Analyse rapport ZPHDiag Fermé

Question

Bonjour, 

Quelques soucis de fenêtres intempestives sur mon PC, j'ai lancé dans un premier temps Adwcleaner puis Mbam, mais mbam plante sur la dernière partie du scan (heuristic analysis), impossible de supprimer toutes les cochonneires. J'ai donc lancé un scan de Zhpdiag.

Pouvez-vous m'aider ?

Par avance merci.

Rapport :

Rapport de ZHPDiag v1.31.28 par Nicolas Coolman, Update du 30/09/2012
Run by Theriez at 24/04/2014 04:45:29
Web site :  http://nicolascoolman.skyrock.com/
State : Version à jour.
UAC : Deactivate by program


---\ Web Browser
MSIE: Internet Explorer v9.11.9600.17041
MFIE: Mozilla Firefox 28.0 v28.0 (Defaut)
GCIE: Google Chrome v34.0.1847.116

---\ Windows Product Information
~ Langage: Français
Windows 7 Business Edition, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows(R) 7, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : 733WD
Windows License : OK
~ Windows Remaining Initializations Number : 3
Software Protection Service (Protection logicielle) : KO
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\ System Information
~ Processor: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3974 MB (57% free)
System Restore: Activé (Enable)
System drive C: has 767 GB (83%) free of 918 GB

---\ Logged in mode
~ Computer Name: GTHERIEZ-PERSO
~ User Name: Theriez
~ All Users Names: Theriez, LogMeInRemoteUser, Famille, Administrateur, 
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator

---\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\Theriez\AppData\Roaming\
~ %Desktop% : C:\Users\Theriez\Desktop\
~ %Favorites% : C:\Users\Theriez\Favorites\
~ %LocalAppData% : C:\Users\Theriez\AppData\Local\
~ %StartMenu% : C:\Users\Theriez\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 767 Go of 918 Go)
D:\ CD-ROM drive (Not Inserted)
E:\ Floppy drive, Flash card reader, USB Key (Not Inserted)



---\ Security Center & Tools Informations
~ UAC deactivate by user
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime :  OK
~ Scan Security Center in 00mn 00s



---\ Recherche particulière de fichiers génériques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.F220BA78AB542C70211D73AE4729B2CD] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.06/03/2014 - 07:22:40.) -- C:\Windows\System32\wininet.dll [2260480]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.21/11/2010 - 04:24:29.) -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.21/11/2010 - 04:24:16.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.79059559E89D06E8B80CE2944BE20228] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/09/2013 - 02:09:10.) -- C:\Windows\system32\Drivers\AFD.sys [497152]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.21/11/2010 - 04:23:51.) -- C:\Windows\system32\Drivers
etBT.sys [261632]
[MD5.1A29A59A4C5BA6F8C85062A613B7E2B2] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.24/01/2014 - 03:37:55.) -- C:\Windows\system32\Drivers
tfs.sys [1684928]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/11/2010 - 04:24:33.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.1B6163C503398B23FF8B939C67747683] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.21/11/2010 - 04:25:07.) -- C:\Windows\system32\Driversdpdr.sys [165888]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers	dx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Scan Generic Processes in 00mn 00s



---\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/10
~ Mes Favoris (My Favorites) : 1/18
~ Mes Documents (My Documents) : 2/33581
~ Mon Bureau (My Desktop) : 1/60
~ Menu demarrer (Programs) : 1/30
~ Scan Hidden Files in 00mn 16s



---\ Processus lancés
[MD5.58FC1B36032F03342E4C02813F80DAC1] - (.Dropbox, Inc. - Dropbox.) -- C:\Users\Theriez\AppData\Roaming\Dropbox\bin\Dropbox.exe   [30714328] [PID.1324]
[MD5.766AE515B1749F2141E418CC6C08515B] - (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe   [284440] [PID.1152]
[MD5.2A510D5500FD4C50A9E38DF85478F862] - (.Intel Corporation - Intel(R) USB 3.0 Monitor.) -- C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe   [291608] [PID.1892]
[MD5.B63E5C7807334A3A8F731062F15462CC] - (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe   [919008] [PID.3056]
[MD5.74A921A3820CA3139D0D30F453FDEB58] - (.Intel Corporation - Bluetooth Media Player Controller.) -- C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe   [936272] [PID.3936]
[MD5.41D0F8FD52CA4B98D21F9D137F0F5FF9] - (...) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe   [3769856] [PID.3440]
~ Scan Processes Running in 00mn 00s



---\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\Theriez\AppData\Local\Google\Chrome\User Data\Default\Preferences
~ Scan Google Browser in 00mn 00s



---\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
C:\Users\Theriez\AppData\Roaming\Mozilla\Firefox\Profiles\ly48tpm5.default\prefs.js
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll
P2 - FPN: [HKLM] [@microsoft.com/OfficeAuthz,version=14.0] - (.Microsoft Corporation - Office Authorization plug-in for NPAPI browsers.) -- C:\Program Files\Microsoft Office\Office14\NPAUTHZ.dll
~ Scan Firefox Browser in 00mn 00s



