Virus detecter Win32:Adware-gen [Adw]

lion72 -  
Bonjour,
mon anti virus avast free me signale qu'une menace a été détecté.
depuis hier
le nom est du virus est Win32:Adware-gen [Adw]

j'ai regarder sur le net pour supprimer, installer antimalware et fait un nettoyage avec ccleaner, mais rien donner.

merci de me guider pour la marche a suivre

24 réponses

Résumé de la discussion

Un utilisateur signale qu' Avast Free détecte la menace Win32:Adware-gen [Adw], et décrit des tentatives de suppression sous Windows 7 avec Firefox 30 sans résultat, appelant à une marche à suivre. Plusieurs réponses recommandent d'utiliser AdwCleaner puis de supprimer manuellement les éléments suspects dans les registres et les navigateurs, en détaillant des clés et extensions supprimées lors d'un nettoyage approfondi. D'autres évoquent RogueKiller et l'extraction d'un rapport, tandis que certains commentaires remettent en question l'efficacité ou l'obsolescence de méthodes antérieures, sans consensus clair sur la marche à suivre. Le fil illustre une diversité de résultats de nettoyage, incluant la suppression de dossiers et clés de registre, la purgation d'extensions et de paramètres Firefox, et une alerte persistante lors du redémarrage.

Bobot (l’IA à votre service)
  1. lion72 Auteur
    déjà une réponse, merci de la rapidité

    je sait pour ccleaner, je le fait de temps en temps pour nettoyer.

    et voila, je suppose qu'il faut corriger les problemes, mais je vais attendre avant.

    voila la totaliter du scan.

    Babylon.Toolbar: [SBI $F75ED516] Barre d'outils IE (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{98889811-442D-49dd-99D7-DC866BE87DBC}

    Babylon.Toolbar: [SBI $3BE29F71] Réglages (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\AppID\{BDB69379-802F-4eaf-B541-F8DE92DD98DB}

    Babylon.Toolbar: [SBI $DEB52F26] Dossier Programme (Répertoire, nothing done)
    C:\ProgramData\Babylon\

    Babylon.Toolbar: [SBI $5AB447BB] Dossier Programme (Répertoire, nothing done)
    C:\Users\Lionel\AppData\Roaming\Babylon\

    Delta.Toolbar: [SBI $85F92549] Réglages utilisateur (Clé du registre, nothing done)
    HKEY_USERS\S-1-5-21-3109688691-795145518-3024645089-1001\Software\BabSolution

    ExpressFiles: [SBI $15B77C36] Réglages utilisateur (Clé du registre, nothing done)
    HKEY_USERS\S-1-5-21-3109688691-795145518-3024645089-1001\Software\ExpressFiles

    ExpressFiles: [SBI $8D1D0CF1] Réglages (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\ExpressFiles

    Faglaro.ExpressFiles: [SBI $AF2A07A6] Dossier Programme (Répertoire, nothing done)
    C:\Users\Lionel\AppData\Roaming\ExpressFiles\

    Delta.Toolbar: [SBI $C87F6C5D] Donnée (Fichier, nothing done)
    C:\Users\Lionel\AppData\Roaming\Babylon\log_file.txt
    Properties.size=9569
    Properties.md5=5003468A55B56DB4095009564F5671C3
    Properties.filedate=1372634934
    Properties.filedatetext=2013-06-30 19:28:53

    WebCake.BHO: [SBI $3F53FBE0] Class ID (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}

    WebCake.BHO: [SBI $5B966508] Réglages (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application\WebCakeUpdaterService

    WebCake.BHO: [SBI $B5928459] Réglages (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\Application\WebCakeUpdaterService

    WebCake.BHO: [SBI $2698E3E6] Dossier Programme (Répertoire, nothing done)
    C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\

    WebCake.BHO: [SBI $885FF297] Bibliothèque (Fichier, nothing done)
    C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setup.dll
    Properties.size=531968
    Properties.md5=E1416C9C40FD81557795D4195FB48E8D
    Properties.filedate=1368563125
    Properties.filedatetext=2013-05-14 16:25:25

    WebCake.BHO: [SBI $0A5B161A] Bibliothèque (Fichier, nothing done)
    C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll
    Properties.size=273408
    Properties.md5=4C05D85B6C1E2E9AEF5784F0A43B5C3A
    Properties.filedate=1368563125
    Properties.filedatetext=2013-05-14 16:25:24

    WebCake.BHO: [SBI $1107F102] Donnée (Fichier, nothing done)
    C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.dat
    Properties.size=56161
    Properties.md5=553869FC38620C9D665B7C4A3EF4220E
    Properties.filedate=1372634922
    Properties.filedatetext=2013-06-30 19:28:42

    WebCake.BHO: [SBI $E98B8D0E] Exécutable (Fichier, nothing done)
    C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.exe
    Properties.size=227984
    Properties.md5=5A8222C703B4A34F2227A652A49A2827
    Properties.filedate=1299814153
    Properties.filedatetext=2011-03-10 23:29:12

    WebCake.BHO: [SBI $370B837B] Image (Fichier, nothing done)
    C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.ico
    Properties.size=4846
    Properties.md5=60E3EF9326E8C3F574A2C7B5A31FD895
    Properties.filedate=1258611124
    Properties.filedatetext=2009-11-19 02:12:03

    Searchdwebs: [SBI $B415107A] Dossier Programme (Répertoire, nothing done)
    C:\ProgramData\StarApp\

    Searchdwebs: [SBI $F5AC6597] Dossier Programme (Répertoire, nothing done)
    C:\ProgramData\StarApp\Setup\

    SweetIM: [SBI $51615461] Réglages (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SweetIM\

    SweetIM: [SBI $F8933C6C] Réglages (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SweetIM\Communicator\

    SweetIM: [SBI $C6A2D07F] Réglages (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SweetIM\Communicator\Microsoft.VC90.CRT\

    SweetIM: [SBI $2656FBAA] Réglages (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SweetIM\Communicator\resources\

    SweetIM: [SBI $6240EF6B] Réglages (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SweetIM\Communicator\resources\sqlite\

    SweetIM: [SBI $2C60DF4B] Réglages (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SweetIM\Messenger\

    SweetIM: [SBI $A6046AD2] Réglages (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SweetIM\Messenger\resources\

    SweetIM: [SBI $7AD2078F] Réglages (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SweetIM\Messenger\resources\images\

    SweetIM: [SBI $C4779E51] Réglages (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SweetIM\Messenger\resources\sqlite\

    SweetIM: [SBI $1EBFD254] Réglages (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SweetIM\Toolbars\

    SweetIM: [SBI $5770A858] Réglages (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SweetIM\Toolbars\Internet Explorer\

    SweetIM: [SBI $6C3EBC75] Réglages (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SweetIM\Toolbars\Internet Explorer\conf\

    SweetIM: [SBI $CEB7CBCD] Réglages (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SweetIM\Toolbars\Internet Explorer\Microsoft.VC90.CRT\

    SweetIM: [SBI $6C8B4BDF] Réglages (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\

    SweetIM: [SBI $27B38A9A] Réglages (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\blue\

    SweetIM: [SBI $8AC8D9F1] Réglages (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\green\

    SweetIM: [SBI $15F80965] Réglages (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\orange\

    OtShot: [SBI $6680244F] Réglages (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\ZalmanInstaller_otshot

    DoubleClick: Cookie traceur (Internet Explorer: Lionel) (Cookie, nothing done)

    BurstMedia: Cookie traceur (Internet Explorer: Lionel) (Cookie, nothing done)

    --- Spybot - Search & Destroy version: 1.6.2 (build: 20090126) ---

    2009-01-26 blindman.exe (1.0.0.8)
    2009-01-26 SDFiles.exe (1.6.1.7)
    2009-01-26 SDMain.exe (1.0.0.6)
    2009-01-26 SDShred.exe (1.0.2.5)
    2009-01-26 SDUpdate.exe (1.6.0.12)
    2009-01-26 SDWinSec.exe (1.0.0.12)
    2009-01-26 SpybotSD.exe (1.6.2.46)
    2009-01-26 TeaTimer.exe (1.6.4.26)
    2014-07-27 unins000.exe (51.49.0.0)
    2009-01-26 Update.exe (1.6.0.7)
    2009-01-26 advcheck.dll (1.6.2.15)
    2007-04-02 aports.dll (2.1.0.0)
    2008-06-14 DelZip179.dll (1.79.11.1)
    2009-01-26 SDHelper.dll (1.6.2.14)
    2008-06-19 sqlite3.dll
    2009-01-26 Tools.dll (2.1.6.10)
    2009-01-16 UninsSrv.dll (1.0.0.0)
    2014-03-05 Includes\Adware-000.sbi (*)
    2014-01-08 Includes\Adware-001.sbi (*)
    2014-06-11 Includes\Adware-C.sbi (*)
    2014-01-13 Includes\Adware.sbi (*)
    2014-01-13 Includes\AdwareC.sbi (*)
    2010-08-13 Includes\Cookies.sbi (*)
    2014-01-08 Includes\Dialer-000.sbi (*)
    2014-01-08 Includes\Dialer-001.sbi (*)
    2014-01-08 Includes\Dialer-C.sbi (*)
    2014-01-08 Includes\Dialer.sbi (*)
    2014-01-13 Includes\DialerC.sbi (*)
    2014-01-09 Includes\Fraud-000.sbi (*)
    2014-01-09 Includes\Fraud-001.sbi (*)
    2014-03-31 Includes\Fraud-002.sbi (*)
    2014-01-09 Includes\Fraud-003.sbi (*)
    2013-04-11 Includes\HeavyDuty.sbi (*)
    2014-01-08 Includes\Hijackers-000.sbi (*)
    2014-01-08 Includes\Hijackers-001.sbi (*)
    2014-01-08 Includes\Hijackers-C.sbi (*)
    2014-01-08 Includes\Hijackers.sbi (*)
    2014-01-13 Includes\HijackersC.sbi (*)
    2014-01-08 Includes\iPhone-000.sbi (*)
    2014-01-08 Includes\iPhone.sbi (*)
    2014-01-08 Includes\Keyloggers-000.sbi (*)
    2014-03-19 Includes\Keyloggers-C.sbi (*)
    2014-01-08 Includes\Keyloggers.sbi (*)
    2014-01-13 Includes\KeyloggersC.sbi (*)
    2004-11-29 Includes\LSP.sbi (*)
    2014-03-03 Includes\Malware-000.sbi (*)
    2014-01-09 Includes\Malware-001.sbi (*)
    2014-03-03 Includes\Malware-002.sbi (*)
    2014-02-05 Includes\Malware-003.sbi (*)
    2014-01-28 Includes\Malware-004.sbi (*)
    2014-04-15 Includes\Malware-005.sbi (*)
    2014-02-26 Includes\Malware-006.sbi (*)
    2014-01-09 Includes\Malware-007.sbi (*)
    2014-06-11 Includes\Malware-C.sbi (*)
    2014-01-13 Includes\Malware.sbi (*)
    2014-01-13 Includes\MalwareC.sbi (*)
    2014-01-15 Includes\PUPS-000.sbi (*)
    2014-01-15 Includes\PUPS-001.sbi (*)
    2014-01-15 Includes\PUPS-002.sbi (*)
    2014-06-11 Includes\PUPS-C.sbi (*)
    2014-01-13 Includes\PUPS.sbi (*)
    2014-01-13 Includes\PUPSC.sbi (*)
    2010-01-25 Includes\Revision.sbi (*)
    2014-01-08 Includes\Security-000.sbi (*)
    2014-01-08 Includes\Security-C.sbi (*)
    2014-01-08 Includes\Security.sbi (*)
    2014-01-13 Includes\SecurityC.sbi (*)
    2008-06-03 Includes\Spybots.sbi (*)
    2008-06-03 Includes\SpybotsC.sbi (*)
    2014-01-28 Includes\Spyware-000.sbi (*)
    2014-01-08 Includes\Spyware-001.sbi (*)
    2014-01-08 Includes\Spyware-C.sbi (*)
    2014-01-13 Includes\Spyware.sbi (*)
    2014-01-08 Includes\SpywareC.sbi (*)
    2012-11-19 Includes\Tracks.uti
    2014-01-15 Includes\Trojans-000.sbi (*)
    2014-02-26 Includes\Trojans-001.sbi (*)
    2014-01-15 Includes\Trojans-002.sbi (*)
    2014-01-28 Includes\Trojans-003.sbi (*)
    2014-01-15 Includes\Trojans-004.sbi (*)
    2014-03-19 Includes\Trojans-005.sbi (*)
    2014-03-14 Includes\Trojans-006.sbi (*)
    2014-01-15 Includes\Trojans-007.sbi (*)
    2014-02-19 Includes\Trojans-008.sbi (*)
    2014-01-15 Includes\Trojans-009.sbi (*)
    2014-06-11 Includes\Trojans-C.sbi (*)
    2014-01-15 Includes\Trojans-OG-000.sbi (*)
    2014-01-15 Includes\Trojans-TD-000.sbi (*)
    2014-01-15 Includes\Trojans-VM-000.sbi (*)
    2014-01-15 Includes\Trojans-VM-001.sbi (*)
    2014-01-15 Includes\Trojans-VM-002.sbi (*)
    2014-01-15 Includes\Trojans-VM-003.sbi (*)
    2014-01-15 Includes\Trojans-VM-004.sbi (*)
    2014-01-15 Includes\Trojans-VM-005.sbi (*)
    2014-01-15 Includes\Trojans-VM-006.sbi (*)
    2014-01-15 Includes\Trojans-VM-007.sbi (*)
    2014-01-15 Includes\Trojans-VM-008.sbi (*)
    2014-01-15 Includes\Trojans-VM-009.sbi (*)
    2014-01-15 Includes\Trojans-VM-010.sbi (*)
    2014-01-15 Includes\Trojans-VM-011.sbi (*)
    2014-01-15 Includes\Trojans-VM-012.sbi (*)
    2014-01-15 Includes\Trojans-VM-013.sbi (*)
    2014-01-15 Includes\Trojans-VM-014.sbi (*)
    2014-01-15 Includes\Trojans-VM-015.sbi (*)
    2014-01-15 Includes\Trojans-VM-016.sbi (*)
    2014-01-15 Includes\Trojans-VM-017.sbi (*)
    2014-01-15 Includes\Trojans-VM-018.sbi (*)
    2014-01-15 Includes\Trojans-VM-019.sbi (*)
    2014-01-15 Includes\Trojans-VM-020.sbi (*)
    2014-01-15 Includes\Trojans-VM-021.sbi (*)
    2014-01-15 Includes\Trojans-VM-022.sbi (*)
    2014-01-15 Includes\Trojans-VM-023.sbi (*)
    2014-01-15 Includes\Trojans-VM-024.sbi (*)
    2014-01-15 Includes\Trojans-ZB-000.sbi (*)
    2014-03-14 Includes\Trojans-ZL-000.sbi (*)
    2014-01-09 Includes\Trojans.sbi (*)
    2014-01-09 Includes\TrojansC-02.sbi (*)
    2014-01-09 Includes\TrojansC-03.sbi (*)
    2014-01-16 Includes\TrojansC-04.sbi (*)
    2014-01-09 Includes\TrojansC-05.sbi (*)
    2014-01-09 Includes\TrojansC.sbi (*)
    2008-03-04 Plugins\Chai.dll
    2008-03-05 Plugins\Fennel.dll
    2008-02-26 Plugins\Mate.dll
    2007-12-24 Plugins\TCPIPAddress.dll
    1. XDamienX007
      Nettoie tout ! (fix)
    2. lilidurhone Contributeur sécurité
      @Damien

      Non!

      Il doit faire nettoyer avec adwcleaner et désinstaller spybot....
    3. XDamienX007
      Mais il a fait le scan autant qu'il nettoie !!
      Et ça va pas la peine de désinstaller c'est pas Avast ou Norton non plus ..
    4. lilidurhone Contributeur sécurité
      Si Damien

      Il est inefficace et lourd
  2. lilidurhone Contributeur sécurité
    Désolé

    Mais je reprends le sujet...

    Vire spybot(obsolète et inefficace...)

    Utilise plutôt adwcleaner

    https://www.commentcamarche.net/telecharger/securite/2759-adwcleaner/
    1. XDamienX007
      Obsolète et inefficace ?!
      Il fonctionne très bien et détecte tout ce qu'il faut !
      Il est en plus très simple d'utilisation et rapide.
    2. lilidurhone Contributeur sécurité
      Non

      Inefficace et obsolète

      Je sais ce que je dis....
    3. XDamienX007
      Moi aussi je suis dedans pour mes études, dans tout mes stages j'utilisais ce logiciel aucun retour...
    4. lilidurhone Contributeur sécurité
      Plus maintenant

      Tu as vu ce que adwcleaner a détecté...
    5. XDamienX007
      Autant que Spybot ...
      Et puis m*rde continue avec lion72, je m'occupe des sujet où "je sais ce que je dis".
  3. lion72 Auteur
    voila le rapport adwcleaner

    # AdwCleaner v3.300 - Rapport créé le 27/07/2014 à 15:16:49
    # Mis à jour le 27/07/2014 par Xplode
    # Système d'exploitation : Windows 7 Professional Service Pack 1 (32 bits)
    # Nom d'utilisateur : Lionel - LIONEL-PC
    # Exécuté depuis : C:\Users\Lionel\Downloads\adwcleaner_3.300.exe
    # Option : Scanner

    ***** [ Services ] *****

    ***** [ Fichiers / Dossiers ] *****

    Dossier Présent : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EZDownloader
    Dossier Présent : C:\ProgramData\Tarma Installer
    Dossier Présent : C:\ProgramData\WinterSoft
    Dossier Présent : C:\Users\Lionel\AppData\Local\DirectDownloader
    Fichier Présent : C:\Users\Lionel\AppData\Roaming\Mozilla\Firefox\Profiles\o50aw18z.default\user.js

    ***** [ Tâches planifiées ] *****

    Tâche Présente : Browser Manager
    Tâche Présente : Express FilesUpdate

    ***** [ Raccourcis ] *****

    ***** [ Registre ] *****

    Clé Présente : HKCU\Software\532d68de169e844
    Clé Présente : HKCU\Software\Myfree Codec
    Clé Présente : HKCU\Software\Softonic
    Clé Présente : HKLM\SOFTWARE\532d68de169e844
    Clé Présente : HKLM\SOFTWARE\Classes\1ClicktorrentFile
    Clé Présente : HKLM\SOFTWARE\Classes\1ClicktorrentFile1
    Clé Présente : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
    Clé Présente : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
    Clé Présente : HKLM\SOFTWARE\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}
    Clé Présente : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
    Clé Présente : HKLM\SOFTWARE\Classes\AppID\secman.DLL
    Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
    Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
    Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
    Clé Présente : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
    Clé Présente : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
    Clé Présente : HKLM\SOFTWARE\Classes\oneclick
    Clé Présente : HKLM\SOFTWARE\Classes\oneclickmg
    Clé Présente : HKLM\SOFTWARE\Classes\Prod.cap
    Clé Présente : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
    Clé Présente : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
    Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
    Clé Présente : HKLM\Software\Conduit
    Clé Présente : HKLM\Software\Driver-Soft
    Clé Présente : HKLM\SOFTWARE\Google\Chrome\Extensions\hphibigbodkkohoglgfkddblldpfohjl
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASAPI32
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASMANCS
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\ClickPotatoLiteSA_RASAPI32
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\ClickPotatoLiteSA_RASMANCS
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_amimo_RASAPI32
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_amimo_RASMANCS
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_dvd-shrink_RASAPI32
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_dvd-shrink_RASMANCS
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_ordi-scrabble_RASAPI32
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_ordi-scrabble_RASMANCS
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_toneshop_RASAPI32
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_toneshop_RASMANCS
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_windows-media-player_RASAPI32
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_windows-media-player_RASMANCS
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasapi32
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasmancs
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\sweetpacksupdatemanager_rasapi32
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS
    Clé Présente : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632
    Clé Présente : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75D5168E5E176C24981B4E5DBD991078
    Clé Présente : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F754C503375A13344B22388E18DFE87E
    Clé Présente : HKLM\Software\Myfree Codec
    Clé Présente : HKLM\Software\Tarma Installer

