Interprétation log ,aide contre fenetres intempestives

Bonjour, j'ai besoin d'aide pour l'interprétation du rapport de mon PC, et d'une solution contre ces fenetres qui ne cessent de s'ouvrir toutes les 5 minutes car cela ralenti mon ordi. Merci, et bonne année à tous.


Rapport de ZHPDiag v1.34.19 par Nicolas Coolman, Update du 09/01/2013
Run by alida at 13/01/2013 22:20:05
State : Version à jour.
UAC : Not Found


---\\ Web Browser
MSIE: Internet Explorer v8.0.6001.18702
MFIE: Mozilla Firefox 18.0 v18.0
GCIE: Google Chrome v24.0.1312.52 (Defaut)

---\\ Windows Product Information
~ Langage: Français
Windows XP Professional Service Pack 3 (Build 2600)
Windows Automatic Updates : OK
Windows Genuine Advantage : KO

---\\ System Information
~ Processor: x86 Family 6 Model 14 Stepping 8, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 2039 MB (67% free)
System Restore: Activé (Enable)
System drive C: has 41 GB (55%) free of 75 GB

---\\ Logged in mode
~ Computer Name: PIERO-938DC0028
~ User Name: alida
~ All Users Names: SUPPORT_388945a0, pierre-alain, HelpAssistant, alida, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Documents and Settings\alida\Application Data\
~ %Desktop% : C:\Documents and Settings\alida\Bureau\
~ %Favorites% : C:\Documents and Settings\alida\Favoris\
~ %LocalAppData% : C:\Documents and Settings\alida\Local Settings\Application Data\
~ %StartMenu% : C:\Documents and Settings\alida\Menu Démarrer\
~ %Windir% : C:\WINDOWS\
~ %System% : C:\WINDOWS\system32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 41 Go of 75 Go)
D:\ CD-ROM drive (Not Inserted)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : Out Of Date
~ Scan Security Center in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.14/04/2008 - 03:34:03.) -- C:\WINDOWS\Explorer.exe [1037824]
[MD5.1A5B88015B3823D31C5842DE0DBFE842] - (.Microsoft Corporation - Internet Extensions for Win32.) (.16/05/2012 - 16:06:36.) -- C:\WINDOWS\system32\wininet.dll [916992]
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.14/04/2008 - 03:34:28.) -- C:\WINDOWS\system32\Winlogon.exe [512000]
[MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.17/08/2011 - 14:49:54.) -- C:\WINDOWS\system32\Drivers\AFD.sys [138496]
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/04/2008 - 19:40:30.) -- C:\WINDOWS\system32\Drivers\atapi.sys [96512]
[MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/04/2008 - 20:14:21.) -- C:\WINDOWS\system32\Drivers\Cdfs.sys [63744]
[MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.13/04/2008 - 19:40:46.) -- C:\WINDOWS\system32\Drivers\Cdrom.sys [62976]
[MD5.31F923EB2170FC172C81ABDA0045D18C] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) (.14/04/2008 - 02:57:38.) -- C:\WINDOWS\system32\Drivers\Fips.sys [44672]
[MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.13/04/2008 - 17:36:05.) -- C:\WINDOWS\system32\Drivers\HDAudBus.sys [144384]
[MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - (.Microsoft Corporation - Pilote de port i8042.) (.14/04/2008 - 03:00:52.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [54144]
[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.13/04/2008 - 19:40:58.) -- C:\WINDOWS\system32\Drivers\Imapi.sys [42112]
[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.13/04/2008 - 19:57:15.) -- C:\WINDOWS\system32\Drivers\IpNat.sys [152832]
[MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.13/04/2008 - 20:19:42.) -- C:\WINDOWS\system32\Drivers\IPSec.sys [75264]
[MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.15/07/2011 - 14:29:31.) -- C:\WINDOWS\system32\Drivers\MRxSmb.sys [456320]
[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.13/04/2008 - 20:21:00.) -- C:\WINDOWS\system32\Drivers\netBT.sys [162816]
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.13/04/2008 - 20:15:53.) -- C:\WINDOWS\system32\Drivers\ntfs.sys [574976]
[MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/04/2008 - 03:09:40.) -- C:\WINDOWS\system32\Drivers\Parport.sys [80384]
[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.13/04/2008 - 20:19:43.) -- C:\WINDOWS\system32\Drivers\Rasl2tp.sys [51328]
[MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.13/04/2008 - 19:32:51.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [196224]
[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) (.14/04/2008 - 02:57:34.) -- C:\WINDOWS\system32\Drivers\redbook.sys [58752]
[MD5.46DE1126684369BACE4849E4FC8C43CA] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.14/04/2008 - 02:56:04.) -- C:\WINDOWS\system32\Drivers\volsnap.sys [53376]
~ Scan Generic Processes in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/1887
~ Mes musiques (My Musics) : 2/3
~ Mes Favoris (My Favorites) : 1/10
~ Mes Documents (My Documents) : 2/3598
~ Mon Bureau (My Desktop) : 0/78
~ Menu demarrer (Programs) : 1/24
~ Scan Hidden Files in 00mn 04s