---\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.microsoft.com/fr-fr/
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.microsoft.com/fr-fr/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.dell.com/fr-fr
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: (no name) [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Office Authorization plug-in for NPAPI browsers.) (No version) -- (.not file.)
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
~ Scan IE Browser in 00mn 00s



---\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s



---\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Scan Keys in 00mn 00s



---\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s
~ Nombre de lignes (Lines number): 21



---\ Browser Helper Objects de navigateur (O2)
O2 - BHO: (no name) [64Bits] - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} Clé orpheline
O2 - BHO: (no name) [64Bits] - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} Clé orpheline
O2 - BHO: (no name) [64Bits] - {B4F3A835-0E21-4959-BA22-42B3008E02FF} Clé orpheline
~ Scan BHO in 00mn 00s



---\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [BTMTrayAgent] . (.Intel Corporation - Bluetooth Shell Extension.) -- C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll 
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe 
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe 
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe 
O4 - HKLM\..\Run: [TgbVpn] . (.TheGreenBow - TheGreenBow VPN Client.) -- C:\Program Files (x86)\TheGreenBow\TheGreenBow VPN\vpnconf.exe 
O4 - HKLM\..\Run: [LogMeIn GUI] . (.LogMeIn, Inc. - LogMeIn Desktop Application.) -- C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe 
O4 - HKLM\..\Wow6432Node\Run: [IAStorIcon] . (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe 
O4 - HKLM\..\Wow6432Node\Run: [USB3MON] . (.Intel Corporation - Intel(R) USB 3.0 Monitor.) -- C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe 
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe 
O4 - HKLM\..\Wow6432Node\Run: [BCSSync] . (.Microsoft Corporation - Microsoft Office 2010 component.) -- C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe 
~ Scan Application in 00mn 00s



