 24/05/2012
Run by OLIVE at 08/06/2012 09:00:48
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Web site : http://nicolascoolman.skyrock.com/
State : Version à jour.


---\\ Web Browser
MSIE: Internet Explorer v9.0.8112.16421
MFIE: Mozilla Firefox 13.0 v13.0 (Defaut)
GCIE: Google Chrome v19.0.1084.52

---\\ Windows Product Information
~ Langage: Français
Windows Vista Home Premium Edition, 32-bit Service Pack 2 (Build 6002)
Windows Server License Manager Script : OK
Windows Automatic Updates : OK

---\\ System Information
~ Processor: x86 Family 6 Model 23 Stepping 6, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Sans échec avec prise en charge du réseau (Fail-safe with network boot)
Total RAM: 3070 MB (79% free)
System Restore: Désactivé (Disabled)
System drive C: has 149 GB (83%) free of 179 GB

---\\ Logged in mode
~ Computer Name: PC-DE-OLIVE
~ User Name: OLIVE
~ All Users Names: OLIVE, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\OLIVE\AppData\Roaming\
~ %Desktop% : C:\Users\OLIVE\Desktop\
~ %Favorites% : C:\Users\OLIVE\Favorites\
~ %LocalAppData% : C:\Users\OLIVE\AppData\Local\
~ %StartMenu% : C:\Users\OLIVE\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 149 Go of 179 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 9 Go of 298 Go)
E:\ Hard drive, Flash drive, Thumb drive (Free 45 Go of 119 Go)
F:\ CD-ROM drive (Not Inserted)
G:\ CD-ROM drive (Not Inserted)
H:\ CD-ROM drive (Not Inserted)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowMyComputer: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
~ Scan Security Center in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.D07D4C3038F3578FFCE1C0237F2A1253] - (.Microsoft Corporation - Explorateur Windows.) (.10/04/2009 - 22:27:38.) -- C:\Windows\Explorer.exe [2926592]
[MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) (.21/01/2008 - 03:23:42.) -- C:\Windows\System32\Wininit.exe [96768]
[MD5.1D94FA7C81D2FFE494AF094619BA706F] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.16/05/2012 - 08:15:41.) -- C:\Windows\System32\wininet.dll [1127424]
[MD5.898E7C06A350D4A1A64A9EA264D55452] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.10/04/2009 - 22:28:14.) -- C:\Windows\System32\Winlogon.exe [314368]
[MD5.3911B972B55FEA0478476B2E777B29FA] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.21/04/2011 - 14:58:27.) -- C:\Windows\system32\Drivers\AFD.sys [273408]
[MD5.1F05B78AB91C9075565A9D8A4B880BC4] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.10/04/2009 - 22:32:28.) -- C:\Windows\system32\Drivers\atapi.sys [19944]
[MD5.7ADD03E75BEB9E6DD102C3081D29840A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.21/01/2008 - 03:23:51.) -- C:\Windows\system32\Drivers\Cdfs.sys [70144]
[MD5.6B4BFFB9BECD728097024276430DB314] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.10/04/2009 - 20:39:18.) -- C:\Windows\system32\Drivers\Cdrom.sys [67072]
[MD5.622C41A07CA7E6DD91770F50D532CB6C] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.14/04/2011 - 15:59:03.) -- C:\Windows\system32\Drivers\DfsC.sys [75264]
[MD5.062452B7FFD68C8C042A6261FE8DFF4A] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.10/04/2009 - 20:42:44.) -- C:\Windows\system32\Drivers\HDAudBus.sys [561152]
[MD5.22D56C8184586B7A1F6FA60BE5F5A2BD] - (.Microsoft Corporation - Pilote de port i8042.) (.21/01/2008 - 03:23:20.) -- C:\Windows\system32\Drivers\i8042prt.sys [54784]
[MD5.8793643A67B42CEC66490B2A0CF92D68] - (.Microsoft Corporation - IP Network Address Translator.) (.21/01/2008 - 03:24:25.) -- C:\Windows\system32\Drivers\IpNat.sys [100864]
[MD5.1E94971C4B446AB2290DEB71D01CF0C2] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.29/04/2011 - 14:24:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [106496]
[MD5.ECD64230A59CBD93C85F1CD1CAB9F3F6] - (.Microsoft Corporation - MBT Transport driver.) (.10/04/2009 - 20:45:38.) -- C:\Windows\system32\Drivers\netBT.sys [185856]
[MD5.6A4A98CEE84CF9E99564510DDA4BAA47] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.10/04/2009 - 22:32:50.) -- C:\Windows\system32\Drivers\ntfs.sys [1083880]
[MD5.0FA9B5055484649D63C303FE404E5F4D] - (.Microsoft Corporation - Pilote de port parallèle.) (.02/11/2006 - 09:51:30.) -- C:\Windows\system32\Drivers\Parport.sys [79360]
[MD5.A214ADBAF4CB47DD2728859EF31F26B0] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/01/2008 - 03:24:55.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [76288]
[MD5.FBC0BACD9C3D7F6956853F64A66E252D] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.21/01/2008 - 03:23:01.) -- C:\Windows\system32\Drivers\rdpdr.sys [248832]
[MD5.7B75299A4D201D6A6533603D6914AB04] - (.Microsoft Corporation - SMB Transport driver.) (.10/04/2009 - 20:45:24.) -- C:\Windows\system32\Drivers\smb.sys [66560]
[MD5.76B06EB8A01FC8624D699E7045303E54] - (.Microsoft Corporation - TDI Translation Driver.) (.10/04/2009 - 20:45:58.) -- C:\Windows\system32\Drivers\tdx.sys [72192]
[MD5.147281C01FCB1DF9252DE2A10D5E7093] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.10/04/2009 - 22:32:56.) -- C:\Windows\system32\Drivers\volsnap.sys [226280]
~ Scan Generic Processes in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/952
~ Mes musiques (My Musics) : 1/1075
~ Mes Favoris (My Favorites) : 1/24
~ Mes Documents (My Documents) : 1/6
~ Mon Bureau (My Desktop) : 1/13
~ Menu demarrer (Programs) : 1/27
~ Scan Hidden Files in 00mn 02s



---\\ Processus lancés
[MD5.0830E6BA8463BEF96CF69C1993F74A4B] - (.Lavasoft Limited - Ad-Aware Tray Application.) -- C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe [1187072] [PID.1588]
[MD5.CC926B0811C3FA2363C98711410FEF24] - (...) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [4540928] [PID.1956]
[MD5.55AFD4A9D5ED4AD40D5215CCDF4D65F3] - (.Lavasoft Limited - Ad-Aware Service Application.) -- C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe [2152720] [PID.]
[MD5.0615B72D5E241103769003452B4AFB1C] - (...) -- C:\Program Files\Lavasoft\Ad-Aware\AWSC.exe [1101960] [PID.]
[MD5.5DAF7081A4BB112FA3F1915819330A3E] - (...) -- C:\Program Files\ZHPDiag\pv.exe [61440] [PID.]
~ Scan Processes Running in 00mn 00s



---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\OLIVE\AppData\Local\Google\Chrome\User Data\Default\Preferences
G0 - GCSP: Preference [User Data\Default][HomePage] https://isearch.avg.com/
G0 - GCSP: Preference [User Data\Default] https://isearch.avg.com/
G1 - GCS: Preference [User Data\Default] None
~ Scan Google Browser in 00mn 00s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\OLIVE\AppData\Roaming\Mozilla\Firefox\Profiles\u3objlzb.default\prefs.js
M3 - MFPP: Plugins - [OLIVE] -- C:\Users\OLIVE\AppData\Roaming\Mozilla\Firefox\Profiles\u3objlzb.default\searchplugins\conduit.xml
M3 - MFPP: Plugins - [OLIVE] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [OLIVE] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [OLIVE] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [OLIVE] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [OLIVE] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [OLIVE] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [OLIVE] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
M2 - MFEP: prefs.js [OLIVE - u3objlzb.default\{1392b8d2-5c05-419f-a8f6-b9f15a596612}] [] Freecorder Community Toolbar v3.13.0.6 (.Conduit Ltd..)
M2 - MFEP: prefs.js [OLIVE - u3objlzb.default\{33e0daa6-3af3-d8b5-6752-10e949c61516}] [] Complitly - Speed up your search with your personal search suggestions tool v1.1 (.SimplyGen Ltd..)
M2 - MFEP: prefs.js [OLIVE - u3objlzb.default\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}] [greasemonkey] Greasemonkey v0.9.20 (.Aaron Boodman; http://youngpup.net/
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll
P2 - FPN: [HKLM] [@ma-config.com/HardwareDetection] - (.Cybelsoft - Plugin NPAPI Ma-Config.com # win # 5.2.2.0.) -- C:\Program Files\ma-config.com\nphardwaredetection.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.10411.0.) -- C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/OfficeLive,version=1.5] - (.Microsoft Corp. - Office Live Update v1.5.) -- C:\Program Files\Microsoft\Office Live\npOLW.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=14.0.8117.0416] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.0.1] - (.VideoLAN - VLC media player Web Plugin 2.0.0.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll
~ Scan Firefox Browser in 00mn 00s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.microsoft.com/fr-fr/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.asus.com/fr/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.google.com/?gws_rd=ssl
R3 - URLSearchHook: (no name) - {05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} . (.VideoLAN - VLC media player Web Plugin 2.0.0.) (No version) -- (.not file.)
R3 - URLSearchHook: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} . (.Conduit Ltd. - Conduit Toolbar.) (6.4.0.0) -- C:\Program Files\Freecorder\prxtbFree.dll
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Conduit Ltd. - Conduit Toolbar.) (No version) -- (.not file.)
R3 - URLSearchHook: (no name) - {05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} . (.Conduit Ltd. - Conduit Toolbar.) (No version) -- (.not file.)
R3 - URLSearchHook: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} . (.Conduit Ltd. - Conduit Toolbar.) (6.4.0.0) -- C:\Program Files\Freecorder\prxtbFree.dll
R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2
~ Scan IE Browser in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s



---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Scan Keys in 00mn 00s



---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 03s
~ Nombre de lignes (Lines number): 15260



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: uTorrentBar_FR - {05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} Clé orpheline
O2 - BHO: Freecorder - {1392b8d2-5c05-419f-a8f6-b9f15a596612} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Freecorder\prxtbFree.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} . (.Safer Networking Limited - SBSD IE Protection.) -- C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} . (.Ask - Ask Toolbar.) -- C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: ASUS Security Protect Manager - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} . (.Bioscrypt Inc. - SSO IE Listener.) -- C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItIEAddIn.dll
~ Scan BHO in 00mn 00s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Ask Toolbar - [HKLM]{D4027C7F-154A-4066-A1AD-4243D8127440} . (.Ask - Ask Toolbar.) -- C:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: avast! WebRep - [HKLM]{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: (no name) - [HKLM]{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} . (...) -- (.not file.)
O3 - Toolbar: Freecorder Toolbar - [HKLM]{1392b8d2-5c05-419f-a8f6-b9f15a596612} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Freecorder\prxtbFree.dll
~ Scan Toolbar in 00mn 00s



---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe
O4 - HKLM\..\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe
O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\Windows\system32\NvCpl.dll
O4 - HKCU\..\Run: [Advanced SystemCare 5] . (.IObit - Advanced SystemCare 5 Tray.) -- C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe
O4 - HKUS\S-1-5-18\..\Run: [Advanced SystemCare 5] . (.IObit - Advanced SystemCare 5 Tray.) -- C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe
O4 - HKUS\S-1-5-18\..\Run: [Advanced SystemCare 5] . (.IObit - Advanced SystemCare 5 Tray.) -- C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] oobefldr.dll
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] oobefldr.dll
O4 - HKUS\S-1-5-21-1959498384-218811378-2899222492-1000\..\Run: [Advanced SystemCare 5] . (.IObit - Advanced SystemCare 5 Tray.) -- C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe
~ Scan Application in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\OLIVE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\OLIVE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Mail\WinMail.exe
O4 - Global Startup: C:\Users\OLIVE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Users\OLIVE\Desktop\Ad-Aware.lnk . (.Lavasoft Limited.) -- C:\Program Files\Lavasoft\Ad-Aware\Ad-Aware.exe
O4 - Global Startup: C:\Users\OLIVE\Desktop\Calculator.lnk . (.Microsoft Corporation.) -- C:\Windows\System32\calc.exe
O4 - Global Startup: C:\Users\OLIVE\Desktop\Microsoft Office - Raccourci.lnk . (...) -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
O4 - Global Startup: C:\Users\OLIVE\Desktop\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - Global Startup: C:\Users\OLIVE\Desktop\Spybot - Search & Destroy.lnk . (.Safer Networking Limited.) -- C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
O4 - Global Startup: C:\Users\OLIVE\Desktop\Windows Live Messenger .lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O4 - Global Startup: C:\Users\OLIVE\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Advanced SystemCare 5.lnk . (.IObit.) -- C:\Program Files\IObit\Advanced SystemCare 5\ASC.exe
O4 - Global Startup: C:\Users\OLIVE\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Belarc Advisor.lnk . (.Belarc, Inc..) -- C:\Program Files\Belarc\Advisor\BelarcAdvisor.exe
O4 - Global Startup: C:\Users\OLIVE\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Glary Utilities.lnk . (.Glarysoft Ltd.) -- C:\Program Files\Glary Utilities\Integrator.exe
O4 - Global Startup: C:\Users\OLIVE\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O4 - Global Startup: C:\Users\OLIVE\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\OLIVE\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - Global Startup: C:\Users\OLIVE\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk . (.Safer Networking Limited.) -- C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
O4 - Global Startup: C:\Users\OLIVE\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Users\OLIVE\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\XnView.lnk . (.XnView, http://www.xnview.com.) -- C:\Program Files\XnView\xnview.exe
~ Scan Global Startup in 00mn 00s



---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\Program Files\MICROS~2\Office12\EXCEL.exe
~ Scan IE Menu Contextuel in 00mn 00s



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: &Ajout Direct dans Windows Live Writer - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\Program Files\Microsoft Office\Office12\REFBARH.ICO
O9 - Extra button: Tools Menu Item - {C80DDAAA-310C-459B-9535-8370B4EBDA1F} . (...) -- C:\Program Files\Voissa anonymo\Voissaanonymo.ico
O9 - Extra button: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} . (...) -- C:\Program Files\Voissa anonymo\Voissaanonymo.ico
~ Scan IE Extra Buttons in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
~ Scan Winsock in 00mn 00s



---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} ("Ma-Config.com control) - https://www.touslesdrivers.com/index.php?v_page=29
~ Scan Objets ActiveX in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{B8E8E3B3-49BC-4B3F-A056-71B8DD2F3DF3}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{B8E8E3B3-49BC-4B3F-A056-71B8DD2F3DF3}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{B8E8E3B3-49BC-4B3F-A056-71B8DD2F3DF3}: DhcpNameServer = 192.168.1.1
~ Scan Domain in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} . (.Belarc, Inc. - Belarc VoilaX Control.) -- C:\Program Files\Belarc\Advisor\System\BAVoilaX.dll
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (...) --
O18 - Handler: dvd - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (...) --
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (...) --
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (...) --
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (...) --
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (...) --
O18 - Handler: its - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (...) --
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (...) --
O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (...) --
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (...) --
O18 - Handler: mhtml - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (...) --
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (...) --
O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (...) --
O18 - Handler: tv - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (...) --
O18 - Handler: vbscript - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (...) --
O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.dll
~ Scan Protocole Additionnel in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - AppInit_DLLs: . (.Cognizance Corporation - Application Protection Hook.) - C:\Windows\System32\APSHook.dll
~ Scan AppInit DLL in 00mn 00s



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ Scan SSODL in 00mn 00s



---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\System32\browseui.dll
~ Scan STS/SSO in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Advanced SystemCare Service 5 (AdvancedSystemCareService5) . (.IObit - Advanced SystemCare Service.) - C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe
O23 - Service: AuthenTec Fingerprint Service (ATService) . (.AuthenTec, Inc. - AFSS Service.) - C:\Program Files\Fingerprint Sensor\AtService.exe
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) . (.Intel(R) Corporation - Intel(R) PROSet/Wireless Event Log Service.) - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation - IAStorDataSvc.) - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Lavasoft Ad-Aware Service (Lavasoft Ad-Aware Service) . (.Lavasoft Limited - Ad-Aware Service Application.) - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 179.4.) - C:\Windows\System32\nvvsvc.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Servic (RegSrvc) . (.Intel(R) Corporation - Intel(R) PROSet/Wireless Registry Service.) - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) . (.Safer Networking Ltd. - Spybot-S&D Security Center integration.) - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
~ Scan Services in 00mn 00s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\Program Files\Microsoft Office\Office12\WINWORD.exe
O24 - Desktop General: BackupWallPaper - .(...) - C:\Windows\ASUS\wallpapers\ASUS3.jpg
O24 - Desktop General: WallPaper - .(...) - C:\Windows\ASUS\wallpapers\ASUS3.jpg
~ Scan Desktop Component in 00mn 00s



---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (lsdelete) - File not found
~ Scan Keys in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Ad-Aware Update (Weekly).job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Adobe Flash Player Updater.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GlaryInitialize.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
~ Scan Scheduled Task in 00mn 00s



---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\system32\ie4uinit.exe
O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - Personnalisation d'IEAK.) -- C:\Windows\system32\iedkcs32.dll
O40 - ASIC: Microsoft Windows Media Player 11.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Microsoft Windows Mail 7 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files\Windows Mail\WinMail.exe
O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Windows Desktop Update - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Scan Active Setup in 00mn 00s