---\\ Processus lancés
[MD5.9FCD0930616714A752F48DDBA54F3109] - (...) -- C:\Documents and Settings\All Users\Application Data\Browser Manager\2.3.787.43\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe [2309656] [PID.1680]
[MD5.88D586E3D6EE17D5C7B8540F72F49148] - (...) -- C:\Program Files\RIFT Technologies\InstallClick Connector\installclick.exe [149872] [PID.1796]
[MD5.1FDB89B860EB7BA96A45E749A784227E] - (.Oracle Corporation - Java(TM) Quick Starter Service.) -- C:\Program Files\Java\jre7\bin\jqs.exe [161736] [PID.1820]
[MD5.04C1DCBB226C6AE647B794833CE3CEB6] - (.Hewlett-Packard Development Company, L.P. - hpqwmiex Module.) -- C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [135168] [PID.2004]
[MD5.1D1777C95D56CAB19F57C4E31A6D888B] - (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe [141848] [PID.600]
[MD5.4B2A6B41795C76A425FC109259D9A783] - (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe [166424] [PID.616]
[MD5.18C6F5AA158F31F46A1707066F827EB4] - (.Intel Corporation - igfxsrvc Module.) -- C:\WINDOWS\system32\igfxsrvc.exe [252440] [PID.624]
[MD5.10557853C3B4C0CA88441212DC341A23] - (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe [137752] [PID.628]
[MD5.EB4964B2361DD80EA9AD6C9885105B92] - (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1028096] [PID.928]
[MD5.995BEB69AE5C50D354894354F5A6CD5A] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe [252296] [PID.1192]
[MD5.14629D14EEE9D9827257CA4683D509C9] - (...) -- C:\Program Files\TUTO4PC\tuto4pc_fr_4.exe [3771240] [PID.1380]
[MD5.E13EA4860E8F2AA845B53BFD2B6FEC5B] - (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe [1695232] [PID.1248]
[MD5.FE3FD9452E055675A568638CB40626ED] - (.Realtek Semiconductor Corp. - RtWLan ( For XP/2003) Application.) -- C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtWLan.exe [991232] [PID.2264]
[MD5.A53D322577CE543338D5E8A0C442A757] - (.Microsoft Corporation - Clavier visuel.) -- C:\WINDOWS\system32\OSK.exe [216576] [PID.2292]
[MD5.749949494676218FFA99501F4AA22ECC] - (.OpenOffice.org - OpenOffice.org 3.4.1.) -- C:\Program Files\OpenOffice.org 3\program\soffice.exe [10376704] [PID.2308]
[MD5.4EE367B8B1964160A1F1B80095183D3A] - (.OpenOffice.org - OpenOffice.org 3.4.1.) -- C:\Program Files\OpenOffice.org 3\program\soffice.bin [10368512] [PID.2324]
[MD5.EFD54F044894E26BACE07A8C7B29B798] - (.Microsoft Corporation - msswchx.) -- C:\WINDOWS\system32\MSSWCHX.exe [6656] [PID.2332]
[MD5.173F13CDEBF8E067629462E9D6E481CB] - (...) -- C:\Program Files\RIFT Technologies\InstallClick Connector\installclick-connector.exe [769392] [PID.3344]
[MD5.8D00762EE50998F7ED0AFD5B9A3ADED5] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [917552] [PID.2280]
[MD5.7F7BC88C8FB6B52989E0E93084B5E678] - (.Microsoft Corporation - Windows® installer.) -- C:\WINDOWS\system32\msiexec.exe [95744] [PID.2428]
[MD5.0F3AA1E262FC566E4A652CFE837DF10F] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [4969984] [PID.2896]
~ Scan Processes Running in 00mn 03s



---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Documents and Settings\alida\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences
~ Scan Google Browser in 00mn 00s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Documents and Settings\alida\Application Data\Mozilla\Firefox\Profiles\opdtn5dq.default\prefs.js
C:\Documents and Settings\alida\Application Data\Mozilla\Firefox\Profiles\opdtn5dq.default\user.js
M3 - MFPP: Plugins - [alida] -- C:\Documents and Settings\alida\Application Data\Mozilla\Firefox\Profiles\opdtn5dq.default\searchplugins\BabylonMngr.xml
M3 - MFPP: Plugins - [alida] -- C:\Documents and Settings\alida\Application Data\Mozilla\Firefox\Profiles\opdtn5dq.default\searchplugins\Search.xml
M3 - MFPP: Plugins - [alida] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [alida] -- C:\Program Files\Mozilla FireFox\searchplugins\babylon.xml
M3 - MFPP: Plugins - [alida] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [alida] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [alida] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [alida] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [alida] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [alida] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
M0 - MFSP: prefs.js [alida - opdtn5dq.default] http://isearch.babylon.com
M2 - MFEP: prefs.js [alida - opdtn5dq.default\ffxtlbr@claro.com] [] Claro Toolbar v1.5.0 (.claro-search.com/.)
M2 - MFEP: prefs.js [alida - opdtn5dq.default\ffxtlbr@funmoods.com] [] Funmoods.com v1.5.1 (.Volo-Net.)
M2 - MFEP: prefs.js [alida - opdtn5dq.default\{C9B68337-E93A-44EA-94DC-CB300EC06444}] [] IMinent Toolbar v5.30.4 (.IMinent.)
P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.4.0] - (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\WINDOWS\system32\npDeployJava1.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.4.0] - (.Oracle Corporation - Next Generation Java Plug-in 10.4.0 for Mozilla browsers.) -- C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.1.10329.0.) -- c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@playstation.com/PsndlCheck,version=1.00] - (.Sony Computer Entertainment Inc. - PlayStation(R)Network Downloader Check Plug-in.) -- C:\Program Files\Sony\PLAYSTATION Network Downloader\nppsndl.dll
P2 - FPN: [HKLM] [@SonyCreativeSoftware.com/Media Go,version=1.0] - (.Sony Network Entertainment International LL - 2.3.) -- C:\Program Files\Sony\Media Go\npmediago.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.5.) -- C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
~ Scan Firefox Browser in 00mn 00s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.iminent.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.funmoods.com
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,BrowserMngr Start Page = http://search.babylon.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.19258 (longhorn_ie8_gdr.120423-1946)) -- C:\WINDOWS\system32\ieframe.dll
~ Scan IE Browser in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <local>
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\WINDOWS\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Scan Keys in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F3 - REG:win.ini: load=C:\DOCUME~1\alida\LOCALS~1\Temp\{01526~1.EXE
~ Scan Keys in 00mn 00s