    ***** [ Navigateurs ] *****

    -\\ Internet Explorer v11.0.9600.17207

    Paramètre Présent : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://www.holasearch.com/?babsrc=HP_ss&mntrId=848D00219B089077&affID=122304&tt=300613_holp&tsp=4929

    -\\ Mozilla Firefox v30.0 (fr)

    [ Fichier : C:\Users\Lionel\AppData\Roaming\Mozilla\Firefox\Profiles\o50aw18z.default\prefs.js ]

    Ligne Trouvée : user_pref("extensions.ffxtlbr@holasearch.com.install-event-fired", true);
    Ligne Trouvée : user_pref("extensions.holasearch.admin", false);
    Ligne Trouvée : user_pref("extensions.holasearch.aflt", "babsst");
    Ligne Trouvée : user_pref("extensions.holasearch.appId", "{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}");
    Ligne Trouvée : user_pref("extensions.holasearch.autoRvrt", "false");
    Ligne Trouvée : user_pref("extensions.holasearch.dfltLng", "fr");
    Ligne Trouvée : user_pref("extensions.holasearch.excTlbr", false);
    Ligne Trouvée : user_pref("extensions.holasearch.ffxUnstlRst", false);
    Ligne Trouvée : user_pref("extensions.holasearch.id", "848dee4500000000000000219b089077");
    Ligne Trouvée : user_pref("extensions.holasearch.instlDay", "15886");
    Ligne Trouvée : user_pref("extensions.holasearch.instlRef", "sst");
    Ligne Trouvée : user_pref("extensions.holasearch.newTab", false);
    Ligne Trouvée : user_pref("extensions.holasearch.prdct", "holasearch");
    Ligne Trouvée : user_pref("extensions.holasearch.prtnrId", "holasearch");
    Ligne Trouvée : user_pref("extensions.holasearch.rvrt", "false");
    Ligne Trouvée : user_pref("extensions.holasearch.smplGrp", "none");
    Ligne Trouvée : user_pref("extensions.holasearch.tlbrId", "base");
    Ligne Trouvée : user_pref("extensions.holasearch.tlbrSrchUrl", "");
    Ligne Trouvée : user_pref("extensions.holasearch.vrsn", "1.8.16.16");
    Ligne Trouvée : user_pref("extensions.holasearch.vrsnTs", "1.8.16.1619:28:49");
    Ligne Trouvée : user_pref("extensions.holasearch.vrsni", "1.8.16.16");
    Ligne Trouvée : user_pref("extensions.wrc.SearchRules.ask.com.style", ".WRCN {display:none} #yui-main .tsrc_vnru .title + .WRCN, #yui-main #teoma-results .title + .WRCN {display:inline !important; background: url(\"I[...]
    Ligne Trouvée : user_pref("extensions.wrc.SearchRules.ask.com.url", "^hxxp(s)?\\:\\/\\/(.+\\.)?ask\\.com\\/.*");

    -\\ Google Chrome v36.0.1985.125

    [ Fichier : C:\Users\Lionel\AppData\Local\Google\Chrome\User Data\Default\preferences ]

    Trouvée [Search Provider] : hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&barid={F58C9B4B-8BCF-11E1-9348-00219B089077}
    Trouvée [Search Provider] : hxxp://search.babylon.com/?q={searchTerms}&affID=113357&tt=2912_8&babsrc=SP_ss&mntrId=848dee4500000000000000219b089077
    Trouvée [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}

    *************************

    AdwCleaner[R0].txt - [8148 octets] - [27/07/2014 15:16:49]

    ########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [8208 octets] ##########
    1. lilidurhone Contributeur sécurité
      Fais nettoyer avec adwcleaner

      Laisse tomber pour Spybot vire le.

      Si problème il y a il existe toujours une solution
      ~~~~~~ Cs ~~~~~~ Absente du 15 juillet au 27
      2. lion72 Auteur
        rapport une fois nettoyer,
        PS: je vient de recevoir une autre alerte en redémarrant.

        # AdwCleaner v3.300 - Rapport créé le 27/07/2014 à 15:30:55
        # Mis à jour le 27/07/2014 par Xplode
        # Système d'exploitation : Windows 7 Professional Service Pack 1 (32 bits)
        # Nom d'utilisateur : Lionel - LIONEL-PC
        # Exécuté depuis : C:\Users\Lionel\Downloads\adwcleaner_3.300.exe
        # Option : Nettoyer

        ***** [ Services ] *****

        ***** [ Fichiers / Dossiers ] *****

        Dossier Supprimé : C:\ProgramData\Tarma Installer
        Dossier Supprimé : C:\ProgramData\WinterSoft
        Dossier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EZDownloader
        Dossier Supprimé : C:\Users\Lionel\AppData\Local\DirectDownloader
        Fichier Supprimé : C:\Users\Lionel\AppData\Roaming\Mozilla\Firefox\Profiles\o50aw18z.default\user.js

        ***** [ Tâches planifiées ] *****

        Tâche supprimée : Browser Manager
        Tâche supprimée : Express FilesUpdate

        ***** [ Raccourcis ] *****

        ***** [ Registre ] *****

        Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\hphibigbodkkohoglgfkddblldpfohjl
        Clé Supprimée : HKLM\SOFTWARE\Classes\1ClicktorrentFile
        Clé Supprimée : HKLM\SOFTWARE\Classes\1ClicktorrentFile1
        Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\secman.DLL
        Clé Supprimée : HKLM\SOFTWARE\Classes\oneclick
        Clé Supprimée : HKLM\SOFTWARE\Classes\oneclickmg
        Clé Supprimée : HKLM\SOFTWARE\Classes\Prod.cap
        Clé Supprimée : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
        Clé Supprimée : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
        Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
        Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
        Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
        Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
        Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
        Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
        Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASAPI32
        Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASMANCS
        Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\ClickPotatoLiteSA_RASAPI32
        Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\ClickPotatoLiteSA_RASMANCS
        Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
        Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
        Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
        Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
        Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasapi32
        Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasmancs
        Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\sweetpacksupdatemanager_rasapi32
        Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS
        Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32
        Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS
        Clé Supprimée : HKCU\Software\532d68de169e844
        Clé Supprimée : HKLM\SOFTWARE\532d68de169e844
        Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_amimo_RASAPI32
        Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_amimo_RASMANCS
        Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_dvd-shrink_RASAPI32
        Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_dvd-shrink_RASMANCS
        Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_ordi-scrabble_RASAPI32
        Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_ordi-scrabble_RASMANCS
        Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_toneshop_RASAPI32
        Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_toneshop_RASMANCS
        Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_windows-media-player_RASAPI32
        Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_windows-media-player_RASMANCS
        Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
        Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
        Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}
        Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
        Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
        Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
        Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
        Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
        Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
        Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
        Clé Supprimée : HKCU\Software\Myfree Codec
        Clé Supprimée : HKCU\Software\Softonic
        Clé Supprimée : HKLM\Software\Conduit
        Clé Supprimée : HKLM\Software\Driver-Soft
        Clé Supprimée : HKLM\Software\Myfree Codec
        Clé Supprimée : HKLM\Software\Tarma Installer
        Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75D5168E5E176C24981B4E5DBD991078
        Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F754C503375A13344B22388E18DFE87E
        Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632

        ***** [ Navigateurs ] *****

        -\\ Internet Explorer v11.0.9600.17207

        Paramètre Restauré : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

        -\\ Mozilla Firefox v30.0 (fr)

        [ Fichier : C:\Users\Lionel\AppData\Roaming\Mozilla\Firefox\Profiles\o50aw18z.default\prefs.js ]

        Ligne Supprimée : user_pref("extensions.ffxtlbr@holasearch.com.install-event-fired", true);
        Ligne Supprimée : user_pref("extensions.holasearch.admin", false);
        Ligne Supprimée : user_pref("extensions.holasearch.aflt", "babsst");
        Ligne Supprimée : user_pref("extensions.holasearch.appId", "{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}");
        Ligne Supprimée : user_pref("extensions.holasearch.autoRvrt", "false");
        Ligne Supprimée : user_pref("extensions.holasearch.dfltLng", "fr");
        Ligne Supprimée : user_pref("extensions.holasearch.excTlbr", false);
        Ligne Supprimée : user_pref("extensions.holasearch.ffxUnstlRst", false);
        Ligne Supprimée : user_pref("extensions.holasearch.id", "848dee4500000000000000219b089077");
        Ligne Supprimée : user_pref("extensions.holasearch.instlDay", "15886");
        Ligne Supprimée : user_pref("extensions.holasearch.instlRef", "sst");
        Ligne Supprimée : user_pref("extensions.holasearch.newTab", false);
        Ligne Supprimée : user_pref("extensions.holasearch.prdct", "holasearch");
        Ligne Supprimée : user_pref("extensions.holasearch.prtnrId", "holasearch");
        Ligne Supprimée : user_pref("extensions.holasearch.rvrt", "false");
        Ligne Supprimée : user_pref("extensions.holasearch.smplGrp", "none");
        Ligne Supprimée : user_pref("extensions.holasearch.tlbrId", "base");
        Ligne Supprimée : user_pref("extensions.holasearch.tlbrSrchUrl", "");
        Ligne Supprimée : user_pref("extensions.holasearch.vrsn", "1.8.16.16");
        Ligne Supprimée : user_pref("extensions.holasearch.vrsnTs", "1.8.16.1619:28:49");
        Ligne Supprimée : user_pref("extensions.holasearch.vrsni", "1.8.16.16");
        Ligne Supprimée : user_pref("extensions.wrc.SearchRules.ask.com.style", ".WRCN {display:none} #yui-main .tsrc_vnru .title + .WRCN, #yui-main #teoma-results .title + .WRCN {display:inline !important; background: url(\"I[...]
        Ligne Supprimée : user_pref("extensions.wrc.SearchRules.ask.com.url", "^hxxp(s)?\\:\\/\\/(.+\\.)?ask\\.com\\/.*");

        -\\ Google Chrome v36.0.1985.125

        [ Fichier : C:\Users\Lionel\AppData\Local\Google\Chrome\User Data\Default\preferences ]

        Supprimée [Search Provider] : hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&barid={F58C9B4B-8BCF-11E1-9348-00219B089077}
        Supprimée [Search Provider] : hxxp://search.babylon.com/?q={searchTerms}&affID=113357&tt=2912_8&babsrc=SP_ss&mntrId=848dee4500000000000000219b089077
        Supprimée [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}

        *************************

        AdwCleaner[R0].txt - [8288 octets] - [27/07/2014 15:16:49]
        AdwCleaner[R1].txt - [8348 octets] - [27/07/2014 15:30:04]
        AdwCleaner[S0].txt - [8286 octets] - [27/07/2014 15:30:55]

        ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [8346 octets] ##########
        3. lion72 Auteur
          rapport ZHPdiag

          ~ Rapport de ZHPDiag v2014.7.27.109 - Nicolas Coolman (2014-07-27)
          ~ Lancé par Lionel (2014-07-27 15:47:59)
          ~ Adresse du Site Web https://nicolascoolman.eu
          ~ Adresse du Forum https://nicolascoolman.eu
          ~ Traduit par Nicolas Coolman
          ~ Etat de la version : Version à jour.
          ~ Liste blanche : Activée par le programme
          ~ Elévation des Privilèges : OK
          ~ User Account Control (UAC): Deactivate by user

          ---\\ Navigateurs Internet
          MSIE: Internet Explorer v11.0.9600.17207
          MFIE: Mozilla Firefox 30.0 (Defaut)
          GCIE: Google Chrome v36.0.1985.125

          ---\\ Informations sur les produits Windows
          ~ Langage: Français
          Windows 7 Professional, 32-bit Service Pack 1 (Build 7601)
          Windows Server License Manager Script : OK
          ~ Windows Operating System - Windows(R) 7, RETAIL channel
          Windows ID Activation : OK
          ~ Windows Partial Key : 72CBH
          Windows License : OK
          ~ Windows Remaining Initializations Number : 4
          Software Protection Service (Protection logicielle) : OK
          Windows Automatic Updates : OK
          Windows Activation Technologies : OK

          ---\\ Logiciels de protection du système
          avast! Free Antivirus v9.0.2021
          Windows Defender W7 (Activate)

          ---\\ Logiciels d'optimisation du système
          CCleaner v3.05

          ---\\ Logiciels de partage PeerToPeer
          µTorrent v3.3.0.29625 =>P2P.µTorrent

          ---\\ Surveillance de Logiciels
          Adobe Flash Player 14 Plugin
          Adobe Reader X
          Java 7 Update 25

          ---\\ Informations sur le système
          ~ Processor: x86 Family 6 Model 23 Stepping 7, GenuineIntel
          ~ Operating System: 32 Bits
          Boot mode: Normal (Normal boot)
          Total RAM: 3326 MB (66% free)
          System Restore: Activé (Enable)
          System drive C: has 67 GB (11%) free of 596 GB

          ---\\ Mode de connexion au système
          ~ Computer Name: LIONEL-PC
          ~ User Name: Lionel
          ~ All Users Names: Mcx1-LIONEL-PC, Lionel, HomeGroupUser$, Administrateur,
          ~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
          Logged in as Administrator

          ---\\ Variables d'environnement
          ~ System Unit : C:\
          ~ %AppZHP% : C:\Users\Lionel\AppData\Roaming\ZHP\
          ~ %AppData% : C:\Users\Lionel\AppData\Roaming\
          ~ %Desktop% : C:\Users\Lionel\Desktop\
          ~ %Favorites% : C:\Users\Lionel\Favorites\
          ~ %LocalAppData% : C:\Users\Lionel\AppData\Local\
          ~ %StartMenu% : C:\Users\Lionel\AppData\Roaming\Microsoft\Windows\Start Menu\
          ~ %Windir% : C:\Windows\
          ~ %System% : C:\Windows\System32\

          ---\\ Enumération des unités disques
          C: Hard drive, Flash drive, Thumb drive (Free 67 Go of 596 Go)
          D: CD-ROM drive (Not Inserted)
          E: CD-ROM drive (Not Inserted)

          ---\\ Etat du Centre de Sécurité Windows
          [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified
          [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowMyGames: Modified
          ~ Security Center: 43 Legitimates Filtered in 00mn 00s

          ---\\ Recherche particulière de fichiers génériques
          [MD5.8B88EBBB05A0E56B7DCC708498C02B3E] - (.Microsoft Corporation - Explorateur Windows.) (.2011-02-25 - 00:30:54.) -- C:\Windows\Explorer.exe [2616320]
          [MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.2009-07-13 - 20:14:45.) -- C:\Windows\System32\Wininit.exe [96256]
          [MD5.CCC198257901BEEA2FBF8EB1E7678356] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.2014-06-18 - 17:13:59.) -- C:\Windows\System32\wininet.dll [1791488]
          [MD5.998507B046BA314CE8245364C686FA67] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.2014-03-04 - 04:17:02.) -- C:\Windows\System32\Winlogon.exe [304128]
          [MD5.E3AE23569749DE12D45BA3B489A036AE] - (.Microsoft Corporation - Bibliothèque de licences.) (.2010-11-20 - 07:21:24.) -- C:\Windows\System32\sppcomapi.dll [193536]
          [MD5.D0B388DA1D111A34366E04EB4A5DD156] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.2014-05-30 - 01:36:07.) -- C:\Windows\system32\Drivers\AFD.sys [338944]
          [MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.2009-07-13 - 20:26:15.) -- C:\Windows\system32\Drivers\atapi.sys [21584]
          [MD5.77EA11B065E0A8AB902D78145CA51E10] - (.Microsoft Corporation - CD-ROM File System Driver.) (.2009-07-13 - 18:11:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [70656]
          [MD5.BE167ED0FDB9C1FA1133953C18D5A6C9] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.2010-11-20 - 03:38:10.) -- C:\Windows\system32\Drivers\Cdrom.sys [108544]
          [MD5.F024449C97EC1E464AAFFDA18593DB88] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.2010-11-20 - 03:42:32.) -- C:\Windows\system32\Drivers\DfsC.sys [78336]
          [MD5.9036377B8A6C15DC2EEC53E489D159B5] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.2010-11-20 - 04:59:29.) -- C:\Windows\system32\Drivers\HDAudBus.sys [108544]
          [MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - (.Microsoft Corporation - Pilote de port i8042.) (.2009-07-13 - 18:11:24.) -- C:\Windows\system32\Drivers\i8042prt.sys [80896]
          [MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - (.Microsoft Corporation - IP Network Address Translator.) (.2009-07-13 - 18:54:29.) -- C:\Windows\system32\Drivers\IpNat.sys [101888]
          [MD5.5D16C921E3671636C0EBA3BBAAC5FD25] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.2011-04-26 - 21:17:22.) -- C:\Windows\system32\Drivers\MRxSmb.sys [123904]
          [MD5.280122DDCF04B378EDD1AD54D71C1E54] - (.Microsoft Corporation - MBT Transport driver.) (.2010-11-20 - 03:39:44.) -- C:\Windows\system32\Drivers\netBT.sys [187904]
          [MD5.C8DFF8D07755A66C7A4A738930F0FEAC] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.2014-01-23 - 21:18:22.) -- C:\Windows\system32\Drivers\ntfs.sys [1212352]
          [MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - (.Microsoft Corporation - Pilote de port parallèle.) (.2009-07-13 - 18:45:35.) -- C:\Windows\system32\Drivers\Parport.sys [79360]
          [MD5.D9F91EAFEC2815365CBE6D167E4E332A] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.2009-07-13 - 18:54:34.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [78848]
          [MD5.B973FCFC50DC1434E1970A146F7E3885] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.2010-11-20 - 05:24:46.) -- C:\Windows\system32\Drivers\rdpdr.sys [133632]
          [MD5.3E21C083B8A01CB70BA1F09303010FCE] - (.Microsoft Corporation - SMB Transport driver.) (.2009-07-13 - 18:53:41.) -- C:\Windows\system32\Drivers\smb.sys [71168]
          [MD5.B459575348C20E8121D6039DA063C704] - (.Microsoft Corporation - TDI Translation Driver.) (.2010-11-20 - 03:39:17.) -- C:\Windows\system32\Drivers\tdx.sys [74752]
          [MD5.F497F67932C6FA693D7DE2780631CFE7] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.2010-11-20 - 07:30:16.) -- C:\Windows\system32\Drivers\volsnap.sys [245632]
          ~ Generic Processes: Scanned in 00mn 00s