---\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\Theriez\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Theriez\Desktop\ADEVIM.URL . (...)  -- C:\Users\Theriez\Desktop\ADEVIM.URL
O4 - Global Startup: C:\Users\Theriez\Desktop\Agence Andernos.lnk . (...)  -- R:\ (.not file.)
O4 - Global Startup: C:\Users\Theriez\Desktop\Agence Bordeaux.lnk . (...)  -- P:\ (.not file.)
O4 - Global Startup: C:\Users\Theriez\Desktop\BNP.URL . (...)  -- C:\Users\Theriez\Desktop\BNP.URL
O4 - Global Startup: C:\Users\Theriez\Desktop\Changement de domiciliation.url . (...)  -- C:\Users\Theriez\Desktop\Changement de domiciliation.url
O4 - Global Startup: C:\Users\Theriez\Desktop\Compte Microsoft.url . (...)  -- C:\Users\Theriez\Desktop\Compte Microsoft.url
O4 - Global Startup: C:\Users\Theriez\Desktop\Compte utilisateur ADEVIM.URL . (...)  -- C:\Users\Theriez\Desktop\Compte utilisateur ADEVIM.URL
O4 - Global Startup: C:\Users\Theriez\Desktop\Contact - Institut Michel Montaigne - Bordeaux Gironde Aquitaine.url . (...)  -- C:\Users\Theriez\Desktop\Contact - Institut Michel Montaigne - Bordeaux Gironde Aquitaine.url
O4 - Global Startup: C:\Users\Theriez\Desktop\COURTOIS.url . (...)  -- C:\Users\Theriez\Desktop\COURTOIS.url
O4 - Global Startup: C:\Users\Theriez\Desktop\Dropbox.lnk . (.Dropbox, Inc..)  -- C:\Users\Theriez\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Global Startup: C:\Users\Theriez\Desktop\ECOLE QUINSAC.url . (.Dropbox, Inc..)  -- C:\Users\Theriez\Desktop\ECOLE QUINSAC.url
O4 - Global Startup: C:\Users\Theriez\Desktop\Famille.lnk . (...)  -- C:\Users\Theriez\Documents
O4 - Global Startup: C:\Users\Theriez\Desktop\Foncia.url . (...)  -- C:\Users\Theriez\Desktop\Foncia.url
O4 - Global Startup: C:\Users\Theriez\Desktop\Google.url . (...)  -- C:\Users\Theriez\Desktop\Google.url
O4 - Global Startup: C:\Users\Theriez\Desktop\Groupe ABC.url . (...)  -- C:\Users\Theriez\Desktop\Groupe ABC.url
O4 - Global Startup: C:\Users\Theriez\Desktop\Impots.gouv.fr - Particuliers.url . (...)  -- C:\Users\Theriez\Desktop\Impots.gouv.fr - Particuliers.url
O4 - Global Startup: C:\Users\Theriez\Desktop\LCL.url . (...)  -- C:\Users\Theriez\Desktop\LCL.url
O4 - Global Startup: C:\Users\Theriez\Desktop\Le cabinet.url . (...)  -- C:\Users\Theriez\Desktop\Le cabinet.url
O4 - Global Startup: C:\Users\Theriez\Desktop\Leasing VOLKSWAGEN Multivan - acheter VOLKSWAGEN neuve en LOA ou LLD.url . (...)  -- C:\Users\Theriez\Desktop\Leasing VOLKSWAGEN Multivan - acheter VOLKSWAGEN neuve en LOA ou LLD.url
O4 - Global Startup: C:\Users\Theriez\Desktop\Les écoles de musique.url . (...)  -- C:\Users\Theriez\Desktop\Les écoles de musique.url
O4 - Global Startup: C:\Users\Theriez\Desktop\LogicimmoPro.url . (...)  -- C:\Users\Theriez\Desktop\LogicimmoPro.url
O4 - Global Startup: C:\Users\Theriez\Desktop\mac.3.lnk . (.Macromedia, Inc..)  -- C:\Program Files (x86)\mac.3\mac3.exe
O4 - Global Startup: C:\Users\Theriez\Desktop\Microsoft Excel 2010.lnk . (...)  -- C:\Windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
O4 - Global Startup: C:\Users\Theriez\Desktop\Microsoft Outlook 2010.lnk . (...)  -- C:\Windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
O4 - Global Startup: C:\Users\Theriez\Desktop\Microsoft Word 2010.lnk . (...)  -- C:\Windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
O4 - Global Startup: C:\Users\Theriez\Desktop\MyHappening.url . (...)  -- C:\Users\Theriez\Desktop\MyHappening.url
O4 - Global Startup: C:\Users\Theriez\Desktop\MyHappening© version 3.02.url . (...)  -- C:\Users\Theriez\Desktop\MyHappening© version 3.02.url
O4 - Global Startup: C:\Users\Theriez\Desktop\Principe du bouquet travaux dans le crédit d'impôt.URL . (...)  -- C:\Users\Theriez\Desktop\Principe du bouquet travaux dans le crédit d'impôt.URL
O4 - Global Startup: C:\Users\Theriez\Desktop\Professionnel.lnk . (...)  -- C:\Users\Theriez\Mes documents Pro
O4 - Global Startup: C:\Users\Theriez\Desktop\Quinsac-4,chemin de Cavaillac.lnk . (...)  -- C:\Users\Theriez\Documents\GESTION BIENS IMMOBILIERS\Quinsac-4,chemin de Cavaillac
O4 - Global Startup: C:\Users\Theriez\Desktop\Réunica.url . (...)  -- C:\Users\Theriez\Desktop\Réunica.url
O4 - Global Startup: C:\Users\Theriez\Desktop\SECRI.url . (...)  -- C:\Users\Theriez\Desktop\SECRI.url
O4 - Global Startup: C:\Users\Theriez\Desktop\SeLogerPro.url . (...)  -- C:\Users\Theriez\Desktop\SeLogerPro.url
O4 - Global Startup: C:\Users\Theriez\Desktop\SNCF.URL . (...)  -- C:\Users\Theriez\Desktop\SNCF.URL
O4 - Global Startup: C:\Users\Theriez\Desktop\STADE BORDELAIS BMX.url . (...)  -- C:\Users\Theriez\Desktop\STADE BORDELAIS BMX.url
O4 - Global Startup: C:\Users\Theriez\Desktop\Thérapie Familiale - Laurie Esfandi - Thérapeute Familiale et de Couple - Bordeaux.url . (...)  -- C:\Users\Theriez\Desktop\Thérapie Familiale - Laurie Esfandi - Thérapeute Familiale et de Couple - Bordeaux.u
O4 - Global Startup: C:\Users\Theriez\Desktop\Ubiflow.url . (...)  -- C:\Users\Theriez\Desktop\Ubiflow.url
O4 - Global Startup: C:\Users\Theriez\Desktop\Union MTNS.url . (...)  -- C:\Users\Theriez\Desktop\Union MTNS.url
O4 - Global Startup: C:\Users\Theriez\Desktop\XITI.url . (...)  -- C:\Users\Theriez\Desktop\XITI.url
O4 - Global Startup: C:\Users\Theriez\Desktop\XT-Mailer.url . (...)  -- C:\Users\Theriez\Desktop\XT-Mailer.url
O4 - Global Startup: C:\Users\Theriez\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - Global Startup: C:\Users\Theriez\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Theriez\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Outlook.lnk . (.Microsoft Corporation.)  -- C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE
~ Scan Global Startup in 00mn 00s



---\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ Scan IE Control Panel in 00mn 00s



---\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32
apinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
~ Scan Winsock in 00mn 00s



---\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{23B805E8-E80A-46F9-8D6E-DC503E5F0B54}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{23B805E8-E80A-46F9-8D6E-DC503E5F0B54}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{23B805E8-E80A-46F9-8D6E-DC503E5F0B54}: DhcpNameServer = 192.168.1.1
~ Scan Domain in 00mn 00s



---\ Protocole additionnel (O18)
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\system32\inetcomm.dll
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: ms-help [64Bits] - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll
~ Scan Protocole Additionnel in 00mn 00s



---\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Scan Winlogon in 00mn 00s