---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: (dtsoftbus01) . (.DT Soft Ltd - DAEMON Tools Virtual Bus Driver.) - C:\Windows\System32\DRIVERS\dtsoftbus01.sys
O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\System32\DRIVERS\i8042prt.sys
O41 - Driver: (kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\System32\DRIVERS\kbdclass.sys
O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre clavier HID.) - C:\Windows\System32\DRIVERS\kbdhid.sys
O41 - Driver: (mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\System32\DRIVERS\mouclass.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: (netbt) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (PSched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\System32\DRIVERS\rasacd.sys
O41 - Driver: (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: (RDPENCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (Smb) . (.Microsoft Corporation - SMB Transport driver.) - C:\Windows\System32\DRIVERS\smb.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
~ Scan Drivers in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: 7-Zip 9.20 - (.Pas de propriétaire.) [HKLM] -- 7-Zip
O42 - Logiciel: ASUS CopyProtect - (.ASUS.) [HKLM] -- {6B77A7F6-DD63-4F13-A6FF-83137A5AC354}
O42 - Logiciel: ASUS Data Security Manager - (.ASUS.) [HKLM] -- {1C8521E5-5A7B-4A4E-A9CD-AD53116EAEE0}
O42 - Logiciel: ASUS LifeFrame3 - (.ASUS.) [HKLM] -- {1DBD1F12-ED93-49C0-A7CC-56CBDE488158}
O42 - Logiciel: ASUS Live Update - (.ASUS.) [HKLM] -- {E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}
O42 - Logiciel: ASUS MultiFrame - (.Pas de propriétaire.) [HKLM] -- {9D48531D-2135-49FC-BC29-ACCDA5396A76}
O42 - Logiciel: ASUS Power4Gear eXtreme - (.ASUS.) [HKLM] -- {9B6239BF-4E85-4590-8D72-51E30DB1A9AA}
O42 - Logiciel: ASUS Security Protect Manager - (.ASUSTeK Computer Inc..) [HKLM] -- {D8D4AF9A-6ADE-4B14-A7F5-BA858792729E}
O42 - Logiciel: ASUS SmartLogon - (.ASUS.) [HKLM] -- {64452561-169F-4A36-A2FF-B5E118EC65F5}
O42 - Logiciel: ASUS Splendid Video Enhancement Technology - (.ASUS.) [HKLM] -- {0969AF05-4FF6-4C00-9406-43599238DE0D}
O42 - Logiciel: ASUS Virtual Camera - (.ASUS.) [HKLM] -- {EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}
O42 - Logiciel: ATK Generic Function Service - (.ATK.) [HKLM] -- {D3D54F3E-C5C3-443D-978F-87A72E5616E8}
O42 - Logiciel: ATK Hotkey - (.ASUS.) [HKLM] -- {7C05592D-424B-46CB-B505-E0013E8E75C9}
O42 - Logiciel: ATK Media - (.ASUS.) [HKLM] -- {D1E5870E-E3E5-4475-98A6-ADD614524ADF}
O42 - Logiciel: ATKOSD2 - (.ASUS.) [HKLM] -- {3B05F2FB-745B-4012-ADF2-439F36B2E70B}
O42 - Logiciel: Ad-Aware - (.Lavasoft Limited.) [HKLM] -- {97BD5533-8B5B-42FA-ADAE-A6F8DB997D7C}
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Flash Player 9 ActiveX - (.Adobe Systems.) [HKLM] -- ShockwaveFlash
O42 - Logiciel: Adobe Reader 9.4.0 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A94000000001}
O42 - Logiciel: Advanced SystemCare 5 - (.IObit.) [HKLM] -- Advanced SystemCare 5_is1
O42 - Logiciel: Ask Toolbar - (.Ask.com.) [HKLM] -- {86D4B82A-ABED-442A-BE86-96357B70F4FE}
O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
O42 - Logiciel: Asus_Camera_ScreenSaver - (.ASUS.) [HKLM] -- Asus_Camera_ScreenSaver
O42 - Logiciel: Atheros Client Installation Program - (.Atheros.) [HKLM] -- {28006915-2739-4EBE-B5E8-49B25D32EB33}
O42 - Logiciel: Auslogics Disk Defrag - (.Auslogics Software Pty Ltd.) [HKLM] -- {DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1
O42 - Logiciel: AuthenTec Fingerprint Software - (.AuthenTec, Inc..) [HKLM] -- {EF04F9A0-EF1B-41C2-A78B-50C62290064A}
O42 - Logiciel: Belarc Advisor 8.2 - (.Belarc Inc..) [HKLM] -- Belarc Advisor
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
O42 - Logiciel: CDBurnerXP - (.CDBurnerXP.) [HKLM] -- {7E265513-8CDA-4631-B696-F40D983F3B07}_is1
O42 - Logiciel: Cisco EAP-FAST Module - (.Cisco Systems, Inc..) [HKLM] -- {415B2719-AD3A-4944-B404-C472DB6085B3}
O42 - Logiciel: Cisco LEAP Module - (.Cisco Systems, Inc..) [HKLM] -- {83770D14-21B9-44B3-8689-F7B523F94560}
O42 - Logiciel: Cisco PEAP Module - (.Cisco Systems, Inc..) [HKLM] -- {669C7BD8-DAA2-49B6-966C-F1E2AAE6B17E}
O42 - Logiciel: CustoPackTools - (.neOceane.) [HKLM] -- CustoPackTools
O42 - Logiciel: DAEMON Tools Lite - (.DT Soft Ltd.) [HKLM] -- DAEMON Tools Lite
O42 - Logiciel: Dolby Control Center - (.Dolby.) [HKLM] -- {DE66EFAD-B9CC-4FD4-9157-6C18E5100161}
O42 - Logiciel: Express Gate - (.Nom de votre société.) [HKLM] -- {27D51A76-371D-48B6-B06E-4137A15B7583}
O42 - Logiciel: Freecorder 5 - (.Applian Technologies Inc..) [HKLM] -- Freecorder5.11
O42 - Logiciel: Freecorder Toolbar - (.Freecorder.) [HKLM] -- Freecorder Toolbar
O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {1EE04769-91C4-4A06-92B7-FCAFE6BABDD9}
O42 - Logiciel: Glary Utilities 2.44.0.1450 - (.Glarysoft Ltd.) [HKLM] -- Glary Utilities_is1
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
O42 - Logiciel: ITECIR - (.ITE.) [HKLM] -- {40580068-9B10-40B5-9548-536CE88AB23C}
O42 - Logiciel: IZArc 4.1.6 - (.Ivan Zahariev.) [HKLM] -- {97C82B44-D408-4F14-9252-47FC1636D23E}_is1
O42 - Logiciel: ImgBurn 2.3.2.0 Fr - (.Pas de propriétaire.) [HKLM] -- {75ADEFA2-D4FF-4B37-9E93-4306E6AC176B}_is1
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {133742BA-6F46-4D3E-85AF-78631D9AD8B8}
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM] -- {3E29EE6C-963A-4aae-86C1-DC237C4A49FC}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {8E5233E1-7495-44FB-8DEB-4BE906D59619}
O42 - Logiciel: Logiciel Intel(R) PROSet/Wireless WiFi - (.Intel Corporation.) [HKLM] -- {C8005A7B-9638-41DD-B83B-AF277754E211}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM] -- {1B19A54C-3692-4D12-BFD9-1362DD34CE78}
O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) [HKLM] -- {3E31821C-7917-367E-938E-E65FC413EA31}
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
O42 - Logiciel: Microsoft IntelliPoint 8.2 - (.Microsoft Corporation.) [HKLM] -- Microsoft IntelliPoint 8.2
O42 - Logiciel: Microsoft IntelliPoint 8.2 - (.Microsoft Corporation.) [HKLM] -- {942E5031-2BD6-4C1B-918C-C8A1CBAE7B8C}
O42 - Logiciel: Microsoft IntelliType Pro 8.2 - (.Microsoft Corporation.) [HKLM] -- Microsoft IntelliType Pro 8.2
O42 - Logiciel: Microsoft IntelliType Pro 8.2 - (.Microsoft Corporation.) [HKLM] -- {9BD2DD45-8763-4F12-BDC6-958FCFEF0FCB}
O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}
O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}_PROPLUS_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}
O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}_PROPLUS_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}
O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}_PROPLUS_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}
O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}_PROPLUS_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}
O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}_PROPLUS_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}
O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}_PROPLUS_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}
O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}_PROPLUS_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}
O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}_PROPLUS_{8283FD64-6A3B-4104-9E12-7CA25EF29A1A}
O42 - Logiciel: Microsoft Office Access MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Live Add-in 1.5 - (.Microsoft Corporation.) [HKLM] -- {F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}
O42 - Logiciel: Microsoft Office Outlook Connector - (.Microsoft Corporation.) [HKLM] -- {95120000-0122-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- PROPLUS
O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}_PROPLUS_{3E8EA473-ECCE-405F-A9CA-59446AEADD3A}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}_PROPLUS_{928D7B99-2BEA-49F9-83B8-20FA57860643}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}_PROPLUS_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}_PROPLUS_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}_PROPLUS_{2C95E7EE-FEA7-4B3A-A6E5-DF90A88B816A}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}_PROPLUS_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}
O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {710f4c1c-cc18-4c49-8cbf-51240c89a1a2}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 - (.Microsoft Corporation.) [HKLM] -- {FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM] -- {9BE518E6-ECC6-35A9-88E4-87755C07200F}
O42 - Logiciel: Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 - (.Microsoft Corporation.) [HKLM] -- {196BB40D-1578-3D01-B289-BEFC77A11A1E}
O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 Language Pack SP1 - fra
O42 - Logiciel: Mozilla Firefox 13.0 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 13.0 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService
O42 - Logiciel: NB Probe - (.Pas de propriétaire.) [HKLM] -- {6324A1EF-CEF4-43E3-8BCD-9EF3F67317FD}
O42 - Logiciel: NVIDIA Drivers - (.NVIDIA Corporation.) [HKLM] -- NVIDIA Drivers
O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM] -- {8AAB4176-A747-493A-A42C-B63CFADFD8E3}
O42 - Logiciel: Net4Switch - (.ASUS.) [HKLM] -- {9D6D7811-43B3-463C-BC79-5D1755269989}
O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}
O42 - Logiciel: P4P - (.P4P.) [HKLM] -- {FC3D290D-79BE-44B7-ABF9-FDD110925930}
O42 - Logiciel: PeaZip 4.5 - (.Giorgio Tani.) [HKLM] -- {5A2BC38A-406C-4A5B-BF45-6991F9A05325}_is1
O42 - Logiciel: PhotoFiltre Studio X - (.Pas de propriétaire.) [HKCU] -- PhotoFiltre Studio X
O42 - Logiciel: RICOH R5C83x/84x Flash Media Controller Driver Ver.3.55.01 - (.Pas de propriétaire.) [HKLM] -- {59F6A514-9813-47A3-948C-8A155460CC2A}
O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: STDU Viewer version 1.6.131.0 - (.STDUtility.) [HKLM] -- STDU Viewer_is1
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473
O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5DD3FF90-B302-45B2-A188-C5EA7ACD5D46}
O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{A0D5F849-D9D5-48ED-99D0-C74D7BFA6A09}
O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{E34960DB-2A93-45DB-A208-02650F7AB09C}
O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{293FB6BE-D3EB-4162-B522-F9108040B9FE}
O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2596880) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{31C0F635-15AD-4AA3-A3C6-B542B403D0EE}
O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2597162) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3069CE04-082C-4669-9BA1-E6AA66330C1F}
O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{2B3C041A-A7F2-4A24-968D-4BEB6A123D15}
O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2598041) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{ABB5F56F-FC55-4C7E-9622-B8A1E670BAFC}
O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB2597161) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{B4C12F08-B0EF-4CC4-AD5F-381DD62BF640}
O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edi - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{AEA16A27-0B97-4670-818F-A98D06EC0A6F}
O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edi - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0EF0D4FB-BB23-4515-AAEA-1240AC2DA525}
O42 - Logiciel: Security Update for Microsoft Office Publisher 2007 (KB2596705) 32-Bit Edit - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5A8732F0-C20F-4A9B-A2A9-66FE7A586C35}
O42 - Logiciel: Security Update for Microsoft Office Word 2007 (KB2596917) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{075C2272-0881-46D3-B3A5-1D83D6940270}
O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1
O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}
O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
O42 - Logiciel: Update for Microsoft Office 2007 (KB2508958) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}
O42 - Logiciel: Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2598290) 32-B - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{FF2E1543-EDB3-4B96-989C-A97DA428D88E}
O42 - Logiciel: VLC media player 2.0.1 - (.VideoLAN.) [HKLM] -- VLC media player
O42 - Logiciel: Voissa Anonymo - (.Cedrat Net.) [HKLM] -- Voissa Anonymo 2_is1
O42 - Logiciel: WinFlash - (.Pas de propriétaire.) [HKLM] -- {DE10AB76-4756-4913-BE25-55D1C1051F9A}
O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {B3B487E7-6171-4376-9074-B28082CEB504}
O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3175E049-F9A9-4A3D-8F19-AC9FB04514D1}
O42 - Logiciel: Windows Live Contrôle parental - (.Microsoft Corporation.) [HKLM] -- {9FF9FDF7-F84A-4F99-B4BB-066B6F95F33D}
O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM] -- {76810709-A7D3-468D-9167-A1780C1E766C}
O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {5DD76286-9BE7-4894-A990-E905E91AC818}
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {445B183D-F4F1-45C8-B9DB-F11355CA657B}
O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM] -- {230B83A5-7D88-4B95-B71E-F44C0C78B002}
O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {4634B21A-CC07-4396-890C-2B8168661FEA}
O42 - Logiciel: Wireless Console 2 - (.ATK.) [HKLM] -- {83F73CB1-7705-49D1-9852-84D839CA2A45}
O42 - Logiciel: XBMC - (.Team XBMC.) [HKCU] -- XBMC
O42 - Logiciel: XnView 1.98.7 - (.Gougelet Pierre-e.) [HKLM] -- XnView_is1
O42 - Logiciel: avast! Free Antivirus v7.0.1426.0 - (.AVAST Software.) [HKLM] -- avast
O42 - Logiciel: µTorrent - (.Pas de propriétaire.) [HKLM] -- uTorrent

---\\ HKCU & HKLM Software Keys
[HKCU\Software\7-Zip]
[HKCU\Software\ASUS]
[HKCU\Software\ATK0100]
[HKCU\Software\AVAST Software]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\AskToolbarInfo]
[HKCU\Software\AppDataLow\Software\AskToolbar]
[HKCU\Software\AppDataLow\Software\ConduitSearchScopes]
[HKCU\Software\AppDataLow\Software\Conduit]
[HKCU\Software\AppDataLow\Software\Freecorder]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software\PriceGong]
[HKCU\Software\AppDataLow\Software\Smartbar]
[HKCU\Software\AppDataLow\Software\uTorrentBar_FR]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow\Toolbar]
[HKCU\Software\AppDataLow]
[HKCU\Software\ApplianTechnologies]
[HKCU\Software\Ask&Record]
[HKCU\Software\Ask.com]
[HKCU\Software\Auslogics]
[HKCU\Software\Belarc]
[HKCU\Software\BitComet]
[HKCU\Software\BitTorrent]
[HKCU\Software\Canneverbe Limited]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Conduit]
[HKCU\Software\DT Soft]
[HKCU\Software\GlarySoft]
[HKCU\Software\Google]
[HKCU\Software\IGearSettings]
[HKCU\Software\IM Providers]
[HKCU\Software\ITConcepts]
[HKCU\Software\IZSoftware]
[HKCU\Software\Lavasoft]
[HKCU\Software\Macromedia]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\Realtek]
[HKCU\Software\Safer Networking Limited]
[HKCU\Software\Sysinternals]
[HKCU\Software\cybelsoft]
[HKCU\Software\eMule]
[HKCU\Software\g3n-h@ckm@n]
[HKCU\Software\???????????????]
[HKLM\Software\AGEIA Technologies]
[HKLM\Software\ASPG]
[HKLM\Software\ASUS]
[HKLM\Software\ATK0100]
[HKLM\Software\AVAST Software]
[HKLM\Software\Adobe]
[HKLM\Software\AsLdr]
[HKLM\Software\Atheros]
[HKLM\Software\Authentec]
[HKLM\Software\Belarc]
[HKLM\Software\Bunndle]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Conduit]
[HKLM\Software\DT Soft]
[HKLM\Software\DeviceVM]
[HKLM\Software\Dolby]
[HKLM\Software\Freecorder]
[HKLM\Software\GlarySoft]
[HKLM\Software\Google]
[HKLM\Software\IObit]
[HKLM\Software\ITConcepts]
[HKLM\Software\Infineon]
[HKLM\Software\Intel]
[HKLM\Software\Lavasoft]
[HKLM\Software\Macromedia]
[HKLM\Software\Motorola]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\ODBC]
[HKLM\Software\PeaZip]
[HKLM\Software\PeaZip_additional]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\RTLSetup]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Safer Networking Limited]
[HKLM\Software\Siemens]
[HKLM\Software\SmartPCFixer]
[HKLM\Software\Sonic]
[HKLM\Software\Trad-FR]
[HKLM\Software\TrendMicro]
[HKLM\Software\VideoLAN]
[HKLM\Software\Volatile]
[HKLM\Software\WOW6432Node]
[HKLM\Software\XnView]
[HKLM\Software\cybelsoft]
[HKLM\Software\mozilla.org]
[HKLM\Software\neOceane]
[HKLM\Software\uTorrentBar_FR]
~ Scan Softwares in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 09/05/2012 - 20:38:39 - [3,348] ----D C:\Program Files\7-Zip
O43 - CFD: 09/05/2012 - 20:41:28 - [232,755] ----D C:\Program Files\Adobe
O43 - CFD: 08/05/2012 - 22:28:38 - [117,550] ----D C:\Program Files\AGEIA Technologies
O43 - CFD: 09/05/2012 - 21:13:05 - [1,696] ----D C:\Program Files\Ask.com
O43 - CFD: 08/05/2012 - 03:52:11 - [91,111] ----D C:\Program Files\ASUS
O43 - CFD: 08/05/2012 - 03:36:32 - [18,243] ----D C:\Program Files\ASUS Security Center
O43 - CFD: 08/05/2012 - 03:53:26 - [9,837] ----D C:\Program Files\Atheros
O43 - CFD: 08/05/2012 - 03:23:17 - [0,443] ----D C:\Program Files\ATKGFNEX
O43 - CFD: 09/05/2012 - 20:46:17 - [9,129] ----D C:\Program Files\Auslogics
O43 - CFD: 12/05/2012 - 17:16:27 - [308,763] ----D C:\Program Files\AVAST Software
O43 - CFD: 09/05/2012 - 20:47:56 - [5,242] ----D C:\Program Files\Belarc
O43 - CFD: 29/05/2012 - 23:45:24 - [4,805] ----D C:\Program Files\CCleaner
O43 - CFD: 09/05/2012 - 20:54:09 - [12,221] ----D C:\Program Files\CDBurnerXP
O43 - CFD: 08/05/2012 - 03:53:16 - [6,262] ----D C:\Program Files\Cisco
O43 - CFD: 08/06/2012 - 07:49:17 - [570,304] ----D C:\Program Files\Common Files
O43 - CFD: 12/05/2012 - 18:04:04 - [0,609] ----D C:\Program Files\Conduit
O43 - CFD: 01/06/2012 - 16:21:38 - [66,291] ----D C:\Program Files\CustoPackTools
O43 - CFD: 09/05/2012 - 20:58:26 - [25,686] ----D C:\Program Files\DAEMON Tools Lite
O43 - CFD: 08/05/2012 - 03:27:51 - [35,322] ----D C:\Program Files\Dolby
O43 - CFD: 08/05/2012 - 04:05:38 - [10,100] ----D C:\Program Files\Fingerprint Sensor
O43 - CFD: 13/05/2012 - 09:53:21 - [10,323] ----D C:\Program Files\F
0
aldebaran95 Messages postés 265 Statut Membre 13
 
J'ai aussi trouvé un rapport MBR,je ne sais pas ce que c'est ,je le poste quand même:

MBRCheck, version 1.2.3
(c) 2010, AD

Command-line:
Windows Version: Windows Vista Home Premium Edition
Windows Information: Service Pack 2 (build 6002), 32-bit
Base Board Manufacturer: ASUSTeK Computer Inc.
BIOS Manufacturer: American Megatrends Inc.
System Manufacturer: ASUSTeK Computer Inc.
System Product Name: M70Vn
Logical Drives Mask: 0x000000fc