---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s
~ Nombre de lignes (Lines number): 20



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: Claro LTD Helper Object - {000F18F2-09EB-4A59-82B2-5AE4184C39C3} . (.Montera Technologeis LTD - Pas de description.) -- C:\Program Files\Claro LTD\claro\1.6.4.1\bh\claro.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} . (...) -- C:\Program Files\AVG\AVG2012\avgssie.dll (.not file.)
O2 - BHO: Funmoods Helper Object - {75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} . (...) -- C:\PROGRA~1\Funmoods\1.5.23.22\bh\escort.dll (.not file.)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\jp2ssv.dll
~ Scan BHO in 00mn 00s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Funmoods Toolbar - [HKLM]{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} . (...) -- C:\Program Files\Funmoods\1.5.23.22\escorTlbr.dll
O3 - Toolbar: Claro LTD Toolbar - [HKLM]{9E131A93-EED7-4BEB-B015-A0ADB30B5646} . (.Montera Technologeis LTD - Pas de description.) -- C:\Program Files\Claro LTD\claro\1.6.4.1\claroTlbr.dll
~ Scan Toolbar in 00mn 00s



---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [QlbCtrl.exe] . (. Hewlett-Packard Development Company, L.P. - Quick Launch Buttons.) -- C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] . (.Hewlett-Packard Development Company, L.P. - HPWAMain Module.) -- C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe
O4 - HKLM\..\Run: [ROC_ROC_JULY_P1] C:\Program Files\AVG Secure Search\ROC_ROC_JULY_P1.exe (.not file.)
O4 - HKLM\..\Run: [Tutorials] . (...) -- C:\Program Files\TUTO4PC\tuto4pc_fr_4.exe
O4 - HKLM\..\Run: [upt4pcfr4.exe] C:\Documents and Settings\pierre-alain\Local Settings\Application Data\tuto4pc_fr_4\upt4pcfr4.exe (.not file.)
O4 - HKCU\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
O4 - HKCU\..\Run: [Video Performer63615.exe] . (.Pas de propriétaire - Installer.) -- C:\Documents and Settings\alida\Local Settings\Temp\Video Performer63615.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-21-484763869-413027322-839522115-1004\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-21-484763869-413027322-839522115-1004\..\Run: [MSMSGS] . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
O4 - HKUS\S-1-5-21-484763869-413027322-839522115-1004\..\Run: [Video Performer63615.exe] . (.Pas de propriétaire - Installer.) -- C:\Documents and Settings\alida\Local Settings\Temp\Video Performer63615.exe
~ Scan Application in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader X.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-AA1000000001}\SC_Reader.ico
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Office Excel Viewer.lnk . (...) -- C:\WINDOWS\Installer\{95120000-003F-040C-0000-0000000FF1CE}\xlvwicon.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk . (.Microsoft Corporation.) -- C:\Program Files\Messenger\msmsgs.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Movie Maker\moviemk.exe
O4 - Global Startup: C:\Documents And Settings\pierre-alain\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe
O4 - Global Startup: C:\Documents And Settings\pierre-alain\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Documents And Settings\pierre-alain\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe
O4 - Global Startup: C:\Documents And Settings\pierre-alain\Menu Démarrer\Programmes\WebPlayerV2.lnk . (...) -- C:\Documents and Settings\pierre-alain\Application Data\Microsoft\Installer\{688D159D-6D7E-40CA-971E-F0E379D855B8}\_DECCDFCBF7CBC722C3948F.ex
O4 - Global Startup: C:\Documents And Settings\pierre-alain\Menu Démarrer\Programmes\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Documents And Settings\alida\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe
O4 - Global Startup: C:\Documents And Settings\alida\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Documents And Settings\alida\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe
O4 - Global Startup: C:\Documents And Settings\alida\Menu Démarrer\Programmes\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
~ Scan Global Startup in 00mn 00s



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} -- Clé orpheline
O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
~ Scan IE Extra Buttons in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
~ Scan Winsock in 00mn 00s



---\\ Onglet supplémentaire dans les options avancées d'Internet Explorer (O11)
O11 - Options group: [java_sun] Java (Oracle). (.Oracle Corporation - Java(TM) Deployment Library .) - C:\Program Files\Java\jre7\bin\deploy.dll
O11 - Options group: [java_vm] Java (Oracle). (.Oracle Corporation - Java(TM) Deployment Library .) - C:\Program Files\Java\jre7\bin\deploy.dll
~ Scan IE Plugins in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{117E650B-EC4A-404B-A09A-78C570D412EB}: DhcpNameServer = 89.2.0.1 89.2.0.2
O17 - HKLM\System\CS1\Services\Tcpip\..\{117E650B-EC4A-404B-A09A-78C570D412EB}: DhcpNameServer = 89.2.0.1 89.2.0.2
O17 - HKLM\System\CS3\Services\Tcpip\..\{117E650B-EC4A-404B-A09A-78C570D412EB}: DhcpNameServer = 89.2.0.1 89.2.0.2
~ Scan Domain in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} . (...) -- C:\Program Files\AVG\AVG2012\avgpp.dll
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- C:\WINDOWS\system32\inetcomm.dll
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll
O18 - Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Filter: lzdhtml - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
~ Scan Protocole Additionnel in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\WINDOWS\system32\cscdll.dll
O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\system32\dimsntfy.dll
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\WINDOWS\system32\igfxdev.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
~ Scan Winlogon in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - AppInit_DLLs: . (...) - c:\docume~1\alluse~1\applic~1\browse~1\23787~1.43\{16cdf~1\browse~1.dll
~ Scan AppInit DLL in 00mn 00s