---\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ Scan SSODL in 00mn 00s



---\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Bluetooth Device Monitor (Bluetooth Device Monitor) . (.Intel Corporation - Bluetooth Device Monitor.) - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth OBEX Service (Bluetooth OBEX Service) . (.Intel Corporation - Bluetooth OBEX Service.) - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation - IAStorDataSvc.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: LMIGuardianSvc (LMIGuardianSvc) . (.LogMeIn, Inc. - LMIGuardianSvc.) - C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe
O23 - Service: LogMeIn Maintenance Service (LMIMaint) . (.LogMeIn, Inc. - LogMeIn Maintenance Service.) - C:\Program Files (x86)\LogMeIn\x64\RaMaint.exe
O23 - Service: LogMeIn (LogMeIn) . (.LogMeIn, Inc. - LogMeIn.) - C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe
O23 - Service:  (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service:  (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: TgbIke Starter (TgbIke Starter) . (.TheGreenBow - TheGreenBow VPN Client service.) - C:\Windows\System32	gbstarter.exe
O23 - Service:  (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O23 - Service: ZAtheros Wlan Agent (ZAtheros Wlan Agent) . (.Atheros - Atheros Coex Service Application.) - C:\Program Files (x86)\Dell Wireless\Ath_WlanAgent.exe
~ Scan Services in 00mn 00s



---\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) -  (.not file.)
~ Scan Desktop Component in 00mn 00s



---\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ Scan Keys in 00mn 00s



---\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\Adobe Flash Player Updater.job
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
~ Scan Scheduled Task in 00mn 02s



---\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32	hemeui.dll
O40 - ASIC: Internet Explorer [64Bits] - {2D46B6DC-2207-486B-B523-A557E6D54B47} . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\system32\cmd.exe
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Scan Active Setup in 00mn 00s



---\ Pilotes lancés au démarrage (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
O41 - Driver:  (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\System32\cscsvc.dll (CSC) . (.Microsoft Corporation - Windows Client Side Caching Driver.) - C:\Windows\System32\drivers\csc.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver:  (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\System32\DRIVERS\mssmbios.sys
O41 - Driver:  (ndistgb) . (.TheGreenBow - TheGreenbow NDIS 6.0 Filter Driver (64 bit).) - C:\Windows\System32\DRIVERS
distgb.sys
O41 - Driver:  (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS
etbios.sys
O41 - Driver: C:\Windows\System32\drivers
etbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS
etbt.sys
O41 - Driver: C:\Windows\System32\drivers
siproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers
siproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERSdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\driversdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\driversdprefmp.sys
O41 - Driver: C:\Windows\System32	cpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS	dx.sys
O41 - Driver:  (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\System32\DRIVERS	ermdd.sys
O41 - Driver: (TgbIpSec) . (.TheGreenBow - TheGreenBow VPN Filter Driver (64 bit).) - C:\Windows\System32\Drivers\dfiltervpn.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver:  (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\System32ascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver:  (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
~ Scan Drivers in 00mn 00s