Kernel Drivers (total 126):
0x82E44000 \SystemRoot\system32\ntkrnlpa.exe
0x82E11000 \SystemRoot\system32\hal.dll
0x80401000 \SystemRoot\system32\kdcom.dll
0x80408000 \SystemRoot\system32\mcupdate_GenuineIntel.dll
0x80478000 \SystemRoot\system32\PSHED.dll
0x80489000 \SystemRoot\system32\BOOTVID.dll
0x80491000 \SystemRoot\system32\CLFS.SYS
0x804D2000 \SystemRoot\system32\CI.dll
0x80601000 \SystemRoot\system32\drivers\Wdf01000.sys
0x80672000 \SystemRoot\system32\drivers\WDFLDR.SYS
0x80680000 \SystemRoot\system32\drivers\acpi.sys
0x806C6000 \SystemRoot\system32\drivers\WMILIB.SYS
0x806CF000 \SystemRoot\system32\drivers\msisadrv.sys
0x806D7000 \SystemRoot\system32\drivers\pci.sys
0x806FE000 \SystemRoot\System32\drivers\partmgr.sys
0x8070E000 \SystemRoot\system32\DRIVERS\compbatt.sys
0x80711000 \SystemRoot\system32\DRIVERS\BATTC.SYS
0x8071B000 \SystemRoot\system32\drivers\volmgr.sys
0x8072A000 \SystemRoot\System32\drivers\volmgrx.sys
0x80774000 \SystemRoot\System32\drivers\mountmgr.sys
0x8B00B000 \SystemRoot\system32\DRIVERS\iaStor.sys
0x8B2C0000 \SystemRoot\system32\drivers\atapi.sys
0x8B2C8000 \SystemRoot\system32\drivers\ataport.SYS
0x8B2E6000 \SystemRoot\system32\drivers\msahci.sys
0x8B2F0000 \SystemRoot\system32\drivers\PCIIDEX.SYS
0x8B2FE000 \SystemRoot\system32\drivers\fltmgr.sys
0x8B330000 \SystemRoot\system32\drivers\fileinfo.sys
0x8B340000 \SystemRoot\System32\Drivers\AsDsm.sys
0x8B34A000 \SystemRoot\system32\DRIVERS\Lbd.sys
0x8B359000 \SystemRoot\system32\DRIVERS\lullaby.sys
0x8B361000 \SystemRoot\System32\Drivers\ksecdd.sys
0x8B400000 \SystemRoot\system32\drivers\ndis.sys
0x8B50B000 \SystemRoot\system32\drivers\msrpc.sys
0x8B536000 \SystemRoot\system32\drivers\NETIO.SYS
0x8B60E000 \SystemRoot\System32\drivers\tcpip.sys
0x8B6F8000 \SystemRoot\System32\drivers\fwpkclnt.sys
0x8B802000 \SystemRoot\System32\Drivers\Ntfs.sys
0x8B912000 \SystemRoot\system32\drivers\volsnap.sys
0x8B953000 \SystemRoot\System32\Drivers\mup.sys
0x8B962000 \SystemRoot\System32\drivers\ecache.sys
0x8B989000 \SystemRoot\system32\drivers\disk.sys
0x8B99A000 \SystemRoot\system32\drivers\CLASSPNP.SYS
0x8B9BB000 \SystemRoot\system32\drivers\crcdisk.sys
0x8F6C1000 \SystemRoot\system32\DRIVERS\tunnel.sys
0x8F6CC000 \SystemRoot\system32\DRIVERS\tunmp.sys
0x8F6D5000 \SystemRoot\system32\DRIVERS\usbuhci.sys
0x8F6E0000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
0x8F71E000 \SystemRoot\system32\DRIVERS\usbehci.sys
0x8F72D000 \SystemRoot\system32\DRIVERS\HDAudBus.sys
0x8F807000 \SystemRoot\system32\DRIVERS\NETwNv32.sys
0x8FF3F000 \SystemRoot\system32\DRIVERS\Rtlh86.sys
0x8FF99000 \SystemRoot\system32\DRIVERS\ohci1394.sys
0x8FFA9000 \SystemRoot\system32\DRIVERS\1394BUS.SYS
0x8FFB7000 \SystemRoot\system32\DRIVERS\rimmptsk.sys
0x8FFC8000 \SystemRoot\system32\DRIVERS\rimsptsk.sys
0x8B713000 \SystemRoot\system32\DRIVERS\rixdptsk.sys
0x8FFDC000 \SystemRoot\system32\DRIVERS\i8042prt.sys
0x8FFEF000 \SystemRoot\system32\DRIVERS\kbfiltr.sys
0x8F7BA000 \SystemRoot\system32\DRIVERS\kbdclass.sys
0x8F7C5000 \SystemRoot\system32\DRIVERS\mouclass.sys
0x8B765000 \SystemRoot\system32\DRIVERS\itecir.sys
0x8F7D0000 \SystemRoot\system32\DRIVERS\cdrom.sys
0x8FFF7000 \SystemRoot\system32\DRIVERS\ATKACPI.sys
0x8B9D1000 \SystemRoot\system32\DRIVERS\msiscsi.sys
0x8B7BD000 \SystemRoot\system32\DRIVERS\storport.sys
0x8F7E8000 \SystemRoot\system32\DRIVERS\TDI.SYS
0x8B571000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
0x8F7F3000 \SystemRoot\system32\DRIVERS\ndistapi.sys
0x8B588000 \SystemRoot\system32\DRIVERS\ndiswan.sys
0x8B5AB000 \SystemRoot\system32\DRIVERS\raspppoe.sys
0x8B5BA000 \SystemRoot\system32\DRIVERS\raspptp.sys
0x8B5CE000 \SystemRoot\system32\DRIVERS\rassstp.sys
0x8B5E3000 \SystemRoot\system32\DRIVERS\termdd.sys
0x8F800000 \SystemRoot\system32\DRIVERS\swenum.sys
0x8B3D3000 \SystemRoot\system32\DRIVERS\ks.sys
0x8F6B6000 \SystemRoot\system32\DRIVERS\mssmbios.sys
0x80784000 \SystemRoot\system32\DRIVERS\dtsoftbus01.sys
0x8B600000 \SystemRoot\system32\DRIVERS\umbus.sys
0x807C4000 \SystemRoot\system32\DRIVERS\usbhub.sys
0x805B2000 \SystemRoot\System32\Drivers\NDProxy.SYS
0x8B5F3000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
0x8B94B000 \SystemRoot\System32\Drivers\Null.SYS
0x8B000000 \SystemRoot\System32\Drivers\Beep.SYS
0x805C3000 \SystemRoot\System32\drivers\vga.sys
0x805CF000 \SystemRoot\System32\drivers\VIDEOPRT.SYS
0x805F0000 \SystemRoot\System32\drivers\watchdog.sys
0x92602000 \SystemRoot\system32\drivers\rdpencdd.sys
0x9260A000 \SystemRoot\System32\Drivers\Msfs.SYS
0x92615000 \SystemRoot\System32\Drivers\Npfs.SYS
0x92623000 \SystemRoot\System32\DRIVERS\rasacd.sys
0x9262C000 \SystemRoot\system32\DRIVERS\tdx.sys
0x9264E000 \SystemRoot\system32\DRIVERS\smb.sys
0x92662000 \SystemRoot\system32\DRIVERS\usbccgp.sys
0x92679000 \SystemRoot\system32\DRIVERS\USBD.SYS
0x9267B000 \SystemRoot\system32\drivers\afd.sys
0x926C3000 \SystemRoot\System32\Drivers\AswRdr.SYS
0x926CA000 \SystemRoot\System32\DRIVERS\netbt.sys
0x926FC000 \SystemRoot\system32\DRIVERS\pacer.sys
0x92712000 \SystemRoot\system32\DRIVERS\netbios.sys
0x92720000 \SystemRoot\system32\DRIVERS\rdbss.sys
0x9275C000 \SystemRoot\system32\drivers\nsiproxy.sys
0x92766000 \SystemRoot\System32\Drivers\dfsc.sys
0x9277D000 \SystemRoot\system32\DRIVERS\dc3d.sys
0x92787000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
0x9278E000 \SystemRoot\system32\DRIVERS\hidusb.sys
0x92797000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
0x927A7000 \SystemRoot\system32\DRIVERS\kbdhid.sys
0x927B0000 \SystemRoot\system32\DRIVERS\mouhid.sys
0x927B8000 \SystemRoot\system32\DRIVERS\point32.sys
0x927C1000 \SystemRoot\System32\Drivers\crashdmp.sys
0x8F400000 \SystemRoot\System32\Drivers\dump_iaStor.sys
0x81440000 \SystemRoot\System32\win32k.sys
0x927CE000 \SystemRoot\System32\drivers\Dxapi.sys
0x81650000 \SystemRoot\System32\drivers\dxg.sys
0x81680000 \SystemRoot\System32\TSDDD.dll
0x81700000 \SystemRoot\System32\framebuf.dll
0x81710000 \SystemRoot\System32\ATMFD.DLL
0x9AA06000 \SystemRoot\system32\DRIVERS\nwifi.sys
0x9AA30000 \SystemRoot\system32\DRIVERS\ndisuio.sys
0x9AA3A000 \SystemRoot\system32\DRIVERS\bowser.sys
0x9AA53000 \SystemRoot\System32\drivers\mpsdrv.sys
0x9AA68000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
0x9AA87000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys
0x9AAC0000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys
0x9AAD8000 \SystemRoot\system32\DRIVERS\cdfs.sys
0x772E0000 \Windows\System32\ntdll.dll

Processes (total 28):
0 System Idle Process
4 System
424 C:\Windows\System32\smss.exe
492 csrss.exe
528 csrss.exe
536 C:\Windows\System32\wininit.exe
580 C:\Windows\System32\winlogon.exe
604 C:\Windows\System32\services.exe
620 C:\Windows\System32\lsass.exe
628 C:\Windows\System32\lsm.exe
772 C:\Windows\System32\svchost.exe
828 C:\Windows\System32\svchost.exe
952 C:\Windows\System32\svchost.exe
976 C:\Windows\System32\svchost.exe
1008 C:\Windows\System32\svchost.exe
1064 C:\Windows\System32\svchost.exe
1080 C:\Windows\System32\svchost.exe
1252 C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
1276 C:\Windows\System32\svchost.exe
1384 C:\Windows\System32\svchost.exe
1564 unsecapp.exe
1648 WmiPrvSE.exe
1904 C:\Program Files\Lavasoft\Ad-Aware\AWSC.exe
244 C:\Windows\explorer.exe
1608 C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
1592 C:\Pre_Scan\MBRCheck.exe
2008 C:\Pre_Scan\MBRCheck.exe
1952 C:\Pre_Scan\MBRCheck.exe

\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000'00100000 (NTFS)
\\.\D: --> \\.\PhysicalDrive1 at offset 0x00000000'00100000 (NTFS)
\\.\E: --> \\.\PhysicalDrive0 at offset 0x0000002c'b6d00000 (NTFS)

PhysicalDrive0 Model Number: ST9320320AS, Rev: 0303
PhysicalDrive1 Model Number: ST9320320AS, Rev: 0303

Size Device Name MBR Status
--------------------------------------------
298 GB \\.\PhysicalDrive0 Windows 2008 MBR code detected
SHA1: 8DF43F2BDE2D9451948FA14B5279969C777A7979
298 GB \\.\PhysicalDrive1 Unknown MBR code
SHA1: 16FACB29D75458833E397367B1DA17929157C2B3

Found non-standard or infected MBR.
Enter 'Y' and hit ENTER for more options, or 'N' to exit:
Options:
[1] Dump the MBR of a physical disk to file.
[2] Restore the MBR of a physical disk with a standard boot code.
[3] Exit.

Enter your choice:
0
aldebaran95 Messages postés 265 Statut Membre 13
 
Et j'ai trouvé le rapport pre-scan,il était planqué dans mon C/: (désolé pour la masse de travail Jacques).

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Pre_Scan | 2.607 ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

¤¤¤¤¤ XP | Vista | 7 | 8 - 32/64 bits ¤¤¤¤¤

~ Mis à jour le 07/06/2012 | 18.40 par g3n-h@ckm@n
~ Informations Evolution : https://gen-hackman.kanak.fr/
~ Informations sur les switchs Pre_Script : https://gen-hackman.kanak.fr/
~ Feedback Pre_scan : https://gen-hackman.kanak.fr/#505
~ Merci à Slyk & Saachaa pour leur apport à l'évolution de l'outil

~ Utilisateur : OLIVE (Administrateurs) | SID = S-1-5-21-1959498384-218811378-2899222492-1000
~ Ordinateur : PC-DE-OLIVE

~ Système d'exploitation : Windows Vista (TM) Home Premium (32 bits) HomePremium Service Pack 2
~ Enregistré sous : OLIVE
~ Processeur : Intel(R) Core(TM)2 Duo CPU P8600 @ 2.40GHz
~ Identification : x86 Family 6 Model 23 Stepping 6

Pare-feu windows : Actif
Windows Defender : Inactif

~ Mémoire RAM = Total (KB) : 3143850 | Used (%) : 17 | Free (KB) : 2598300
~ Pagefile = Total (KB) : 6491500 | Free (KB) : 6211140
~ Virtuelle = Total (KB) : 2097020 | Free (KB) : 1957650

¤¤¤¤¤¤¤¤¤¤ | Scripts de boot

¤¤¤¤¤¤¤¤¤¤ | Drives

c:\ -> [Fixed] | [VistaOS] | Total : 183150 Mo | Free : 152940 Mo -> NTFS
d:\ -> [Fixed] | [DISQUE 1] | Total : 305240 Mo | Free : 9560 Mo -> NTFS
e:\ -> [Fixed] | [DATA] | Total : 122090 Mo | Free : 46000 Mo -> NTFS

Scan : 07:44:18 | 08/06/2012

¤¤¤¤¤¤¤¤¤¤ | Navigateurs

Internet Explorer : 9.0.8112.16421
Mozilla Firefox : 13.0 (fr)

¤ Par défaut :

[HKCR\http | command] : "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1"

¤¤¤¤¤¤¤¤¤¤ | Frameworks

~ [02/11/2006 13:18:35] - C:\Windows\Microsoft.net\Framework\v1.0.3705
~ [02/11/2006 13:18:35] - C:\Windows\Microsoft.net\Framework\v1.1.4322
~ [02/11/2006 13:18:35] - C:\Windows\Microsoft.net\Framework\v1.0.3705
~ [02/11/2006 13:18:35] - C:\Windows\Microsoft.net\Framework\v1.1.4322
~ [02/11/2006 13:18:35] - C:\Windows\Microsoft.net\Framework\v2.0.50727
~ [02/11/2006 14:37:35] - C:\Windows\Microsoft.net\Framework\v3.0
~ [08/05/2012 05:48:03] - C:\Windows\Microsoft.net\Framework\v3.5

¤¤¤¤¤¤¤¤¤¤ | Windows Updates

Dernière(s) détection(s) : 2012-06-06 18:52:08
Dernier(s) téléchargement(s) : 2012-06-04 08:51:37
Dernière(s) installation(s) : 2012-06-04 18:56:46

¤¤¤¤¤¤¤¤¤¤ | Sessions | Profiles | Directories

~ [HKLM | ProfileList\S-1-5-21-1959498384-218811378-2899222492-1000] : ProfileImagePath -> C:\Users\OLIVE
~ [HKLM | ProfileList\S-1-5-21-1959498384-218811378-2899222492-1000] : RefCount -> 1
~ [HKLM | ProfileList\S-1-5-21-1959498384-218811378-2899222492-1000] : State -> 256

~ C:\Windows\system32\config\systemprofile
~ C:\Windows\ServiceProfiles\LocalService
~ C:\Windows\ServiceProfiles\NetworkService
~ C:\Users\OLIVE