          ---\\ Etat des fichiers cachés (Caché/Total)
          ~ Mes images (My Pictures) : 3/5621
          ~ Mes musiques (My Musics) : 1/15038
          ~ Mes Videos (My Videos) : 1/104
          ~ Mes Favoris (My Favorites) : 1/17
          ~ Mes Documents (My Documents) : 2/2269
          ~ Mon Bureau (My Desktop) : 3/254
          ~ Menu demarrer (Programs) : 1/32
          ~ Hidden Files: Scanned in 00mn 17s

          ---\\ Processus lancés
          [MD5.17186248C75E9A8227750726E1DFF4FD] - (.Microsoft Corporation - Microsoft LifeCam VX6000 Device Application.) -- C:\Windows\vVX6000.exe [764784] [PID.3752]
          [MD5.D63797E8E7781EE1500A810CB6194FA6] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816] [PID.2720]
          [MD5.26AFC1F16494FFE66F2197153B342A27] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [4086432] [PID.2924]
          [MD5.085BE68B52CE5A5FA4621507AD518CF3] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [152392] [PID.3564]
          [MD5.A0251ED3ABBA7ACC84416738C8282ACA] - (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [311616] [PID.3664]
          [MD5.F5ED26AB8BDD951BFAC8BBD0D68BA3E9] - (.Samsung - Kies.) -- C:\Program Files\Samsung\Kies\Kies.exe [1564992] [PID.4012]
          [MD5.F43247CCDD1EA5EA4F60393CF157157B] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe [21442176] [PID.2936]
          [MD5.3C8989CF2B59228785F16B3EB547F58C] - (.TomTom - System Tray application for TomTom HOME.) -- C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [248176] [PID.3136]
          [MD5.B1E01D636350983E94171E229C759468] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [275568] [PID.4424]
          [MD5.0DA8636ACBF55A4CA6350FEA7D789828] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8082432] [PID.5540]
          ~ Processes Running: Scanned in 00mn 00s

          ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
          C:\Users\Lionel\AppData\Local\Google\Chrome\User Data\Default\Preferences
          G1 - GCS: Preference [User Data\Default] http://search.babylon.com =>PUP.Babylon

          ---\\ Liste des dossiers d'extension Google Chrome
          ~ Google Lines Browser: 1 Legitimates Filtered in 00mn 03s

          ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
          C:\Users\Lionel\AppData\Roaming\Mozilla\Firefox\Profiles\o50aw18z.default\prefs.js
          ~ Firefox Browser: 25 Legitimates Filtered in 00mn 00s

          ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
          R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (...) (No version) -- (.not file.)
          ~ IE Browser: 11 Legitimates Filtered in 00mn 00s

          ---\\ Internet Explorer, Proxy Management (R5)
          R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
          R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
          R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
          R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
          R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
          R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
          ~ Proxy management: Scanned in 00mn 00s

          ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
          F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
          F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
          F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
          ~ Keys: Scanned in 00mn 00s

          ---\\ Hosts file redirection (O1)
          ~ Le fichier hosts est sain (The hosts file is clean).
          ~ Hosts File: Scanned in 00mn 00s
          ~ Nombre de lignes (Lines number): 21

          ---\\ Applications lancées au démarrage du système (O4)
          O4 - HKLM\..\Run: [VX6000] . (.Microsoft Corporation - Microsoft LifeCam VX6000 Device Application.) -- C:\Windows\vVX6000.exe
          O4 - HKLM\..\Run: [LifeCam] . (.Microsoft Corporation - LifeExp.exe.) -- C:\Program Files\Microsoft LifeCam\LifeExp.exe
          O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated
          O4 - HKLM\..\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
          O4 - HKLM\..\Run: [Nikon Message Center 2] . (.Nikon Corporation - Nikon Message Center 2.) -- C:\Program Files\Nikon\Nikon Message Center 2\NkMC2.exe
          O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation
          O4 - HKLM\..\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
          O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe
          O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe
          O4 - HKLM\..\Run: [KiesTrayAgent] . (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe =>.Samsung Electronics Co
          O4 - HKCU\..\Run: [Facebook Update] C:\Users\Lionel\AppData\Local\Facebook\Update\FacebookUpdate.exe (.not file.)
          O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
          O4 - HKCU\..\Run: [KiesPreload] . (.Samsung - Kies.) -- C:\Program Files\Samsung\Kies\Kies.exe
          O4 - HKCU\..\Run: [KiesAirMessage] C:\Program Files\Samsung\Kies\KiesAirMessage.exe (.not file.)
          O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
          O4 - HKCU\..\Run: [TomTomHOME.exe] . (.TomTom - System Tray application for TomTom HOME.) -- C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
          O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
          O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
          O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
          O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
          O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [Facebook Update] C:\Users\Lionel\AppData\Local\Facebook\Update\FacebookUpdate.exe (.not file.)
          O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
          O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [KiesPreload] . (.Samsung - Kies.) -- C:\Program Files\Samsung\Kies\Kies.exe
          O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [KiesAirMessage] C:\Program Files\Samsung\Kies\KiesAirMessage.exe (.not file.)
          O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
          O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [TomTomHOME.exe] . (.TomTom - System Tray application for TomTom HOME.) -- C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
          ~ Application: Scanned in 00mn 00s

          ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
          O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} . (.Microsoft Corporation - Windows Live Messenger Companion core resources.) -- C:\Program Files\Windows Live\Companion\companionres.dll
          O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~4\Office14\ONBttnIE.dll =>.Microsoft Corporation
          O9 - Extra button: Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~4\Office14\ONBTTN~1.dll =>.Microsoft Corporation
          ~ IE Extra Buttons: Scanned in 00mn 00s

          ---\\ Objets ActiveX (Downloaded Program Files)(O16)
          O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} ((no name)) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
          O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} ((no name)) - http://messenger.zone.msn.com/MessengerGamesContent/GameContent/fr/uno1/GAME_UNO1.cab
          O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} ((no name)) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
          O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} ((no name)) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
          ~ Objets ActiveX: Scanned in 00mn 00s

          ---\\ Modification Domaine/Adresses DNS (O17)
          O17 - HKLM\System\CCS\Services\Tcpip\..\{2B9F3634-CF9A-46BA-A218-3833E46C6B6C}: DhcpNameServer = 192.168.0.1
          O17 - HKLM\System\CCS\Services\Tcpip\..\{E6141240-563B-423E-A0AF-A82D8A15BA62}: DhcpNameServer = 192.168.42.129
          O17 - HKLM\System\CS1\Services\Tcpip\..\{2B9F3634-CF9A-46BA-A218-3833E46C6B6C}: DhcpNameServer = 192.168.0.1
          O17 - HKLM\System\CS1\Services\Tcpip\..\{E6141240-563B-423E-A0AF-A82D8A15BA62}: DhcpNameServer = 192.168.42.129
          O17 - HKLM\System\CS2\Services\Tcpip\..\{2B9F3634-CF9A-46BA-A218-3833E46C6B6C}: DhcpNameServer = 192.168.0.1
          O17 - HKLM\System\CS2\Services\Tcpip\..\{E6141240-563B-423E-A0AF-A82D8A15BA62}: DhcpNameServer = 192.168.42.129
          O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
          ~ Domain: Scanned in 00mn 00s

          ---\\ Protocole additionnel (O18)
          O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll =>.Microsoft Corporation
          O18 - Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll =>.Microsoft Corporation
          ~ Protocole Additionnel: Scanned in 00mn 00s

          ---\\ Tâches planifiées en automatique (O39)
          O39 - APT: - (..) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [1002]
          O39 - APT: - (..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001Core [1078]
          O39 - APT: - (..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001UA [1100]
          O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1052]
          O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1056]
          ~ Scheduled Task: 15 Legitimates Filtered in 00mn 02s

          ---\\ Logiciels installés (O42)
          O42 - Logiciel: BudgetExpress 3 - (...) [HKLM] -- {77E912CE-6396-45B8-90C0-DF402B3D7566}
          O42 - Logiciel: DVD Region+CSS Free 5.9.7.0 - (.Fengtao Software Inc..) [HKLM] -- DVD Region+CSS Free_is1
          O42 - Logiciel: MCEBrowser - (.ANPARK.) [HKLM] -- {79F41FC6-07F9-47C2-BBAC-37C7C70EE703}
          ~ Logic: 14 Legitimates Filtered in 00mn 00s

          ---\\ HKCU & HKLM Software Keys
          [HKCU\Software\DVD Region-Free]
          [HKCU\Software\Grapher]
          [HKCU\Software\IncrediMail]
          [HKCU\Software\SilicMobile]
          [HKCU\Software\WM Converter5]
          [HKLM\Software\Hybrid Basic]
          [HKLM\Software\Hybrid Synthesizers]
          [HKLM\Software\Nature]
          [HKLM\Software\SoftAssi]
          [HKLM\Software\Strawbuilt]
          ~ Key Software: 253 Legitimates Filtered in 00mn 00s

          ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
          O43 - CFD: 2012-09-30 - 16:49:32 - [] ----D C:\Program Files\ANPARK
          O43 - CFD: 2012-11-16 - 20:43:39 - [] ----D C:\Program Files\BudgetExpress 3
          O43 - CFD: 2011-04-22 - 13:09:17 - [] ----D C:\Program Files\DVD Region+CSS Free
          O43 - CFD: 2013-10-30 - 20:30:16 - [] ----D C:\ProgramData\InstallMate =>PUP.Tarma
          O43 - CFD: 2013-03-27 - 20:26:58 - [] ----D C:\ProgramData\Nature
          O43 - CFD: 2013-03-27 - 20:26:22 - [] ----D C:\ProgramData\Tables
          O43 - CFD: 2012-11-16 - 20:43:46 - [] ----D C:\Users\Lionel\AppData\Roaming\BudgetExpress 3
          ~ 463 Dossier CLSID vide (CLSID Empty Folder)
          ~ Program Folder: 671 Legitimates Filtered in 00mn 08s

          ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
          O44 - LFC:[MD5.BA790328B2EE2D9EF2194A897C9F6328] - 2014-07-27 - 14:14:14 ---A- . (...) -- C:\Windows\wininit.ini [1008]
          O44 - LFC:[MD5.0DC5AF80D059DEC792B665ED598C6567] - 2014-07-27 - 14:17:29 ---A- . (.SQLite Development Team - SQLite Dynamic Link Library (No TCL).) -- C:\Windows\System32\sqlite3.dll [536576]
          ~ Files: 8 Legitimates Filtered in 00mn 22s

          ---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)
          O46 - SEH:ShellExecuteHooks - DVDIdleShell Class - {93994DE8-8239-4655-B1D1-5F4E91300429} - C:\Program Files\DVD Region+CSS Free\DVDShell.dll
          ~ ShellExecuteHooks: Scanned in 00mn 00s

          ---\\ Clé de registre Shell MountPoints2 (MPKS) (O51)
          O51 - MPSK:{f113fc89-9129-11e0-a8c8-00219b089077}\AutoRun\command. (...) -- F:\Startme.exe (.not file.)
          ~ Keys: Scanned in 00mn 00s

          ---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
          O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0
          O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
          O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=0
          O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
          ~ MWPS: 16 Legitimates Filtered in 00mn 00s

          ---\\ Liste des pilotes du système (SDL) (O58)
          O58 - SDL:2014-07-04 - 10:39:50 ---A- . (...) -- C:\Windows\System32\Drivers\aswHwid.sys [24184] =>.ALWIL Software
          O58 - SDL:2014-07-04 - 10:39:50 ---A- . (...) -- C:\Windows\System32\Drivers\aswRvrt.sys [49944] =>.ALWIL Software
          O58 - SDL:2014-07-04 - 10:39:50 ---A- . (...) -- C:\Windows\System32\Drivers\aswVmm.sys [192352] =>.ALWIL Software
          O58 - SDL:2009-07-13 - 20:20:28 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [453712]
          O58 - SDL:2009-07-13 - 17:54:14 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys [26624]
          O58 - SDL:2014-01-22 - 08:52:12 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudbus.sys [88576]
          O58 - SDL:2014-01-22 - 08:52:12 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudmdm.sys [184192]
          O58 - SDL:2009-07-13 - 20:19:04 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys [21072]
          O58 - SDL:2012-12-13 - 13:50:38 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\Drivers\usbaapl.sys [45056]
          O58 - SDL:2009-07-13 - 16:40:41 ---A- . (...) -- C:\Windows\System32\ANSI.SYS [9029]
          O58 - SDL:2009-07-13 - 16:40:44 ---A- . (...) -- C:\Windows\System32\country.sys [27097]
          O58 - SDL:2009-07-13 - 16:40:40 ---A- . (...) -- C:\Windows\System32\HIMEM.SYS [4768]
          O58 - SDL:2009-07-13 - 16:40:43 ---A- . (...) -- C:\Windows\System32\KEY01.SYS [42809]
          O58 - SDL:2009-07-13 - 16:40:43 ---A- . (...) -- C:\Windows\System32\KEYBOARD.SYS [42537]
          O58 - SDL:2009-07-13 - 16:40:23 ---A- . (...) -- C:\Windows\System32\NTDOS.SYS [27866]
          O58 - SDL:2009-07-13 - 16:40:31 ---A- . (...) -- C:\Windows\System32\NTDOS404.SYS [29146]
          O58 - SDL:2009-07-13 - 16:40:35 ---A- . (...) -- C:\Windows\System32\NTDOS411.SYS [29370]
          O58 - SDL:2009-07-13 - 16:40:39 ---A- . (...) -- C:\Windows\System32\NTDOS412.SYS [29274]
          O58 - SDL:2009-07-13 - 16:40:27 ---A- . (...) -- C:\Windows\System32\NTDOS804.SYS [29146]
          O58 - SDL:2009-07-13 - 16:40:11 ---A- . (...) -- C:\Windows\System32\NTIO.SYS [33952]
          O58 - SDL:2009-07-13 - 16:40:15 ---A- . (...) -- C:\Windows\System32\NTIO404.SYS [34672]
          O58 - SDL:2009-07-13 - 16:40:17 ---A- . (...) -- C:\Windows\System32\NTIO411.SYS [35776]
          O58 - SDL:2009-07-13 - 16:40:19 ---A- . (...) -- C:\Windows\System32\NTIO412.SYS [35536]
          O58 - SDL:2009-07-13 - 16:40:13 ---A- . (...) -- C:\Windows\System32\NTIO804.SYS [34672]
          ~ Drivers: 80 Legitimates Filtered in 00mn 01s

          ---\\ Liste des outils de désinfection (LATC) (O63)
          O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
          ~ ADS: Scanned in 00mn 00s

          ---\\ Liste les services legacy du registre (LALS) (O64)
          O64 - Services: CurCS - 2014-07-04 - C:\Windows\system32\drivers\aswHwid.sys (aswHwid) .(...) - LEGACY_ASWHWID
          ~ Legacy: 86 Legitimates Filtered in 00mn 00s

          ---\\ Menu de démarrage Internet (SMI) (O68)
          O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
          O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
          O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
          ~ Keys: Scanned in 00mn 00s

          ---\\ Liste des exceptions du parefeu (FirewallRules) (O87)
          O87 - FAEL: "{4DDC8055-18EB-4C75-B700-29B7F41118DA}" | In - None - P6 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Program Files\uTorrent\uTorrent.exe =>P2P.BitTorrent
          O87 - FAEL: "{5CFCEB3E-26FC-4BB6-A0AD-EDE6E668FF0E}" | In - None - P17 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Program Files\uTorrent\uTorrent.exe =>P2P.BitTorrent
          ~ Firewall: 2 Legitimates Filtered in 00mn 01s

          ---\\ Recherche de clés de registre Tracing (O100)
          HKLM\SOFTWARE\Microsoft\Tracing\1ClickDownloader_RASAPI32 =>PUP.1ClickDownloader
          HKLM\SOFTWARE\Microsoft\Tracing\1ClickDownloader_RASMANCS =>PUP.1ClickDownloader
          HKLM\SOFTWARE\Microsoft\Tracing\mediaget_RASAPI32 =>PUP.MediaGet
          HKLM\SOFTWARE\Microsoft\Tracing\mediaget_RASMANCS =>PUP.MediaGet
          HKLM\SOFTWARE\Microsoft\Tracing\questscan126_RASAPI32 =>Adware.QuestScan
          HKLM\SOFTWARE\Microsoft\Tracing\questscan126_RASMANCS =>Adware.QuestScan
          HKLM\SOFTWARE\Microsoft\Tracing\questscan127_RASAPI32 =>Adware.QuestScan
          HKLM\SOFTWARE\Microsoft\Tracing\questscan127_RASMANCS =>Adware.QuestScan
          HKLM\SOFTWARE\Microsoft\Tracing\utorrent_RASAPI32 =>P2P.µTorrent
          HKLM\SOFTWARE\Microsoft\Tracing\utorrent_RASMANCS =>P2P.µTorrent
          HKLM\SOFTWARE\Microsoft\Tracing\YontooSetup-S-0DF4_RASAPI32 =>Adware.Yontoo
          HKLM\SOFTWARE\Microsoft\Tracing\YontooSetup-S-0DF4_RASMANCS =>Adware.Yontoo
          HKLM\SOFTWARE\Microsoft\Tracing\YontooSetup-S-12CC_RASAPI32 =>Adware.Yontoo
          HKLM\SOFTWARE\Microsoft\Tracing\YontooSetup-S-12CC_RASMANCS =>Adware.Yontoo
          ~ BTK: 288 Legitimates Filtered in 00mn 00s

          ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
          SS - | Demand 2014-07-08 262320 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
          SS - | Auto 2013-12-25 116648 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
          SS - | Demand 2013-12-25 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
          SS - | Demand 2005-04-03 69632 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
          SS - | Demand 2014-06-17 119408 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
          SS - | Auto 2013-10-23 172192 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files\Skype\Updater\Updater.exe
          SR - | Auto 2013-12-18 65432 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
          SR - | Auto 2009-08-18 176128 | (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe
          SR - | Auto 2014-01-07 43336 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
          SR - | Auto 2014-07-04 50344 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
          SR - | Auto 2011-08-30 390504 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
          SR - | Demand 2014-01-20 553288 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
          SR - | Auto 2014-06-05 93040 | (TomTomHOMEService) . (.TomTom.) - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
          SR - | Auto 2009-07-13 20992 | C:\Program Files\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
          SR - | Auto 2009-07-13 20992 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
          ~ Services: Scanned in 00mn 09s

          ---\\ Scan Additionnel (O88)
          Database Version : 13026 - (2014-07-27)
          Clés trouvées (Keys found) : 2
          Valeurs trouvées (Values found) : 0
          Dossiers trouvés (Folders found) : 1
          Fichiers trouvés (Files found) : 0

          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094] =>PUP.SweetIM^
          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536] =>PUP.SweetIM^
          C:\ProgramData\InstallMate =>PUP.Tarma^
          ~ Additionnel Scan: 317120 Items scanned in 00mn 35s

          ---\\ Informations complémentaires sur les modules
          ~ https://nicolascoolman.eu =>.Internet Explorer, Proxy Management (R5)
          ~ https://nicolascoolman.eu =>.Applications lancées au démarrage du système (O4)
          ~ https://nicolascoolman.eu =>.Clé de registre Shell MountPoints2 (MPKS) (O51)
          ~ AMI: 3 Legitimates Filtered in 00mn 00s