---\ Logiciels installés (O42)
O42 - Logiciel: Adobe Flash Player 12 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 12 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Reader X (10.1.4) - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AA1000000001}
O42 - Logiciel: Cisco EAP-FAST Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {64BF0187-F3D2-498B-99EA-163AF9AE6EC9}
O42 - Logiciel: Cisco LEAP Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {51C7AD07-C3F6-4635-8E8A-231306D810FE}
O42 - Logiciel: Cisco PEAP Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {ED5776D5-59B4-46B7-AF81-5F2D94D7C640}
O42 - Logiciel: Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{5971CA1F-6BDE-498F-952C-9F2BF94070A4}
O42 - Logiciel: Dell Wireless Driver Installation - (.Dell.) [HKLM][64Bits] -- {451517F1-7E41-400B-AA36-FB7E2563526D}
O42 - Logiciel: Dropbox - (.Dropbox, Inc..) [HKCU][64Bits] -- Dropbox
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome
O42 - Logiciel: Google Earth Plug-in - (.Google.) [HKLM][64Bits] -- {4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Intel(R) OpenCL CPU Runtime - (.Intel Corporation.) [HKLM][64Bits] -- {FCB3772C-B7D0-4933-B1A9-3707EBACC573}
O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {3E29EE6C-963A-4aae-86C1-DC237C4A49FC}
O42 - Logiciel: Intel(R) USB 3.0 eXtensible Host Controller Driver - (.Intel Corporation.) [HKLM][64Bits] -- {240C3DDD-C5E9-4029-9DF7-95650D040CF2}
O42 - Logiciel: LogMeIn - (.LogMeIn, Inc..) [HKLM][64Bits] -- {22461A1C-BD68-4D90-9897-1DB146D55ECB}
O42 - Logiciel: Malwarebytes Anti-Malware version 2.0.1.1004 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes Anti-Malware_is1
O42 - Logiciel: McAfee Security Scan Plus - (.McAfee, Inc..) [HKLM][64Bits] -- McAfee Security Scan
O42 - Logiciel: Microsoft .NET Framework 4.5.1 (FRA) - (.Microsoft Corporation.) [HKLM][64Bits] -- {C22759DB-BA8B-30E7-99EE-8B47DB43AE56}
O42 - Logiciel: Microsoft .NET Framework 4.5.1 (Français) - (.Microsoft Corporation.) [HKLM][64Bits] -- {92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1036
O42 - Logiciel: Microsoft .NET Framework 4.5.1 - (.Microsoft Corporation.) [HKLM][64Bits] -- {7DEBE4EB-6B40-3766-BB35-5CBBC385DA37}
O42 - Logiciel: Microsoft .NET Framework 4.5.1 - (.Microsoft Corporation.) [HKLM][64Bits] -- {92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033
O42 - Logiciel: Microsoft Office Access MUI (French) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-0015-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Excel MUI (French) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-0016-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Groove MUI (French) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-00BA-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-0044-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Office 64-bit Components 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-002A-0000-1000-0000000FF1CE}
O42 - Logiciel: Microsoft Office OneNote MUI (French) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-00A1-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Outlook MUI (French) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-001A-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-0018-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Professional Plus 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-0011-0000-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Professionnel Plus 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- Office14.PROPLUS
O42 - Logiciel: Microsoft Office Proof (Arabic) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-001F-0401-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Dutch) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-001F-0413-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (English) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-001F-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (French) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-001F-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (German) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-001F-0407-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Spanish) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-001F-0C0A-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proofing (French) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-002C-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Publisher MUI (French) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-0019-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Shared 64-bit MUI (French) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-002A-040C-1000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Shared MUI (French) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-006E-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Word MUI (French) 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-001B-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM][64Bits] -- {710f4c1c-cc18-4c49-8cbf-51240c89a1a2}
O42 - Logiciel: Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 - (.Microsoft Corporation.) [HKLM][64Bits] -- {F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}
O42 - Logiciel: Mozilla Firefox 28.0 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 28.0 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService
O42 - Logiciel: MyPDFConverter - (.Aedge Performance BCN SL.) [HKLM][64Bits] -- {1D76557F-04F5-4CF9-AB20-6A621B0D52D7}
O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
O42 - Logiciel: Security Update for Microsoft .NET Framework 4.5.1 (KB2898869) - (.Microsoft Corporation.) [HKLM][64Bits] -- {92FB6C44-E685-45AD-9B20-CADF4CABA132}.KB2898869
O42 - Logiciel: Security Update for Microsoft .NET Framework 4.5.1 (KB2901126) - (.Microsoft Corporation.) [HKLM][64Bits] -- {92FB6C44-E685-45AD-9B20-CADF4CABA132}.KB2901126
O42 - Logiciel: Security Update for Microsoft Excel 2010 (KB2826033) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DC8EDDCF-2031-4C8D-916C-64058A3ACA95}
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB2553284) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-006E-040C-0000-0000000FF1CE}_Office14.PROPLUS_{E2A4647F-1763-4802-AA8D-6A3D5A903713}
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB2687423) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{4D6FE7B6-559F-4DAC-92CF-A01C24046AEB}
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB2760781) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-001F-0401-0000-0000000FF1CE}_Office14.PROPLUS_{F63A5E34-3E66-4E59-8314-1CAA9D7B12C6}
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB2760781) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-001F-0413-0000-0000000FF1CE}_Office14.PROPLUS_{9A854864-23D5-4FD5-8357-F4602A2A7CC4}
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB2826023) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{EC2CA755-17D8-4392-A91E-FD4D2DD31072}
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB2826035) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{0241FB40-015F-42AC-A711-1AE59E346B51}
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB2850016) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{7AC3F78E-ECA0-45F4-A9CC-3E885DA23662}
O42 - Logiciel: Security Update for Microsoft Word 2010 (KB2863926) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{38AD6402-4A9F-49EC-A8E8-B41355702630}
O42 - Logiciel: Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}
O42 - Logiciel: Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0015-040C-0000-0000000FF1CE}_Office14.PROPLUS_{00767F40-7075-4A18-90F4-137834D8F0FC}
O42 - Logiciel: Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0016-040C-0000-0000000FF1CE}_Office14.PROPLUS_{00767F40-7075-4A18-90F4-137834D8F0FC}
O42 - Logiciel: Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0018-040C-0000-0000000FF1CE}_Office14.PROPLUS_{00767F40-7075-4A18-90F4-137834D8F0FC}
O42 - Logiciel: Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0019-040C-0000-0000000FF1CE}_Office14.PROPLUS_{00767F40-7075-4A18-90F4-137834D8F0FC}
O42 - Logiciel: Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-001A-040C-0000-0000000FF1CE}_Office14.PROPLUS_{00767F40-7075-4A18-90F4-137834D8F0FC}
O42 - Logiciel: Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-001B-040C-0000-0000000FF1CE}_Office14.PROPLUS_{00767F40-7075-4A18-90F4-137834D8F0FC}
O42 - Logiciel: Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-001F-0401-0000-0000000FF1CE}_Office14.PROPLUS_{00694B53-36C7-472D-9CB1-37BAE02F0E78}
O42 - Logiciel: Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-001F-0407-0000-0000000FF1CE}_Office14.PROPLUS_{8925227F-C7B5-4C95-AB58-4FCF2433DAEE}
O42 - Logiciel: Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUS_{09A9DF49-DA06-4093-A2FD-F339211E39EA}
O42 - Logiciel: Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUS_{ECC1D579-DC17-4B90-929C-B4A0BB35F7B3}
O42 - Logiciel: Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-001F-0413-0000-0000000FF1CE}_Office14.PROPLUS_{2C2D6CA0-1F04-4551-A82A-E0800CD616FA}
O42 - Logiciel: Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-001F-0C0A-0000-0000000FF1CE}_Office14.PROPLUS_{8C5A05B6-FF56-480F-A0E6-9F4BCA4B4CAC}
O42 - Logiciel: Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{E4D76E88-C65F-4003-9C71-EC4306679D17}
O42 - Logiciel: Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-002A-040C-1000-0000000FF1CE}_Office14.PROPLUS_{40D99E15-CD30-43EA-9A72-1A6DB7BD0A6B}
O42 - Logiciel: Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-002C-040C-0000-0000000FF1CE}_Office14.PROPLUS_{F8BE2445-4A05-4F85-B958-A7C4E942E9DF}
O42 - Logiciel: Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0044-040C-0000-0000000FF1CE}_Office14.PROPLUS_{00767F40-7075-4A18-90F4-137834D8F0FC}
O42 - Logiciel: Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-006E-040C-0000-0000000FF1CE}_Office14.PROPLUS_{D8590FBE-194F-4AD2-8FA3-EEA8EAA4EBD5}
O42 - Logiciel: Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-00A1-040C-0000-0000000FF1CE}_Office14.PROPLUS_{00767F40-7075-4A18-90F4-137834D8F0FC}
O42 - Logiciel: Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-00BA-040C-0000-0000000FF1CE}_Office14.PROPLUS_{00767F40-7075-4A18-90F4-137834D8F0FC}
O42 - Logiciel: TheGreenBow IPSec VPN Client - (.TheGreenBow.) [HKLM][64Bits] -- TheGreenBow IPSec VPN Client
O42 - Logiciel: Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}
O42 - Logiciel: Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{D3C85176-ACCC-4AF0-817D-1BC803303B74}
O42 - Logiciel: Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{D3C85176-ACCC-4AF0-817D-1BC803303B74}
O42 - Logiciel: Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}
O42 - Logiciel: Update for Microsoft InfoPath 2010 (KB2817396) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{39767ECA-1731-45DB-AB5B-6BF40E151D66}
O42 - Logiciel: Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}
O42 - Logiciel: Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}
O42 - Logiciel: Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}
O42 - Logiciel: Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{287A1E92-9E41-4BC1-8920-B3D0E9220800}
O42 - Logiciel: Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{9D69691D-823D-4C3E-9B12-563A3F520366}
O42 - Logiciel: Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}
O42 - Logiciel: Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}
O42 - Logiciel: Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{35698CB7-AAA2-4577-B505-DBFF504AEF23}
O42 - Logiciel: Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{5AA578BB-759C-40FD-9661-A737C0884541}
O42 - Logiciel: Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{BA610006-2C39-4419-9834-CF61AB24810A}
O42 - Logiciel: Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-001F-0407-0000-0000000FF1CE}_Office14.PROPLUS_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}
O42 - Logiciel: Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUS_{82F87E28-B18E-46D6-A399-E2F19CF5949B}
O42 - Logiciel: Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-001F-0C0A-0000-0000000FF1CE}_Office14.PROPLUS_{5E8EB600-8B94-429E-873E-98369C6DC1BC}
O42 - Logiciel: Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUS_{83B1B530-7D9E-4C6A-907F-E979CEE9C295}
O42 - Logiciel: Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}
O42 - Logiciel: Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}
O42 - Logiciel: Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}
O42 - Logiciel: Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{2AB483F1-C86E-427A-83B4-23889B03512D}
O42 - Logiciel: Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-001A-040C-0000-0000000FF1CE}_Office14.PROPLUS_{00B639A5-BD2B-4678-B86E-D8D7090BF175}
O42 - Logiciel: Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}
O42 - Logiciel: Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0018-040C-0000-0000000FF1CE}_Office14.PROPLUS_{42222905-BA01-4118-841D-7769A5484E1B}
O42 - Logiciel: Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}
O42 - Logiciel: Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}
O42 - Logiciel: Update for Microsoft Visio 2010 (KB2553444) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{799005D3-9B70-4219-AFE0-BC479614CC4D}
O42 - Logiciel: Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{8C55AA83-54C2-4236-A622-78440A411DC5}
O42 - Logiciel: WinRAR 4.20 (32-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver
O42 - Logiciel: Windows Small Business Server 2008 ClientAgent - (.Microsoft Corporation.) [HKLM][64Bits] -- {E4FF4DF1-F99C-49AC-B398-BE0887432846}
O42 - Logiciel: mac.3 1.0 - (.Pas de propriétaire.) [HKLM][64Bits] -- mac.3 1.0