¤¤¤¤¤¤¤¤¤¤ | Contrôle MD5

[MD5.D07D4C3038F3578FFCE1C0237F2A1253] - [12/05/2012 14:24:20] - (.© Microsoft Corporation. Tous droits réservés. - Explorateur Windows.) - [2858 Ko] - (6.0.6002.18005) - C:\Windows\explorer.exe
[MD5.37440D09DEAE0B672A04DCCF7ABF06BE] - [08/05/2012 05:17:43] - (.© Microsoft Corporation. All rights reserved. - Windows Explorer.) - [2855 Ko] - (6.0.6000.16771) - C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_4f83bb287ccdb7e3\explorer.exe
[MD5.E7156B0B74762D9DE0E66BDCDE06E5FB] - [08/05/2012 05:17:43] - (.© Microsoft Corporation. All rights reserved. - Windows Explorer.) - [2855 Ko] - (6.0.6000.20947) - C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_5033cb5995cd990b\explorer.exe
[MD5.FFA764631CB70A30065C12EF8E174F9F] - [21/01/2008 04:24:24] - (.© Microsoft Corporation. All rights reserved. - Windows Explorer.) - [2858.5 Ko] - (6.0.6001.18000) - C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_51b4a71279bc6ebf\explorer.exe
[MD5.4F554999D7D5F05DAAEBBA7B5BA1089D] - [08/05/2012 05:17:43] - (.© Microsoft Corporation. All rights reserved. - Windows Explorer.) - [2858.5 Ko] - (6.0.6001.18164) - C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_5177ca9879e978e8\explorer.exe
[MD5.50BA5850147410CDE89C523AD3BC606E] - [08/05/2012 05:17:43] - (.© Microsoft Corporation. All rights reserved. - Windows Explorer.) - [2859 Ko] - (6.0.6001.22298) - C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_51e4f8c7931bd1e1\explorer.exe
[MD5.D07D4C3038F3578FFCE1C0237F2A1253] - [12/05/2012 14:24:20] - (.© Microsoft Corporation. All rights reserved. - Windows Explorer.) - [2858 Ko] - (6.0.6002.18005) - C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_53a0201e76de3a0b\explorer.exe
[MD5.ABCA209EBA02CB59233614DB83B4F50D] - [21/01/2008 04:24:54] - (.© Microsoft Corporation. Tous droits réservés. - Processus d'exécuttion client-serveur.) - [6 Ko] - (6.0.6001.18000) - C:\Windows\System32\csrss.exe
[MD5.ABCA209EBA02CB59233614DB83B4F50D] - [21/01/2008 04:24:54] - (.© Microsoft Corporation. All rights reserved. - Client Server Runtime Process.) - [6 Ko] - (6.0.6001.18000) - C:\Windows\winsxs\x86_microsoft-windows-csrss_31bf3856ad364e35_6.0.6001.18000_none_58e3e3d7e415ae4c\csrss.exe ->
[MD5.D4E6D91C1349B7BFB3599A6ADA56851B] - [12/05/2012 14:24:24] - (.© Microsoft Corporation. Tous droits réservés. - Applications Services et Contrôleur.) - [273 Ko] - (6.0.6002.18005) - C:\Windows\System32\services.exe
[MD5.2B336AB6286D6C81FA02CBAB914E3C6C] - [21/01/2008 04:24:48] - (.© Microsoft Corporation. All rights reserved. - Services and Controller app.) - [272.5 Ko] - (6.0.6001.18000) - C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6001.18000_none_cf5fc067cd49010a\services.exe
[MD5.D4E6D91C1349B7BFB3599A6ADA56851B] - [12/05/2012 14:24:24] - (.© Microsoft Corporation. All rights reserved. - Services and Controller app.) - [273 Ko] - (6.0.6002.18005) - C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6002.18005_none_d14b3973ca6acc56\services.exe
[MD5.98AF15A94CD6AC37248E72E5FE789B35] - [12/05/2012 14:23:11] - (.© Microsoft Corporation. All rights reserved. - Windows Session Manager.) - [62.5 Ko] - (6.0.6002.18005) - C:\Windows\System32\smss.exe
[MD5.6701DDAF68BEDE6BBEEA9D514D73A35B] - [21/01/2008 04:23:50] - (.© Microsoft Corporation. All rights reserved. - Windows Session Manager.) - [62.5 Ko] - (6.0.6001.18000) - C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.0.6001.18000_none_ac3aa7fd19319fba\smss.exe
[MD5.98AF15A94CD6AC37248E72E5FE789B35] - [12/05/2012 14:23:11] - (.© Microsoft Corporation. All rights reserved. - Windows Session Manager.) - [62.5 Ko] - (6.0.6002.18005) - C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.0.6002.18005_none_ae26210916536b06\smss.exe
[MD5.0E135526E9785D085BCD9AEDE6FBCBF9] - [21/01/2008 04:24:49] - (.© Microsoft Corporation. Tous droits réservés. - Application d'ouverture de session Userinit.) - [24.5 Ko] - (6.0.6001.18000) - C:\Windows\System32\userinit.exe
[MD5.0E135526E9785D085BCD9AEDE6FBCBF9] - [21/01/2008 04:24:49] - (.© Microsoft Corporation. All rights reserved. - Userinit Logon Application.) - [24.5 Ko] - (6.0.6001.18000) - C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_dc28ba15d1aff80b\userinit.exe
[MD5.101BA3EA053480BB5D957EF37C06B5ED] - [21/01/2008 04:23:42] - (.© Microsoft Corporation. Tous droits réservés. - Application de démarrage de Windows.) - [94.5 Ko] - (6.0.6001.18000) - C:\Windows\System32\wininit.exe
[MD5.101BA3EA053480BB5D957EF37C06B5ED] - [21/01/2008 04:23:42] - (.© Microsoft Corporation. All rights reserved. - Windows Start-Up Application.) - [94.5 Ko] - (6.0.6001.18000) - C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_30f2b8cf0450a6a2\wininit.exe
[MD5.898E7C06A350D4A1A64A9EA264D55452] - [12/05/2012 14:23:12] - (.© Microsoft Corporation. Tous droits réservés. - Application d'ouverture de session Windows.) - [307 Ko] - (6.0.6002.18005) - C:\Windows\System32\winlogon.exe
[MD5.C2610B6BDBEFC053BBDAB4F1B965CB24] - [21/01/2008 04:24:49] - (.© Microsoft Corporation. All rights reserved. - Windows Logon Application.) - [307.5 Ko] - (6.0.6001.18000) - C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe
[MD5.898E7C06A350D4A1A64A9EA264D55452] - [12/05/2012 14:23:12] - (.© Microsoft Corporation. All rights reserved. - Windows Logon Application.) - [307 Ko] - (6.0.6002.18005) - C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe
[MD5.3911B972B55FEA0478476B2E777B29FA] - [08/05/2012 05:21:15] - (.© Microsoft Corporation. Tous droits réservés. - Ancillary Function Driver for WinSock.) - [267 Ko] - (6.0.6002.18457) - C:\Windows\System32\drivers\afd.sys
[MD5.763E172A55177E478CB419F88FD0BA03] - [21/01/2008 04:24:17] - (.© Microsoft Corporation. All rights reserved. - Ancillary Function Driver for WinSock.) - [267.5 Ko] - (6.0.6001.18000) - C:\Windows\winsxs\x86_microsoft-windows-winsock-core_31bf3856ad364e35_6.0.6001.18000_none_d7e842925e6d1f50\afd.sys
[MD5.48EB99503533C27AC6135648E5474457] - [08/05/2012 05:21:15] - (.© Microsoft Corporation. All rights reserved. - Ancillary Function Driver for WinSock.) - [267 Ko] - (6.0.6001.18639) - C:\Windows\winsxs\x86_microsoft-windows-winsock-core_31bf3856ad364e35_6.0.6001.18639_none_d7d0e0cc5e7d461c\afd.sys
[MD5.C8AF25017CECB75906A571AC70D2D306] - [08/05/2012 05:21:15] - (.© Microsoft Corporation. All rights reserved. - Ancillary Function Driver for WinSock.) - [267.5 Ko] - (6.0.6001.22905) - C:\Windows\winsxs\x86_microsoft-windows-winsock-core_31bf3856ad364e35_6.0.6001.22905_none_d876efff77862705\afd.sys
[MD5.A201207363AA900ABF1A388468688570] - [12/05/2012 14:24:07] - (.© Microsoft Corporation. All rights reserved. - Ancillary Function Driver for WinSock.) - [267.5 Ko] - (6.0.6002.18005) - C:\Windows\winsxs\x86_microsoft-windows-winsock-core_31bf3856ad364e35_6.0.6002.18005_none_d9d3bb9e5b8eea9c\afd.sys
[MD5.3911B972B55FEA0478476B2E777B29FA] - [08/05/2012 05:21:15] - (.© Microsoft Corporation. All rights reserved. - Ancillary Function Driver for WinSock.) - [267 Ko] - (6.0.6002.18457) - C:\Windows\winsxs\x86_microsoft-windows-winsock-core_31bf3856ad364e35_6.0.6002.18457_none_d99fb42e5bb59d9b\afd.sys
[MD5.70EE0FC7A0F384DBD929A01384AEEB4B] - [08/05/2012 05:21:15] - (.© Microsoft Corporation. All rights reserved. - Ancillary Function Driver for WinSock.) - [267.5 Ko] - (6.0.6002.22629) - C:\Windows\winsxs\x86_microsoft-windows-winsock-core_31bf3856ad364e35_6.0.6002.22629_none_da4bc33774b91967\afd.sys
[MD5.1F05B78AB91C9075565A9D8A4B880BC4] - [12/05/2012 14:24:11] - (.© Microsoft Corporation. All rights reserved. - ATAPI IDE Miniport Driver.) - [19.48 Ko] - (6.0.6002.18005) - C:\Windows\System32\drivers\atapi.sys
[MD5.2D9C903DC76A66813D350A562DE40ED9] - [21/01/2008 04:23:00] - (.© Microsoft Corporation. All rights reserved. - ATAPI IDE Miniport Driver.) - [21.05 Ko] - (6.0.6001.18000) - C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys
[MD5.92210921EEFC081693F649C3631DEEC2] - [08/05/2012 11:34:20] - (.© Microsoft Corporation. All rights reserved. - ATAPI IDE Miniport Driver.) - [21.05 Ko] - (6.0.6001.18023) - C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18023_none_dd25892021975283\atapi.sys
[MD5.76D70915EB81608DC6ACA87887FAB38F] - [08/05/2012 11:34:20] - (.© Microsoft Corporation. All rights reserved. - ATAPI IDE Miniport Driver.) - [21.05 Ko] - (6.0.6001.22120) - C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.22120_none_ddac250d3ab7a648\atapi.sys
[MD5.1F05B78AB91C9075565A9D8A4B880BC4] - [12/05/2012 14:24:11] - (.© Microsoft Corporation. All rights reserved. - ATAPI IDE Miniport Driver.) - [19.48 Ko] - (6.0.6002.18005) - C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys
[MD5.6B4BFFB9BECD728097024276430DB314] - [12/05/2012 14:24:05] - (.© Microsoft Corporation. All rights reserved. - SCSI CD-ROM Driver.) - [65.5 Ko] - (6.0.6002.18005) - C:\Windows\System32\drivers\cdrom.sys
[MD5.1EC25CEA0DE6AC4718BF89F9E1778B57] - [21/01/2008 04:23:02] - (.© Microsoft Corporation. All rights reserved. - SCSI CD-ROM Driver.) - [65.5 Ko] - (6.0.6001.18000) - C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.0.6001.18000_none_5fa95be2a3c76a4a\cdrom.sys
[MD5.6B4BFFB9BECD728097024276430DB314] - [12/05/2012 14:24:05] - (.© Microsoft Corporation. All rights reserved. - SCSI CD-ROM Driver.) - [65.5 Ko] - (6.0.6002.18005) - C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.0.6002.18005_none_6194d4eea0e93596\cdrom.sys
[MD5.ECD64230A59CBD93C85F1CD1CAB9F3F6] - [12/05/2012 14:23:57] - (.© Microsoft Corporation. All rights reserved. - MBT Transport driver.) - [181.5 Ko] - (6.0.6002.18005) - C:\Windows\System32\drivers\netbt.sys
[MD5.7C5FEE5B1C5728507CD96FB4A13E7A02] - [21/01/2008 04:24:59] - (.© Microsoft Corporation. All rights reserved. - MBT Transport driver.) - [180 Ko] - (6.0.6001.18000) - C:\Windows\winsxs\x86_microsoft-windows-netbt_31bf3856ad364e35_6.0.6001.18000_none_6064c861f7442765\netbt.sys
[MD5.ECD64230A59CBD93C85F1CD1CAB9F3F6] - [12/05/2012 14:23:57] - (.© Microsoft Corporation. All rights reserved. - MBT Transport driver.) - [181.5 Ko] - (6.0.6002.18005) - C:\Windows\winsxs\x86_microsoft-windows-netbt_31bf3856ad364e35_6.0.6002.18005_none_6250416df465f2b1\netbt.sys
[MD5.76B06EB8A01FC8624D699E7045303E54] - [12/05/2012 14:23:07] - (.© Microsoft Corporation. All rights reserved. - TDI Translation Driver.) - [70.5 Ko] - (6.0.6002.18005) - C:\Windows\System32\drivers\tdx.sys
[MD5.D09276B1FAB033CE1D40DCBDF303D10F] - [21/01/2008 04:24:53] - (.© Microsoft Corporation. All rights reserved. - TDI Translation Driver.) - [70 Ko] - (6.0.6001.18000) - C:\Windows\winsxs\x86_microsoft-windows-tdi-over-tcpip_31bf3856ad364e35_6.0.6001.18000_none_ea3dc84bdc15a8b7\tdx.sys
[MD5.76B06EB8A01FC8624D699E7045303E54] - [12/05/2012 14:23:07] - (.© Microsoft Corporation. All rights reserved. - TDI Translation Driver.) - [70.5 Ko] - (6.0.6002.18005) - C:\Windows\winsxs\x86_microsoft-windows-tdi-over-tcpip_31bf3856ad364e35_6.0.6002.18005_none_ec294157d9377403\tdx.sys
[MD5.147281C01FCB1DF9252DE2A10D5E7093] - [12/05/2012 14:23:13] - (.© Microsoft Corporation. Tous droits réservés. - Pilote de cliché instantané du volume.) - [220.98 Ko] - (6.0.6002.18005) - C:\Windows\System32\drivers\volsnap.sys
[MD5.D8B4A53DD2769F226B3EB374374987C9] - [21/01/2008 04:23:21] - (.© Microsoft Corporation. All rights reserved. - Volume Shadow Copy Driver.) - [222.55 Ko] - (6.0.6001.18000) - C:\Windows\winsxs\x86_volume.inf_31bf3856ad364e35_6.0.6001.18000_none_15b6b780fc14facd\volsnap.sys
[MD5.147281C01FCB1DF9252DE2A10D5E7093] - [12/05/2012 14:23:13] - (.© Microsoft Corporation. All rights reserved. - Volume Shadow Copy Driver.) - [220.98 Ko] - (6.0.6002.18005) - C:\Windows\winsxs\x86_volume.inf_31bf3856ad364e35_6.0.6002.18005_none_17a2308cf936c619\volsnap.sys

07:45:41

¤¤¤¤¤¤¤¤¤¤ | Processus

AAWService.exe (1232) -> Processus stoppé
explorer.exe (1812) -> Processus stoppé
AWSC.exe (1800) -> Processus stoppé
firefox.exe (1156) -> Processus stoppé
plugin-container.exe (1488) -> Processus stoppé
plugin-container.exe (1724) -> Processus stoppé

¤¤¤¤¤¤¤¤¤¤ | Processus en cours

Demarrage : MSE

424 | C:\Windows\System32\smss.exe - SYSTEM - Normal - \SystemRoot\System32\smss.exe - 4
492 | C:\Windows\system32\csrss.exe - SYSTEM - Normal - C:\Windows\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,12288,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16 - 480
528 | C:\Windows\system32\csrss.exe - SYSTEM - Normal - C:\Windows\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,12288,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16 - 520
536 | C:\Windows\system32\wininit.exe - SYSTEM - High - wininit.exe - 480
580 | C:\Windows\system32\winlogon.exe - SYSTEM - High - winlogon.exe - 520
604 | C:\Windows\system32\services.exe - SYSTEM - Normal - C:\Windows\system32\services.exe - 536
624 | C:\Windows\system32\lsass.exe - SYSTEM - Normal - C:\Windows\system32\lsass.exe - 536
632 | C:\Windows\system32\lsm.exe - SYSTEM - Normal - C:\Windows\system32\lsm.exe - 536
776 | C:\Windows\system32\svchost.exe - SYSTEM - Normal - C:\Windows\system32\svchost.exe -k DcomLaunch - 604
832 | C:\Windows\system32\svchost.exe - SERVICE RÉSEAU - Normal - C:\Windows\system32\svchost.exe -k rpcss - 604
920 | C:\Windows\System32\svchost.exe - SERVICE LOCAL - Normal - C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted - 604
948 | C:\Windows\system32\svchost.exe - SYSTEM - Normal - C:\Windows\system32\svchost.exe -k netsvcs - 604
980 | C:\Windows\System32\svchost.exe - SYSTEM - Normal - C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted - 604
1032 | C:\Windows\system32\svchost.exe - SERVICE RÉSEAU - Normal - C:\Windows\system32\svchost.exe -k NetworkService - 604
1048 | C:\Windows\system32\svchost.exe - SERVICE LOCAL - Normal - C:\Windows\system32\svchost.exe -k LocalService - 604
1248 | C:\Windows\system32\svchost.exe - SERVICE LOCAL - Normal - C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork - 604
1348 | C:\Windows\system32\svchost.exe - SERVICE RÉSEAU - Normal - C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted - 604
1516 | C:\Windows\system32\wbem\unsecapp.exe - SYSTEM - Normal - C:\Windows\system32\wbem\unsecapp.exe -Embedding - 776
1612 | C:\Windows\system32\wbem\wmiprvse.exe - SYSTEM - Normal - C:\Windows\system32\wbem\wmiprvse.exe - 776
1280 | C:\Users\OLIVE\Downloads\winlogon.exe - OLIVE - Normal - "C:\Users\OLIVE\Downloads\winlogon.exe" - 1812
1780 | C:\Windows\system32\conime.exe - OLIVE - Normal - C:\Windows\system32\conime.exe - 1656
1480 | C:\Windows\system32\cmd.exe - OLIVE - Normal - C:\Windows\system32\cmd.exe /c %Homedrive%\Pre_Scan\Pv.exe -o"%i | %f - %u - %p - %l - %r">>%Homedrive%\Pre_Scan.txt - 1280
1700 | C:\Pre_Scan\Pv.exe - OLIVE - Normal - C:\Pre_Scan\Pv.exe -o"%i | %f - %u - %p - %l - %r" - 1480
996 | C:\Windows\system32\conime.exe - OLIVE - Normal - C:\Windows\system32\conime.exe - 1480

¤¤¤¤¤¤¤¤¤¤ | Winlogon

¤

[HKLM | Winlogon] | Shell : explorer.exe
[HKLM | Winlogon] | AutoRestartShell : 1 -> 0
[HKLM | Winlogon] | userinit : C:\Windows\system32\userinit.exe,
[HKLM | Winlogon] | PowerDownAfterShutdown : 0 -> 1
[HKLM | Winlogon] | System :
[HKLM | Winlogon] | VMApplet : rundll32 shell32,Control_RunDLL "sysdm.cpl"
[HKLM | Winlogon] | WinStationsDisabled : 0

¤¤¤¤¤¤¤¤¤¤ | Winlogon\Notify

¤¤¤¤¤¤¤¤¤¤ | Associations

[.exe] : exefile
[exefile | command] : "%1" %*
[.com] : comfile
[comfile | command] : "%1" %*
[.reg] : regfile
[regfile | command] : regedit.exe "%1"
[.scr] : scrfile
[scrfile | command] : "%1" /S
[.bat] : batfile
[batfile | command] : "%1" %*
[.cmd] : cmdfile
[cmdfile | command] : "%1" %*
[.pif] : piffile
[piffile | command] : "%1" %*
[.url] : InternetShortcut
[InternetShortcut | command] : "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l
[Application.Manifest | command] : rundll32.exe dfshim.dll,ShOpenVerbApplication %1
[Application.Reference | command] : rundll32.exe dfshim.dll,ShOpenVerbShortcut %1|%2
[Folder | command] : C:\Windows\Explorer.exe /separate,/idlist,%I,%L -> C:\Windows\explorer.exe

¤

[Firefox | Command] | @ : C:\Program Files\Mozilla Firefox\firefox.exe -> "C:\Program Files\Mozilla Firefox\Firefox.exe"
[Firefox - Safemode | Command] | @ : "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode
[IE | Command] | @ : C:\Program Files\Internet Explorer\iexplore.exe -> "C:\Program Files\Internet Explorer\iexplore.exe"
[Applications | IE | Command] | @ : "C:\Program Files\Internet Explorer\iexplore.exe" %1
[Chrome | Command] | @ : "C:\Program Files\Google\Chrome\Application\chrome.exe" -> "C:\Users\OLIVE\AppData\Local\Google\Chrome\Application\Chrome.exe"
[Assoc | Applications] | @ : http://go.microsoft.com/fwlink/?LinkId=57426&Ext=%s -> http://shell.windows.com/fileassoc/%04x/xml/redir.asp?Ext=%s

¤¤¤¤¤¤¤¤¤¤ | Corrections diverses

[HKU\S-1-5-21-1959498384-218811378-2899222492-1000 | HideDesktopIcons\NewStartPanel] | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> 0
[HKU\S-1-5-21-1959498384-218811378-2899222492-1000 | HideDesktopIcons\ClassicStartMenu] | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> 0
[HKLM | HideDesktopIcons\ClassicStartMenu] | {9343812e-1c37-4a49-a12e-4b2d810d956b} : 1 -> 0
[HKLM | HideDesktopIcons\NewStartPanel] | {F02C1A0D-BE21-4350-88B0-7367FC96EF3C} : 1 -> 0
[HKLM | HideDesktopIcons\NewStartPanel] | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> 0
[HKLM | HideDesktopIcons\NewStartPanel] | {208D2C60-3AEA-1069-A2D7-08002B30309D} : 1 -> 0
[HKLM | HideDesktopIcons\NewStartPanel] | {871C5380-42A0-1069-A2EA-08002B30309D} : 1 -> 0
[HKLM | HideDesktopIcons\NewStartPanel] | {5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0} : 1 -> 0
[HKLM | HideDesktopIcons\NewStartPanel] | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> 0
[HKLM | HideDesktopIcons\NewStartPanel] | {9343812e-1c37-4a49-a12e-4b2d810d956b} : 1 -> 0
[HKLM | Advanced\Folder\Hidden\SHOWALL] | CheckedValue : 1
[HKU\S-1-5-21-1959498384-218811378-2899222492-1000 | Explorer\Advanced] | Start_ShowMyMusic : 1
[HKU\S-1-5-21-1959498384-218811378-2899222492-1000 | Explorer\Advanced] | Start_ShowMyPics : 1
[HKU\S-1-5-21-1959498384-218811378-2899222492-1000 | Explorer\Advanced] | Start_ShowUser : 1
[HKU\S-1-5-21-1959498384-218811378-2899222492-1000 | Explorer\Advanced] | Start_ShowMyDocs : 1
[HKU\S-1-5-21-1959498384-218811378-2899222492-1000 | Explorer\Advanced] | Start_ShowHelp : 1
[HKU\S-1-5-21-1959498384-218811378-2899222492-1000 | Explorer\Advanced] | Start_EnableDragDrop : 1
[HKU\S-1-5-21-1959498384-218811378-2899222492-1000 | Explorer\Advanced] | Start_ShowMyComputer : 1
[HKU\S-1-5-21-1959498384-218811378-2899222492-1000 | Explorer\Advanced] | Start_ShowControlPanel : 1
[HKU\S-1-5-19 | Desktop] | Wallpaper : C:\windows\Web\Wallpaper\img24.jpg
[HKU\S-1-5-20 | Desktop] | Wallpaper : C:\windows\Web\Wallpaper\img24.jpg
[HKU\S-1-5-21-1959498384-218811378-2899222492-1000 | Desktop] | Wallpaper : C:\Windows\ASUS\wallpapers\ASUS3.jpg
[HKU\S-1-5-19 | Policies\Explorer] | NoDesktop : -> 0
[HKU\S-1-5-20 | Policies\Explorer] | NoDesktop : -> 0
[HKU\S-1-5-21-1959498384-218811378-2899222492-1000 | Policies\Explorer] | NoDesktop : -> 0
[HKU\S-1-5-21-1959498384-218811378-2899222492-1000_Classes | Policies\Explorer] | NoDesktop : -> 0
[HKU\S-1-5-18 | Policies\Explorer] | NoDesktop : -> 0
[HKLM | policies\Explorer] | NoDesktop : -> 0
[HKU\S-1-5-19 | Explorer\Advanced] | Hidden : -> 0
[HKU\S-1-5-20 | Explorer\Advanced] | Hidden : -> 0
[HKU\S-1-5-21-1959498384-218811378-2899222492-1000 | Explorer\Advanced] | Hidden : 2 -> 0
[HKU\S-1-5-21-1959498384-218811378-2899222492-1000_Classes | Explorer\Advanced] | Hidden : -> 0
[HKU\S-1-5-18 | Explorer\Advanced] | Hidden : -> 0

07:45:42

¤¤¤¤¤¤¤¤¤¤ | Services

[RPCSS] | Start : 2 : Actif
[Cmbatt] | Start : 3 : Inactif
[Compbatt] | Start : 0 : Actif
[Ndisuio] | Start : 3 : Actif
[Profsvc] | Start : 2 : Actif
[PlugPlay] | Start : 2 : Actif
[PEAUTH] | Start : 2 : Inactif
[Parvdm] | Start : 2 : Inactif
[NVSvc] | Start : 2 : Inactif
[nsi] | Start : 2 : Actif
[NLASvc] | Start : 2 : Actif
[MPSsvc] | Start : 2 : Actif
[MMCSS] | Start : 2 : Inactif
[luafv] | Start : 2 : Inactif
[lltdio] | Start : 2 : Inactif
[Iphlpsvc] | Start : 2 : Inactif
[IKEEXT] | Start : 2 : Actif
[IAStorDataMgrsvc] | Start : 2 : Inactif
[gpsvc] | Start : 2 : Inactif
[lmhosts] | Start : 2 : Actif
[LanmanWorkstation] | Start : 2 : Actif
[LanmanServer] | Start : 2 : Inactif
[agp440] | Start : 3 -> 2 : Inactif
[AudioEndpointBuilder] | Start : 2 : Inactif
[Audiosrv] | Start : 2 : Inactif
[BFE] | Start : 2 : Actif
[Bits] | Start : 2 : Inactif
[CryptSvc] | Start : 2 : Actif
[EapHost] | Start : 3 -> 2 : Actif
[Wlansvc] | Start : 2 : Actif
[SharedAccess] | Start : 4 -> 2 : Inactif
[windefend] | Start : 4 -> 2 : Inactif
[wuauserv] | Start : 2 : Inactif
[WerSvc] | Start : 2 : Inactif
[wscsvc] | Start : 2 : Inactif