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll
~ Scan SSODL in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Browser Manager (Browser Manager) . (...) - C:\Documents and Settings\All Users\Application Data\Browser Manager\2.3.787.43\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
O23 - Service: bwchxyjlq (bwchxyjlq) . (...) - C:\DOCUME~1\alida\LOCALS~1\Temp\DAT153.tmp.exe (.not file.)
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: hpqwmiex (hpqwmiex) . (.Hewlett-Packard Development Company, L.P. - hpqwmiex Module.) - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallClick Connector (InstallClick) . (...) - C:\Program Files\RIFT Technologies\InstallClick Connector\installclick.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Oracle Corporation - Java(TM) Quick Starter Service.) - C:\Program Files\Java\jre7\bin\jqs.exe
~ Scan Services in 00mn 00s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
O24 - Desktop General: BackupWallPaper - .(...) - C:\Documents and Settings\alida\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop General: WallPaper - .(...) - C:\Documents and Settings\alida\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
~ Scan Desktop Component in 00mn 00s



---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ Scan Keys in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Browser Manager.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Express FilesUpdate.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\WGASetup.job
[MD5.00000000000000000000000000000000] [APT] [Express FilesUpdate] (...) -- C:\Program Files\ExpressFiles\EFUpdater.exe (.not file.)
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
~ Scan Scheduled Task in 00mn 00s



---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Mise à jour de la version d'Internet Explorer - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} . (.Microsoft Corporation - IE Per User Active Setup Uninstall Utility.) -- C:\WINDOWS\system32\ieudinit.exe
O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Utilitaire d'installation du Lecteur Windows Media de Microsoft.) -- C:\WINDOWS\inf\unregmp2.exe
O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\WINDOWS\system32\ie4uinit.exe.mui
O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - IEAK branding.) -- C:\WINDOWS\system32\iedkcs32.dll
O40 - ASIC: Outlook Express - >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} . (.Microsoft Corporation - Windows NT User Data Migration Tool.) -- C:\WINDOWS\system32\shmgrate.exe
O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: Microsoft Windows Media Player 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\WINDOWS\system32\themeui.dll
O40 - ASIC: Microsoft Outlook Express 6 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Bibliothèque d'installation Outlook Express.) -- C:\Program Files\Outlook Express\setup50.exe
O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (...) -- C:\WINDOWS\INF\msnetmtg.inf
O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (...) -- C:\WINDOWS\INF\msmsgs.inf
O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\WINDOWS\system32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (...) -- C:\WINDOWS\INF\wmp11.inf
O40 - ASIC: Carnet d'adresses 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} . (.Microsoft Corporation - Bibliothèque d'installation Outlook Express.) -- C:\Program Files\Outlook Express\setup50.exe
O40 - ASIC: Mise à jour du Bureau Windows - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\WINDOWS\system32\ie4uinit.exe.mui
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- c:\WINDOWS\system32\mscories.dll
O40 - ASIC: Google Chrome - {8A69D345-D564-463c-AFF1-A69D9E530F96} . (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\24.0.1312.52\Installer\setup.exe
O40 - ASIC: Installed Component - S-1-5-21-484763869-413027322-839522115-1004 - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} -- Not Hexadécimal CLSID
O40 - ASIC: Installed Component - S-1-5-21-484763869-413027322-839522115-1004 - >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS -- Not Hexadécimal CLSID
~ Scan Active Setup in 00mn 00s



---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys
O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys
O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\system32\DRIVERS\intelppm.sys
O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys
O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys
O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre souris HID.) - C:\WINDOWS\system32\DRIVERS\kbdhid.sys
O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys
O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS\netbios.sys
O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS\netbt.sys
O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERS\rasacd.sys
O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\system32\DRIVERS\redbook.sys
O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS\tcpip.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS\termdd.sys
O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
O41 - Driver: (WmiAcpi) . (.Microsoft Corporation - Windows Management Interface for ACPI.) - C:\WINDOWS\system32\DRIVERS\wmiacpi.sys
~ Scan Drivers in 00mn 01s