---\ HKCU & HKLM Software Keys
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\Avira]
[HKCU\Software\Brother]
[HKCU\Software\CTPW Data]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Dell Computer Corporation]
[HKCU\Software\Google]
[HKCU\Software\Intel]
[HKCU\Software\LogMeIn]
[HKCU\Software\MCAFEE]
[HKCU\Software\Macromedia]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\Policies]
[HKCU\Software\TeamViewer]
[HKCU\Software\TeleCharger]
[HKCU\Software\Trolltech]
[HKCU\Software\WinRAR]
[HKCU\Software\Wow6432Node]
[HKCU\Software\ZebHelpProcess Helper]
[HKLM\Software\ATI Technologies]
[HKLM\Software\Atheros]
[HKLM\Software\CBSTEST]
[HKLM\Software\CUSTPDF Writer]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Dell Inc.]
[HKLM\Software\Intel]
[HKLM\Software\Khronos]
[HKLM\Software\LogMeIn, Inc.]
[HKLM\Software\LogMeIn]
[HKLM\Software\Macromedia]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\ODBC]
[HKLM\Software\Policies]
[HKLM\Software\RTLSetup]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Sonic]
[HKLM\Software\Wow6432Node\Adobe]
[HKLM\Software\Wow6432Node\AdwCleaner]
[HKLM\Software\Wow6432Node\Classes]
[HKLM\Software\Wow6432Node\Clients]
[HKLM\Software\Wow6432Node\Dell]
[HKLM\Software\Wow6432Node\GPL Ghostscript]
[HKLM\Software\Wow6432Node\Google]
[HKLM\Software\Wow6432Node\InstallShield]
[HKLM\Software\Wow6432Node\Intel]
[HKLM\Software\Wow6432Node\Khronos]
[HKLM\Software\Wow6432Node\Loader]
[HKLM\Software\Wow6432Node\LogMeIn Ignition]
[HKLM\Software\Wow6432Node\Macromedia]
[HKLM\Software\Wow6432Node\MozillaPlugins]
[HKLM\Software\Wow6432Node\Mozilla]
[HKLM\Software\Wow6432Node\ODBC]
[HKLM\Software\Wow6432Node\Policies]
[HKLM\Software\Wow6432Node\Realtek]
[HKLM\Software\Wow6432Node\RegisteredApplications]
[HKLM\Software\Wow6432Node\Software]
[HKLM\Software\Wow6432Node\TeamViewer]
[HKLM\Software\Wow6432Node\TheGreenBow]
[HKLM\Software\Wow6432Node\WinRAR]
[HKLM\Software\Wow6432Node\Wow6432Node]
[HKLM\Software\Wow6432Node\mcafeeupdater]
[HKLM\Software\Wow6432Node\mozilla.org]
[HKLM\Software\Wow6432Node\mypdfconverter]
[HKLM\Software\Wow6432Node]
[HKLM\Software\mcafeeupdater]
~ Scan Softwares in 00mn 00s