          ---\\ Récapitulatif des détections trouvées sur votre station
          https://nicolascoolman.eu =>PUP.Babylon
          https://nicolascoolman.eu =>PUP.Tarma
          https://nicolascoolman.eu =>PUP.1ClickDownloader
          https://nicolascoolman.eu =>PUP.MediaGet
          https://nicolascoolman.eu =>Adware.QuestScan
          https://nicolascoolman.eu =>Adware.Yontoo
          https://nicolascoolman.eu =>PUP.SweetIM
          ~ MSI: 7 link(s) detected in 00mn 00s

          ~ 1253 Legitimates filtered by white list
          End of the scan (456 lines in 02mn 09s)(0)
          1. lilidurhone Contributeur sécurité
            Recommence
            Clic sur complet et héberge le sur cjoint
            1. lion72 Auteur
              le complet

              ~ Rapport de ZHPDiag v2014.7.27.109 - Nicolas Coolman (2014-07-27)
              ~ Lancé par Lionel (2014-07-27 15:57:34)
              ~ Adresse du Site Web https://nicolascoolman.eu
              ~ Adresse du Forum https://nicolascoolman.eu
              ~ Traduit par Nicolas Coolman
              ~ Etat de la version : Version à jour.
              ~ Liste blanche : Désactivée par l'utilisateur
              ~ Elévation des Privilèges : OK
              ~ User Account Control (UAC): Deactivate by user

              ---\\ Navigateurs Internet
              MSIE: Internet Explorer v11.0.9600.17207
              MFIE: Mozilla Firefox 30.0 (Defaut)
              GCIE: Google Chrome v36.0.1985.125

              ---\\ Informations sur les produits Windows
              ~ Langage: Français
              Windows 7 Professional, 32-bit Service Pack 1 (Build 7601)
              Windows Server License Manager Script : OK
              ~ Windows Operating System - Windows(R) 7, RETAIL channel
              Windows ID Activation : OK
              ~ Windows Partial Key : 72CBH
              Windows License : OK
              ~ Windows Remaining Initializations Number : 4
              Software Protection Service (Protection logicielle) : OK
              Windows Automatic Updates : OK
              Windows Activation Technologies : OK

              ---\\ Logiciels de protection du système
              avast! Free Antivirus v9.0.2021
              Windows Defender W7 (Activate)

              ---\\ Logiciels d'optimisation du système
              CCleaner v3.05

              ---\\ Logiciels de partage PeerToPeer
              µTorrent v3.3.0.29625 =>P2P.µTorrent

              ---\\ Surveillance de Logiciels
              Adobe Flash Player 14 Plugin
              Adobe Reader X
              Java 7 Update 25

              ---\\ Informations sur le système
              ~ Processor: x86 Family 6 Model 23 Stepping 7, GenuineIntel
              ~ Operating System: 32 Bits
              Boot mode: Normal (Normal boot)
              Total RAM: 3326 MB (66% free)
              System Restore: Activé (Enable)
              System drive C: has 67 GB (11%) free of 596 GB

              ---\\ Mode de connexion au système
              ~ Computer Name: LIONEL-PC
              ~ User Name: Lionel
              ~ All Users Names: Mcx1-LIONEL-PC, Lionel, HomeGroupUser$, Administrateur,
              ~ Unselected Option: None
              Logged in as Administrator

              ---\\ Variables d'environnement
              ~ System Unit : C:\
              ~ %AppZHP% : C:\Users\Lionel\AppData\Roaming\ZHP\
              ~ %AppData% : C:\Users\Lionel\AppData\Roaming\
              ~ %Desktop% : C:\Users\Lionel\Desktop\
              ~ %Favorites% : C:\Users\Lionel\Favorites\
              ~ %LocalAppData% : C:\Users\Lionel\AppData\Local\
              ~ %StartMenu% : C:\Users\Lionel\AppData\Roaming\Microsoft\Windows\Start Menu\
              ~ %Windir% : C:\Windows\
              ~ %System% : C:\Windows\System32\

              ---\\ Enumération des unités disques
              C: Hard drive, Flash drive, Thumb drive (Free 67 Go of 596 Go)
              D: CD-ROM drive (Not Inserted)
              E: CD-ROM drive (Not Inserted)

              ---\\ Etat du Centre de Sécurité Windows
              [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
              [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
              [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
              [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified
              [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
              [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowMyGames: Modified
              [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
              [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
              [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
              [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
              [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
              [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
              ~ Security Center: 43 Scanned in 00mn 00s

              ---\\ Recherche particulière de fichiers génériques
              [MD5.8B88EBBB05A0E56B7DCC708498C02B3E] - (.Microsoft Corporation - Explorateur Windows.) (.2011-02-25 - 00:30:54.) -- C:\Windows\Explorer.exe [2616320]
              [MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.2009-07-13 - 20:14:45.) -- C:\Windows\System32\Wininit.exe [96256]
              [MD5.CCC198257901BEEA2FBF8EB1E7678356] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.2014-06-18 - 17:13:59.) -- C:\Windows\System32\wininet.dll [1791488]
              [MD5.998507B046BA314CE8245364C686FA67] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.2014-03-04 - 04:17:02.) -- C:\Windows\System32\Winlogon.exe [304128]
              [MD5.E3AE23569749DE12D45BA3B489A036AE] - (.Microsoft Corporation - Bibliothèque de licences.) (.2010-11-20 - 07:21:24.) -- C:\Windows\System32\sppcomapi.dll [193536]
              [MD5.D0B388DA1D111A34366E04EB4A5DD156] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.2014-05-30 - 01:36:07.) -- C:\Windows\system32\Drivers\AFD.sys [338944]
              [MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.2009-07-13 - 20:26:15.) -- C:\Windows\system32\Drivers\atapi.sys [21584]
              [MD5.77EA11B065E0A8AB902D78145CA51E10] - (.Microsoft Corporation - CD-ROM File System Driver.) (.2009-07-13 - 18:11:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [70656]
              [MD5.BE167ED0FDB9C1FA1133953C18D5A6C9] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.2010-11-20 - 03:38:10.) -- C:\Windows\system32\Drivers\Cdrom.sys [108544]
              [MD5.F024449C97EC1E464AAFFDA18593DB88] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.2010-11-20 - 03:42:32.) -- C:\Windows\system32\Drivers\DfsC.sys [78336]
              [MD5.9036377B8A6C15DC2EEC53E489D159B5] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.2010-11-20 - 04:59:29.) -- C:\Windows\system32\Drivers\HDAudBus.sys [108544]
              [MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - (.Microsoft Corporation - Pilote de port i8042.) (.2009-07-13 - 18:11:24.) -- C:\Windows\system32\Drivers\i8042prt.sys [80896]
              [MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - (.Microsoft Corporation - IP Network Address Translator.) (.2009-07-13 - 18:54:29.) -- C:\Windows\system32\Drivers\IpNat.sys [101888]
              [MD5.5D16C921E3671636C0EBA3BBAAC5FD25] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.2011-04-26 - 21:17:22.) -- C:\Windows\system32\Drivers\MRxSmb.sys [123904]
              [MD5.280122DDCF04B378EDD1AD54D71C1E54] - (.Microsoft Corporation - MBT Transport driver.) (.2010-11-20 - 03:39:44.) -- C:\Windows\system32\Drivers\netBT.sys [187904]
              [MD5.C8DFF8D07755A66C7A4A738930F0FEAC] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.2014-01-23 - 21:18:22.) -- C:\Windows\system32\Drivers\ntfs.sys [1212352]
              [MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - (.Microsoft Corporation - Pilote de port parallèle.) (.2009-07-13 - 18:45:35.) -- C:\Windows\system32\Drivers\Parport.sys [79360]
              [MD5.D9F91EAFEC2815365CBE6D167E4E332A] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.2009-07-13 - 18:54:34.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [78848]
              [MD5.B973FCFC50DC1434E1970A146F7E3885] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.2010-11-20 - 05:24:46.) -- C:\Windows\system32\Drivers\rdpdr.sys [133632]
              [MD5.3E21C083B8A01CB70BA1F09303010FCE] - (.Microsoft Corporation - SMB Transport driver.) (.2009-07-13 - 18:53:41.) -- C:\Windows\system32\Drivers\smb.sys [71168]
              [MD5.B459575348C20E8121D6039DA063C704] - (.Microsoft Corporation - TDI Translation Driver.) (.2010-11-20 - 03:39:17.) -- C:\Windows\system32\Drivers\tdx.sys [74752]
              [MD5.F497F67932C6FA693D7DE2780631CFE7] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.2010-11-20 - 07:30:16.) -- C:\Windows\system32\Drivers\volsnap.sys [245632]
              ~ Generic Processes: Scanned in 00mn 00s

              ---\\ Etat des fichiers cachés (Caché/Total)
              ~ Mes images (My Pictures) : 3/5621
              ~ Mes musiques (My Musics) : 1/15038
              ~ Mes Videos (My Videos) : 1/208
              ~ Mes Favoris (My Favorites) : 1/34
              ~ Mes Documents (My Documents) : 2/4538
              ~ Mon Bureau (My Desktop) : 3/508
              ~ Menu demarrer (Programs) : 1/64
              ~ Hidden Files: Scanned in 00mn 09s

              ---\\ Processus lancés
              [MD5.17186248C75E9A8227750726E1DFF4FD] - (.Microsoft Corporation - Microsoft LifeCam VX6000 Device Application.) -- C:\Windows\vVX6000.exe [764784] [PID.3752]
              [MD5.D63797E8E7781EE1500A810CB6194FA6] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816] [PID.2720]
              [MD5.26AFC1F16494FFE66F2197153B342A27] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [4086432] [PID.2924]
              [MD5.085BE68B52CE5A5FA4621507AD518CF3] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [152392] [PID.3564]
              [MD5.A0251ED3ABBA7ACC84416738C8282ACA] - (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [311616] [PID.3664]
              [MD5.F5ED26AB8BDD951BFAC8BBD0D68BA3E9] - (.Samsung - Kies.) -- C:\Program Files\Samsung\Kies\Kies.exe [1564992] [PID.4012]
              [MD5.F43247CCDD1EA5EA4F60393CF157157B] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe [21442176] [PID.2936]
              [MD5.3C8989CF2B59228785F16B3EB547F58C] - (.TomTom - System Tray application for TomTom HOME.) -- C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [248176] [PID.3136]
              [MD5.0DA8636ACBF55A4CA6350FEA7D789828] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8082432] [PID.5540]
              [MD5.B1E01D636350983E94171E229C759468] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [275568] [PID.1096]
              ~ Processes Running: Scanned in 00mn 00s

              ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
              C:\Users\Lionel\AppData\Local\Google\Chrome\User Data\Default\Preferences
              G1 - GCS: Preference [User Data\Default] http://search.babylon.com =>PUP.Babylon

              ---\\ Liste des dossiers d'extension Google Chrome
              ~ Google Lines Browser: 1 Scanned in 00mn 03s

              ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
              C:\Users\Lionel\AppData\Roaming\Mozilla\Firefox\Profiles\o50aw18z.default\prefs.js
              M0 - MFSP: prefs.js [Lionel - o50aw18z.default] https://www.google.ca/?gws_rd=ssl
              M2 - MFEP: prefs.js [Lionel - o50aw18z.default\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}] [dwhelper] DownloadHelper v4.9.22 (..)
              P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.10.) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll
              P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin.dll
              P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin2.dll
              P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin3.dll
              P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin4.dll
              P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin5.dll
              P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll
              P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 12.0.) -- C:\Windows\system32\Adobe\Director\np32dsw_1200112.dll
              P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (...) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
              P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll =>.Google Inc
              P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.30514.0.) -- c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll
              P2 - FPN: [HKLM] [@microsoft.com/OfficeAuthz,version=14.0] - (.Microsoft Corporation - Office Authorization plug-in for NPAPI browsers.) -- C:\Program Files\Microsoft Office\Office14\NPAUTHZ.dll
              P2 - FPN: [HKLM] [@microsoft.com/SharePoint,version=14.0] - (.Microsoft Corporation - The plug-in allows you to open and edit files using Microsoft Office a.) -- C:\Program Files\Microsoft Office\Office14\NPSPWRAP.dll
              P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll
              P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll
              P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.10.) -- C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
              P2 - FPN: [HKCU] [@Skype Limited.com/Facebook Video Calling Plugin] - (...) -- C:\Users\Lionel\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (.not file.)
              ~ Firefox Browser: 25 Scanned in 00mn 00s

              ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
              R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
              R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.microsoft.com/fr-fr/
              R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
              R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
              R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
              R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
              R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
              R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
              R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
              R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (...) (No version) -- (.not file.)
              R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
              ~ IE Browser: 11 Scanned in 00mn 00s

              ---\\ Internet Explorer, Proxy Management (R5)
              R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
              R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
              R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
              R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
              R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
              R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
              ~ Proxy management: Scanned in 00mn 00s

              ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
              F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
              F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
              F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
              ~ Keys: Scanned in 00mn 00s

              ---\\ Hosts file redirection (O1)
              ~ Le fichier hosts est sain (The hosts file is clean).
              ~ Hosts File: Scanned in 00mn 00s
              ~ Nombre de lignes (Lines number): 21

              ---\\ Browser Helper Objects de navigateur (O2)
              O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
              O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
              O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} . (.Microsoft Corporation - Windows Live Messenger Companion Core.) -- C:\Program Files\Windows Live\Companion\companioncore.dll
              O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files\Microsoft Office\Office14\URLREDIR.dll
              ~ BHO: 16 Scanned in 00mn 00s

              ---\\ Applications lancées au démarrage du système (O4)
              O4 - HKLM\..\Run: [VX6000] . (.Microsoft Corporation - Microsoft LifeCam VX6000 Device Application.) -- C:\Windows\vVX6000.exe
              O4 - HKLM\..\Run: [LifeCam] . (.Microsoft Corporation - LifeExp.exe.) -- C:\Program Files\Microsoft LifeCam\LifeExp.exe
              O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated
              O4 - HKLM\..\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
              O4 - HKLM\..\Run: [Nikon Message Center 2] . (.Nikon Corporation - Nikon Message Center 2.) -- C:\Program Files\Nikon\Nikon Message Center 2\NkMC2.exe
              O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation
              O4 - HKLM\..\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
              O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe
              O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe
              O4 - HKLM\..\Run: [KiesTrayAgent] . (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe =>.Samsung Electronics Co
              O4 - HKCU\..\Run: [Facebook Update] C:\Users\Lionel\AppData\Local\Facebook\Update\FacebookUpdate.exe (.not file.)
              O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
              O4 - HKCU\..\Run: [KiesPreload] . (.Samsung - Kies.) -- C:\Program Files\Samsung\Kies\Kies.exe
              O4 - HKCU\..\Run: [KiesAirMessage] C:\Program Files\Samsung\Kies\KiesAirMessage.exe (.not file.)
              O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
              O4 - HKCU\..\Run: [TomTomHOME.exe] . (.TomTom - System Tray application for TomTom HOME.) -- C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
              O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
              O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
              O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
              O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
              O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [Facebook Update] C:\Users\Lionel\AppData\Local\Facebook\Update\FacebookUpdate.exe (.not file.)
              O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
              O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [KiesPreload] . (.Samsung - Kies.) -- C:\Program Files\Samsung\Kies\Kies.exe
              O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [KiesAirMessage] C:\Program Files\Samsung\Kies\KiesAirMessage.exe (.not file.)
              O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
              O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [TomTomHOME.exe] . (.TomTom - System Tray application for TomTom HOME.) -- C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
              ~ Application: Scanned in 00mn 00s

              ---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
              O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
              ~ IE Control Panel: 1 Scanned in 00mn 00s

              ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
              O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} . (.Microsoft Corporation - Windows Live Messenger Companion core resources.) -- C:\Program Files\Windows Live\Companion\companionres.dll
              O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~4\Office14\ONBttnIE.dll =>.Microsoft Corporation
              O9 - Extra button: Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~4\Office14\ONBTTN~1.dll =>.Microsoft Corporation
              ~ IE Extra Buttons: Scanned in 00mn 00s

              ---\\ Winsock hijacker (Layered Service Provider) (O10)
              O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
              O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
              O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
              O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
              O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll =>.Microsoft Corporation
              O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
              O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll =>.Microsoft Corporation
              O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll =>.Microsoft Corporation
              O10 - WLSP:\000000000009\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll
              ~ Winsock: 9 Scanned in 00mn 00s

              ---\\ Objets ActiveX (Downloaded Program Files)(O16)
              O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} ((no name)) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
              O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} ((no name)) - http://messenger.zone.msn.com/MessengerGamesContent/GameContent/fr/uno1/GAME_UNO1.cab
              O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} ((no name)) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
              O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} ((no name)) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
              ~ Objets ActiveX: Scanned in 00mn 00s

              ---\\ Modification Domaine/Adresses DNS (O17)
              O17 - HKLM\System\CCS\Services\Tcpip\..\{2B9F3634-CF9A-46BA-A218-3833E46C6B6C}: DhcpNameServer = 192.168.0.1
              O17 - HKLM\System\CCS\Services\Tcpip\..\{E6141240-563B-423E-A0AF-A82D8A15BA62}: DhcpNameServer = 192.168.42.129
              O17 - HKLM\System\CS1\Services\Tcpip\..\{2B9F3634-CF9A-46BA-A218-3833E46C6B6C}: DhcpNameServer = 192.168.0.1
              O17 - HKLM\System\CS1\Services\Tcpip\..\{E6141240-563B-423E-A0AF-A82D8A15BA62}: DhcpNameServer = 192.168.42.129
              O17 - HKLM\System\CS2\Services\Tcpip\..\{2B9F3634-CF9A-46BA-A218-3833E46C6B6C}: DhcpNameServer = 192.168.0.1
              O17 - HKLM\System\CS2\Services\Tcpip\..\{E6141240-563B-423E-A0AF-A82D8A15BA62}: DhcpNameServer = 192.168.42.129
              O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
              ~ Domain: Scanned in 00mn 00s

              ---\\ Protocole additionnel (O18)
              O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll =>.Microsoft Corporation
              O18 - Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll =>.Microsoft Corporation
              ~ Protocole Additionnel: Scanned in 00mn 00s

              ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
              O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
              ~ SSODL: 1 Scanned in 00mn 00s

              ---\\ Liste des services NT non Microsoft et non désactivés (O23)
              O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
              O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe
              O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - YSLoader.exe.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
              O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
              O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
              O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc
              O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files\Skype\Updater\Updater.exe
              O23 - Service: TomTomHOMEService (TomTomHOMEService) . (.TomTom - Windows Service for TomTom HOME.) - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
              ~ Services: 8 Scanned in 00mn 04s

              ---\\ Enumération Active Desktop & MHTML Editor (O24)
              O24 - Default MHTML Editor: Last - .(...) - (.not file.)
              ~ Desktop Component: 4 Scanned in 00mn 00s

              ---\\ Enumère les données de BootExecute (BEX) (O34)
              O34 - HKLM BootExecute: (autocheck autochk *) - File not found
              ~ BEX: 1 Scanned in 00mn 00s