07:45:42

¤¤¤¤¤¤¤¤¤¤ | Internet Explorer

[HKU\S-1-5-21-1959498384-218811378-2899222492-1000 | Main] | Start Page : http://search.conduit.com?SearchSource=10&ctid=CT1060933&SSPV=IENOSGTB -> https://www.google.com/?gws_rd=ssl
[HKU\S-1-5-21-1959498384-218811378-2899222492-1000 | Main] | Local Page : C:\Windows\system32\blank.htm
[HKU\S-1-5-21-1959498384-218811378-2899222492-1000 | Main] | Search Page : https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

[HKLM | Search] | SearchAssistant : -> http://www.google.com/toolbar/ie8/sidebar.html
[HKLM | Main] | Start Page : https://www.msn.com/fr-fr/?ocid=iehp
[HKLM | Main] | Local Page : C:\Windows\System32\blank.htm
[HKLM | Main] | Default_Search_URL : https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
[HKLM | Main] | Default_Page_URL : https://www.asus.com/fr/ -> https://www.msn.com/fr-fr/?ocid=iehp
[HKLM | Main] | Search Page : https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
[HKLM | AboutURLs] | Tabs : -> res://ieframe.dll/tabswelcome.htm

¤

[HKU\S-1-5-21-1959498384-218811378-2899222492-1000 | PhishingFilter] | Enabled : 2
[HKU\S-1-5-21-1959498384-218811378-2899222492-1000 | Internet settings] | ProxyOverride : <local> -> 0
[HKU\S-1-5-19 | Internet settings] | EnableHttp1_1 : 1
[HKU\S-1-5-20 | Internet settings] | EnableHttp1_1 : 1
[HKU\S-1-5-21-1959498384-218811378-2899222492-1000 | Internet settings] | EnableHttp1_1 : 1
[HKU\S-1-5-21-1959498384-218811378-2899222492-1000 | Internet settings] | MigrateProxy : 1
[HKU\S-1-5-21-1959498384-218811378-2899222492-1000 | Internet settings] | WarnonZoneCrossing : 0 -> 1
[HKU\S-1-5-19 | Internet settings] | AutoConfigProxy : wininet.dll
[HKU\S-1-5-20 | Internet settings] | AutoConfigProxy : wininet.dll
[HKU\S-1-5-21-1959498384-218811378-2899222492-1000 | Internet settings] | AutoConfigProxy : wininet.dll

¤

[HKU\S-1-5-21-1959498384-218811378-2899222492-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}] | (Bing) -> https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&src=IE-SearchBox&FORM=IE8SRC
[HKU\S-1-5-21-1959498384-218811378-2899222492-1000\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}] | (Ask Search) -> http://www.search.ask.com/?l=dis{searchTerms}&locale=fr_FR&apn_ptnrs=J9&apn_dtid=YYYYYYYYFR&apn_uid=0B87713A-7B41-4348-86BF-3859876A9BF9&apn_sauid=4CE2F082-57B0-407D-B0E4-4C7364FB0B4D
[HKU\S-1-5-21-1959498384-218811378-2899222492-1000\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}] | (Google) -> https://www.google.com/webhp?gws_rd=ssl{searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7FDUM_frFR483
[HKU\S-1-5-21-1959498384-218811378-2899222492-1000\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}] | (AVG Secure Search) -> https://isearch.avg.com/?cid={F5F4800A-267B-4667-BDBE-8DFB620BA193}&mid=28ca21938c1c47d0b71fd16a12f4c7f5-df9bd48a078f8ec0d67b76cc3c8d4db0ddc5aef2&lang=fr&ds=bm011&pr=sa&d=2012-05-09 20:37:36&v=11.0.0.9&sap=dsp&q={searchTerms}
[HKU\S-1-5-21-1959498384-218811378-2899222492-1000\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}] | (Freecorder Customized Web Search) -> http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1060933&SSPV=IENOSGBR

[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}] | (@ieframe.dll,-12512) -> https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&FORM=IE8SRC
[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}] | (Google) -> https://www.google.com/webhp?gws_rd=ssl{searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}] | (Freecorder Customized Web Search) -> http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1060933&SSPV=IENOSGBR

[HKU\S-1-5-21-1959498384-218811378-2899222492-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}] | () ->

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{000209FF-0000-0000-C000-000000000046}] | (winword.exe) -> C:\Program Files\Microsoft Office\Office12
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0002df01-0000-0000-c000-000000000046}] | (iexplore.exe) -> %ProgramFiles%\Internet Explorer
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{003B91A6-61E3-4591-891D-01E94C8CB11E}] | (Silverlight.Configuration.exe) -> C:\Program Files\Microsoft Silverlight\5.1.10411.0\
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{03288CB3-3893-46D1-8D58-B2F8BB6FF5BF}] | (MSACCESS.EXE) -> C:\Program Files\Microsoft Office\Office12
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{054aae20-4bea-4347-8a35-64a533254a9d}] | (tabtip.exe) -> %CommonProgramFiles%\Microsoft Shared\Ink
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a}] | (wpcer.exe) -> C:\Windows\system32
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{08E8D305-8D6D-49fe-8603-03A926E46AE0}] | (Adobe_Updater.exe) -> C:\Program Files\Common Files\Adobe\Updater6
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{08f24d68-9087-4b24-81ad-7b34af3e3ed5}] | (Acrobat Elements.exe) -> %ProgramFiles%\adobe\acrobat 6.0\Acrobat Elements
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695}] | (winfxdocobj.exe) -> C:\Windows\system32
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{10483e7e-0e8b-4e16-9e77-6be5d991683b}] | (mstsc.exe) -> C:\Windows\system32
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1138506a-b949-46a7-b6c0-ee26499fdeaf}] | (wuapp.exe) -> C:\Windows\system32
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{130c40f0-1bcb-4852-8b63-291cf90a600b}] | (msdt.exe) -> C:\Windows\system32
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{15B3FB63-66F4-4EFC-B717-BB283B85E79B}] | (AcroBroker.exe) -> C:\Program Files\Adobe\Reader 9.0\Reader\
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{186e0934-aee9-11da-961b-0014223d2a70}] | (dfsvc.exe) -> C:\Windows\microsoft.net\framework\v2.0.50727
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1DC94C34-5E5C-4365-AE88-10DED0AD9857}] | (FreecorderAutoUpdateHelper.exe) -> C:\Users\OLIVE\AppData\Local\Conduit\CT1060933
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1ec76a37-1762-46ff-9b14-765b3e6793be}] | (agcp.exe) -> C:\Program Files\Microsoft Silverlight\5.1.10411.0\
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{26fe7361-bd5a-4dcb-b309-c6f42dde661c}] | (ieinstal.exe) -> %ProgramFiles%\Internet Explorer
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2BBE903C-2776-4574-9855-EC1597ABE3D6}] | (EXCEL.EXE) -> C:\Program Files\Microsoft Office\Office12
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{358E6F10-DE8A-4602-8424-179CA217F8EE}] | (AcroRd32Info.exe) -> C:\Program Files\Adobe\Reader 9.0\Reader
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{41DDCE73-2089-472B-AE77-CF6B36B10413}] | (FreecorderToolbarHelper.exe) -> C:\Program Files\Freecorder
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{43ABBB95-C0E9-497B-8BB9-B5FA08861705}] | (wlmail.exe) -> C:\Program Files\Windows Live\Mail\
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4becf16c-74f0-429b-8d3e-4fba507ac661}] | (acrord32.exe) -> %ProgramFiles%\adobe\acrobat 7.0\reader
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4C0B7A7C-8ECF-422f-9448-0874C41D4532}] | (WLLoginProxy.exe) -> %ProgramFiles%\Common Files\Microsoft Shared\Windows Live
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{592E7A9A-E0AD-40DB-91BA-58C82D0D2849}] | (uTorrentBar_FRAutoUpdateHelper.exe) -> C:\Users\OLIVE\AppData\Local\Conduit\CT2851639
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{616db3d0-90cb-4ff2-a22f-f5fc4abe3418}] | (OfficeLiveSignIn.exe) -> C:\Program Files\Microsoft\Office Live\
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6bf52a52-394a-11d3-b153-00c04f79faa6}] | (wmplayer.exe) -> %ProgramFiles%\Windows Media Player
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999}] | (iedw.exe) -> %ProgramFiles%\Internet Explorer
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{76E2369A-75BA-41F9-8B9E-16059E5CF9A6}] | (AdobeARM.exe) -> C:\Program Files\Common Files\Adobe\ARM\1.0\
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7aaae723-5fb5-4b2d-9327-75519f336825}] | () ->
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7B7FB824-0A43-4bc2-B58D-F6386FEEFD84}] | (CGuard.exe) -> Choice Guard
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7eb01fb2-f185-445a-94e4-ec4e1ba2202c}] | (verclsid.exe) -> C:\Windows\system32
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{85fc331e-bb64-4c53-ba25-3d8a956c02fd}] | (ctfmon.exe) -> C:\Windows\system32
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8cec58ae-07a1-11d9-b15e-000d56bfe6ee}] | (helppane.exe) -> C:\Windows
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8E1F80F4-953F-41E7-8460-E64AE5BE4ED3}] | (AdobeCollabSync.exe) -> C:\Program Files\Adobe\Reader 9.0\Reader
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{95a4104c-1c49-4c2a-9830-1be0f47e926c}] | (acrobat.exe) -> %ProgramFiles%\adobe\acrobat 7.0\Acrobat
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9C6A861C-B233-4994-AFB1-C158EE4FC578}] | (AcroRd32.exe) -> C:\Program Files\Adobe\Reader 9.0\Reader
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9da1d2cb-796d-4bec-bbaa-0aa9ccd80e15}] | (Acrobat Elements.exe) -> %ProgramFiles%\adobe\acrobat 7.0\Acrobat Elements
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{a5a2d52a-4944-47c4-a3e0-8bd92e14d953}] | (xpsviewer.exe) -> C:\Windows\system32\xpsviewer
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}] | (SaUpdate.exe) -> C:\Program Files\Ask.com\
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5B020FD-E04B-4e67-B65A-E7DEED25B2CF}] | (wisptis.exe) -> C:\Windows\System32
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AAD4AE2E-D834-46D4-8B09-490FAC9C722B}] | () ->
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{aff735eb-cdf9-4894-aa69-3e3131128618}] | (cmd.exe) -> C:\Windows\system32
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BB64A76C-9578-433f-949F-142997978A62}] | (asghost.exe) -> C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}] | (GoogleUpdateBroker.exe) -> C:\Program Files\Google\Update\1.3.21.111
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C442AC41-9200-4770-8CC0-7CDB4F245C55}] | (GoogleUpdate.exe) -> C:\Program Files\Google\Update
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D133B285-8A43-4EC7-93BE-9B909C2370F5}] | (msnmsgr.exe) -> C:\Program Files\Windows Live\Messenger\
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d8a5d001-3352-40db-9d1c-ed46683193b5}] | (WindowsLiveWriter.exe) -> C:\Program Files\Windows Live\Writer\
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{dc6bf185-7ae4-444e-8c35-e447b0d2bd1e}] | (notepad.exe) -> C:\Windows\System32
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{e5f90a07-7db7-4dcb-bd6d-d3fecd376ca3}] | (acrord32.exe) -> %ProgramFiles%\adobe\acrobat 6.0\reader
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7502685-8A07-4042-9120-6362A5133573}] | (uTorrentBar_FRToolbarHelper.exe) -> C:\Program Files\uTorrentBar_FR
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{eee261cc-4b3e-46e7-affb-61f297155bf2}] | (presentationhost.exe) -> C:\Windows\system32
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F6A6CA96-B08E-4429-BA30-39232494F292}] | (MSPUB.EXE) -> C:\Program Files\Microsoft Office\Office12
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F7629763-7562-4d3a-8468-6CA5563852B2}] | (INFOPATH.EXE) -> C:\Program Files\Microsoft Office\Office12
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{fb9e068b-c612-4fa8-bdb9-d728a716a420}] | (acrobat.exe) -> %ProgramFiles%\adobe\acrobat 6.0\Acrobat
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FC88B53C-9B2A-1A25-5867-C8612E79DBF6}] | (POWERPNT.EXE) -> C:\Program Files\Microsoft Office\Office12

¤¤¤¤¤¤¤¤¤¤ | Firefox

Profile : u3objlzb.default

user_pref("browser.startup.homepage", "http://search.conduit.com/?ctid=CT1060933&SearchSource=13");
user_pref("browser.startup.homepage_override.buildID", "20120601045813");
user_pref("browser.startup.homepage_override.mstone", "13.0");
user_pref("browser.download.lastDir", "C:\\Users\\OLIVE\\Downloads");
Ligne supprimée : user_pref("extensions.wrc.SearchRules.ask.com.style", ".WRCN {display:none} #yui-main .tsrc_vnru .title + .WRCN, #yui-main #teoma-results .title + .WRCN {display:inline !important; background: url(\"IMAGE\") right no-repeat}");
Ligne supprimée : user_pref("extensions.wrc.SearchRules.ask.com.url", "^http(s)?\\:\\/\\/(.+\\.)?ask\\.com\\/.*");
Ligne supprimée : user_pref("CT1060933..clientLogServiceUrl", "http://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
Ligne supprimée : user_pref("CT1060933..uninstallLogServiceUrl", "http://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
Ligne supprimée : user_pref("CT1060933.AboutPrivacyUrl", "http://www.conduit.com");
Ligne supprimée : user_pref("CT1060933.GroupingServiceUrl", "http://grouping.services.conduit.com/");
Ligne supprimée : user_pref("CT1060933.HomepageBeforeUnload", "http://search.conduit.com/?ctid=CT1060933&SearchSource=13");
Ligne supprimée : user_pref("CT1060933.InstallationId", "ConduitNSISIntegration");
Ligne supprimée : user_pref("CT1060933.InstallationType", "ConduitNSISIntegration");
Ligne supprimée : user_pref("CT1060933.LanguagePackServiceUrl", "http://translation.users.conduit.com/Translation.ashx");
Ligne supprimée : user_pref("CT1060933.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT1060933&SearchSource=2&q=");
Ligne supprimée : user_pref("CT1060933.SearchInNewTabServiceUrl", "http://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
Ligne supprimée : user_pref("CT1060933.TBHomePageUrl", "http://search.conduit.com/?ctid=CT1060933&SearchSource=13");
Ligne supprimée : user_pref("CT1060933.TrusteLinkUrl", "http://trust.conduit.com/CT1060933");
Ligne supprimée : user_pref("CT1060933.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCityToolbar.com,MyCollegeToolbar.com,MyFamilyToolbar.com,MyForumToolbar.com,MyLibraryToolbar.com,MyRadioToolbar.com,MyStoreToolbar.com,MyTownToolbar.com,MyUniversityToolbar.com,OurChurchToolbar.com,MyXangaToolbar.com,Media-Toolbar.com,LoyaltyToolbar.com,MyTeamToolbar.com,GreatToolbars.com,OurOrganizationToolbar.com,OurBusinessToolbar.com,Toolbar.fm");
Ligne supprimée : user_pref("CT1060933.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"http://appdownload.conduit.com/\",\"RevertSettingsEnabled\":\"FALSE\",\"urlBarHiddenEnabled\":\"TRUE\",\"notFoundHiddenEnabled\":\"TRUE\",\"searchInNewTabHiddenEnabled\":\"TRUE\"}");
Ligne supprimée : user_pref("CT1060933.myStuffSearchUrl", "http://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
Ligne supprimée : user_pref("CT1060933.myStuffServiceUrl", "http://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
Ligne supprimée : user_pref("CommunityToolbar.ConduitHomepagesList", "http://search.conduit.com/?ctid=CT1060933&SearchSource=13");
Ligne supprimée : user_pref("CommunityToolbar.ConduitSearchList", "Freecorder Customized Web Search");
Ligne supprimée : user_pref("CommunityToolbar.ETag.http://settings.toolbar.search.conduit.com/root/CT1060933/CT1060933", "\"d84035e9731211223d8a953c488bd4c31\"");
Ligne supprimée : user_pref("CommunityToolbar.ETag.http://appsmetadata.toolbar.conduit-services.com/?ctid=CT1060933", "\"1324192924\"");
Ligne supprimée : user_pref("CommunityToolbar.ETag.http://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"8076e3ce381dcd1:0\"");
Ligne supprimée : user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12.2.3", "\"4ead38b3e6bcd1:0\"");
Ligne supprimée : user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13.0.6", "\"4ead38b3e6bcd1:0\"");
Ligne supprimée : user_pref("CommunityToolbar.ETag.http://servicemap.conduit-services.com/Toolbar/?ownerId=CT1060933", "\"d76323372b05c3748a3d6b1c93a98292\"");
Ligne supprimée : user_pref("CommunityToolbar.ETag.http://translation.toolbar.conduit-services.com/?locale=en-us", "\"6a998dbe1a10be371b546957d8d4b125\"");
Ligne supprimée : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\OLIVE\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\u3objlzb.default\\conduitCommon\\modules\\3.13.0.6");
Ligne supprimée : user_pref("CommunityToolbar.notifications.clientsServerUrl", "http://alert.client.conduit.com");
Ligne supprimée : user_pref("CommunityToolbar.notifications.servicesServerUrl", "http://alert.services.conduit.com");
Ligne supprimée : user_pref("browser.search.defaulturl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT1060933&SearchSource=3&q={searchTerms}");
Ligne supprimée : user_pref("browser.startup.homepage", "http://search.conduit.com/?ctid=CT1060933&SearchSource=13");
Ligne supprimée : user_pref("keyword.URL", "http://search.conduit.com/ResultsExt.aspx?ctid=CT1060933&SearchSource=2&q=");
Ligne supprimée : user_pref("CT1060933.SearchCaption", "Freecorder Customized Web Search");
Ligne supprimée : user_pref("CT1060933.SearchEngineBeforeUnload", "Freecorder Customized Web Search");
Ligne supprimée : user_pref("browser.search.defaultthis.engineName", "Freecorder Customized Web Search");

¤¤¤¤¤¤¤¤¤¤ | Extensions

C:\Users\OLIVE\AppData\Roaming\Mozilla\Firefox\Profiles\u3objlzb.default\extensions\ytvdw@pgport.com.xpi
C:\Users\OLIVE\AppData\Roaming\Mozilla\Firefox\Profiles\u3objlzb.default\extensions\{1392b8d2-5c05-419f-a8f6-b9f15a596612}
C:\Users\OLIVE\AppData\Roaming\Mozilla\Firefox\Profiles\u3objlzb.default\extensions\{33e0daa6-3af3-d8b5-6752-10e949c61516}
C:\Users\OLIVE\AppData\Roaming\Mozilla\Firefox\Profiles\u3objlzb.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}

¤¤¤¤¤¤¤¤¤¤ | Plugins

C:\Program Files\Mozilla Firefox\searchplugins\amazon-france.xml
C:\Program Files\Mozilla Firefox\searchplugins\bing.xml
C:\Program Files\Mozilla Firefox\searchplugins\cnrtl-tlfi-fr.xml
C:\Program Files\Mozilla Firefox\searchplugins\eBay-france.xml
C:\Program Files\Mozilla Firefox\searchplugins\google.xml
C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-fr.xml
C:\Program Files\Mozilla Firefox\searchplugins\yahoo-france.xml

¤¤¤¤¤¤¤¤¤¤ | DNS

[HKLM\SYSTEM\CCS | Tcpip\Parameters] | DhcpNameServer : 192.168.1.1
[HKLM\SYSTEM\ControlSet001 | Interfaces\{B8E8E3B3-49BC-4B3F-A056-71B8DD2F3DF3}] | DhcpNameServer : 192.168.1.1
[HKLM\SYSTEM\ControlSet002 | Interfaces\{B8E8E3B3-49BC-4B3F-A056-71B8DD2F3DF3}] | DhcpNameServer : 192.168.1.1
[HKLM\SYSTEM\ControlSet010 | Interfaces\{B8E8E3B3-49BC-4B3F-A056-71B8DD2F3DF3}] | DhcpNameServer : 192.168.1.1
[HKLM\SYSTEM\CurrentControlSet | Interfaces\{B8E8E3B3-49BC-4B3F-A056-71B8DD2F3DF3}] | DhcpNameServer : 192.168.1.1

¤¤¤¤¤¤¤¤¤¤ | Hosts

::1 localhost
# Start of entries inserted by Spybot - Search & Destroy
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 www.100888290cs.com
127.0.0.1 100888290cs.com
127.0.0.1 100sexlinks.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 www.10sek.com
127.0.0.1 10sek.com
127.0.0.1 1-2005-search.com
127.0.0.1 www.1-2005-search.com

[.......]