---\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 10/09/2012 - 17:22:15 - [113,305] ----D C:\Program Files (x86)\Adobe
O43 - CFD: 10/09/2012 - 15:59:57 - [4,136] ----D C:\Program Files (x86)\Cisco
O43 - CFD: 11/09/2012 - 12:24:49 - [265,388] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 10/09/2012 - 16:00:05 - [21,478] ----D C:\Program Files (x86)\Dell Wireless
O43 - CFD: 11/12/2013 - 10:49:24 - [543,700] ----D C:\Program Files (x86)\Google
O43 - CFD: 21/09/2012 - 22:08:14 - [7,701] ----D C:\Program Files (x86)\GPLGS
O43 - CFD: 10/09/2012 - 16:02:40 - [41,086] --H-D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 10/09/2012 - 16:08:24 - [245,649] ----D C:\Program Files (x86)\Intel
O43 - CFD: 15/04/2014 - 21:31:15 - [9,794] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 18/04/2014 - 06:42:29 - [76,445] ----D C:\Program Files (x86)\LogMeIn
O43 - CFD: 27/10/2012 - 13:35:06 - [6,184] ----D C:\Program Files (x86)\mac.3
O43 - CFD: 23/04/2014 - 21:33:26 - [45,926] ----D C:\Program Files (x86)\Malwarebytes Anti-Malware
O43 - CFD: 11/09/2012 - 12:23:25 - [38,002] ----D C:\Program Files (x86)\Microsoft Analysis Services
O43 - CFD: 11/09/2012 - 12:24:43 - [803,078] ----D C:\Program Files (x86)\Microsoft Office
O43 - CFD: 11/09/2012 - 12:24:42 - [1,722] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 11/09/2012 - 12:24:42 - [0,757] ----D C:\Program Files (x86)\Microsoft Sync Framework
O43 - CFD: 11/09/2012 - 12:24:49 - [0,312] ----D C:\Program Files (x86)\Microsoft Synchronization Services
O43 - CFD: 21/09/2012 - 22:05:18 - [7,797] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 24/04/2014 - 00:08:10 - [54,451] ----D C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 24/04/2014 - 00:08:09 - [0,330] ----D C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 14/07/2009 - 07:32:38 - [0,025] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 21/09/2012 - 22:08:13 - [11,239] ----D C:\Program Files (x86)\MyPDFConverter
O43 - CFD: 10/09/2012 - 15:56:07 - [2,571] ----D C:\Program Files (x86)\Realtek
O43 - CFD: 14/07/2009 - 07:32:38 - [37,357] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 10/09/2012 - 16:24:56 - [2,484] ----D C:\Program Files (x86)\TheGreenBow
O43 - CFD: 02/04/2014 - 21:42:12 - [0,122] --H-D C:\Program Files (x86)\Uninstall Information
O43 - CFD: 24/07/2013 - 03:30:29 - [0,500] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 11/09/2012 - 13:54:25 - [5,895] ----D C:\Program Files (x86)\Windows Mail
O43 - CFD: 12/12/2013 - 20:29:04 - [4,791] ----D C:\Program Files (x86)\Windows Media Player
O43 - CFD: 14/07/2009 - 07:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 11/09/2012 - 13:54:25 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 21/11/2010 - 05:31:38 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 11/09/2012 - 13:54:25 - [5,717] ----D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 10/09/2012 - 17:00:00 - [0] ----D C:\Program Files (x86)\Windows Small Business Server
O43 - CFD: 08/10/2012 - 17:27:55 - [4,131] ----D C:\Program Files (x86)\WinRAR
O43 - CFD: 24/04/2014 - 04:45:51 - [9,615] ----D C:\Program Files (x86)\ZHPDiag
O43 - CFD: 10/09/2012 - 17:22:17 - [3,722] ----D C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 11/09/2012 - 12:24:49 - [0,095] ----D C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 10/09/2012 - 16:08:22 - [14,075] ----D C:\Program Files (x86)\Common Files\Intel
O43 - CFD: 10/09/2012 - 16:17:20 - [0,007] ----D C:\Program Files (x86)\Common Files\Intel Corporation
O43 - CFD: 11/09/2013 - 16:16:24 - [197,932] ----D C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 14/07/2009 - 05:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 14/07/2009 - 05:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 16/11/2012 - 11:31:06 - [10,355] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 27/10/2012 - 13:33:55 - [-2023,079] ----D C:\ProgramData\Adobe
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Application Data
O43 - CFD: 10/09/2012 - 15:52:41 - [0] --H-D C:\ProgramData\Bureau
O43 - CFD: 10/09/2012 - 15:58:19 - [0,029] ----D C:\ProgramData\Dell
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Desktop
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Documents
O43 - CFD: 10/09/2012 - 15:52:41 - [0] --H-D C:\ProgramData\Favoris
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Favorites
O43 - CFD: 23/04/2014 - 00:01:33 - [2,940] ----D C:\ProgramData\LogMeIn
O43 - CFD: 23/04/2014 - 21:33:24 - [21,475] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 27/10/2012 - 13:33:38 -