              ---\\ Tâches planifiées en automatique (O39)
              [MD5.A6B6AB9502B63F43A9A56AE6AFB22078] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [262320]
              [MD5.1AD8512A5C40AD1A0558498D8E0AC2AA] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [808448]
              [MD5.00000000000000000000000000000000] [APT] [FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001Core] (...) -- C:\Users\Lionel\AppData\Local\Facebook\Update\FacebookUpdate.exe (.not file.) [0]
              [MD5.00000000000000000000000000000000] [APT] [FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001UA] (...) -- C:\Users\Lionel\AppData\Local\Facebook\Update\FacebookUpdate.exe (.not file.) [0]
              [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [116648]
              [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [116648]
              [MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [561984]
              O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002]
              O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [1002]
              O39 - APT: FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001Core - (...) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001Core.job [1078]
              O39 - APT: FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001Core - (...) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001Core [1078]
              O39 - APT: FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001UA - (...) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001UA.job [1100]
              O39 - APT: FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001UA - (...) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001UA [1100]
              O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1052]
              O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1052]
              O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1056]
              O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1056]
              ~ Scheduled Task: 30 Scanned in 00mn 02s

              ---\\ Composants installés (ActiveSetup Installed Components) (O40)
              O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
              O40 - ASIC: Microsoft Windows Media Player 12.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll =>.Microsoft Corporation
              O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
              O40 - ASIC: Internet Explorer - {2D46B6DC-2207-486B-B523-A557E6D54B47} . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\system32\cmd.exe =>.Microsoft Corporation
              O40 - ASIC: Microsoft Windows - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files\Windows Mail\WinMail.exe =>.Microsoft Corporation
              O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
              O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
              O40 - ASIC: Windows Desktop Update - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
              O40 - ASIC: Web Platform Customizations - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
              O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
              O40 - ASIC: Google Chrome - {8A69D345-D564-463c-AFF1-A69D9E530F96} . (.Google Inc. - Google Chrome Installer.) -- C:\Program Files\Google\Chrome\Application\36.0.1985.125\Installer\chrmstp.exe
              ~ Active Setup: 11 Scanned in 00mn 00s

              ---\\ Pilotes lancés au démarrage du système (O41)
              O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
              O41 - Driver: (aswRdr) . (.AVAST Software - avast! WFP Redirect Driver.) - C:\Windows\system32\drivers\aswRdr2.sys
              O41 - Driver: (aswSnx) . (.AVAST Software - avast! Virtualization Driver.) - C:\Windows\system32\drivers\aswSnx.sys
              O41 - Driver: (aswSP) . (.AVAST Software - avast! self protection module.) - C:\Windows\system32\drivers\aswSP.sys
              O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
              O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
              O41 - Driver: C:\Windows\System32\cscsvc.dll (CSC) . (.Microsoft Corporation - Windows Client Side Caching Driver.) - C:\Windows\System32\drivers\csc.sys
              O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
              O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
              O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
              O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
              O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
              O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
              O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
              O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
              O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
              O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
              O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
              O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
              O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys
              O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
              O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
              O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
              ~ Drivers: 69 Scanned in 00mn 00s

              ---\\ Logiciels installés (O42)
              O42 - Logiciel: Adobe Flash Player 14 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
              O42 - Logiciel: Adobe Flash Player 14 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
              O42 - Logiciel: Adobe Reader X (10.1.10) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA1000000001}
              O42 - Logiciel: Adobe Shockwave Player 12.0 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player
              O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {A922C4B7-50E0-4787-A94C-59DBF3C65DBE}
              O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {10E3A6DD-84D8-4D8A-BB11-5E5314BCA7FD}
              O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} =>.Apple Inc
              O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {79155F2B-9895-49D7-8612-D92580E0DE5B}
              O42 - Logiciel: BudgetExpress 3 - (...) [HKLM] -- {77E912CE-6396-45B8-90C0-DF402B3D7566}
              O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
              O42 - Logiciel: CDex - Open Source Digital Audio CD Extractor - (.Georgy Berdyshev.) [HKLM] -- CDex
              O42 - Logiciel: Canon MOV Decoder - (.Canon Inc..) [HKLM] -- Canon MOV Decoder
              O42 - Logiciel: Canon MOV Encoder - (.Canon Inc..) [HKLM] -- Canon MOV Encoder
              O42 - Logiciel: Complément Messenger - (.Microsoft Corporation.) [HKLM] -- {6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}
              O42 - Logiciel: ConvertHelper 2.2 - (.DownloadHelper.) [HKLM] -- {27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1
              O42 - Logiciel: ConvertXtoDVD 4.1.16.360 - (...) [HKLM] -- {DB6AB705-C9BD-40E3-8929-2EA57F36A4FF}_is1
              O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
              O42 - Logiciel: DVD Region+CSS Free 5.9.7.0 - (.Fengtao Software Inc..) [HKLM] -- DVD Region+CSS Free_is1
              O42 - Logiciel: DVD Shrink 3.2 - (.DVD Shrink.) [HKLM] -- DVD Shrink_is1
              O42 - Logiciel: Facebook Video Calling 1.2.0.159 - (.Skype Limited.) [HKLM] -- {7CAC6A44-C3DE-4153-ACA6-7524602C789E}
              O42 - Logiciel: Garfield K Nombres - (...) [HKLM] -- {C744A1E6-86AF-4A16-B9BC-9921BE00CD8F}
              O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome
              O42 - Logiciel: Google Earth Plug-in - (.Google.) [HKLM] -- {4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E} =>.Google Inc
              O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
              O42 - Logiciel: IZArc 4.1.6 - (.Ivan Zahariev.) [HKLM] -- {97C82B44-D408-4F14-9252-47FC1636D23E}_is1
              O42 - Logiciel: Java 7 Update 25 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83217025FF}
              O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
              O42 - Logiciel: K-Lite Codec Pack 8.7.0 (Full) - (...) [HKLM] -- KLiteCodecPack_is1
              O42 - Logiciel: MCEBrowser - (.ANPARK.) [HKLM] -- {79F41FC6-07F9-47C2-BBAC-37C7C70EE703}
              O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
              O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
              O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
              O42 - Logiciel: Mega_pack_la_Quebecoise_by_toto740 0.0 - (.Toto740 / TomTomHeaven.) [HKLM] -- Mega_pack_la_Quebecoise_by_toto740_is1
              O42 - Logiciel: MiPony 2.0.2 - (...) [HKLM] -- MiPony
              O42 - Logiciel: Microsoft Corporation - (.Microsoft Corporation.) [HKLM] -- {B3BC9DB1-0B0A-48B0-B86B-EA77CAA7F800}
              O42 - Logiciel: Microsoft LifeCam - (.Microsoft Corporation.) [HKLM] -- {5FC7AB5C-61FC-42DF-A923-5139BCF10D42}
              O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
              O42 - Logiciel: Mozilla Firefox 30.0 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 30.0 (x86 fr)
              O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService
              O42 - Logiciel: MyFreeCodec - (...) [HKCU] -- MyFreeCodec
              O42 - Logiciel: Nero 7 Ultra Edition - (.Nero AG.) [HKLM] -- {F9469799-696F-427D-B314-79E7AA681033}
              O42 - Logiciel: Nikon Message Center 2 - (.Nikon.) [HKLM] -- {B014EE44-9197-4513-9613-71E6EB1B514E}
              O42 - Logiciel: OpenOffice.org 3.4 - (.OpenOffice.org.) [HKLM] -- {2F90A789-DD1E-41CE-BFCA-BD78213BABC7}
              O42 - Logiciel: PhotoFiltre - (...) [HKCU] -- PhotoFiltre
              O42 - Logiciel: Picture Control Utility - (.Nikon.) [HKLM] -- {87441A59-5E64-4096-A170-14EFE67200C3}
              O42 - Logiciel: PlayStation(R)Network Downloader - (.Sony Computer Entertainment Inc..) [HKLM] -- {B6659DD8-00A7-4A24-BBFB-C1F6982E5D66}
              O42 - Logiciel: PlayStation(R)Store - (.Sony Computer Entertainment Inc..) [HKLM] -- {0E532C84-4275-41B3-9D81-D4A1A20D8EE7}
              O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {B67BAFBA-4C9F-48FA-9496-933E3B255044}
              O42 - Logiciel: SAMSUNG USB Driver for Mobile Phones - (.SAMSUNG Electronics Co., Ltd..) [HKLM] -- {D0795B21-0CDA-4a92-AB9E-6E92D8111E44}
              O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM] -- InstallShield_{758C8301-2696-4855-AF45-534B1200980A}
              O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM] -- {758C8301-2696-4855-AF45-534B1200980A}
              O42 - Logiciel: Skype(TM) 6.16 - (.Skype Technologies S.A..) [HKLM] -- {7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}
              O42 - Logiciel: Stellarium 0.10.4 - (...) [HKLM] -- Stellarium_is1
              O42 - Logiciel: TomTom HOME - (.Nom de votre société.) [HKLM] -- {7A2BB1C8-903D-4585-9F3B-CADD67D07D37}
              O42 - Logiciel: TomTom HOME Visual Studio Merge Modules - (.TomTom International B.V..) [HKLM] -- {8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}
              O42 - Logiciel: VLC media player 1.1.11 - (.VideoLAN.) [HKLM] -- VLC media player =>.VideoLAN
              O42 - Logiciel: ViewNX 2 - (.Nikon.) [HKLM] -- {E64C137C-D0B7-467A-B47F-460AAB30F0A3}
              O42 - Logiciel: VirtualDJ Home FREE - (.Atomix Productions.) [HKLM] -- {19192A84-6172-4312-A661-D8F9A34585AB}
              O42 - Logiciel: WM Recorder - (.AllAlex, Inc.) [HKLM] -- WM Recorder14.12
              O42 - Logiciel: avast! Free Antivirus v9.0.2021 - (.AVAST Software.) [HKLM] -- avast
              O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {616445AF-BBCF-41C1-A4D6-8CFF171C182D}
              O42 - Logiciel: swMSM - (.Adobe Systems, Inc.) [HKLM] -- {612C34C7-5E90-47D8-9B5C-0F717DD82726}
              O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKCU] -- uTorrent =>P2P.BitTorrent
              O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKLM] -- uTorrent =>P2P.BitTorrent
              ~ Logic: 46 Scanned in 00mn 00s

              ---\\ HKCU & HKLM Software Keys
              [HKCU\Software\ASProtect]
              [HKCU\Software\AVAST Software]
              [HKCU\Software\Adobe]
              [HKCU\Software\Ahead]
              [HKCU\Software\AnvSoft]
              [HKCU\Software\AppDataLow\Software\Adobe]
              [HKCU\Software\AppDataLow\Software\JavaSoft]
              [HKCU\Software\AppDataLow]
              [HKCU\Software\Apple Computer, Inc.]
              [HKCU\Software\Apple Inc.]
              [HKCU\Software\ArcSoft]
              [HKCU\Software\Audacity]
              [HKCU\Software\BVRP Software]
              [HKCU\Software\BitTorrent] =>P2P.BitTorrent
              [HKCU\Software\CDDB]
              [HKCU\Software\CISRA]
              [HKCU\Software\Canon]
              [HKCU\Software\Canon_Inc_IC]
              [HKCU\Software\Classes]
              [HKCU\Software\Clients]
              [HKCU\Software\DVD Region-Free]
              [HKCU\Software\DVD Shrink]
              [HKCU\Software\GNU]
              [HKCU\Software\Gabest]
              [HKCU\Software\Google]
              [HKCU\Software\Grapher]
              [HKCU\Software\Guitars]
              [HKCU\Software\Haali]
              [HKCU\Software\Help]
              [HKCU\Software\IM Providers]
              [HKCU\Software\IZSoftware]
              [HKCU\Software\Icaros]
              [HKCU\Software\IncrediMail]
              [HKCU\Software\JEDI-VCL]
              [HKCU\Software\JavaSoft]
              [HKCU\Software\LAV]
              [HKCU\Software\LDM]
              [HKCU\Software\Logs]
              [HKCU\Software\Macromedia]
              [HKCU\Software\MainConcept (Nikon)]
              [HKCU\Software\Malwarebytes' Anti-Malware]
              [HKCU\Software\MarineCat]
              [HKCU\Software\MediaInfo]
              [HKCU\Software\Mediachance]
              [HKCU\Software\MouseIndustries]
              [HKCU\Software\MozillaPlugins]
              [HKCU\Software\Mozilla]
              [HKCU\Software\Netscape]
              [HKCU\Software\Nikon]
              [HKCU\Software\ODBC]
              [HKCU\Software\OpenOffice.org]
              [HKCU\Software\Piriform]
              [HKCU\Software\Policies]
              [HKCU\Software\Safer Networking Limited]
              [HKCU\Software\Samsung]
              [HKCU\Software\SilicMobile]
              [HKCU\Software\SkypeRS]
              [HKCU\Software\Skype]
              [HKCU\Software\SoftVTU]
              [HKCU\Software\Sony Ericsson]
              [HKCU\Software\TeamViewer]
              [HKCU\Software\Techlogg.com ToneShop]
              [HKCU\Software\TeleCharger]
              [HKCU\Software\TomTom]
              [HKCU\Software\Trolltech]
              [HKCU\Software\VB and VBA Program Settings]
              [HKCU\Software\VSO]
              [HKCU\Software\VirtualDJ]
              [HKCU\Software\WM Converter5]
              [HKCU\Software\WebApp]
              [HKCU\Software\Winamp]
              [HKCU\Software\kde.org]
              [HKCU\Software\madFlac]
              [HKCU\Software\madshi]
              [HKCU\Software\yahoo]
              [HKLM\Software\AMD]
              [HKLM\Software\ATI Technologies]
              [HKLM\Software\AVAST Software]
              [HKLM\Software\Adobe]
              [HKLM\Software\AdwCleaner]
              [HKLM\Software\AppDataLow]
              [HKLM\Software\Apple Computer, Inc.]
              [HKLM\Software\Apple Inc.]
              [HKLM\Software\ArcSoft]
              [HKLM\Software\Canon]
              [HKLM\Software\Canon_Inc_IC]
              [HKLM\Software\Classes]
              [HKLM\Software\Clients]
              [HKLM\Software\DelFix]
              [HKLM\Software\DownloadHelper]
              [HKLM\Software\Fengtao Software]
              [HKLM\Software\GEAR Software]
              [HKLM\Software\GNU]
              [HKLM\Software\Google]
              [HKLM\Software\HaaliMkx]
              [HKLM\Software\Hewlett-Packard]
              [HKLM\Software\Hybrid Basic]
              [HKLM\Software\Hybrid Synthesizers]
              [HKLM\Software\IM Providers]
              [HKLM\Software\Image Manipulation]
              [HKLM\Software\InstallShield]
              [HKLM\Software\Intel]
              [HKLM\Software\JavaSoft]
              [HKLM\Software\JreMetrics]
              [HKLM\Software\KLCodecPack]
              [HKLM\Software\LAV]
              [HKLM\Software\LDM]
              [HKLM\Software\Macromedia]
              [HKLM\Software\Maestro Learning]
              [HKLM\Software\Malwarebytes' Anti-Malware]
              [HKLM\Software\MozillaPlugins]
              [HKLM\Software\Mozilla]
              [HKLM\Software\Nature]
              [HKLM\Software\Nero]
              [HKLM\Software\Nikon]
              [HKLM\Software\ODBC]
              [HKLM\Software\OpenOffice.org]
              [HKLM\Software\Piriform]
              [HKLM\Software\Policies]
              [HKLM\Software\RegisteredApplications]
              [HKLM\Software\SAMSUNG]
              [HKLM\Software\Safer Networking Limited]
              [HKLM\Software\Skype]
              [HKLM\Software\SoftAssi]
              [HKLM\Software\Sonic]
              [HKLM\Software\Sony Corporation]
              [HKLM\Software\Sony]
              [HKLM\Software\Strawbuilt]
              [HKLM\Software\TeamViewer]
              [HKLM\Software\TomTom]
              [HKLM\Software\VSO]
              [HKLM\Software\VideoLAN]
              [HKLM\Software\VirtualDJ]
              [HKLM\Software\Windows]
              [HKLM\Software\Wow6432Node]
              [HKLM\Software\Yahoo]
              [HKLM\Software\ahead]
              [HKLM\Software\intellidownload]
              [HKLM\Software\lameme]
              [HKLM\Software\mozilla.org]
              ~ Key Software: 253 Scanned in 00mn 00s

              ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
              O43 - CFD: 2012-10-09 - 12:14:45 - [0] ----D C:\Program Files\7-Zip
              O43 - CFD: 2011-06-17 - 08:54:11 - [] ----D C:\Program Files\Adobe
              O43 - CFD: 2012-09-30 - 16:49:32 - [] ----D C:\Program Files\ANPARK
              O43 - CFD: 2013-02-16 - 18:05:02 - [] ----D C:\Program Files\Apple Software Update =>.Apple Inc
              O43 - CFD: 2011-04-19 - 09:42:21 - [] ----D C:\Program Files\AVAST Software
              O43 - CFD: 2013-02-16 - 18:11:02 - [] ----D C:\Program Files\Bonjour
              O43 - CFD: 2012-11-16 - 20:43:39 - [] ----D C:\Program Files\BudgetExpress 3
              O43 - CFD: 2011-08-07 - 13:30:29 - [] ----D C:\Program Files\Canon
              O43 - CFD: 2011-04-22 - 07:41:20 - [] ----D C:\Program Files\CCleaner
              O43 - CFD: 2013-08-06 - 20:01:05 - [] ----D C:\Program Files\CDex
              O43 - CFD: 2014-05-27 - 17:09:19 - [] ----D C:\Program Files\Common Files
              O43 - CFD: 2014-07-11 - 18:13:08 - [] ----D C:\Program Files\ConvertHelper
              O43 - CFD: 2011-06-07 - 13:11:53 - [] ----D C:\Program Files\DVD Maker
              O43 - CFD: 2011-04-22 - 13:09:17 - [] ----D C:\Program Files\DVD Region+CSS Free
              O43 - CFD: 2011-04-22 - 07:52:15 - [] ----D C:\Program Files\DVD Shrink
              O43 - CFD: 2011-04-19 - 07:33:29 - [] -SH-D C:\Program Files\Fichiers communs
              O43 - CFD: 2014-07-05 - 10:15:31 - [] ----D C:\Program Files\Google
              O43 - CFD: 2014-02-24 - 21:35:58 - [] --H-D C:\Program Files\InstallShield Installation Information
              O43 - CFD: 2014-07-10 - 17:45:46 - [] ----D C:\Program Files\Internet Explorer
              O43 - CFD: 2014-01-30 - 21:02:19 - [] ----D C:\Program Files\iPod
              O43 - CFD: 2014-01-30 - 21:03:01 - [] ----D C:\Program Files\iTunes
              O43 - CFD: 2011-05-16 - 08:47:27 - [] ----D C:\Program Files\IZArc
              O43 - CFD: 2014-07-26 - 10:49:50 - [] ----D C:\Program Files\Java
              O43 - CFD: 2012-05-05 - 08:47:55 - [] ----D C:\Program Files\K-Lite Codec Pack
              O43 - CFD: 2012-11-04 - 17:41:11 - [] ----D C:\Program Files\Maestro Learning
              O43 - CFD: 2011-05-29 - 13:05:01 - [] ----D C:\Program Files\Microsoft Analysis Services
              O43 - CFD: 2011-04-19 - 08:37:28 - [] ----D C:\Program Files\Microsoft LifeCam
              O43 - CFD: 2011-05-29 - 13:07:15 - [] ----D C:\Program Files\Microsoft Office
              O43 - CFD: 2014-07-27 - 14:13:11 - [] ----D C:\Program Files\Microsoft Silverlight
              O43 - CFD: 2011-05-29 - 13:07:14 - [] ----D C:\Program Files\Microsoft.NET
              O43 - CFD: 2012-12-08 - 09:23:08 - [] ----D C:\Program Files\MiPony
              O43 - CFD: 2014-06-17 - 21:14:10 - [] ----D C:\Program Files\Mozilla Firefox
              O43 - CFD: 2014-06-21 - 18:45:30 - [] ----D C:\Program Files\Mozilla Maintenance Service
              O43 - CFD: 2009-07-14 - 00:52:30 - [] ----D C:\Program Files\MSBuild
              O43 - CFD: 2013-03-29 - 03:00:58 - [0] ----D C:\Program Files\MSXML 4.0
              O43 - CFD: 2014-02-24 - 21:39:37 - [] ----D C:\Program Files\MyFree Codec
              O43 - CFD: 2011-04-22 - 13:37:48 - [] ----D C:\Program Files\Nero
              O43 - CFD: 2013-03-27 - 20:28:41 - [] ----D C:\Program Files\Nikon
              O43 - CFD: 2012-07-16 - 18:20:00 - [] ----D C:\Program Files\OpenOffice.org 3
              O43 - CFD: 2013-01-17 - 22:11:38 - [] ----D C:\Program Files\Ordi Scrabble
              O43 - CFD: 2012-08-11 - 20:14:23 - [] ----D C:\Program Files\PhotoFiltre
              O43 - CFD: 2014-01-30 - 20:57:46 - [] ----D C:\Program Files\QuickTime
              O43 - CFD: 2009-07-14 - 00:52:30 - [] ----D C:\Program Files\Reference Assemblies
              O43 - CFD: 2014-02-24 - 21:47:09 - [] ----D C:\Program Files\Samsung
              O43 - CFD: 2014-05-27 - 17:09:19 - [] R---D C:\Program Files\Skype
              O43 - CFD: 2013-04-07 - 16:31:50 - [] ----D C:\Program Files\Sony
              O43 - CFD: 2013-04-07 - 16:32:26 - [0] ----D C:\Program Files\Sony Ericsson
              O43 - CFD: 2011-06-02 - 09:52:08 - [] ----D C:\Program Files\Sony Media Go Install
              O43 - CFD: 2014-07-27 - 15:21:10 - [] ----D C:\Program Files\Spybot - Search & Destroy
              O43 - CFD: 2013-12-27 - 20:51:09 - [] ----D C:\Program Files\Stellarium
              O43 - CFD: 2011-09-27 - 08:51:53 - [] ----D C:\Program Files\Techlogg.com ToneShop
              O43 - CFD: 2014-06-30 - 08:42:12 - [] ----D C:\Program Files\TomTom HOME 2
              O43 - CFD: 2011-09-24 - 15:15:58 - [] ----D C:\Program Files\TomTom International B.V
              O43 - CFD: 2009-07-14 - 00:53:23 - [0] --H-D C:\Program Files\Uninstall Information
              O43 - CFD: 2013-05-16 - 06:27:10 - [] ----D C:\Program Files\uTorrent =>P2P.µTorrent
              O43 - CFD: 2011-05-12 - 13:29:23 - [] ----D C:\Program Files\VideoLAN
              O43 - CFD: 2011-08-07 - 18:20:42 - [] ----D C:\Program Files\VirtualDJ
              O43 - CFD: 2011-04-22 - 07:38:31 - [] ----D C:\Program Files\VSO
              O43 - CFD: 2013-07-11 - 03:27:52 - [] ----D C:\Program Files\Windows Defender
              O43 - CFD: 2014-07-10 - 17:45:47 - [] ----D C:\Program Files\Windows Journal
              O43 - CFD: 2013-03-08 - 08:41:12 - [] ----D C:\Program Files\Windows Live
              O43 - CFD: 2011-06-07 - 13:11:53 - [] ----D C:\Program Files\Windows Mail =>.Microsoft Corporation
              O43 - CFD: 2013-12-11 - 04:22:10 - [] ----D C:\Program Files\Windows Media Player =>.Microsoft Corporation
              O43 - CFD: 2011-04-19 - 07:33:29 - [] ----D C:\Program Files\Windows NT
              O43 - CFD: 2011-06-07 - 13:11:53 - [] ----D C:\Program Files\Windows Photo Viewer
              O43 - CFD: 2011-06-07 - 13:11:53 - [] ----D C:\Program Files\Windows Portable Devices
              O43 - CFD: 2011-06-07 - 13:11:53 - [] ----D C:\Program Files\Windows Sidebar
              O43 - CFD: 2014-07-27 - 15:47:29 - [] ----D C:\Program Files\ZHPDiag =>.Nicolas Coolman
              O43 - CFD: 2011-06-17 - 08:54:14 - [] ----D C:\Program Files\Common Files\Adobe
              O43 - CFD: 2011-04-22 - 13:37:50 - [] ----D C:\Program Files\Common Files\Ahead
              O43 - CFD: 2014-01-30 - 21:02:19 - [] ----D C:\Program Files\Common Files\Apple
              O43 - CFD: 2011-06-09 - 10:09:07 - [] ----D C:\Program Files\Common Files\Canon
              O43 - CFD: 2014-05-15 - 03:08:11 - [] ----D C:\Program Files\Common Files\DESIGNER
              O43 - CFD: 2012-11-04 - 17:40:15 - [] ----D C:\Program Files\Common Files\InstallShield
              O43 - CFD: 2013-04-20 - 08:37:10 - [] ----D C:\Program Files\Common Files\Java
              O43 - CFD: 2011-08-03 - 08:04:00 - [] ----D C:\Program Files\Common Files\microsoft shared
              O43 - CFD: 2013-03-27 - 20:28:14 - [] ----D C:\Program Files\Common Files\Nikon
              O43 - CFD: 2009-07-13 - 22:37:05 - [] ----D C:\Program Files\Common Files\Services
              O43 - CFD: 2014-05-27 - 17:09:19 - [] ----D C:\Program Files\Common Files\Skype
              O43 - CFD: 2011-06-03 - 11:02:05 - [] ----D C:\Program Files\Common Files\Sony Shared
              O43 - CFD: 2009-07-13 - 22:37:05 - [] ----D C:\Program Files\Common Files\SpeechEngines
              O43 - CFD: 2012-11-17 - 04:01:43 - [] ----D C:\Program Files\Common Files\System
              O43 - CFD: 2011-04-19 - 08:40:18 - [] ----D C:\Program Files\Common Files\Windows Live
              O43 - CFD: 2014-01-30 - 21:03:02 - [] ----D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
              O43 - CFD: 2011-06-17 - 08:54:12 - [] ----D C:\ProgramData\Adobe
              O43 - CFD: 2014-01-30 - 20:59:47 - [] ----D C:\ProgramData\Apple
              O43 - CFD: 2011-05-10 - 21:32:17 - [] ----D C:\ProgramData\Apple Computer
              O43 - CFD: 2009-07-14 - 00:53:55 - [] -SH-D C:\ProgramData\Application Data
              O43 - CFD: 2013-10-21 - 06:13:37 - [] ----D C:\ProgramData\AVAST Software
              O43 - CFD: 2011-04-19 - 07:33:29 - [] -SH-D C:\ProgramData\Bureau
              O43 - CFD: 2011-04-19 - 07:55:59 - [] --H-D C:\ProgramData\CanonBJ
              O43 - CFD: 2009-07-14 - 00:53:55 - [] -SH-D C:\ProgramData\Desktop
              O43 - CFD: 2009-07-14 - 00:53:55 - [] -SH-D C:\ProgramData\Documents
              O43 - CFD: 2013-10-09 - 20:29:35 - [] ----D C:\ProgramData\DriverGenius
              O43 - CFD: 2013-04-01 - 17:55:03 - [] ----D C:\ProgramData\DVD Shrink
              O43 - CFD: 2013-03-27 - 20:27:38 - [] ----D C:\ProgramData\EnterNHelp
              O43 - CFD: 2011-04-19 - 07:33:29 - [] -SH-D C:\ProgramData\Favoris
              O43 - CFD: 2009-07-14 - 00:53:55 - [] -SH-D C:\ProgramData\Favorites
              O43 - CFD: 2013-10-30 - 20:30:16 - [] ----D C:\ProgramData\InstallMate =>PUP.Tarma
              O43 - CFD: 2013-02-17 - 15:08:17 - [] ----D C:\ProgramData\iRinger
              O43 - CFD: 2014-07-27 - 13:52:07 - [] ----D C:\ProgramData\Malwarebytes
              O43 - CFD: 2011-12-08 - 12:24:55 - [] ----D C:\ProgramData\McAfee
              O43 - CFD: 2011-04-19 - 07:33:29 - [] -SH-D C:\ProgramData\Menu Démarrer
              O43 - CFD: 2014-01-18 - 11:32:49 - [] -S--D C:\ProgramData\Microsoft
              O43 - CFD: 2014-07-09 - 21:32:19 - [] ----D C:\ProgramData\Microsoft Help
              O43 - CFD: 2011-04-19 - 07:33:29 - [] -SH-D C:\ProgramData\Modèles
              O43 - CFD: 2012-05-04 - 18:28:56 - [] ----D C:\ProgramData\Mozilla
              O43 - CFD: 2013-03-27 - 20:26:58 - [] ----D C:\ProgramData\Nature
              O43 - CFD: 2013-04-01 - 16:22:11 - [] ----D C:\ProgramData\Nikon
              O43 - CFD: 2013-03-27 - 20:27:38 - [] ----D C:\ProgramData\PDEs
              O43 - CFD: 2013-03-27 - 20:26:58 - [] ----D C:\ProgramData\Perl
              O43 - CFD: 2014-02-24 - 21:46:36 - [] ----D C:\ProgramData\Samsung
              O43 - CFD: 2014-05-27 - 17:09:21 - [] ----D C:\ProgramData\Skype
              O43 - CFD: 2011-06-02 - 20:58:08 - [] ----D C:\ProgramData\Sony Corporation
              O43 - CFD: 2013-04-07 - 16:32:28 - [0] ----D C:\ProgramData\Sony Ericsson
              O43 - CFD: 2014-07-27 - 15:20:18 - [] ----D C:\ProgramData\Spybot - Search & Destroy
              O43 - CFD: 2009-07-14 - 00:53:55 - [] -SH-D C:\ProgramData\Start Menu
              O43 - CFD: 2013-09-07 - 12:24:53 - [] ----D C:\ProgramData\SummerSoft
              O43 - CFD: 2011-06-21 - 23:42:00 - [] ----D C:\ProgramData\Sun
              O43 - CFD: 2013-03-27 - 20:26:22 - [] ----D C:\ProgramData\Tables
              O43 - CFD: 2009-07-14 - 00:53:55 - [] -SH-D C:\ProgramData\Templates
              O43 - CFD: 2011-09-24 - 15:16:19 - [] ----D C:\ProgramData\TomTom
              O43 - CFD: 2013-03-27 - 20:27:38 - [] ----D C:\ProgramData\Ultima_T15
              O43 - CFD: 2011-04-19 - 12:26:44 - [] ----D C:\ProgramData\VirtualizedApplications
              O43 - CFD: 2011-04-27 - 21:03:28 - [] ----D C:\ProgramData\vsosdk
              O43 - CFD: 2011-05-10 - 21:32:36 - [] ----D C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
              O43 - CFD: 2013-06-25 - 12:06:42 - [0] ----D C:\Users\Lionel\AppData\Roaming\.minecraft
              O43 - CFD: 2011-05-05 - 10:20:18 - [] ----D C:\Users\Lionel\AppData\Roaming\Adobe
              O43 - CFD: 2012-04-09 - 10:49:08 - [] ----D C:\Users\Lionel\AppData\Roaming\AnvSoft
              O43 - CFD: 2013-02-17 - 16:54:59 - [] ----D C:\Users\Lionel\AppData\Roaming\Apple Computer
              O43 - CFD: 2013-03-27 - 20:37:29 - [] ----D C:\Users\Lionel\AppData\Roaming\ArcSoft
              O43 - CFD: 2011-06-09 - 11:50:06 - [] ----D C:\Users\Lionel\AppData\Roaming\Audacity
              O43 - CFD: 2013-10-22 - 08:01:33 - [] ----D C:\Users\Lionel\AppData\Roaming\AVAST Software
              O43 - CFD: 2012-11-16 - 20:43:46 - [] ----D C:\Users\Lionel\AppData\Roaming\BudgetExpress 3
              O43 - CFD: 2011-05-31 - 14:07:49 - [] ----D C:\Users\Lionel\AppData\Roaming\dvdcss
              O43 - CFD: 2012-05-05 - 08:45:43 - [] ----D C:\Users\Lionel\AppData\Roaming\GetRightToGo
              O43 - CFD: 2011-04-19 - 07:33:46 - [] ----D C:\Users\Lionel\AppData\Roaming\Identities
              O43 - CFD: 2011-04-19 - 07:54:55 - [] ----D C:\Users\Lionel\AppData\Roaming\Macromedia
              O43 - CFD: 2014-07-27 - 13:52:07 - [0] ----D C:\Users\Lionel\AppData\Roaming\Malwarebytes
              O43 - CFD: 2009-07-14 - 05:00:41 - [0] ----D C:\Users\Lionel\AppData\Roaming\Media Center Programs
              O43 - CFD: 2013-08-06 - 09:58:17 - [] -S--D C:\Users\Lionel\AppData\Roaming\Microsoft
              O43 - CFD: 2012-12-23 - 11:17:48 - [] ----D C:\Users\Lionel\AppData\Roaming\Mipony
              O43 - CFD: 2011-04-19 - 09:20:50 - [] ----D C:\Users\Lionel\AppData\Roaming\Mozilla
              O43 - CFD: 2012-06-21 - 16:58:18 - [] ----D C:\Users\Lionel\AppData\Roaming\OpenOffice.org
              O43 - CFD: 2012-08-11 - 20:48:29 - [] ----D C:\Users\Lionel\AppData\Roaming\PhotoFiltre
              O43 - CFD: 2014-02-24 - 22:23:20 - [] ----D C:\Users\Lionel\AppData\Roaming\Samsung
              O43 - CFD: 2014-07-27 - 15:26:57 - [] ----D C:\Users\Lionel\AppData\Roaming\Skype
              O43 - CFD: 2011-05-29 - 13:13:23 - [] ----D C:\Users\Lionel\AppData\Roaming\SoftGrid Client
              O43 - CFD: 2011-06-02 - 09:58:08 - [] ----D C:\Users\Lionel\AppData\Roaming\Sony
              O43 - CFD: 2013-12-27 - 21:16:37 - [] ----D C:\Users\Lionel\AppData\Roaming\Stellarium
              O43 - CFD: 2013-01-17 - 21:37:28 - [] ----D C:\Users\Lionel\AppData\Roaming\System
              O43 - CFD: 2012-04-24 - 13:30:33 - [] ----D C:\Users\Lionel\AppData\Roaming\TeamViewer
              O43 - CFD: 2011-09-24 - 15:16:10 - [] ----D C:\Users\Lionel\AppData\Roaming\TomTom
              O43 - CFD: 2011-04-19 - 10:14:40 - [0] ----D C:\Users\Lionel\AppData\Roaming\TP
              O43 - CFD: 2014-07-27 - 12:43:10 - [] ----D C:\Users\Lionel\AppData\Roaming\uTorrent =>P2P.µTorrent
              O43 - CFD: 2014-07-10 - 21:36:15 - [] ----D C:\Users\Lionel\AppData\Roaming\vlc
              O43 - CFD: 2014-07-06 - 09:29:31 - [] ----D C:\Users\Lionel\AppData\Roaming\Vso
              O43 - CFD: 2011-04-24 - 21:45:22 - [] ----D C:\Users\Lionel\AppData\Roaming\Windows Live Writer
              O43 - CFD: 2014-07-27 - 15:58:02 - [] ----D C:\Users\Lionel\AppData\Roaming\ZHP =>.Nicolas Coolman
              O43 - CFD: 2011-06-09 - 10:13:36 - [0] ----D C:\Users\Lionel\AppData\Roaming\ZoomBrowser EX
              O43 - CFD: 2014-01-26 - 09:37:09 - [] ----D C:\Users\Lionel\AppData\Local\Adobe
              O43 - CFD: 2011-05-10 - 21:31:25 - [] ----D C:\Users\Lionel\AppData\Local\Apple
              O43 - CFD: 2013-06-07 - 21:18:19 - [] ----D C:\Users\Lionel\AppData\Local\Apple Computer
              O43 - CFD: 2011-04-19 - 07:33:41 - [] -SH-D C:\Users\Lionel\AppData\Local\Application Data
              O43 - CFD: 2014-06-30 - 08:35:13 - [] ----D C:\Users\Lionel\AppData\Local\Downloaded Installations
              O43 - CFD: 2013-12-01 - 18:01:36 - [0] ----D C:\Users\Lionel\AppData\Local\ElevatedDiagnostics
              O43 - CFD: 2014-06-15 - 19:25:25 - [] -SH-D C:\Users\Lionel\AppData\Local\EmieSiteList
              O43 - CFD: 2014-06-15 - 19:25:25 - [] -SH-D C:\Users\Lionel\AppData\Local\EmieUserList
              O43 - CFD: 2011-04-19 - 07:54:53 - [] ----D C:\Users\Lionel\AppData\Local\Google
              O43 - CFD: 2011-04-19 - 07:33:41 - [] -SH-D C:\Users\Lionel\AppData\Local\Historique
              O43 - CFD: 2012-01-15 - 09:47:29 - [0] ----D C:\Users\Lionel\AppData\Local\LogMeIn Rescue Applet
              O43 - CFD: 2012-06-22 - 21:39:37 - [] ----D C:\Users\Lionel\AppData\Local\Macromedia
              O43 - CFD: 2013-11-26 - 08:10:20 - [] ----D C:\Users\Lionel\AppData\Local\Microsoft
              O43 - CFD: 2011-04-20 - 09:08:16 - [0] ----D C
              2. lion72 Auteur
                j'ai recommencer,

                voila le nouveau

                ~ Rapport de ZHPDiag v2014.7.27.109 - Nicolas Coolman (2014-07-27)
                ~ Lancé par Lionel (2014-07-28 16:36:13)
                ~ Adresse du Site Web https://nicolascoolman.eu
                ~ Adresse du Forum https://nicolascoolman.eu
                ~ Traduit par Nicolas Coolman
                ~ Etat de la version : Version à jour.
                ~ Liste blanche : Désactivée par l'utilisateur
                ~ Elévation des Privilèges : OK
                ~ User Account Control (UAC): Deactivate by user

                ---\\ Navigateurs Internet
                MSIE: Internet Explorer v11.0.9600.17207
                MFIE: Mozilla Firefox 30.0 (Defaut)
                GCIE: Google Chrome v36.0.1985.125