15241 ligne(s)

¤¤¤¤¤¤¤¤¤¤ | Traitement Fichiers | Dossiers | Registre

Supprimée : [HKCR\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}] | @ -> C:\Program Files\Ask.com\GenericAskToolbar.dll
Supprimée : [HKU\S-1-5-21-1959498384-218811378-2899222492-1000 | URLSearchHooks] | {00000000-6E41-4FD3-8538-502F5495E5FC} ->

07:49:17

Mise en quarantaine : C:\Program Files\Common Files\CPInstallAction.dll
Supprimée : [HKLM | MSConfig\startupreg\IntelliPoint] -> command
Supprimée : [HKLM | MSConfig\startupreg\itype] -> command

07:50:18

Mise en quarantaine : C:\Users\All Users\nvModes.dat
Mise en quarantaine : C:\Users\OLIVE\AppData\Roaming\InstallShield
Mise en quarantaine : C:\Users\OLIVE\AppData\Local\Temp\conduitinstaller.exe
Mise en quarantaine : C:\Users\OLIVE\AppData\Local\Temp\utt3EF5.tmp
Mise en quarantaine : C:\Users\OLIVE\AppData\Local\Temp\utt3EF6.tmp
Mise en quarantaine : C:\Users\OLIVE\AppData\Local\Temp\utt3F07.tmp
Mise en quarantaine : C:\Users\OLIVE\AppData\Local\Temp\utt3F08.tmp
Mise en quarantaine : C:\Users\OLIVE\AppData\Local\Temp\utt3F09.tmp
Mise en quarantaine : C:\Users\OLIVE\AppData\Local\Temp\utt4928.tmp
Mise en quarantaine : C:\Users\OLIVE\AppData\Local\Temp\utt4929.tmp
Mise en quarantaine : C:\Users\OLIVE\AppData\Local\Temp\utt492A.tmp
Mise en quarantaine : C:\Users\OLIVE\AppData\Local\Temp\utt492B.tmp
Mise en quarantaine : C:\Users\OLIVE\AppData\Local\Temp\utt493B.tmp
Mise en quarantaine : C:\Users\OLIVE\AppData\Local\Temp\01net\01NET.com.exe
Mise en quarantaine : C:\Users\OLIVE\AppData\Local\Temp\01net\HiJackThis.exe
Mise en quarantaine : C:\Users\OLIVE\AppData\Local\Temp\CT3128284\statisticsStub.exe

07:51:46

¤¤¤¤¤¤¤¤¤¤ | SafeBoot | Contrôle | Réparation

[HKLM | Safeboot] -> OK
[HKLM | Safeboot\Minimal] -> OK
[HKLM | Safeboot\Network] -> OK

¤

[HKLM | Minimal\AppMgmt] | @ : Service -> OK
[HKLM | Minimal\Base] | @ : Driver Group -> OK
[HKLM | Minimal\Boot Bus Extender] | @ : Driver Group -> OK
[HKLM | Minimal\Boot file system] | @ : Driver Group -> OK
[HKLM | Minimal\CryptSvc] | @ : Service -> OK
[HKLM | Minimal\DcomLaunch] | @ : Service -> OK
[HKLM | Minimal\dmadmin] | @ : -> Service
[HKLM | Minimal\dmboot.sys] | @ : -> Driver
[HKLM | Minimal\dmio.sys] | @ : -> Driver
[HKLM | Minimal\dmload.sys] | @ : -> Driver
[HKLM | Minimal\dmserver] | @ : -> Service
[HKLM | Minimal\EventLog] | @ : Service -> OK
[HKLM | Minimal\File system] | @ : Driver Group -> OK
[HKLM | Minimal\Filter] | @ : Driver Group -> OK
[HKLM | Minimal\HelpSvc] | @ : Service -> OK
[HKLM | Minimal\Netlogon] | @ : Service -> OK
[HKLM | Minimal\PCI Configuration] | @ : Driver Group -> OK
[HKLM | Minimal\PlugPlay] | @ : Service -> OK
[HKLM | Minimal\PNP Filter] | @ : Driver Group -> OK
[HKLM | Minimal\Primary disk] | @ : Driver Group -> OK
[HKLM | Minimal\RpcSs] | @ : Service -> OK
[HKLM | Minimal\SCSI Class] | @ : Driver Group -> OK
[HKLM | Minimal\sermouse.sys] | @ : Driver -> OK
[HKLM | Minimal\sr.sys] | @ : -> FSFilter System Recovery
[HKLM | Minimal\SRService] | @ : -> Service
[HKLM | Minimal\System Bus Extender] | @ : Driver Group -> OK
[HKLM | Minimal\vds] | @ : Service -> OK
[HKLM | Minimal\vga.sys] | @ : Driver -> OK
[HKLM | Minimal\vgasave.sys] | @ : Driver -> OK
[HKLM | Minimal\WinMgmt] | @ : Service -> OK
[HKLM | Minimal\{36FC9E60-C465-11CF-8056-444553540000}] | @ : Universal Serial Bus controllers -> OK
[HKLM | Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}] | @ : CD-ROM Drive -> OK
[HKLM | Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}] | @ : DiskDrive -> OK
[HKLM | Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}] | @ : Standard floppy disk controller -> OK
[HKLM | Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}] | @ : Hdc -> OK
[HKLM | Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}] | @ : Keyboard -> OK
[HKLM | Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}] | @ : Mouse -> OK
[HKLM | Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}] | @ : PCMCIA Adapters -> OK
[HKLM | Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}] | @ : SCSIAdapter -> OK
[HKLM | Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}] | @ : System -> OK
[HKLM | Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}] | @ : Floppy disk drive -> OK
[HKLM | Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}] | @ : Volume shadow copy -> OK
[HKLM | Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}] | @ : Volume -> OK
[HKLM | Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}] | @ : Human Interface Devices -> OK

¤

[HKLM | Network\AFD] | @ : Service -> OK
[HKLM | Network\AppMgmt] | @ : Service -> OK
[HKLM | Network\Base] | @ : Driver Group -> OK
[HKLM | Network\Boot Bus Extender] | @ : Driver Group -> OK
[HKLM | Network\Boot file system] | @ : Driver Group -> OK
[HKLM | Network\Browser] | @ : Service -> OK
[HKLM | Network\CryptSvc] | @ : Service -> OK
[HKLM | Network\DcomLaunch] | @ : Service -> OK
[HKLM | Network\Dhcp] | @ : Service -> OK
[HKLM | Network\dmadmin] | @ : -> Service
[HKLM | Network\dmboot.sys] | @ : -> Driver
[HKLM | Network\dmio.sys] | @ : -> Driver
[HKLM | Network\dmload.sys] | @ : -> Driver
[HKLM | Network\dmserver] | @ : -> Service
[HKLM | Network\DnsCache] | @ : Service -> OK
[HKLM | Network\EventLog] | @ : Service -> OK
[HKLM | Network\File system] | @ : Driver Group -> OK
[HKLM | Network\Filter] | @ : Driver Group -> OK
[HKLM | Network\HelpSvc] | @ : Service -> OK
[HKLM | Network\ip6fw.sys] | @ : -> Driver
[HKLM | Network\ipnat.sys] | @ : Driver -> OK
[HKLM | Network\LanmanServer] | @ : Service -> OK
[HKLM | Network\LanmanWorkstation] | @ : Service -> OK
[HKLM | Network\LmHosts] | @ : Service -> OK
[HKLM | Network\Messenger] | @ : Service -> OK
[HKLM | Network\NDIS] | @ : Driver Group -> OK
[HKLM | Network\NDIS Wrapper] | @ : Driver Group -> OK
[HKLM | Network\Ndisuio] | @ : Service -> OK
[HKLM | Network\NetBIOS] | @ : Service -> OK
[HKLM | Network\NetBIOSGroup] | @ : Driver Group -> OK
[HKLM | Network\NetBT] | @ : Service -> OK
[HKLM | Network\NetDDEGroup] | @ : Driver Group -> OK
[HKLM | Network\Netlogon] | @ : Service -> OK
[HKLM | Network\NetMan] | @ : Service -> OK
[HKLM | Network\Network] | @ : Driver Group -> OK
[HKLM | Network\NetworkProvider] | @ : Driver Group -> OK
[HKLM | Network\NtLmSsp] | @ : -> Service
[HKLM | Network\PCI Configuration] | @ : Driver Group -> OK
[HKLM | Network\PlugPlay] | @ : Service -> OK
[HKLM | Network\PNP Filter] | @ : Driver Group -> OK
[HKLM | Network\PNP_TDI] | @ : Driver Group -> OK
[HKLM | Network\Primary disk] | @ : Driver Group -> OK
[HKLM | Network\rdpcdd.sys] | @ : -> Driver
[HKLM | Network\rdpdd.sys] | @ : -> Driver
[HKLM | Network\rdpwd.sys] | @ : -> Driver
[HKLM | Network\rdsessmgr] | @ : Service -> OK
[HKLM | Network\RpcSs] | @ : Service -> OK
[HKLM | Network\SCSI Class] | @ : Driver Group -> OK
[HKLM | Network\sermouse.sys] | @ : Driver -> OK
[HKLM | Network\sharedaccess] | @ : Service -> OK
[HKLM | Network\sr.sys] | @ : -> FSFilter System Recovery
[HKLM | Network\SRService] | @ : -> Service
[HKLM | Network\Streams Drivers] | @ : Driver Group -> OK
[HKLM | Network\SYMTDI] | @ : -> Service
[HKLM | Network\System Bus Extender] | @ : Driver Group -> OK
[HKLM | Network\Tcpip] | @ : Service -> OK
[HKLM | Network\TDI] | @ : Driver Group -> OK
[HKLM | Network\tdpipe.sys] | @ : -> Driver
[HKLM | Network\tdtcp.sys] | @ : -> Driver
[HKLM | Network\termservice] | @ : -> Service
[HKLM | Network\UploadMgr] | @ : -> Service
[HKLM | Network\vga.sys] | @ : Driver -> OK
[HKLM | Network\vgasave.sys] | @ : Driver -> OK
[HKLM | Network\WinMgmt] | @ : Service -> OK
[HKLM | Network\Wlansvc] | @ : Service -> OK
[HKLM | Network\WZCSVC] | @ : -> Service
[HKLM | Network\{36FC9E60-C465-11CF-8056-444553540000}] | @ : Universal Serial Bus controllers -> OK
[HKLM | Network\{4D36E965-E325-11CE-BFC1-08002BE10318}] | @ : CD-ROM Drive -> OK
[HKLM | Network\{4D36E967-E325-11CE-BFC1-08002BE10318}] | @ : DiskDrive -> OK
[HKLM | Network\{4D36E969-E325-11CE-BFC1-08002BE10318}] | @ : Standard floppy disk controller -> OK
[HKLM | Network\{4D36E96A-E325-11CE-BFC1-08002BE10318}] | @ : Hdc -> OK
[HKLM | Network\{4D36E96B-E325-11CE-BFC1-08002BE10318}] | @ : Keyboard -> OK
[HKLM | Network\{4D36E96F-E325-11CE-BFC1-08002BE10318}] | @ : Mouse -> OK
[HKLM | Network\{4D36E972-E325-11CE-BFC1-08002BE10318}] | @ : Net -> OK
[HKLM | Network\{4D36E973-E325-11CE-BFC1-08002BE10318}] | @ : NetClient -> OK
[HKLM | Network\{4D36E974-E325-11CE-BFC1-08002BE10318}] | @ : NetService -> OK
[HKLM | Network\{4D36E975-E325-11CE-BFC1-08002BE10318}] | @ : NetTrans -> OK
[HKLM | Network\{4D36E977-E325-11CE-BFC1-08002BE10318}] | @ : PCMCIA Adapters -> OK
[HKLM | Network\{4D36E97B-E32
0
aldebaran95 Messages postés 265 Statut Membre 13
 
C'est bon ,j'ai trouvé la partie manquante :