---\\ Logiciels installés (O42)
O42 - Logiciel: Adobe Reader X (10.1.5) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA1000000001}
O42 - Logiciel: BabylonObjectInstaller - (.Babylon Ltd.) [HKLM] -- {83AA2913-C123-4146-85BD-AD8F93971D39}
O42 - Logiciel: BabylonObjectInstaller - (.Babylon Ltd.) [HKLM] -- {E55E7026-EF2A-4A17-AAA7-DB98EA3FD1B1}
O42 - Logiciel: Browser Manager - (.Pas de propriétaire.) [HKLM] -- {15D2D75C-9CB2-4efd-BAD7-B9B4CB4BC693}
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
O42 - Logiciel: Claro LTD toolbar on IE - (.Claro LTD.) [HKLM] -- claro
O42 - Logiciel: Conexant HD Audio - (.Conexant.) [HKLM] -- CNXT_HDAUDIO
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: HDAUDIO Soft Data Fax Modem with SmartCP - (.Pas de propriétaire.) [HKLM] -- CNXT_MODEM_HDAUDIO_SprtHD5m
O42 - Logiciel: HP Quick Launch Buttons 6.30 J1 - (.Hewlett-Packard.) [HKLM] -- {34D2AB40-150D-475D-AE32-BD23FB5EE355}
O42 - Logiciel: HP Wireless Assistant - (.Hewlett-Packard.) [HKLM] -- {D32067CD-7409-4792-BFA0-1469BCD8F0C8}
O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5
O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5
O42 - Logiciel: IClaroInstaller - (.IClaro.) [HKLM] -- {74AF34F6-ACF4-438C-9C7E-FA0307B60E45}
O42 - Logiciel: InstallClick Connector - (.RIFT Technologies.) [HKLM] -- {2F57C004-1FED-4C30-81FC-EE305D4D0A2E}
O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Pas de propriétaire.) [HKLM] -- HDMI
O42 - Logiciel: Intel(R) PRO Network Connections Drivers - (.Pas de propriétaire.) [HKLM] -- PROSet
O42 - Logiciel: Java(TM) 7 Update 4 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83217004FF}
O42 - Logiciel: Lecteur Windows Media 11 - (.Pas de propriétaire.) [HKLM] -- Windows Media Player
O42 - Logiciel: MSN - (.Microsoft Corporation.) [HKLM] -- MSNINST
O42 - Logiciel: MSXML 6 Service Pack 2 (KB973686) - (.Microsoft Corporation.) [HKLM] -- {56EA8BC0-3751-4B93-BC9D-6651CC36E5AA}
O42 - Logiciel: Media Go - (.Sony.) [HKLM] -- {7A6C3344-5CF9-4B83-959C-6576C5B27D09}
O42 - Logiciel: Media Go Video Playback Engine 1.96.112.08260 - (.Sony.) [HKLM] -- {065DBB54-6E55-A609-2E1E-F0617E827D53}
O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1
O42 - Logiciel: Microsoft Kernel-Mode Driver Framework Feature Pack 1.5 - (.Microsoft Corporation.) [HKLM] -- Wdf01005
O42 - Logiciel: Microsoft Kernel-Mode Driver Framework Feature Pack 1.7 - (.Microsoft Corporation.) [HKLM] -- Wdf01007
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- Wudf01000
O42 - Logiciel: Mozilla Firefox 18.0 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 18.0 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService
O42 - Logiciel: OpenOffice.org 3.4.1 - (.Apache Software Foundation.) [HKLM] -- {7DA1C06F-C913-46C7-8A0F-DA2CBA17EA1D}
O42 - Logiciel: PlayStation(R)Network Downloader - (.Sony Computer Entertainment Inc..) [HKLM] -- {B6659DD8-00A7-4A24-BBFB-C1F6982E5D66}
O42 - Logiciel: PlayStation(R)Store - (.Sony Computer Entertainment Inc..) [HKLM] -- {0E532C84-4275-41B3-9D81-D4A1A20D8EE7}
O42 - Logiciel: REALTEK Wireless LAN Driver and Utility - (.REALTEK Semiconductor Corp..) [HKLM] -- {9C049499-055C-4a0c-A916-1D12314F45EB}
O42 - Logiciel: Sony Ericsson Update Engine - (.Sony Ericsson Communications AB.) [HKLM] -- Update Engine
O42 - Logiciel: Sony PC Companion 2.10.108 - (.Sony.) [HKLM] -- {F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics.) [HKLM] -- SynTPDeinstKey
O42 - Logiciel: TUTO4PC_FR_4-v1.0 - (.TUTO4PC.) [HKLM] -- TUTO4PC_FR_4_is1
O42 - Logiciel: WebPlayerV2 - (.Kreapixel.) [HKLM] -- {688D159D-6D7E-40CA-971E-F0E379D855B8}
O42 - Logiciel: Windows Imaging Component - (.Microsoft Corporation.) [HKLM] -- WIC
O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8
O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11
O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime
O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11
O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service
O42 - Logiciel: WordBiz 1.8 - (.Pas de propriétaire.) [HKLM] -- WordBiz_0
O42 - Logiciel: XML Paper Specification Shared Components Language Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- XPSEPSCLP
O42 - Logiciel: XML Paper Specification Shared Components Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- XpsEPSC