                ---\\ Informations sur les produits Windows
                ~ Langage: Français
                Windows 7 Professional, 32-bit Service Pack 1 (Build 7601)
                Windows Server License Manager Script : OK
                ~ Windows Operating System - Windows(R) 7, RETAIL channel
                Windows ID Activation : OK
                ~ Windows Partial Key : 72CBH
                Windows License : OK
                ~ Windows Remaining Initializations Number : 4
                Software Protection Service (Protection logicielle) : OK
                Windows Automatic Updates : OK
                Windows Activation Technologies : OK

                ---\\ Logiciels de protection du système
                avast! Free Antivirus v9.0.2021
                Windows Defender W7 (Activate)

                ---\\ Logiciels d'optimisation du système
                CCleaner v3.05

                ---\\ Logiciels de partage PeerToPeer
                µTorrent v3.3.0.29625 =>P2P.µTorrent

                ---\\ Surveillance de Logiciels
                Adobe Flash Player 14 Plugin
                Adobe Reader X
                Java 7 Update 25

                ---\\ Informations sur le système
                ~ Processor: x86 Family 6 Model 23 Stepping 7, GenuineIntel
                ~ Operating System: 32 Bits
                Boot mode: Normal (Normal boot)
                Total RAM: 3326 MB (45% free)
                System Restore: Activé (Enable)
                System drive C: has 69 GB (11%) free of 596 GB

                ---\\ Mode de connexion au système
                ~ Computer Name: LIONEL-PC
                ~ User Name: Lionel
                ~ All Users Names: Mcx1-LIONEL-PC, Lionel, HomeGroupUser$, Administrateur,
                ~ Unselected Option: None
                Logged in as Administrator

                ---\\ Variables d'environnement
                ~ System Unit : C:\
                ~ %AppZHP% : C:\Users\Lionel\AppData\Roaming\ZHP\
                ~ %AppData% : C:\Users\Lionel\AppData\Roaming\
                ~ %Desktop% : C:\Users\Lionel\Desktop\
                ~ %Favorites% : C:\Users\Lionel\Favorites\
                ~ %LocalAppData% : C:\Users\Lionel\AppData\Local\
                ~ %StartMenu% : C:\Users\Lionel\AppData\Roaming\Microsoft\Windows\Start Menu\
                ~ %Windir% : C:\Windows\
                ~ %System% : C:\Windows\System32\

                ---\\ Enumération des unités disques
                C: Hard drive, Flash drive, Thumb drive (Free 69 Go of 596 Go)
                D: CD-ROM drive (Not Inserted)
                E: CD-ROM drive (Not Inserted)

                ---\\ Etat du Centre de Sécurité Windows
                [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
                [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
                [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
                [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified
                [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
                [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowMyGames: Modified
                [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
                [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
                [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
                [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
                [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
                [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
                ~ Security Center: 43 Scanned in 00mn 00s

                ---\\ Recherche particulière de fichiers génériques
                [MD5.8B88EBBB05A0E56B7DCC708498C02B3E] - (.Microsoft Corporation - Explorateur Windows.) (.2011-02-25 - 00:30:54.) -- C:\Windows\Explorer.exe [2616320]
                [MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.2009-07-13 - 20:14:45.) -- C:\Windows\System32\Wininit.exe [96256]
                [MD5.CCC198257901BEEA2FBF8EB1E7678356] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.2014-06-18 - 17:13:59.) -- C:\Windows\System32\wininet.dll [1791488]
                [MD5.998507B046BA314CE8245364C686FA67] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.2014-03-04 - 04:17:02.) -- C:\Windows\System32\Winlogon.exe [304128]
                [MD5.E3AE23569749DE12D45BA3B489A036AE] - (.Microsoft Corporation - Bibliothèque de licences.) (.2010-11-20 - 07:21:24.) -- C:\Windows\System32\sppcomapi.dll [193536]
                [MD5.D0B388DA1D111A34366E04EB4A5DD156] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.2014-05-30 - 01:36:07.) -- C:\Windows\system32\Drivers\AFD.sys [338944]
                [MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.2009-07-13 - 20:26:15.) -- C:\Windows\system32\Drivers\atapi.sys [21584]
                [MD5.77EA11B065E0A8AB902D78145CA51E10] - (.Microsoft Corporation - CD-ROM File System Driver.) (.2009-07-13 - 18:11:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [70656]
                [MD5.BE167ED0FDB9C1FA1133953C18D5A6C9] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.2010-11-20 - 03:38:10.) -- C:\Windows\system32\Drivers\Cdrom.sys [108544]
                [MD5.F024449C97EC1E464AAFFDA18593DB88] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.2010-11-20 - 03:42:32.) -- C:\Windows\system32\Drivers\DfsC.sys [78336]
                [MD5.9036377B8A6C15DC2EEC53E489D159B5] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.2010-11-20 - 04:59:29.) -- C:\Windows\system32\Drivers\HDAudBus.sys [108544]
                [MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - (.Microsoft Corporation - Pilote de port i8042.) (.2009-07-13 - 18:11:24.) -- C:\Windows\system32\Drivers\i8042prt.sys [80896]
                [MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - (.Microsoft Corporation - IP Network Address Translator.) (.2009-07-13 - 18:54:29.) -- C:\Windows\system32\Drivers\IpNat.sys [101888]
                [MD5.5D16C921E3671636C0EBA3BBAAC5FD25] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.2011-04-26 - 21:17:22.) -- C:\Windows\system32\Drivers\MRxSmb.sys [123904]
                [MD5.280122DDCF04B378EDD1AD54D71C1E54] - (.Microsoft Corporation - MBT Transport driver.) (.2010-11-20 - 03:39:44.) -- C:\Windows\system32\Drivers\netBT.sys [187904]
                [MD5.C8DFF8D07755A66C7A4A738930F0FEAC] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.2014-01-23 - 21:18:22.) -- C:\Windows\system32\Drivers\ntfs.sys [1212352]
                [MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - (.Microsoft Corporation - Pilote de port parallèle.) (.2009-07-13 - 18:45:35.) -- C:\Windows\system32\Drivers\Parport.sys [79360]
                [MD5.D9F91EAFEC2815365CBE6D167E4E332A] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.2009-07-13 - 18:54:34.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [78848]
                [MD5.B973FCFC50DC1434E1970A146F7E3885] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.2010-11-20 - 05:24:46.) -- C:\Windows\system32\Drivers\rdpdr.sys [133632]
                [MD5.3E21C083B8A01CB70BA1F09303010FCE] - (.Microsoft Corporation - SMB Transport driver.) (.2009-07-13 - 18:53:41.) -- C:\Windows\system32\Drivers\smb.sys [71168]
                [MD5.B459575348C20E8121D6039DA063C704] - (.Microsoft Corporation - TDI Translation Driver.) (.2010-11-20 - 03:39:17.) -- C:\Windows\system32\Drivers\tdx.sys [74752]
                [MD5.F497F67932C6FA693D7DE2780631CFE7] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.2010-11-20 - 07:30:16.) -- C:\Windows\system32\Drivers\volsnap.sys [245632]
                ~ Generic Processes: Scanned in 00mn 01s

                ---\\ Etat des fichiers cachés (Caché/Total)
                ~ Mes images (My Pictures) : 3/5621
                ~ Mes musiques (My Musics) : 1/15038
                ~ Mes Videos (My Videos) : 1/104
                ~ Mes Favoris (My Favorites) : 1/17
                ~ Mes Documents (My Documents) : 2/2261
                ~ Mon Bureau (My Desktop) : 3/254
                ~ Menu demarrer (Programs) : 1/32
                ~ Hidden Files: Scanned in 00mn 36s

                ---\\ Processus lancés
                [MD5.17186248C75E9A8227750726E1DFF4FD] - (.Microsoft Corporation - Microsoft LifeCam VX6000 Device Application.) -- C:\Windows\vVX6000.exe [764784] [PID.4020]
                [MD5.1AA5F0A2E3E65A9F6B35C19A7C9D7762] - (.Nikon Corporation - Nikon Message Center 2.) -- C:\Program Files\Nikon\Nikon Message Center 2\NkMC2.exe [571392] [PID.2568]
                [MD5.D63797E8E7781EE1500A810CB6194FA6] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816] [PID.2856]
                [MD5.26AFC1F16494FFE66F2197153B342A27] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [4086432] [PID.2832]
                [MD5.085BE68B52CE5A5FA4621507AD518CF3] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [152392] [PID.2896]
                [MD5.A0251ED3ABBA7ACC84416738C8282ACA] - (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [311616] [PID.2920]
                [MD5.F5ED26AB8BDD951BFAC8BBD0D68BA3E9] - (.Samsung - Kies.) -- C:\Program Files\Samsung\Kies\Kies.exe [1564992] [PID.3216]
                [MD5.F43247CCDD1EA5EA4F60393CF157157B] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe [21442176] [PID.3992]
                [MD5.3C8989CF2B59228785F16B3EB547F58C] - (.TomTom - System Tray application for TomTom HOME.) -- C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [248176] [PID.972]
                [MD5.06C2BB8F9089C3C091584F8AD5C1A01E] - (.Microsoft Corporation - Microsoft Outlook.) -- C:\Program Files\Microsoft Office\Office14\OUTLOOK.exe [16001192] [PID.4512]
                [MD5.B1E01D636350983E94171E229C759468] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [275568] [PID.4616]
                [MD5.0DA8636ACBF55A4CA6350FEA7D789828] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8082432] [PID.4876]
                ~ Processes Running: Scanned in 00mn 01s

                ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
                C:\Users\Lionel\AppData\Local\Google\Chrome\User Data\Default\Preferences
                G1 - GCS: Preference [User Data\Default] http://search.babylon.com =>PUP.Babylon

                ---\\ Liste des dossiers d'extension Google Chrome
                ~ Google Lines Browser: 1 Scanned in 00mn 04s

                ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
                C:\Users\Lionel\AppData\Roaming\Mozilla\Firefox\Profiles\o50aw18z.default\prefs.js
                M0 - MFSP: prefs.js [Lionel - o50aw18z.default] https://www.google.ca/?gws_rd=ssl
                M2 - MFEP: prefs.js [Lionel - o50aw18z.default\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}] [dwhelper] DownloadHelper v4.9.22 (..)
                P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.10.) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll
                P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin.dll
                P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin2.dll
                P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin3.dll
                P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin4.dll
                P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin5.dll
                P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll
                P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 12.0.) -- C:\Windows\system32\Adobe\Director\np32dsw_1200112.dll
                P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (...) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
                P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll =>.Google Inc
                P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.30514.0.) -- c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll
                P2 - FPN: [HKLM] [@microsoft.com/OfficeAuthz,version=14.0] - (.Microsoft Corporation - Office Authorization plug-in for NPAPI browsers.) -- C:\Program Files\Microsoft Office\Office14\NPAUTHZ.dll
                P2 - FPN: [HKLM] [@microsoft.com/SharePoint,version=14.0] - (.Microsoft Corporation - The plug-in allows you to open and edit files using Microsoft Office a.) -- C:\Program Files\Microsoft Office\Office14\NPSPWRAP.dll
                P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll
                P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll
                P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.10.) -- C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
                P2 - FPN: [HKCU] [@Skype Limited.com/Facebook Video Calling Plugin] - (...) -- C:\Users\Lionel\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (.not file.)
                ~ Firefox Browser: 25 Scanned in 00mn 00s

                ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
                R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
                R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.microsoft.com/fr-fr/
                R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
                R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
                R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
                R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
                R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
                R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
                R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
                R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (...) (No version) -- (.not file.)
                R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
                ~ IE Browser: 11 Scanned in 00mn 00s

                ---\\ Internet Explorer, Proxy Management (R5)
                R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
                R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
                R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
                R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
                R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
                R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
                ~ Proxy management: Scanned in 00mn 00s

                ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
                F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
                F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
                F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
                ~ Keys: Scanned in 00mn 00s

                ---\\ Hosts file redirection (O1)
                ~ Le fichier hosts est sain (The hosts file is clean).
                ~ Hosts File: Scanned in 00mn 00s
                ~ Nombre de lignes (Lines number): 21

                ---\\ Browser Helper Objects de navigateur (O2)
                O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
                O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} . (.Microsoft Corporation - Windows Live Messenger Companion Core.) -- C:\Program Files\Windows Live\Companion\companioncore.dll
                O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files\Microsoft Office\Office14\URLREDIR.dll
                ~ BHO: 8 Scanned in 00mn 00s

                ---\\ Applications lancées au démarrage du système (O4)
                O4 - HKLM\..\Run: [VX6000] . (.Microsoft Corporation - Microsoft LifeCam VX6000 Device Application.) -- C:\Windows\vVX6000.exe
                O4 - HKLM\..\Run: [LifeCam] . (.Microsoft Corporation - LifeExp.exe.) -- C:\Program Files\Microsoft LifeCam\LifeExp.exe
                O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated
                O4 - HKLM\..\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
                O4 - HKLM\..\Run: [Nikon Message Center 2] . (.Nikon Corporation - Nikon Message Center 2.) -- C:\Program Files\Nikon\Nikon Message Center 2\NkMC2.exe
                O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation
                O4 - HKLM\..\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
                O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe
                O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe
                O4 - HKLM\..\Run: [KiesTrayAgent] . (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe =>.Samsung Electronics Co
                O4 - HKCU\..\Run: [Facebook Update] C:\Users\Lionel\AppData\Local\Facebook\Update\FacebookUpdate.exe (.not file.)
                O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
                O4 - HKCU\..\Run: [KiesPreload] . (.Samsung - Kies.) -- C:\Program Files\Samsung\Kies\Kies.exe
                O4 - HKCU\..\Run: [KiesAirMessage] C:\Program Files\Samsung\Kies\KiesAirMessage.exe (.not file.)
                O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
                O4 - HKCU\..\Run: [TomTomHOME.exe] . (.TomTom - System Tray application for TomTom HOME.) -- C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
                O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
                O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
                O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
                O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
                O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [Facebook Update] C:\Users\Lionel\AppData\Local\Facebook\Update\FacebookUpdate.exe (.not file.)
                O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
                O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [KiesPreload] . (.Samsung - Kies.) -- C:\Program Files\Samsung\Kies\Kies.exe
                O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [KiesAirMessage] C:\Program Files\Samsung\Kies\KiesAirMessage.exe (.not file.)
                O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
                O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [TomTomHOME.exe] . (.TomTom - System Tray application for TomTom HOME.) -- C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
                ~ Application: Scanned in 00mn 00s

                ---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
                O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
                ~ IE Control Panel: 1 Scanned in 00mn 00s

                ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
                O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} . (.Microsoft Corporation - Windows Live Messenger Companion core resources.) -- C:\Program Files\Windows Live\Companion\companionres.dll
                O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~4\Office14\ONBttnIE.dll =>.Microsoft Corporation
                O9 - Extra button: Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~4\Office14\ONBTTN~1.dll =>.Microsoft Corporation
                ~ IE Extra Buttons: Scanned in 00mn 00s

                ---\\ Winsock hijacker (Layered Service Provider) (O10)
                O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
                O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
                O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
                O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
                O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll =>.Microsoft Corporation
                O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
                O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll =>.Microsoft Corporation
                O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll =>.Microsoft Corporation
                O10 - WLSP:\000000000009\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll
                ~ Winsock: 9 Scanned in 00mn 00s

                ---\\ Objets ActiveX (Downloaded Program Files)(O16)
                O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} ((no name)) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
                O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} ((no name)) - http://messenger.zone.msn.com/MessengerGamesContent/GameContent/fr/uno1/GAME_UNO1.cab
                O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} ((no name)) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} ((no name)) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                ~ Objets ActiveX: Scanned in 00mn 00s

                ---\\ Modification Domaine/Adresses DNS (O17)
                O17 - HKLM\System\CCS\Services\Tcpip\..\{2B9F3634-CF9A-46BA-A218-3833E46C6B6C}: DhcpNameServer = 192.168.0.1
                O17 - HKLM\System\CCS\Services\Tcpip\..\{E6141240-563B-423E-A0AF-A82D8A15BA62}: DhcpNameServer = 192.168.42.129
                O17 - HKLM\System\CS1\Services\Tcpip\..\{2B9F3634-CF9A-46BA-A218-3833E46C6B6C}: DhcpNameServer = 192.168.0.1
                O17 - HKLM\System\CS1\Services\Tcpip\..\{E6141240-563B-423E-A0AF-A82D8A15BA62}: DhcpNameServer = 192.168.42.129
                O17 - HKLM\System\CS2\Services\Tcpip\..\{2B9F3634-CF9A-46BA-A218-3833E46C6B6C}: DhcpNameServer = 192.168.0.1
                O17 - HKLM\System\CS2\Services\Tcpip\..\{E6141240-563B-423E-A0AF-A82D8A15BA62}: DhcpNameServer = 192.168.42.129
                O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
                ~ Domain: Scanned in 00mn 00s

                ---\\ Protocole additionnel (O18)
                O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll =>.Microsoft Corporation
                O18 - Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll =>.Microsoft Corporation
                ~ Protocole Additionnel: Scanned in 00mn 00s

                ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
                O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
                ~ SSODL: 1 Scanned in 00mn 00s

                ---\\ Liste des services NT non Microsoft et non désactivés (O23)
                O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
                O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe
                O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - YSLoader.exe.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
                O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
                O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
                O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc
                O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files\Skype\Updater\Updater.exe
                O23 - Service: TomTomHOMEService (TomTomHOMEService) . (.TomTom - Windows Service for TomTom HOME.) - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
                ~ Services: 8 Scanned in 00mn 04s

                ---\\ Enumération Active Desktop & MHTML Editor (O24)
                O24 - Default MHTML Editor: Last - .(...) - (.not file.)
                ~ Desktop Component: 4 Scanned in 00mn 00s

                ---\\ Enumère les données de BootExecute (BEX) (O34)
                O34 - HKLM BootExecute: (autocheck autochk *) - File not found
                ~ BEX: 1 Scanned in 00mn 00s

                ---\\ Tâches planifiées en automatique (O39)
                [MD5.A6B6AB9502B63F43A9A56AE6AFB22078] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [262320]
                [MD5.1AD8512A5C40AD1A0558498D8E0AC2AA] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [808448]
                [MD5.00000000000000000000000000000000] [APT] [FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001Core] (...) -- C:\Users\Lionel\AppData\Local\Facebook\Update\FacebookUpdate.exe (.not file.) [0]
                [MD5.00000000000000000000000000000000] [APT] [FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001UA] (...) -- C:\Users\Lionel\AppData\Local\Facebook\Update\FacebookUpdate.exe (.not file.) [0]
                [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [116648]
                [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [116648]
                [MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [561984]
                O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002]
                O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [1002]
                O39 - APT: FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001Core - (...) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001Core.job [1078]
                O39 - APT: FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001Core - (...) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001Core [1078]
                O39 - APT: FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001UA - (...) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001UA.job [1100]
                O39 - APT: FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001UA - (...) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001UA [1100]
                O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1052]
                O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1052]
                O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1056]
                O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1056]
                ~ Scheduled Task: 15 Scanned in 00mn 05s