O43 - CFD: 13/05/2012 - 09:53:21 - [10,323] ----D C:\Program Files\Freecorder
O43 - CFD: 01/06/2012 - 16:21:38 - [18,750] ----D C:\Program Files\Glary Utilities
O43 - CFD: 13/05/2012 - 03:29:04 - [284,806] ----D C:\Program Files\Google
O43 - CFD: 09/05/2012 - 21:00:45 - [2,163] ----D C:\Program Files\ImgBurn
O43 - CFD: 08/05/2012 - 03:52:53 - [67,618] --H-D C:\Program Files\InstallShield Installation Information
O43 - CFD: 08/05/2012 - 04:13:21 - [106,545] ----D C:\Program Files\Intel
O43 - CFD: 16/05/2012 - 09:29:37 - [5,314] ----D C:\Program Files\Internet Explorer
O43 - CFD: 09/05/2012 - 20:44:32 - [88,193] ----D C:\Program Files\IObit
O43 - CFD: 09/05/2012 - 21:01:54 - [13,644] ----D C:\Program Files\IZArc
O43 - CFD: 09/05/2012 - 21:16:57 - [42,417] ----D C:\Program Files\Lavasoft
O43 - CFD: 08/05/2012 - 21:53:32 - [6,206] ----D C:\Program Files\ma-config.com
O43 - CFD: 10/05/2012 - 04:04:51 - [0,718] ----D C:\Program Files\Microsoft
O43 - CFD: 08/05/2012 - 06:38:32 - [0,764] ----D C:\Program Files\Microsoft CAPICOM 2.1.0.2
O43 - CFD: 02/11/2006 - 14:37:34 - [89,117] ----D C:\Program Files\Microsoft Games
O43 - CFD: 08/05/2012 - 22:02:47 - [35,670] ----D C:\Program Files\Microsoft IntelliPoint
O43 - CFD: 08/05/2012 - 04:12:54 - [23,912] ----D C:\Program Files\Microsoft IntelliType Pro
O43 - CFD: 08/05/2012 - 03:07:19 - [569,087] ----D C:\Program Files\Microsoft Office
O43 - CFD: 08/05/2012 - 07:40:02 - [1,487] ----D C:\Program Files\Microsoft Office Outlook Connector
O43 - CFD: 08/05/2012 - 21:15:47 - [40,838] ----D C:\Program Files\Microsoft Silverlight
O43 - CFD: 08/05/2012 - 07:36:33 - [1,745] ----D C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD: 08/05/2012 - 07:39:30 - [1,440] ----D C:\Program Files\Microsoft Sync Framework
O43 - CFD: 08/05/2012 - 03:07:18 - [0,014] ----D C:\Program Files\Microsoft Visual Studio
O43 - CFD: 08/05/2012 - 03:04:19 - [64,367] ----D C:\Program Files\Microsoft Visual Studio 8
O43 - CFD: 08/05/2012 - 06:07:52 - [3,554] ----D C:\Program Files\Microsoft Works
O43 - CFD: 08/05/2012 - 03:07:08 - [7,774] ----D C:\Program Files\Microsoft.NET
O43 - CFD: 12/05/2012 - 14:43:23 - [94,740] ----D C:\Program Files\Movie Maker
O43 - CFD: 08/06/2012 - 07:39:27 - [37,181] ----D C:\Program Files\Mozilla Firefox
O43 - CFD: 08/06/2012 - 07:53:17 - [0,195] ----D C:\Program Files\Mozilla Maintenance Service
O43 - CFD: 08/05/2012 - 03:07:22 - [0,025] ----D C:\Program Files\MSBuild
O43 - CFD: 08/05/2012 - 03:44:11 - [7,199] ----D C:\Program Files\P4G
O43 - CFD: 08/05/2012 - 03:44:38 - [0,751] ----D C:\Program Files\P4P
O43 - CFD: 09/05/2012 - 20:37:57 - [19,040] ----D C:\Program Files\PeaZip
O43 - CFD: 09/05/2012 - 21:14:45 - [13,984] ----D C:\Program Files\PhotoFiltre Studio X
O43 - CFD: 08/05/2012 - 04:08:57 - [115,661] ----D C:\Program Files\Realtek
O43 - CFD: 02/11/2006 - 14:37:34 - [40,725] ----D C:\Program Files\Reference Assemblies
O43 - CFD: 09/05/2012 - 21:13:30 - [59,439] ----D C:\Program Files\Spybot - Search & Destroy
O43 - CFD: 09/05/2012 - 21:05:21 - [3,739] ----D C:\Program Files\STDU Viewer
O43 - CFD: 08/05/2012 - 03:47:00 - [0,716] ----D C:\Program Files\Synaptics
O43 - CFD: 02/11/2006 - 15:01:55 - [0] --H-D C:\Program Files\Uninstall Information
O43 - CFD: 12/05/2012 - 18:14:56 - [0,840] ----D C:\Program Files\uTorrent
O43 - CFD: 09/05/2012 - 21:08:28 - [88,797] ----D C:\Program Files\VideoLAN
O43 - CFD: 09/05/2012 - 21:05:43 - [0,714] ----D C:\Program Files\Voissa anonymo
O43 - CFD: 12/05/2012 - 14:43:23 - [0,970] ----D C:\Program Files\Windows Calendar
O43 - CFD: 12/05/2012 - 14:43:22 - [2,610] ----D C:\Program Files\Windows Collaboration
O43 - CFD: 12/05/2012 - 14:43:19 - [4,283] ----D C:\Program Files\Windows Defender
O43 - CFD: 13/05/2012 - 03:26:51 - [6,757] ----D C:\Program Files\Windows Journal
O43 - CFD: 08/05/2012 - 21:02:19 - [146,075] ----D C:\Program Files\Windows Live
O43 - CFD: 08/05/2012 - 07:35:05 - [0,234] ----D C:\Program Files\Windows Live SkyDrive
O43 - CFD: 17/05/2012 - 06:49:03 - [8,694] ----D C:\Program Files\Windows Mail
O43 - CFD: 12/05/2012 - 14:43:22 - [4,290] ----D C:\Program Files\Windows Media Player
O43 - CFD: 02/11/2006 - 14:37:34 - [7,589] ----D C:\Program Files\Windows NT
O43 - CFD: 12/05/2012 - 14:43:22 - [12,902] ----D C:\Program Files\Windows Photo Gallery
O43 - CFD: 16/05/2012 - 11:26:18 - [0,128] ----D C:\Program Files\Windows Portable Devices
O43 - CFD: 12/05/2012 - 14:43:23 - [6,409] ----D C:\Program Files\Windows Sidebar
O43 - CFD: 08/05/2012 - 03:51:22 - [2,115] ----D C:\Program Files\Wireless Console 2
O43 - CFD: 09/05/2012 - 21:07:09 - [92,943] ----D C:\Program Files\XBMC
O43 - CFD: 09/05/2012 - 21:07:09 - [16,174] ----D C:\Program Files\XnView
O43 - CFD: 08/06/2012 - 09:00:53 - [13,963] ----D C:\Program Files\ZHPDiag
O43 - CFD: 09/05/2012 - 20:41:45 - [6,211] ----D C:\Program Files\Common Files\Adobe
O43 - CFD: 08/05/2012 - 03:07:18 - [0,089] ----D C:\Program Files\Common Files\DESIGNER
O43 - CFD: 08/05/2012 - 03:40:50 - [4,554] ----D C:\Program Files\Common Files\InstallShield
O43 - CFD: 08/05/2012 - 04:04:06 - [8,669] ----D C:\Program Files\Common Files\Intel
O43 - CFD: 08/05/2012 - 04:20:14 - [0,009] ----D C:\Program Files\Common Files\Intel Corporation
O43 - CFD: 08/05/2012 - 11:28:33 - [428,802] ----D C:\Program Files\Common Files\microsoft shared
O43 - CFD: 02/11/2006 - 13:18:33 - [0,003] ----D C:\Program Files\Common Files\Services
O43 - CFD: 02/11/2006 - 13:18:33 - [39,198] ----D C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 09/05/2012 - 21:05:05 - [4,621] ----D C:\Program Files\Common Files\STDUtility
O43 - CFD: 13/05/2012 - 03:26:50 - [45,504] ----D C:\Program Files\Common Files\System
O43 - CFD: 08/05/2012 - 07:27:44 - [0] ----D C:\Program Files\Common Files\Windows Live
O43 - CFD: 08/05/2012 - 22:28:04 - [32,560] ----D C:\Program Files\Common Files\Wise Installation Wizard
O43 - CFD: 25/05/2012 - 04:41:33 - [165,160] ----D C:\ProgramData\Adobe
O43 - CFD: 02/11/2006 - 15:02:03 - [0] --H-D C:\ProgramData\Application Data
O43 - CFD: 08/05/2012 - 04:14:29 - [0,100] ----D C:\ProgramData\ASUS
O43 - CFD: 08/05/2012 - 03:52:23 - [0,026] ----D C:\ProgramData\Atheros
O43 - CFD: 12/05/2012 - 17:16:27 - [32,837] ----D C:\ProgramData\AVAST Software
O43 - CFD: 09/05/2012 - 20:37:10 - [0,000] --H-D C:\ProgramData\Common Files
O43 - CFD: 12/05/2012 - 17:49:03 - [0,286] ----D C:\ProgramData\CustoPackTools
O43 - CFD: 09/05/2012 - 21:33:53 - [0,001] ----D C:\ProgramData\DAEMON Tools Lite
O43 - CFD: 02/11/2006 - 15:02:03 - [0] --H-D C:\ProgramData\Desktop
O43 - CFD: 02/11/2006 - 15:02:03 - [0] --H-D C:\ProgramData\Documents
O43 - CFD: 02/11/2006 - 15:02:03 - [0] --H-D C:\ProgramData\Favorites
O43 - CFD: 08/05/2012 - 04:04:02 - [0,001] ----D C:\ProgramData\Intel
O43 - CFD: 09/05/2012 - 20:44:56 - [0,000] ----D C:\ProgramData\IObit
O43 - CFD: 09/05/2012 - 21:17:02 - [337,387] ----D C:\ProgramData\Lavasoft
O43 - CFD: 08/05/2012 - 21:53:28 - [1,197] ----D C:\ProgramData\ma-config.com
O43 - CFD: 10/05/2012 - 04:39:56 - [124,557] -S--D C:\ProgramData\Microsoft
O43 - CFD: 08/05/2012 - 20:53:18 - [0,065] ----D C:\ProgramData\Microsoft Help
O43 - CFD: 09/05/2012 - 21:02:51 - [0,000] ----D C:\ProgramData\Mozilla
O43 - CFD: 16/05/2012 - 16:23:25 - [0,192] ----D C:\ProgramData\NVIDIA
O43 - CFD: 01/06/2012 - 16:21:38 - [0,002] ----D C:\ProgramData\P4G
O43 - CFD: 07/06/2012 - 14:43:56 - [94,356] ----D C:\ProgramData\Spybot - Search & Destroy
O43 - CFD: 02/11/2006 - 15:02:03 - [0] --H-D C:\ProgramData\Start Menu
O43 - CFD: 02/11/2006 - 15:02:04 - [0] --H-D C:\ProgramData\Templates
O43 - CFD: 08/06/2012 - 08:32:15 - [0] ----D C:\ProgramData\WindowsSearch
O43 - CFD: 12/05/2012 - 11:08:53 - [0,247] ----D C:\Users\OLIVE\AppData\Roaming\Adobe
O43 - CFD: 09/05/2012 - 22:20:36 - [0] ----D C:\Users\OLIVE\AppData\Roaming\Auslogics
O43 - CFD: 09/05/2012 - 20:48:45 - [0,158] ----D C:\Users\OLIVE\AppData\Roaming\BitComet
O43 - CFD: 09/05/2012 - 22:16:00 - [0] ----D C:\Users\OLIVE\AppData\Roaming\DAEMON Tools Lite
O43 - CFD: 07/06/2012 - 14:23:58 - [0] ----D C:\Users\OLIVE\AppData\Roaming\GetRightToGo
O43 - CFD: 09/05/2012 - 21:36:58 - [0,012] ----D C:\Users\OLIVE\AppData\Roaming\GlarySoft
O43 - CFD: 10/05/2012 - 04:30:39 - [0] ----D C:\Users\OLIVE\AppData\Roaming\Google
O43 - CFD: 09/05/2012 - 21:14:47 - [0,000] ----D C:\Users\OLIVE\AppData\Roaming\Identities
O43 - CFD: 08/05/2012 - 04:05:01 - [0,001] ----D C:\Users\OLIVE\AppData\Roaming\Intel
O43 - CFD: 08/05/2012 - 04:19:58 - [0,001] ----D C:\Users\OLIVE\AppData\Roaming\Intel Corporation
O43 - CFD: 12/05/2012 - 18:00:57 - [0,292] ----D C:\Users\OLIVE\AppData\Roaming\IObit
O43 - CFD: 08/05/2012 - 03:46:05 - [0,001] ----D C:\Users\OLIVE\AppData\Roaming\Macromedia
O43 - CFD: 02/11/2006 - 14:37:34 - [0] ----D C:\Users\OLIVE\AppData\Roaming\Media Center Programs
O43 - CFD: 25/05/2012 - 11:46:13 - [1,473] -S--D C:\Users\OLIVE\AppData\Roaming\Microsoft
O43 - CFD: 12/05/2012 - 11:06:17 - [18,904] ----D C:\Users\OLIVE\AppData\Roaming\Mozilla
O43 - CFD: 09/05/2012 - 21:15:49 - [0,001] ----D C:\Users\OLIVE\AppData\Roaming\PhotoFiltre Studio X
O43 - CFD: 12/05/2012 - 12:42:11 - [0] ----D C:\Users\OLIVE\AppData\Roaming\QuickScan
O43 - CFD: 07/06/2012 - 11:16:55 - [2,225] ----D C:\Users\OLIVE\AppData\Roaming\uTorrent
O43 - CFD: 06/06/2012 - 17:11:09 - [0,078] ----D C:\Users\OLIVE\AppData\Roaming\vlc
O43 - CFD: 12/05/2012 - 17:48:46 - [0,336] ----D C:\Users\OLIVE\AppData\Roaming\XnView
O43 - CFD: 09/05/2012 - 20:43:23 - [0,092] ----D C:\Users\OLIVE\AppData\Local\Adobe
O43 - CFD: 08/05/2012 - 02:48:19 - [0] ----D C:\Users\OLIVE\AppData\Local\Application Data
O43 - CFD: 08/05/2012 - 04:14:15 - [1,310] ----D C:\Users\OLIVE\AppData\Local\ASUS
O43 - CFD: 13/05/2012 - 09:53:20 - [0,126] ----D C:\Users\OLIVE\AppData\Local\Conduit
O43 - CFD: 12/05/2012 - 18:04:11 - [0,860] ----D C:\Users\OLIVE\AppData\Local\CRE
O43 - CFD: 09/05/2012 - 21:31:40 - [0] ----D C:\Users\OLIVE\AppData\Local\Downloaded Installations
O43 - CFD: 09/05/2012 - 20:59:36 - [0,030] ----D C:\Users\OLIVE\AppData\Local\eMule
O43 - CFD: 14/05/2012 - 12:06:19 - [130,436] ----D C:\Users\OLIVE\AppData\Local\FLVService
O43 - CFD: 12/05/2012 - 18:21:20 - [9,187] ----D C:\Users\OLIVE\AppData\Local\Google
O43 - CFD: 08/05/2012 - 02:48:19 - [0] ----D C:\Users\OLIVE\AppData\Local\Historique
O43 - CFD: 07/06/2012 - 10:45:30 - [77,904] ----D C:\Users\OLIVE\AppData\Local\Microsoft
O43 - CFD: 08/05/2012 - 03:03:43 - [0] ----D C:\Users\OLIVE\AppData\Local\Microsoft Help
O43 - CFD: 12/05/2012 - 11:05:12 - [54,148] ----D C:\Users\OLIVE\AppData\Local\Mozilla
O43 - CFD: 12/05/2012 - 18:18:36 - [0,118] ----D C:\Users\OLIVE\AppData\Local\STDUViewer
O43 - CFD: 08/06/2012 - 08:59:34 - [0,054] ----D C:\Users\OLIVE\AppData\Local\Temp
O43 - CFD: 08/05/2012 - 02:48:19 - [0] ----D C:\Users\OLIVE\AppData\Local\Temporary Internet Files
O43 - CFD: 12/05/2012 - 10:59:18 - [0,030] ----D C:\Users\OLIVE\AppData\Local\VirtualStore
O43 - CFD: 25/05/2012 - 22:00:46 - [0] ----D C:\Users\OLIVE\AppData\Local\Windows Live
O43 - CFD: 21/01/2008 - 04:42:46 - [0,015] R---D C:\Users\OLIVE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 08/05/2012 - 02:49:58 - [0,000] R---D C:\Users\OLIVE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 21/01/2008 - 04:42:46 - [0,001] R---D C:\Users\OLIVE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 09/05/2012 - 21:14:45 - [0] ----D C:\Users\OLIVE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoFiltre Studio X
O43 - CFD: 08/05/2012 - 02:50:02 - [0,000] R---D C:\Users\OLIVE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 09/05/2012 - 21:07:09 - [0,003] ----D C:\Users\OLIVE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\XBMC
~ Scan Program Folder in 00mn 26s

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.E898DA40094005F04325CD9AECF3545E] - 08/06/2012 - 07:56:03 ---A- . (...) -- C:\Windows\ntbtlog.txt [554776]
O44 - LFC:[MD5.E72C5E18C3B2CF0C98CEE285C39CB15B] - 08/06/2012 - 07:55:27 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]
O44 - LFC:[MD5.99D992AC9CA283B92CFB1FBAE35F1043] - 08/06/2012 - 07:55:13 ---A- . (...) -- C:\aaw7boot.log [8517]
O44 - LFC:[MD5.B756FF8586A8E43C1F3663E641F9E583] - 08/06/2012 - 07:50:12 --HA- . (...) -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [3616]
O44 - LFC:[MD5.B756FF8586A8E43C1F3663E641F9E583] - 08/06/2012 - 07:50:07 --HA- . (...) -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [3616]
O44 - LFC:[MD5.A563F73C23637F3159FAB6B54E2E9778] - 08/06/2012 - 07:49:29 ---A- . (...) -- C:\Pre_Scan.txt [422890]
O44 - LFC:[MD5.60A1417AAE716341D5FFFDCA2BC138DA] - 08/06/2012 - 07:42:59 ---A- . (...) -- C:\Windows\WindowsUpdate.log [6176]
O44 - LFC:[MD5.3BC5FC04FC34230780BD9C2C5B8F73EB] - 07/06/2012 - 15:42:07 ---A- . (...) -- C:\Windows\PFRO.log [1548]
O44 - LFC:[MD5.6532DE44EB8B7892E2471501DE63DEAA] - 07/06/2012 - 14:11:40 ---A- . (...) -- C:\Windows\wininit.ini [525]
O44 - LFC:[MD5.4DE3A86D4FA6BB7CB384559BC08A34FD] - 07/06/2012 - 13:31:27 ---A- . (...) -- C:\Windows\System32\FNTCACHE.DAT [372104]
O44 - LFC:[MD5.6BCAF46E2B7FA9ACE92B4D39F3037C5C] - 07/06/2012 - 08:38:46 ---A- . (...) -- C:\Windows\System32\acovcnt.exe [45056]
O44 - LFC:[MD5.CB17A47D090938A02DACB066D6D5A124] - 06/06/2012 - 20:23:17 ---A- . (...) -- C:\Windows\System32\rp_rules.dat [44]
O44 - LFC:[MD5.8A3D5B46FF8C9CED46304F1EBB5F9AFE] - 06/06/2012 - 20:23:17 ---A- . (...) -- C:\Windows\System32\rp_stats.dat [64]
O44 - LFC:[MD5.B99516E55BD20C92FE0FA2AD8CBB9FAE] - 06/06/2012 - 13:43:26 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1470810]
O44 - LFC:[MD5.E4F633694F3AA7F00F67C820105BC00F] - 06/06/2012 - 13:43:26 ---A- . (...) -- C:\Windows\System32\perfc009.dat [101250]
O44 - LFC:[MD5.75276902AC093A70FB50FB838A3564BA] - 06/06/2012 - 13:43:26 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [123556]
O44 - LFC:[MD5.59A545441BC70DB59DC92D5F60DCF798] - 06/06/2012 - 13:43:26 ---A- . (...) -- C:\Windows\System32\perfh009.dat [587178]
O44 - LFC:[MD5.3F5F371407095634B64100F8D1E16A71] - 06/06/2012 - 13:43:26 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [669566]
O44 - LFC:[MD5.01C47C2ECED034EF6F8C1552A97CFF00] - 06/06/2012 - 10:30:29 ---A- . (...) -- C:\Windows\System32\config.nt [2577]
O44 - LFC:[MD5.81E695913FEFD4E23360A69C0F151797] - 31/05/2012 - 09:09:46 ---A- . (.AVAST Software - avast! Keyboard Filter Driver.) -- C:\Windows\System32\Drivers\aswKbd.sys [24408]
O44 - LFC:[MD5.6C52B933B9ACE73D134752B8C077EDDF] - 30/05/2012 - 17:01:44 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\Windows\System32\FlashPlayerApp.exe [419488]
O44 - LFC:[MD5.2C9341C5E30174AD972AFFED9A10D5E3] - 30/05/2012 - 17:01:44 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\Windows\System32\FlashPlayerCPLApp.cpl [70304]
O44 - LFC:[MD5.7A3EA5CA1AE2C8D94DCA120E0BEA0B02] - 30/05/2012 - 17:00:00 ---A- . (...) -- C:\Windows\System32\lsdelete.exe [16432]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/05/2012 - 10:26:12 --HA- . (...) -- C:\Windows\System32\Drivers\Msft_User_WpdFs_01_07_00.Wdf [0]
O44 - LFC:[MD5.ECD81B99477AB4A93D7838EB40B870D0] - 16/05/2012 - 08:15:48 ---A- . (...) -- C:\Windows\System32\icrav03.rat [8798]
O44 - LFC:[MD5.6D21D0A95286DCD09E354B612F592EB7] - 16/05/2012 - 08:15:48 ---A- . (...) -- C:\Windows\System32\ticrf.rat [1988]
O44 - LFC:[MD5.4B333D3CC96AE66BD754329FD2989EE2] - 16/05/2012 - 08:15:40 ---A- . (...) -- C:\Windows\System32\ieuinit.inf [72822]
O44 - LFC:[MD5.0AE43C6C411254049279C2EE55630F95] - 12/05/2012 - 16:17:19 ---A- . (.AVAST Software - avast! File System Access Blocking Driver.) -- C:\Windows\System32\Drivers\aswFsBlk.sys [20696]
O44 - LFC:[MD5.B32873E5A1443C0A1E322266E203BF10] - 12/05/2012 - 16:17:19 ---A- . (.AVAST Software - avast! self protection module.) -- C:\Windows\System32\Drivers\aswSP.sys [337880]
O44 - LFC:[MD5.6FF544175A9180C5D88534D3D9C9A9F7] - 12/05/2012 - 16:17:17 ---A- . (.AVAST Software - avast! TDI Filter Driver.) -- C:\Windows\System32\Drivers\aswTdi.sys [53848]
O44 - LFC:[MD5.DA12626FD9A67F4E917E2F2FBE1E1764] - 12/05/2012 - 16:17:17 ---A- . (.AVAST Software - avast! TDI Redirect Driver.) -- C:\Windows\System32\Drivers\aswRdr.sys [35672]
O44 - LFC:[MD5.DCB199B967375753B5019EC15F008F53] - 12/05/2012 - 16:17:15 ---A- . (.AVAST Software - avast! Virtualization Driver.) -- C:\Windows\System32\Drivers\aswSnx.sys [612184]
O44 - LFC:[MD5.6693141560B1615D8DCCF0D8EB00087E] - 12/05/2012 - 16:17:14 ---A- . (.AVAST Software - avast! File System Minifilter for Windows 2.) -- C:\Windows\System32\Drivers\aswMonFlt.sys [57688]
O44 - LFC:[MD5.6964EE1C0160B21E00967681F9128568] - 12/05/2012 - 16:16:46 ---A- . (.AVAST Software - avast! Screen Saver stub.) -- C:\Windows\avastSS.scr [41184]
O44 - LFC:[MD5.4AD63592D55E91ABB4E29541358CEAEE] - 12/05/2012 - 16:16:46 ---A- . (.AVAST Software - avast! start-up scanner.) -- C:\Windows\System32\aswBoot.exe [201352]
O44 - LFC:[MD5.358A03A7A47F0AD71E84306AC635A626] - 12/05/2012 - 13:24:20 ---A- . (.Pas de propriétaire - Programme d'authentification du périphériqu.) -- C:\Windows\System32\EhStorAuthn.dll [117248]
O44 - LFC:[MD5.9A7E344C3D52EE1A2EF003B33B1C1BF1] - 12/05/2012 - 13:24:16 ---A- . (.Microsoft - NPS Migration Plugin.) -- C:\Windows\System32\IasMigPlugin.dll [454144]
O44 - LFC:[MD5.81638E6E467193699B5A800732ECBDE4] - 12/05/2012 - 13:23:11 ---A- . (.Microsoft - Classe d'assistance SMB (partage de fichier.) -- C:\Windows\System32\SMBHelperClass.dll [83456]
O44 - LFC:[MD5.52CB0185C73E1BA86CC7F726F22523C3] - 10/04/2009 - 22:28:22 ---A- . (...) -- C:\Windows\System32\msjetoledb40.dll [368640]
O44 - LFC:[MD5.AD4C3968CE1DB3A3A4632E1CDECA9555] - 10/04/2009 - 20:48:20 ---A- . (...) -- C:\Windows\System32\eaphost.tmf [344698]
O44 - LFC:[MD5.A3EB38D309C5682BBA0E23732C5D4AF2] - 10/04/2009 - 20:46:16 ---A- . (...) -- C:\Windows\System32\WFP.TMF [208966]
O44 - LFC:[MD5.4DF0D81B2B19B87DBFF241619DCDDC31] - 10/04/2009 - 20:43:52 ---A- . (...) -- C:\Windows\System32\dot3.tmf [442788]
O44 - LFC:[MD5.16D06DC26B8BD160AD81EE271D9577D8] - 10/04/2009 - 20:43:38 ---A- . (...) -- C:\Windows\System32\onex.tmf [392170]
O44 - LFC:[MD5.E9E66706083BFE4B0070EE0A5E8D42DB] - 10/04/2009 - 17:59:52 ---A- . (...) -- C:\Windows\System32\StructuredQuerySchema.bin [107612]
O44 - LFC:[MD5.B51BF7934D2B657454F66035AA5BFA03] - 10/04/2009 - 17:54:26 ---A- . (...) -- C:\Windows\System32\locale.nls [3662128]
O44 - LFC:[MD5.75DFEB04C0C978810720283C1B5CD7B1] - 06/03/2009 - 17:11:18 ---A- . (...) -- C:\Windows\System32\systemsf.ebd [130008]
O44 - LFC:[MD5.07400BC21119204892795F015052CDF4] - 19/02/2009 - 16:20:52 ---A- . (...) -- C:\Windows\System32\RacUR.xml [9212]
O44 - LFC:[MD5.6F7C27002EA0F9496070A1150C977DEC] - 19/02/2009 - 16:20:52 ---A- . (...) -- C:\Windows\System32\spcinstrumentation.man [9239]
O44 - LFC:[MD5.4C58B5E71FEEFD18BB7F537343C7219A] - 18/02/2009 - 10:43:20 ---A- . (...) -- C:\Windows\System32\RacUREx.xml [153]
O44 - LFC:[MD5.BCDBB5CEA1E8AEA0FA353691EB003728] - 18/02/2009 - 10:39:58 ---A- . (...) -- C:\Windows\System32\slmgr.vbs [92918]
~ Scan Files in 00mn 33s

---\\ Déni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll
O48 - LSA:Local Security Authority Notification Packages . (...) -- C:\Windows\System32\ASWLNPkg.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll
~ Scan Keys in 00mn 00s

---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Volume Manager Extension Driver.) -- C:\Windows\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Volume Manager Extension Driver.) -- C:\Windows\System32\Drivers\volmgrx.sys
~ Scan CSB in 00mn 00s

---\\ MountPoints2 Shell Key (O51) (None)