---\\ HKCU & HKLM Software Keys
[HKCU\Software\5e68a8cb36abe44]
[HKCU\Software\Adobe]
[HKCU\Software\Agrégat Informatique]
[HKCU\Software\Avg]
[HKCU\Software\BrowserMngr]
[HKCU\Software\Bugsplat]
[HKCU\Software\Claro LTD]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Cr_Installer]
[HKCU\Software\Crossrider]
[HKCU\Software\DataMngr]
[HKCU\Software\ExpressFiles]
[HKCU\Software\Fondation JAE]
[HKCU\Software\Google]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\Iminent]
[HKCU\Software\InstallCore]
[HKCU\Software\Intel]
[HKCU\Software\JavaSoft]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\Macromedia]
[HKCU\Software\Micro CONSEIL Services]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\OfferBox]
[HKCU\Software\OpenOffice.org]
[HKCU\Software\PC SOFT]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\Softonic]
[HKCU\Software\Sony Corporation]
[HKCU\Software\Sony Ericsson]
[HKCU\Software\Sony]
[HKCU\Software\Synaptics]
[HKCU\Software\TeleCharger]
[HKCU\Software\Trend Micro]
[HKCU\Software\TutoTag]
[HKCU\Software\Tutorials]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\lollipop]
[HKLM\Software\5e68a8cb36abe44]
[HKLM\Software\Adobe]
[HKLM\Software\Babylon]
[HKLM\Software\BrowserChoice]
[HKLM\Software\BrowserMngr]
[HKLM\Software\C07ft5Y]
[HKLM\Software\CXT]
[HKLM\Software\Claro LTD]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Conexant]
[HKLM\Software\DataMngr]
[HKLM\Software\ExpressFiles]
[HKLM\Software\Gemplus]
[HKLM\Software\Google]
[HKLM\Software\HPQ]
[HKLM\Software\Hewlett-Packard]
[HKLM\Software\Iminent]
[HKLM\Software\InstalledOptions]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\MDC]
[HKLM\Software\Macromedia]
[HKLM\Software\McAfee.com]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\ODBC]
[HKLM\Software\OfferBox]
[HKLM\Software\OpenOffice.org]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\Program Groups]
[HKLM\Software\REALTEK Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\RtWLan]
[HKLM\Software\Schlumberger]
[HKLM\Software\Secure]
[HKLM\Software\Set8188CU]
[HKLM\Software\Set8191CU]
[HKLM\Software\Set8192CUT]
[HKLM\Software\Set8192CU]
[HKLM\Software\Sony Corporation]
[HKLM\Software\Sony]
[HKLM\Software\Synaptics]
[HKLM\Software\TUTO4PC]
[HKLM\Software\Windows 3.1 Migration Status]
[HKLM\Software\Wow6432Node]
[HKLM\Software\babylontoolbar]
[HKLM\Software\mozilla.org]
~ Scan Softwares in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 18/07/2012 - 13:26:21 - [113,436] ----D C:\Program Files\Adobe
O43 - CFD: 02/11/2012 - 19:33:16 - [0,062] ----D C:\Program Files\AVG
O43 - CFD: 01/12/2012 - 18:44:19 - [0] ----D C:\Program Files\cacaoweb
O43 - CFD: 13/01/2013 - 03:28:15 - [5,023] ----D C:\Program Files\CCleaner
O43 - CFD: 07/09/2012 - 11:52:37 - [2,082] ----D C:\Program Files\Claro LTD
O43 - CFD: 12/04/2012 - 19:12:12 - [0] ----D C:\Program Files\ComPlus Applications
O43 - CFD: 19/04/2012 - 21:45:31 - [1,688] ----D C:\Program Files\CONEXANT
O43 - CFD: 13/01/2013 - 04:40:10 - [91,756] ----D C:\Program Files\Fichiers communs
O43 - CFD: 13/01/2013 - 03:28:07 - [250,379] ----D C:\Program Files\Google
O43 - CFD: 19/04/2012 - 21:42:25 - [31,232] ----D C:\Program Files\Hewlett-Packard
O43 - CFD: 05/11/2012 - 21:02:07 - [29,514] --H-D C:\Program Files\InstallShield Installation Information
O43 - CFD: 14/06/2012 - 08:56:34 - [4,651] ----D C:\Program Files\Internet Explorer
O43 - CFD: 17/05/2012 - 14:39:47 - [94,270] ----D C:\Program Files\Java
O43 - CFD: 20/05/2012 - 17:49:19 - [2,053] ----D C:\Program Files\Messenger
O43 - CFD: 12/04/2012 - 19:16:11 - [0] ----D C:\Program Files\microsoft frontpage
O43 - CFD: 10/10/2012 - 13:11:19 - [27,900] ----D C:\Program Files\Microsoft Office
O43 - CFD: 08/11/2012 - 21:08:02 - [36,641] ----D C:\Program Files\Microsoft Silverlight
O43 - CFD: 16/09/2012 - 22:14:56 - [0,007] ----D C:\Program Files\Microsoft SQL Server
O43 - CFD: 23/09/2012 - 15:18:52 - [0,015] ----D C:\Program Files\Microsoft.NET
O43 - CFD: 24/05/2012 - 11:18:30 - [9,894] ----D C:\Program Files\Movie Maker
O43 - CFD: 11/01/2013 - 14:35:35 - [92,272] ----D C:\Program Files\Mozilla Firefox
O43 - CFD: 11/01/2013 - 14:35:12 - [0,212] ----D C:\Program Files\Mozilla Maintenance Service
O43 - CFD: 07/05/2012 - 20:28:15 - [0,025] ----D C:\Program Files\MSBuild
O43 - CFD: 10/10/2012 - 13:10:27 - [58,639] ----D C:\Program Files\MSECache
O43 - CFD: 28/07/2012 - 03:55:37 - [21,082] ----D C:\Program Files\MSN
O43 - CFD: 12/04/2012 - 19:11:43 - [8,341] ----D C:\Program Files\MSN Gaming Zone
O43 - CFD: 07/05/2012 - 20:25:45 - [0,007] ----D C:\Program Files\MSXML 6.0
O43 - CFD: 20/05/2012 - 17:26:33 - [3,133] ----D C:\Program Files\NetMeeting
O43 - CFD: 12/04/2012 - 19:11:54 - [0,002] ----D C:\Program Files\Online Services
O43 - CFD: 10/10/2012 - 13:24:37 - [288,773] ----D C:\Program Files\OpenOffice.org 3