cabrier · Answer

Bonjour mathos,


Non, ton rapport est trop long et n'est pas complet.

- Pour transmettre les rapports que tu obtiens à la suite du passage d'outils tu cliques sur un de ces liens : 
cijoint ou  pjoint
- Tu cliques ensuite sur Parcourir et cherches le fichier du rapport, en principe on t'indique ou il est.
- Tu cliques sur Ouvrir puis sur "Cliquez ici pour déposer le fichier".
Un lien de cette forme:  http://cjoint.com/index.php?file=cjge368/cijSKAP5fU.txt 
est ajouté dans la page ou (suivant le site) il faut cliquer sur "créer le lien".
- C'est ce lien que tu as à transmettre et uniquement cela.

----------------------------------

Commence par faire ceci :Ton PC est vraisemblablement infecté par des logiciels publicitaires.
Pour t'en débarrasser commence par faire ce qui suit :


Utilise AdwCleaner (développé par Xplode) qui est un outil de désinfection spécifique aux logiciels publicitaires : 

*Il est à télécharger ICI pour obtenir la dernière version.

* Une fois téléchargé et lancé (clic droit : "Exécuter en tant qu'administrateur") clique sur [Scanner], laisse l'outil travailler.

* Lorsque le scan est terminé, dans les différents onglets apparaissent les infections trouvées.

* Clique sur l'onglet [Nettoyer], tous les éléments infectieux trouvés vont être supprimés.

* Clique sur [Rapport], le rapport apparait, tu peux le copier/coller dans ta prochaine réponse. 
Sinon héberge le sur :
cijoint ou  pjoint ou Up2Share et transmet moi le lien obtenu.


-----------------------------------------
 * Une fois AdwCleaner utilisé et posté son rapport :

Utilise cet autre outil pour  vérification :Télécharge: Junkware Removal Tool à partir ce lien : JRT

!!! Ne clique pas sur Download !!! , attends simplement que la fenêtre de téléchargement arrive pour confirmation

* Enregistre ce fichier sur le bureau et ferme tous tes navigateurs

Sous XP, double-clique sur l'icône et presse une touche lorsque cela te sera demandé.
Sous Vista/7/8, clic droit et Exécuter en temps qu'administrateur.

* NB: Le bureau disparaitra un instant, c'est normal.
* Laisse le programme travailler ne touche à rien

* Poste le rapport généré à la fin de l'analyse.

Tuto : http://hackinginterdit.blogspot.fr/2013/02/junkware-removal-tool.html




A+

mathos33 · Answer

Merci à toi. Je vais suivre tes instructions au plus vite. Je serai devant la machine ce soir ou demain soir au plus tard et reviens vers toi.

+

cabrier · Answer

mathos,


Ok quand tu veux !

Analyse rapport ZPHDiag

3 réponses

Discussions similaires