---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
~ Scan Keys in 00mn 00s

---\\ ShareTools MSconfig StartupReg (O53)
O53 - SMSR:HKLM\...\startupreg\Advanced SystemCare 5 [Key] . (.IObit - Advanced SystemCare 5 Tray.) -- C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe
O53 - SMSR:HKLM\...\startupreg\ATKMEDIA [Key] . (.ASUS - ATK Media.) -- C:\Program Files\ASUS\ATK Media\DMedia.exe
O53 - SMSR:HKLM\...\startupreg\ATKOSD2 [Key] . (.ASUS - ATKOSD2.) -- C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
O53 - SMSR:HKLM\...\startupreg\CognizanceTS [Key] . (.Cognizance Corporation - Terminal Services Virtual Channel Client.) -- C:\Program Files\ASUSSE~1\ASUSSE~1\Bin\ASTSVCC.dll
O53 - SMSR:HKLM\...\startupreg\Freecorder FLV Service [Key] . (.Applian Technologies, Inc. - FLV Service for Freecorder.) -- C:\Program Files\Freecorder\FLVSrvc.exe
O53 - SMSR:HKLM\...\startupreg\HControlUser [Key] . (.Pas de propriétaire - HControlUser.) -- C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
O53 - SMSR:HKLM\...\startupreg\IAStorIcon [Key] . (.Intel Corporation - Delayed launcher.) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe
O53 - SMSR:HKLM\...\startupreg\NvMediaCenter [Key] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\Windows\system32\NvMcTray.dll
O53 - SMSR:HKLM\...\startupreg\Windows Defender [Key] . (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe
~ Scan SMSR Keys in 00mn 00s

---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\System32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\System32\credssp.dll
~ Scan Keys in 00mn 00s

---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=0
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=0
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
~ Scan Keys in 00mn 00s

---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDesktop"=0
O56 - MWPE:[HKLM\...\policies\Explorer] - "BindDirectlyToPropertySetStorage"=0
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDesktop"=0
~ Scan Keys in 00mn 00s

---\\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.04F0FCAC69C7C71A3AC4EB97FAFC8303] - 21/01/2008 - 03:23:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [422968]
O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 02/11/2006 - 08:09:42 ---A- . (...) -- C:\Windows\System32\ANSI.SYS [9029]
~ Scan Drivers in 00mn 00s

---\\ Liste des outils de nettoyage (O63)
O63 - Logiciel: HijackThis 2.0.2 - (.TrendMicro.) [HKLM] -- HijackThis
O63 - Logiciel: ZHPDiag 1.31 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
~ Scan ADS in 00mn 00s

---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d'événements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <ChromeHTML>[HKLM\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.com> <>[HKU\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.exe> <>[HKU\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d'événements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
~ Scan Keys in 00mn 00s

---\\ Start Menu Internet (O68)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\Firefox.exe
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (...) -- C:\Users\OLIVE\AppData\Local\Google\Chrome\Application\Chrome.exe (.not file.)
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe (.not file.)
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Program Files\Google\Chrome\Application\chrome.exe (.not file.)
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Windows\system32\ie4uinit.exe (.not file.)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe (.not file.)
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Program Files\Google\Chrome\Application\chrome.exe (.not file.)
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Windows\system32\ie4uinit.exe (.not file.)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe (.not file.)
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Program Files\Google\Chrome\Application\chrome.exe (.not file.)
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Windows\system32\ie4uinit.exe (.not file.)
~ Scan Keys in 00mn 00s

---\\ Search Browser Infection (O69)
O69 - SBI: C:\Users\OLIVE\AppData\Roaming\Mozilla\Firefox\Profiles\u3objlzb.default\searchplugins\conduit.xml
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933..clientLogIsEnabled", false);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.AppTrackingLastCheckTime", "Wed May 30 2012 17:58:44 GMT+0200");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.BrowserCompStateIsOpen_129681785283868963", true);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.BrowserCompStateIsOpen_129686665230467549", true);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.CTID", "CT1060933");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.CurrentServerDate", "8-6-2012");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.DSChangedManually", true);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.DSInstall", true);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.DialogsAlignMode", "LTR");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.DialogsGetterLastCheckTime", "Thu Jun 07 2012 21:58:47 GMT+0200");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.DownloadReferralCookieData", "");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.FirstServerDate", "13-5-2012");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.FirstTime", true);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.FirstTimeFF3", true);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.FirstTimeHiddenVer", true);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.FixPageNotFoundErrors", true);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.GroupingServerCheckInterval", 1440);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.HPInstall", true);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.HasUserGlobalKeys", true);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.HomePageProtectorEnabled", true);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.Initialize", true);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.InitializeCommonPrefs", true);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.InstallationAndCookieDataSentCount", 3);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.InstalledDate", "Sun May 13 2012 09:53:12 GMT+0200");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.InvalidateCache", false);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.IsAlertDBUpdated", true);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.IsGrouping", false);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.IsInitSetupIni", true);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.IsMulticommunity", false);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.IsOpenThankYouPage", false);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.IsOpenUninstallPage", true);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.IsProtectorsInit", true);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.LanguagePackLastCheckTime", "Thu Jun 07 2012 17:15:06 GMT+0200");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.LanguagePackReloadIntervalMM", 1440);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.LastLogin_3.12.2.3", "Wed May 30 2012 17:58:36 GMT+0200");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.LastLogin_3.13.0.6", "Fri Jun 08 2012 07:28:21 GMT+0200");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.LatestVersion", "3.13.0.6");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.Locale", "en-us");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.MCDetectTooltipHeight", "83");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.MCDetectTooltipUrl", "http://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.MCDetectTooltipWidth", "295");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.MyStuffEnabledAtInstallation", true);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.OriginalFirstVersion", "3.12.2.3");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.RadioIsPodcast", false);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.RadioLastCheckTime", "Thu Jun 07 2012 17:15:06 GMT+0200");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.RadioLastUpdateIPServer", "0");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.RadioLastUpdateServer", "129326918102570000");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.RadioMediaID", "21504191");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.RadioMediaType", "Media Player");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.RadioMenuSelectedID", "EBRadioMenu_CT106093321504191");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.RadioShrinkedFromSetup", false);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.RadioStationName", "KFOG");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.RadioStationURL", "http://live.cumulusstreaming.com/KFOG-FM");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.SavedHomepage", "chrome://branding/locale/browserconfig.properties");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.SearchFromAddressBarIsInit", true);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.SearchInNewTabEnabled", true);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.SearchInNewTabIntervalMM", 1440);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.SearchInNewTabLastCheckTime", "Thu Jun 07 2012 17:15:01 GMT+0200");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.SearchProtectorEnabled", false);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.SearchProtectorToolbarDisabled", false);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.SendProtectorDataViaLogin", true);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.ServiceMapLastCheckTime", "Thu Jun 07 2012 17:15:01 GMT+0200");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.SettingsLastCheckTime", "Fri Jun 08 2012 07:28:20 GMT+0200");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.SettingsLastUpdate", "1337169810");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.ThirdPartyComponentsInterval", 504);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.ThirdPartyComponentsLastCheck", "Sun Jun 03 2012 11:12:54 GMT+0200");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.ThirdPartyComponentsLastUpdate", "1331805997");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.ToolbarShrinkedFromSetup", false);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.UserID", "UN72533724421943197");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.ValidationData_Toolbar", 2);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.alertChannelId", "15651");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.autoDisableScopes", -1);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.backendstorage.autocompletepro_enable", "31");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.backendstorage.autocompletepro_enable_auto", "31");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.backendstorage.cbcountry_000", "4652");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.backendstorage.cbfirsttime", "53756E204D617920313320323031322030393A35333A313920474D542B30323030");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.backendstorage.printitgreenstatus", "74727565");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.backendstorage.shoppingapp.gk.exipres", "467269204D617920313820323031322030393A35333A313720474D542B30323030")[...]
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.backendstorage.shoppingapp.gk.geolocation", "6672616E6365");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.backendstorage.url_history0001", "687474703A2F2F7777772E796F75747562652E636F6D2F77617463683F763D7937794742347[...]
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.components.129677514212584059", false);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.components.129681785283868963", false);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.components.129686665230467549", false);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.globalFirstTimeInfoLastCheckTime", "Sat Jun 02 2012 11:50:35 GMT+0200");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.homepageProtectorEnableByLogin", true);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.initDone", true);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.isAppTrackingManagerOn", true);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.isFirstRadioInstallation", false);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.myStuffEnabled", true);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.myStuffPublihserMinWidth", 400);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.myStuffServiceIntervalMM", 1440);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.navigateToUrlOnSearch", false);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.oldAppsList", "128346981843587669,128280995260143876,111,129272674122038321,129032145384800518,12903214824761[...]
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.revertSettingsEnabled", true);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.searchProtectorDialogDelayInSec", 10);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.searchProtectorEnableByLogin", true);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.testingCtid", "");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.toolbarAppMetaDataLastCheckTime", "Thu Jun 07 2012 17:15:06 GMT+0200");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.toolbarContextMenuLastCheckTime", "Sun May 13 2012 09:53:00 GMT+0200");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CT1060933.usagesFlag", 2);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\OLIVE\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\u3objlzb.def[...]
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.13.0.6");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CommunityToolbar.ToolbarsList", "CT1060933");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CommunityToolbar.ToolbarsList2", "CT1060933");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CommunityToolbar.ToolbarsList4", "CT1060933");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CommunityToolbar.globalUserId", "d5f30dad-c289-4a12-be42-d85c6631d402");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT1060933");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Sun Jun 03 2012 19:54:16 GMT+0200");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CommunityToolbar.notifications.alertEnabled", false);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CommunityToolbar.notifications.locale", "en");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Thu Jun 07 2012 17:25:36 GMT+0200");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CommunityToolbar.notifications.showTrayIcon", false);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CommunityToolbar.notifications.userId", "7926de93-8c37-47f0-bdd9-3ab24012bef9");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CommunityToolbar.originalHomepage", "chrome://branding/locale/browserconfig.properties");
O69 - SBI: prefs.js [OLIVE - u3objlzb.default] user_pref("CommunityToolbar.originalSearchEngine", "chrome://browser-region/locale/region.properties");
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - https://www.bing.com/?toHttps=1&redig=69DA0EF8272048D9864AF4DB37211DE8
O69 - SBI: SearchScopes [HKCU] {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} - (Ask Search) - http://www.search.ask.com/?o=10148&l=dis
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - https://www.google.com/?gws_rd=ssl
O69 - SBI: SearchScopes [HKCU] {95B7759C-8C7F-4BF1-B163-73684A933233} - (AVG Secure Search) - https://isearch.avg.com/
O69 - SBI: SearchScopes [HKCU] {afdbddaa-5d3f-42ee-b79c-185a7020515b} [DefaultScope] - (Freecorder Customized Web Search) - http://search.conduit.com
~ Scan Keys in 00mn 00s

---\\ Recherche des services démarrés par Svchost (O83)
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d'application.) -- C:\Windows\System32\aelupsvc.dll [24576]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [62976]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [247808]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [40448]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [40448]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [125952]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [125952]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [438784]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [315392]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d'accès distant.) -- C:\Windows\System32\rasauto.dll [90624]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d'accès distant.) -- C:\Windows\System32\rasmans.dll [262144]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d'interface dynamique.) -- C:\Windows\System32\mprdim.dll [68608]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d'événements système (SENS).) -- C:\Windows\System32\sens.dll [47104]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll [288256]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\Windows\System32\tapisrv.dll [242688]
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes Terminal Server.) -- C:\Windows\System32\termsrv.dll [449024]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll [1929952]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll [1929952]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [247808]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll [200704]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll [19968]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d'application.) -- C:\Windows\System32\appinfo.dll [33280]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [111616]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\System32\mmcss.dll [45056]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [153088]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [153088]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [162304]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [601600]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service de configuration des services Terminal Server.) -- C:\Windows\System32\sessenv.dll [84992]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d'ordinateurs.) -- C:\Windows\System32\browser.dll [81920]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - DLL du service Explorateur d'ordinateurs.) -- C:\Windows\System32\browser.dll [81920]
~ Scan Services in 00mn 00s

---\\ Recherche particuliere à la racine de certains dossiers (O84)
[MD5.42624123577F5FB2115F68688A173549] [SPRF][12/05/2012] (...) -- C:\ProgramData\1336819028.bdinstall.bin [194625]
[MD5.7EA0651D945DFC2F08A4519D705248CE] [SPRF][12/05/2012] (...) -- C:\ProgramData\1336819707.bdinstall.bin [21442]
[MD5.7D4A1ADFC8E09E7488716D7E96FA03B9] [SPRF][12/05/2012] (...) -- C:\ProgramData\1336822738.bdinstall.bin [213758]
[MD5.888864860B39A4083A451E0B185E5D30] [SPRF][12/05/2012] (...) -- C:\ProgramData\1336831471.bdinstall.bin [216692]
[MD5.88366676AC8C44105FD855C67A49A77C] [SPRF][12/05/2012] (...) -- C:\ProgramData\1336832587.bdinstall.bin [198536]
[MD5.976A60DC70BD5FB11B8BA69FA5C37AD2] [SPRF][08/06/2012] (...) -- C:\ProgramData\nvModes.dat [31871]
[MD5.3EF8A84CC1270AFC8923630951890BBB] [SPRF][08/06/2012] (...) -- C:\Users\OLIVE\AppData\Local\d3d9caps.dat [1356]
[MD5.E06350740405B1315B4059DD372FDB58] [SPRF][07/06/2012] (...) -- C:\Users\OLIVE\AppData\Local\Temp\~gu-ver.dat [131]
~ Scan Files in 00mn 00s

---\\ Firewall Active Exception List (FirewallRules) (O87)
O87 - FAEL: "{F36B9AF4-5B61-4C62-83DE-7C7A168BC9CE}" | In - Public - P6 - TRUE | .(.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\maconfservice.exe
O87 - FAEL: "{4B18B29B-7D98-4A8F-8ED5-E4FC447F339A}" | In - Public - P17 - TRUE | .(.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\maconfservice.exe
O87 - FAEL: "{17CD7102-C64E-4BA0-80ED-16FD56C1EE92}" | In - None - P6 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\Program Files\uTorrent\uTorrent.exe
O87 - FAEL: "{0B2B9D81-1474-4E4C-9C5F-9A021E377804}" | In - None - P17 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\Program Files\uTorrent\uTorrent.exe
~ Scan Firewall in 00mn 00s

---\\ Scan Additionnel (O88)
Database Version : 9171 - (24/05/2012)
Clés trouvées (Keys found) : 45
Valeurs trouvées (Values found) : 2
Dossiers trouvés (Folders found) : 14
Fichiers trouvés (Files found) : 2

[HKLM\Software\Classes\AppID\GenericAskToolbar.DLL] =>Toolbar.AskSBar
[HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd] =>Toolbar.AskSBar
[HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd.1] =>Toolbar.AskSBar
[HKLM\Software\Classes\Toolbar.CT1060933] =>Toolbar.Agent
[HKLM\Software\Classes\Toolbar.CT2851639] =>Toolbar.Agent
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}] =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0}] =>Adware.PredictAd
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0FB6A909-6086-458F-BD92-1F8EE10042A0}] =>Adware.PredictAd
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1392B8D2-5C05-419F-A8F6-B9F15A596612}] =>Toolbar.Conduit
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1392B8D2-5C05-419F-A8F6-B9F15A596612}] =>Toolbar.Conduit
[HKLM\Software\Classes\CLSID\{1392B8D2-5C05-419F-A8F6-B9F15A596612}] =>Toolbar.Conduit
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1392B8D2-5C05-419F-A8F6-B9F15A596612}] =>Toolbar.Conduit
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}] =>Toolbar.Agent
[HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}] =>Toolbar.AskSBar
[HKLM\Software\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}] =>Toolbar.Ask
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}] =>Toolbar.AskSBar
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}] =>Toolbar.AskSBar
[HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}] =>Toolbar.Ask
[HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}] =>Toolbar.AskSBar
[HKLM\Software\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}] =>Toolbar.Agent
[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}] =>Toolbar.AskSBar
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}] =>Toolbar.AskSBar
[HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}] =>Toolbar.Ask
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}] =>Toolbar.Conduit
[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}] =>Toolbar.Conduit
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}] =>Toolbar.AskSBar
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}] =>Toolbar.AskSBar
[HKLM\Software\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}] =>Toolbar.AskSBar
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}] =>Toolbar.AskSBar
[HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF] =>Toolbar.AskSBar
[HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF] =>Toolbar.AskSBar
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF] =>Toolbar.AskSBar
[HKCU\Software\Ask&Record] =>Toolbar.Agent
[HKCU\Software\Ask.com] =>Toolbar.AskBar
[HKCU\Software\Ask.com] =>Toolbar.AskBarDis
[HKCU\Software\AppDataLow\Software\AskToolbar] =>Toolbar.AskTBar
[HKCU\Software\AppDataLow\AskToolbarInfo] =>Toolbar.AskTBar
[HKCU\Software\AppDataLow\Software\ConduitSearchScopes] =>Toolbar.Conduit
[HKCU\Software\AppDataLow\Software\PriceGong] =>Adware.PriceGong
[HKCU\Software\AppDataLow\Toolbar] =>Toolbar.Conduit
[HKCU\Software\AppDataLow\Software\uTorrentBar_FR] =>Toolbar.Conduit
[HKLM\Software\uTorrentBar_FR] =>Toolbar.Conduit
[HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]:{D4027C7F-154A-4066-A1AD-4243D8127440} =>Toolbar.AskSBar
[HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{D4027C7F-154A-4066-A1AD-4243D8127440} =>Toolbar.AskSBar
C:\Program Files\Ask.com =>Toolbar.AskBar
C:\Program Files\Conduit =>Toolbar.Conduit
C:\Program Files\Freecorder =>Toolbar.Conduit
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freecorder =>Toolbar.Conduit
C:\Users\OLIVE\AppData\Local\Conduit =>Toolbar.Conduit
C:\Users\OLIVE\AppData\
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
aldebaran95 Messages postés 265 Statut Membre 13
 
Ok,c'est parti mon kiki :

https://www.cjoint.com/?BFkc2tzWdFV
0
antipolis a Messages postés 17152 Statut Membre 2 860
 
Bonjour.

Il ne vous reste plus que la "réinitialisation à l'état d'usine".

Une fiche pratique CCM pour vous :
https://www.commentcamarche.net/informatique/windows/123-restaurer-un-pc-a-l-etat-d-usine/
ATTENTION, vos données ainsi que les programmes que vous avez installés seront effacés.

Et je vais me repépéter pour au moins la 10² ième fois.
Utilisez deux partitions.
Une pour le système et les programmes,
l'autre pour les données.
Et, surtout si votre PC est aussi votre outil de travail,
===============================
FAITES DES IMAGES DE VOTRE SYSTEME,
FAITES DES SAUVEGARDES DE VOS DONNEES.
C'EST CERTAIN,
UN JOUR OU L'AUTRE, VOUS EN AUREZ BESOIN
===============================
Moins de 10 minutes pour restaurer "système" et "programmes".
Juste le temps d'une pose café.
No stress.

Mais vous n'êtes pas obligé de me croire.
-2
jacques.gache Messages postés 34829 Statut Contributeur sécurité 1 618
 
bonjourle zhpdiag est pas complet essais de le poster sur cijoint ou autre !! si pas possible en mode normal essais en mode sans echec avec prise en charge réseau
0
aldebaran95 Messages postés 265 Statut Membre 13
 
En mode normal c'est pas possible,le pc bug.Là je suis en mode sans échec et ça ne prend aucun fichier joint , c'est pour ça que j'ai fait un copier/coller.
Je vais voir pour le fichier ZHPDiag .
0
aldebaran95 Messages postés 265 Statut Membre 13
 
Merci encore pour le temps que tu passes sur mon cas,je me doute que lire toutes ces lignes doit être un calvaire.
Je n'ai malheureusement pas le choix .
0
jacques.gache Messages postés 34829 Statut Contributeur sécurité 1 618
 
En mode normal c'est pas possible,le pc bug.Là je suis en mode sans échec et ça ne prend aucun fichier joint

normal en mode sans echec pas de connection internet il faut redémarrer soit en mode normal et si pas possible faire le mode sans echec avec prise en charge réseau déjà dit https://forums.commentcamarche.net/forum/affich-25330542-plantage-de-pc-sous-vista-sp2#9
0
aldebaran95 Messages postés 265 Statut Membre 13
 
Oui Jacques,je suis en mode sans échec avec prise réseau depuis le début ,sinon je ne pourrai pas dial avec toi ici car je suis sur mon pc infecté là (je pensais que tu avais compris,j'aurai dû le préciser).
Je ne peux joindre aucun fichier,que ce soit sur le site Cjoint ou sur mon adresse mail, je ne sais pas si c'est le fait du mode sans échec avec prise réseau ou autre ...
0