O43 - CFD: 22/05/2012 - 00:03:44 - [4,176] ----D C:\Program Files\Outlook Express
O43 - CFD: 11/05/2012 - 20:17:39 - [5,503] ----D C:\Program Files\REALTEK
O43 - CFD: 07/05/2012 - 20:28:05 - [35,667] ----D C:\Program Files\Reference Assemblies
O43 - CFD: 10/10/2012 - 13:08:24 - [1,918] ----D C:\Program Files\RIFT Technologies
O43 - CFD: 07/05/2012 - 20:11:14 - [6,806] ----D C:\Program Files\scrabbleproB
O43 - CFD: 18/12/2012 - 23:58:22 - [0,043] ----D C:\Program Files\scrabbleproB1.1
O43 - CFD: 12/04/2012 - 19:14:28 - [0,001] ----D C:\Program Files\Services en ligne
O43 - CFD: 05/11/2012 - 21:21:25 - [261,142] ----D C:\Program Files\Sony
O43 - CFD: 17/05/2012 - 14:40:41 - [23,514] ----D C:\Program Files\Sony Ericsson
O43 - CFD: 05/11/2012 - 21:20:17 - [144,632] ----D C:\Program Files\Sony Media Go Install
O43 - CFD: 19/04/2012 - 21:37:20 - [30,783] ----D C:\Program Files\Synaptics
O43 - CFD: 13/01/2013 - 22:18:22 - [0,370] ----D C:\Program Files\Trend Micro
O43 - CFD: 23/09/2012 - 15:18:36 - [4,305] ----D C:\Program Files\TUTO4PC
O43 - CFD: 12/04/2012 - 19:33:02 - [0] --H-D C:\Program Files\Uninstall Information
O43 - CFD: 18/12/2012 - 23:56:11 - [12,409] ----D C:\Program Files\Webplayer setup
O43 - CFD: 17/05/2012 - 22:48:53 - [3,415] ----D C:\Program Files\Windows Media Connect 2
O43 - CFD: 20/05/2012 - 17:26:24 - [7,862] ----D C:\Program Files\Windows Media Player
O43 - CFD: 20/05/2012 - 17:26:23 - [3,760] ----D C:\Program Files\Windows NT
O43 - CFD: 12/04/2012 - 19:14:34 - [0] --H-D C:\Program Files\WindowsUpdate
O43 - CFD: 13/01/2013 - 04:41:19 - [0,000] ----D C:\Program Files\WordBiz
O43 - CFD: 12/04/2012 - 19:16:11 - [0] ----D C:\Program Files\xerox
O43 - CFD: 13/01/2013 - 22:20:15 - [11,192] ----D C:\Program Files\ZHPDiag
O43 - CFD: 18/07/2012 - 13:26:35 - [3,735] ----D C:\Program Files\Fichiers communs\Adobe
O43 - CFD: 19/04/2012 - 21:39:47 - [2,764] ----D C:\Program Files\Fichiers communs\InstallShield
O43 - CFD: 17/05/2012 - 14:40:38 - [1,181] ----D C:\Program Files\Fichiers communs\Java
O43 - CFD: 10/10/2012 - 13:23:01 - [52,630] ----D C:\Program Files\Fichiers communs\Microsoft Shared
O43 - CFD: 12/04/2012 - 19:13:32 - [0,271] ----D C:\Program Files\Fichiers communs\MSSoap
O43 - CFD: 12/04/2012 - 20:58:59 - [0] ----D C:\Program Files\Fichiers communs\ODBC
O43 - CFD: 12/04/2012 - 19:13:36 - [0,008] ----D C:\Program Files\Fichiers communs\Services
O43 - CFD: 05/11/2012 - 21:21:36 - [21,026] ----D C:\Program Files\Fichiers communs\Sony Shared
O43 - CFD: 12/04/2012 - 20:58:56 - [3,612] ----D C:\Program Files\Fichiers communs\SpeechEngines
O43 - CFD: 20/05/2012 - 17:26:15 - [6,496] ----D C:\Program Files\Fichiers communs\System
O43 - CFD: 13/01/2013 - 22:02:17 - [664,759] R-H-D C:\Documents and Settings\All Users\Application Data
O43 - CFD: 13/01/2013 - 21:56:24 - [0,009] ----D C:\Documents and Settings\All Users\Bureau
O43 - CFD: 12/04/2012 - 19:12:47 - [1,656] R---D C:\Documents and Settings\All Users\Documents
O43 - CFD: 17/05/2012 - 22:54:00 - [3,042] -SH-D C:\Documents and Settings\All Users\DRM
O43 - CFD: 12/04/2012 - 20:58:31 - [0] ----D C:\Documents and Settings\All Users\Favoris
O43 - CFD: 16/12/2012 - 00:32:40 - [0,090] R---D C:\Documents and Settings\All Users\Menu Démarrer
O43 - CFD: 10/10/2012 - 13:26:18 - [0,030] --H-D C:\Documents and Settings\All Users\Modèles
O43 - CFD: 18/07/2012 - 17:17:46 - [7,182] ----D C:\Documents and Settings\alida\Application Data\Adobe
O43 - CFD: 23/09/2012 - 15:16:44 - [0,000] ----D C:\Documents and Settings\alida\Application Data\ArchiFacile
O43 - CFD: 02/11/2012 - 19:32:38 - [0,061] ----D C:\Documents and Settings\alida\Application Data\AVG2013
O43 - CFD: 13/05/2012 - 21:45:33 - [0,078] ----D C:\Documents and Settings\alida\Application Data\Babylon
O43 - CFD: 07/09/2012 - 11:51:59 - [0,001] ----D C:\Documents and Settings\alida\Application Data\ExpressFiles
O43 - CFD: 23/09/2012 - 14:36:50 - [0] ----D C:\Documents and Settings\alida\Application Data\Google
O43 - CFD: 07/09/2012 - 11:52:41 - [0,027] ----D C:\Documents and Settings\alida\Application Data\IClaro
O43 - CFD: 17/04/2012 - 22:39:49 - [0] ----D C:\Documents and Settings\alida\Application Data\Identities
O43 - CFD: 23/09/2012 - 15:29:22 - [1,231] ----D C:\Documents and Settings\alida\Application Data\Iminent
O43 - CFD: 07/05/2012 - 23:08:39 - [0,001] ----D C:\Documents and Settings\alida\Application Data\Macromedia
O43 - CFD: 10/10/2012 - 13:13:35 - [4,846] -S--D C:\Documents and Settings\alida\Application Data\Microsoft
O43 - CFD: 10/05/2012 - 12:56:12 - [61,864] ----D C:\Documents and Settings\alida\Application Data\Mozilla
O43 - CFD: 13/01/2013 - 04:43:48 - [0,691] ----D C:\Documents and Settings\alida\Application Data\OfferBox
O43 - CFD: 10/10/2012 - 13:30:48 - [12,387] ----D C:\Documents and Settings\alida\Application Data\OpenOffice.org
O43 - CFD: 05/11/2012 - 21:23:56 - [80,722] ----D C:\Documents and Settings\alida\Application Data\Sony
O43 - CFD: 17/05/2012 - 16:01:50 - [0,001] ----D C:\Documents and Settings\alida\Application Data\Sun
O43 - CFD: 18/12/2012 - 23:53:08 - [0] ----D C:\Documents and Settings\alida\Application Data\Toolbar4
O43 - CFD: 02/11/2012 - 19:28:50 - [0] ----D C:\Documents and Settings\alida\Application Data\TuneUp Software
O43 - CFD: 16/12/2012 - 00:32:20 - [0] ----D C:\Documents and Settings\alida\Application Data\WinRAR
O43 - CFD: 18/07/2012 - 17:17:46 - [15,148] ----D C:\Documents and Settings\alida\Local Settings\Application Data\Adobe
O43 - CFD: 02/11/2012 - 19:42:23 - [9,263] ----D C:\Documents and Settings\alida\Local Settings\Application Data\Avg2013
O43 - CFD: 05/11/2012 - 21:19:46 - [8,451] ----D C:\Documents and Settings\alida\Local Settings\Application Data\Downloaded Installations
O43 - CFD: 16/12/2012 - 00:34:21 - [15,277] ----D C:\Documents and Settings\alida\Local Settings\Application Data\Google
O43 - CFD: 01/07/2012 - 16:36:06 - [0,425] ----D C:\Documents and Settings\alida\Local Settings\Application Data\Identities
O43 - CFD: 13/01/2013 - 22:02:36 - [0] ----D C:\Documents and Settings\alida\Local Settings\Application Data\Lollipop
O43 - CFD: 02/11/2012 - 19:21:23 - [3,572] ----D C:\Documents and Settings\alida\Local Settings\Application Data\MFAData
O43 - CFD: 08/11/2012 - 21:08:13 - [3,983] ----D C:\Documents and Settings\alida\Local Settings\Application Data\Microsoft
O43 - CFD: 10/05/2012 - 12:56:05 - [1624,647] ----D C:\Documents and Settings\alida\Local Settings\Application Data\Mozilla
O43 - CFD: 24/05/2012 - 11:57:37 - [0] ----D C:\Documents and Settings\alida\Local Settings\Application Data\PCHealth
O43 - CFD: 21/05/2012 - 23:50:48 - [0,042] ----D C:\Documents and Settings\alida\Local Settings\Application Data\Scrabble3D
O43 - CFD: 05/11/2012 - 21:25:27 - [0,352] ----D C:\Documents and Settings\alida\Local Settings\Application Data\Sony
O43 - CFD: 17/05/2012 - 16:01:51 - [0,709] ----D C:\Documents and Settings\alida\Local Settings\Application Data\Sun
O43 - CFD: 18/07/2012 - 17:17:46 - [0] ----D C:\Documents and Settings\alida\Local Settings\Application Data\Temp
O43 - CFD: 11/10/2012 - 14:51:40 - [1,532] ----D C:\Documents and Settings\alida\Local Settings\Application Data\tuto4pc_fr_4
O43 - CFD: 23/09/2012 - 15:18:39 - [0,054] ----D C:\Documents and Settings\alida\Local Settings\Application Data\Wajam
O43 - CFD: 07/09/2012 - 11:35:40 - [0,000] ----D C:\Documents and Settings\alida\Local Settings\Application Data\WDSetup
O43 - CFD: 10/09/2012 - 09:39:54 - [0,002] -SH-D C:\Documents and Settings\alida\Local Settings\Application Data\{af37a244-0187-58eb-02b1-27f28b1302bd}
O43 - CFD: 25/05/2012 - 12:22:18 - [0,014] R---D C:\Documents and Settings\alida\Menu Démarrer\Programmes\Accessoires
O43 - CFD: 10/10/2012 - 13:31:23 - [0,001] R---D C:\Documents and Settings\alida\Menu Démarrer\Programmes\Démarrage
O43 - CFD: 13/01/2013 - 22:18:22 - [0,002] ----D C:\Documents and Settings\alida\Menu Démarrer\Programmes\HiJackThis
O43 - CFD: 02/01/2013 - 02:28:42 - [0,000] R---D C:\Documents and Settings\alida\Menu Démarrer\Programmes\Outils d'administration
~ Scan Program Folder in 00mn 11s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 13/01/2013 - 21:54:02 ---A- . (...) -- C:\WINDOWS\RTacDbg.txt [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 13/01/2013 - 21:53:23 ---A- . (...) -- C:\WINDOWS\0.log [0]
O44 - LFC:[MD5.E956AA98FF20EC1547FF48CFBB7DEF06] - 13/01/2013 - 21:53:12 ---A- . (...) -- C:\WINDOWS\wiaservc.log [50]
O44 - LFC:[MD5.64CF27D9D9BCC7E287F8E27DA9B37D86] - 13/01/2013 - 21:53:10 ---A- . (...) -- C:\WINDOWS\wiadebug.log [159]
O44 - LFC:[MD5.F915197B1462FFA9604A51320FEF7C29] - 13/01/2013 - 21:53:09 ---A- . (...) -- C:\log2.txt [115]
O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 13/01/2013 - 21:53:05 -S-A- . (...) -- C:\WINDOWS\bootstat.dat [2048]
O44 - LFC:[MD5.EAF8A31B2E4CF148AD667E39898438C8] - 13/01/2013 - 04:51:50 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt [31720]
O44 - LFC:[MD5.E33327120F9690B3F3A887096AB2294C] - 13/01/2013 - 04:51:33 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log [1761744]
O44 - LFC:[MD5.E4CB98278BA349E8C5C2A8A2D2489D2D] - 13/01/2013 - 04:42:38 ---A- . (...) -- C:\WINDOWS\comsetup.log [373511]
O44 - LFC:[MD5.EA2FAD95EC24957A6ADE456AF4F72EC9] - 13/01/2013 - 04:42:38 ---A- . (...) -- C:\WINDOWS\ie8Uninst.log [3352]
O44 - LFC:[MD5.F897321926B505D60AB713B5BD957763] - 13/01/2013 - 04:42:38 ---A- . (...) -- C:\WINDOWS\iis6.log [1583966]
O44 - LFC:[MD5.1C7E068A44F3A25F45702E39FB277321] - 13/01/2013 - 04:42:38 ---A- . (...) -- C:\WINDOWS\imsins.log [1374]
O44 - LFC:[MD5.0C33BEC164406F16DF0AFC6357D08C99] - 13/01/2013 - 04:42:38 ---A- . (...) -- C:\WINDOWS\ntdtcsetup.log