                ---\\ Composants installés (ActiveSetup Installed Components) (O40)
                O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
                O40 - ASIC: Microsoft Windows Media Player 12.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll =>.Microsoft Corporation
                O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
                O40 - ASIC: Internet Explorer - {2D46B6DC-2207-486B-B523-A557E6D54B47} . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\system32\cmd.exe =>.Microsoft Corporation
                O40 - ASIC: Microsoft Windows - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files\Windows Mail\WinMail.exe =>.Microsoft Corporation
                O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
                O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
                O40 - ASIC: Windows Desktop Update - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
                O40 - ASIC: Web Platform Customizations - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
                O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
                O40 - ASIC: Google Chrome - {8A69D345-D564-463c-AFF1-A69D9E530F96} . (.Google Inc. - Google Chrome Installer.) -- C:\Program Files\Google\Chrome\Application\36.0.1985.125\Installer\chrmstp.exe
                ~ Active Setup: 11 Scanned in 00mn 00s

                ---\\ Pilotes lancés au démarrage du système (O41)
                O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
                O41 - Driver: (aswRdr) . (.AVAST Software - avast! WFP Redirect Driver.) - C:\Windows\system32\drivers\aswRdr2.sys
                O41 - Driver: (aswSnx) . (.AVAST Software - avast! Virtualization Driver.) - C:\Windows\system32\drivers\aswSnx.sys
                O41 - Driver: (aswSP) . (.AVAST Software - avast! self protection module.) - C:\Windows\system32\drivers\aswSP.sys
                O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
                O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
                O41 - Driver: C:\Windows\System32\cscsvc.dll (CSC) . (.Microsoft Corporation - Windows Client Side Caching Driver.) - C:\Windows\System32\drivers\csc.sys
                O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
                O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
                O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
                O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
                O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
                O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
                O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
                O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
                O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
                O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
                O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
                O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
                O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys
                O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
                O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
                O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
                ~ Drivers: 69 Scanned in 00mn 00s

                ---\\ Logiciels installés (O42)
                O42 - Logiciel: Adobe Flash Player 14 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
                O42 - Logiciel: Adobe Flash Player 14 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
                O42 - Logiciel: Adobe Reader X (10.1.10) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA1000000001}
                O42 - Logiciel: Adobe Shockwave Player 12.0 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player
                O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {A922C4B7-50E0-4787-A94C-59DBF3C65DBE}
                O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {10E3A6DD-84D8-4D8A-BB11-5E5314BCA7FD}
                O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} =>.Apple Inc
                O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {79155F2B-9895-49D7-8612-D92580E0DE5B}
                O42 - Logiciel: BudgetExpress 3 - (...) [HKLM] -- {77E912CE-6396-45B8-90C0-DF402B3D7566}
                O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
                O42 - Logiciel: CDex - Open Source Digital Audio CD Extractor - (.Georgy Berdyshev.) [HKLM] -- CDex
                O42 - Logiciel: Canon MOV Decoder - (.Canon Inc..) [HKLM] -- Canon MOV Decoder
                O42 - Logiciel: Canon MOV Encoder - (.Canon Inc..) [HKLM] -- Canon MOV Encoder
                O42 - Logiciel: Complément Messenger - (.Microsoft Corporation.) [HKLM] -- {6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}
                O42 - Logiciel: ConvertHelper 2.2 - (.DownloadHelper.) [HKLM] -- {27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1
                O42 - Logiciel: ConvertXtoDVD 4.1.16.360 - (...) [HKLM] -- {DB6AB705-C9BD-40E3-8929-2EA57F36A4FF}_is1
                O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
                O42 - Logiciel: DVD Region+CSS Free 5.9.7.0 - (.Fengtao Software Inc..) [HKLM] -- DVD Region+CSS Free_is1
                O42 - Logiciel: DVD Shrink 3.2 - (.DVD Shrink.) [HKLM] -- DVD Shrink_is1
                O42 - Logiciel: Facebook Video Calling 1.2.0.159 - (.Skype Limited.) [HKLM] -- {7CAC6A44-C3DE-4153-ACA6-7524602C789E}
                O42 - Logiciel: Garfield K Nombres - (...) [HKLM] -- {C744A1E6-86AF-4A16-B9BC-9921BE00CD8F}
                O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome
                O42 - Logiciel: Google Earth Plug-in - (.Google.) [HKLM] -- {4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E} =>.Google Inc
                O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
                O42 - Logiciel: IZArc 4.1.6 - (.Ivan Zahariev.) [HKLM] -- {97C82B44-D408-4F14-9252-47FC1636D23E}_is1
                O42 - Logiciel: Java 7 Update 25 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83217025FF}
                O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
                O42 - Logiciel: K-Lite Codec Pack 8.7.0 (Full) - (...) [HKLM] -- KLiteCodecPack_is1
                O42 - Logiciel: MCEBrowser - (.ANPARK.) [HKLM] -- {79F41FC6-07F9-47C2-BBAC-37C7C70EE703}
                O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
                O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
                O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
                O42 - Logiciel: Mega_pack_la_Quebecoise_by_toto740 0.0 - (.Toto740 / TomTomHeaven.) [HKLM] -- Mega_pack_la_Quebecoise_by_toto740_is1
                O42 - Logiciel: MiPony 2.0.2 - (...) [HKLM] -- MiPony
                O42 - Logiciel: Microsoft Corporation - (.Microsoft Corporation.) [HKLM] -- {B3BC9DB1-0B0A-48B0-B86B-EA77CAA7F800}
                O42 - Logiciel: Microsoft LifeCam - (.Microsoft Corporation.) [HKLM] -- {5FC7AB5C-61FC-42DF-A923-5139BCF10D42}
                O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
                O42 - Logiciel: Mozilla Firefox 30.0 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 30.0 (x86 fr)
                O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService
                O42 - Logiciel: MyFreeCodec - (...) [HKCU] -- MyFreeCodec
                O42 - Logiciel: Nero 7 Ultra Edition - (.Nero AG.) [HKLM] -- {F9469799-696F-427D-B314-79E7AA681033}
                O42 - Logiciel: Nikon Message Center 2 - (.Nikon.) [HKLM] -- {B014EE44-9197-4513-9613-71E6EB1B514E}
                O42 - Logiciel: OpenOffice.org 3.4 - (.OpenOffice.org.) [HKLM] -- {2F90A789-DD1E-41CE-BFCA-BD78213BABC7}
                O42 - Logiciel: PhotoFiltre - (...) [HKCU] -- PhotoFiltre
                O42 - Logiciel: Picture Control Utility - (.Nikon.) [HKLM] -- {87441A59-5E64-4096-A170-14EFE67200C3}
                O42 - Logiciel: PlayStation(R)Network Downloader - (.Sony Computer Entertainment Inc..) [HKLM] -- {B6659DD8-00A7-4A24-BBFB-C1F6982E5D66}
                O42 - Logiciel: PlayStation(R)Store - (.Sony Computer Entertainment Inc..) [HKLM] -- {0E532C84-4275-41B3-9D81-D4A1A20D8EE7}
                O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {B67BAFBA-4C9F-48FA-9496-933E3B255044}
                O42 - Logiciel: SAMSUNG USB Driver for Mobile Phones - (.SAMSUNG Electronics Co., Ltd..) [HKLM] -- {D0795B21-0CDA-4a92-AB9E-6E92D8111E44}
                O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM] -- InstallShield_{758C8301-2696-4855-AF45-534B1200980A}
                O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM] -- {758C8301-2696-4855-AF45-534B1200980A}
                O42 - Logiciel: Skype(TM) 6.16 - (.Skype Technologies S.A..) [HKLM] -- {7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}
                O42 - Logiciel: Stellarium 0.10.4 - (...) [HKLM] -- Stellarium_is1
                O42 - Logiciel: TomTom HOME - (.Nom de votre société.) [HKLM] -- {7A2BB1C8-903D-4585-9F3B-CADD67D07D37}
                O42 - Logiciel: TomTom HOME Visual Studio Merge Modules - (.TomTom International B.V..) [HKLM] -- {8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}
                O42 - Logiciel: VLC media player 1.1.11 - (.VideoLAN.) [HKLM] -- VLC media player =>.VideoLAN
                O42 - Logiciel: ViewNX 2 - (.Nikon.) [HKLM] -- {E64C137C-D0B7-467A-B47F-460AAB30F0A3}
                O42 - Logiciel: VirtualDJ Home FREE - (.Atomix Productions.) [HKLM] -- {19192A84-6172-4312-A661-D8F9A34585AB}
                O42 - Logiciel: WM Recorder - (.AllAlex, Inc.) [HKLM] -- WM Recorder14.12
                O42 - Logiciel: avast! Free Antivirus v9.0.2021 - (.AVAST Software.) [HKLM] -- avast
                O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {616445AF-BBCF-41C1-A4D6-8CFF171C182D}
                O42 - Logiciel: swMSM - (.Adobe Systems, Inc.) [HKLM] -- {612C34C7-5E90-47D8-9B5C-0F717DD82726}
                O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKCU] -- uTorrent =>P2P.BitTorrent
                O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKLM] -- uTorrent =>P2P.BitTorrent
                ~ Logic: 46 Scanned in 00mn 00s

                ---\\ HKCU & HKLM Software Keys
                [HKCU\Software\ASProtect]
                [HKCU\Software\AVAST Software]
                [HKCU\Software\Adobe]
                [HKCU\Software\Ahead]
                [HKCU\Software\AnvSoft]
                [HKCU\Software\AppDataLow\Software\Adobe]
                [HKCU\Software\AppDataLow\Software\JavaSoft]
                [HKCU\Software\AppDataLow]
                [HKCU\Software\Apple Computer, Inc.]
                [HKCU\Software\Apple Inc.]
                [HKCU\Software\ArcSoft]
                [HKCU\Software\Audacity]
                [HKCU\Software\BVRP Software]
                [HKCU\Software\BitTorrent] =>P2P.BitTorrent
                [HKCU\Software\CDDB]
                [HKCU\Software\CISRA]
                [HKCU\Software\Canon]
                [HKCU\Software\Canon_Inc_IC]
                [HKCU\Software\Classes]
                [HKCU\Software\Clients]
                [HKCU\Software\DVD Region-Free]
                [HKCU\Software\DVD Shrink]
                [HKCU\Software\GNU]
                [HKCU\Software\Gabest]
                [HKCU\Software\Google]
                [HKCU\Software\Grapher]
                [HKCU\Software\Guitars]
                [HKCU\Software\Haali]
                [HKCU\Software\Help]
                [HKCU\Software\IM Providers]
                [HKCU\Software\IZSoftware]
                [HKCU\Software\Icaros]
                [HKCU\Software\IncrediMail]
                [HKCU\Software\JEDI-VCL]
                [HKCU\Software\JavaSoft]
                [HKCU\Software\LAV]
                [HKCU\Software\LDM]
                [HKCU\Software\Logs]
                [HKCU\Software\Macromedia]
                [HKCU\Software\MainConcept (Nikon)]
                [HKCU\Software\Malwarebytes' Anti-Malware]
                [HKCU\Software\MarineCat]
                [HKCU\Software\MediaInfo]
                [HKCU\Software\Mediachance]
                [HKCU\Software\MouseIndustries]
                [HKCU\Software\MozillaPlugins]
                [HKCU\Software\Mozilla]
                [HKCU\Software\Netscape]
                [HKCU\Software\Nikon]
                [HKCU\Software\ODBC]
                [HKCU\Software\OpenOffice.org]
                [HKCU\Software\Piriform]
                [HKCU\Software\Policies]
                [HKCU\Software\Safer Networking Limited]
                [HKCU\Software\Samsung]
                [HKCU\Software\SilicMobile]
                [HKCU\Software\SkypeRS]
                [HKCU\Software\Skype]
                [HKCU\Software\SoftVTU]
                [HKCU\Software\Sony Ericsson]
                [HKCU\Software\TeamViewer]
                [HKCU\Software\Techlogg.com ToneShop]
                [HKCU\Software\TeleCharger]
                [HKCU\Software\TomTom]
                [HKCU\Software\Trolltech]
                [HKCU\Software\VB and VBA Program Settings]
                [HKCU\Software\VSO]
                [HKCU\Software\VirtualDJ]
                [HKCU\Software\WM Converter5]
                [HKCU\Software\WebApp]
                [HKCU\Software\Winamp]
                [HKCU\Software\kde.org]
                [HKCU\Software\madFlac]
                [HKCU\Software\madshi]
                [HKCU\Software\yahoo]
                [HKLM\Software\AMD]
                [HKLM\Software\ATI Technologies]
                [HKLM\Software\AVAST Software]
                [HKLM\Software\Adobe]
                [HKLM\Software\AdwCleaner]
                [HKLM\Software\AppDataLow]
                [HKLM\Software\Apple Computer, Inc.]
                [HKLM\Software\Apple Inc.]
                [HKLM\Software\ArcSoft]
                [HKLM\Software\Canon]
                [HKLM\Software\Canon_Inc_IC]
                [HKLM\Software\Classes]
                [HKLM\Software\Clients]
                [HKLM\Software\DelFix]
                [HKLM\Software\DownloadHelper]
                [HKLM\Software\Fengtao Software]
                [HKLM\Software\GEAR Software]
                [HKLM\Software\GNU]
                [HKLM\Software\Google]
                [HKLM\Software\HaaliMkx]
                [HKLM\Software\Hewlett-Packard]
                [HKLM\Software\Hybrid Basic]
                [HKLM\Software\Hybrid Synthesizers]
                [HKLM\Software\IM Providers]
                [HKLM\Software\Image Manipulation]
                [HKLM\Software\InstallShield]
                [HKLM\Software\Intel]
                [HKLM\Software\JavaSoft]
                [HKLM\Software\JreMetrics]
                [HKLM\Software\KLCodecPack]
                [HKLM\Software\LAV]
                [HKLM\Software\LDM]
                [HKLM\Software\Macromedia]
                [HKLM\Software\Maestro Learning]
                [HKLM\Software\Malwarebytes' Anti-Malware]
                [HKLM\Software\MozillaPlugins]
                [HKLM\Software\Mozilla]
                [HKLM\Software\Nature]
                [HKLM\Software\Nero]
                [HKLM\Software\Nikon]
                [HKLM\Software\ODBC]
                [HKLM\Software\OpenOffice.org]
                [HKLM\Software\Piriform]
                [HKLM\Software\Policies]
                [HKLM\Software\RegisteredApplications]
                [HKLM\Software\SAMSUNG]
                [HKLM\Software\Safer Networking Limited]
                [HKLM\Software\Skype]
                [HKLM\Software\SoftAssi]
                [HKLM\Software\Sonic]
                [HKLM\Software\Sony Corporation]
                [HKLM\Software\Sony]
                [HKLM\Software\Strawbuilt]
                [HKLM\Software\TeamViewer]
                [HKLM\Software\TomTom]
                [HKLM\Software\VSO]
                [HKLM\Software\VideoLAN]
                [HKLM\Software\VirtualDJ]
                [HKLM\Software\Windows]
                [HKLM\Software\Wow6432Node]
                [HKLM\Software\Yahoo]
                [HKLM\Software\ahead]
                [HKLM\Software\intellidownload]
                [HKLM\Software\lameme]
                [HKLM\Software\mozilla.org]
                ~ Key Software: 253 Scanned in 00mn 00s

                ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
                O43 - CFD: 2012-10-09 - 12:14:45 - [0] ----D C:\Program Files\7-Zip
                O43 - CFD: 2011-06-17 - 08:54:11 - [] ----D C:\Program Files\Adobe
                O43 - CFD: 2012-09-30 - 16:49:32 - [] ----D C:\Program Files\ANPARK
                O43 - CFD: 2013-02-16 - 18:05:02 - [] ----D C:\Program Files\Apple Software Update =>.Apple Inc
                O43 - CFD: 2011-04-19 - 09:42:21 - [] ----D C:\Program Files\AVAST Software
                O43 - CFD: 2013-02-16 - 18:11:02 - [] ----D C:\Program Files\Bonjour
                O43 - CFD: 2012-11-16 - 20:43:39 - [] ----D C:\Program Files\BudgetExpress 3
                O43 - CFD: 2011-08-07 - 13:30:29 - [] ----D C:\Program Files\Canon
                O43 - CFD: 2011-04-22 - 07:41:20 - [] ----D C:\Program Files\CCleaner
                O43 - CFD: 2013-08-06 - 20:01:05 - [] ----D C:\Program Files\CDex
                O43 - CFD: 2014-05-27 - 17:09:19 - [] ----D C:\Program Files\Common Files
                O43 - CFD: 2014-07-11 - 18:13:08 - [] ----D C:\Program Files\ConvertHelper
                O43 - CFD: 2011-06-07 - 13:11:53 - [] ----D C:\Program Files\DVD Maker
                O43 - CFD: 2011-04-22 - 13:09:17 - [] ----D C:\Program Files\DVD Region+CSS Free
                O43 - CFD: 2011-04-22 - 07:52:15 - [] ----D C:\Program Files\DVD Shrink
                O43 - CFD: 2011-04-19 - 07:33:29 - [] -SH-D C:\Program Files\Fichiers communs
                O43 - CFD: 2014-07-05 - 10:15:31 - [] ----D C:\Program Files\Google
                O43 - CFD: 2014-02-24 - 21:35:58 - [] --H-D C:\Program Files\InstallShield Installation Information
                O43 - CFD: 2014-07-10 - 17:45:46 - [] ----D C:\Program Files\Internet Explorer
                O43 - CFD: 2014-01-30 - 21:02:19 - [] ----D C:\Program Files\iPod
                O43 - CFD: 2014-01-30 - 21:03:01 - [] ----D C:\Program Files\iTunes
                O43 - CFD: 2011-05-16 - 08:47:27 - [] ----D C:\Program Files\IZArc
                O43 - CFD: 2014-07-26 - 10:49:50 - [] ----D C:\Program Files\Java
                O43 - CFD: 2012-05-05 - 08:47:55 - [] ----D C:\Program Files\K-Lite Codec Pack
                O43 - CFD: 2012-11-04 - 17:41:11 - [] ----D C:\Program Files\Maestro Learning
                O43 - CFD: 2011-05-29 - 13:05:01 - [] ----D C:\Program Files\Microsoft Analysis Services
                O43 - CFD: 2011-04-19 - 08:37:28 - [] ----D C:\Program Files\Microsoft LifeCam
                O43 - CFD: 2011-05-29 - 13:07:15 - [] ----D C:\Program Files\Microsoft Office
                O43 - CFD: 2014-07-27 - 14:13:11 - [] ----D C:\Program Files\Microsoft Silverlight
                O43 - CFD: 2011-05-29 - 13:07:14 - [] ----D C:\Program Files\Microsoft.NET
                O43 - CFD: 2012-12-08 - 09:23:08 - [] ----D C:\Program Files\MiPony
                O43 - CFD: 2014-06-17 - 21:14:10 - [] ----D C:\Program Files\Mozilla Firefox
                O43 - CFD: 2014-06-21 - 18:45:30 - [] ----D C:\Program Files\Mozilla Maintenance Service
                O43 - CFD: 2009-07-14 - 00:52:30 - [] ----D C:\Program Files\MSBuild
                O43 - CFD: 2013-03-29 - 03:00:58 - [0] ----D C:\Program Files\MSXML 4.0
                O43 - CFD: 2014-02-24 - 21:39:37 - [] ----D C:\Program Files\MyFree Codec
                O43 - CFD: 2011-04-22 - 13:37:48 - [] ----D C:\Program Files\Nero
                O43 - CFD: 2013-03-27 - 20:28:41 - [] ----D C:\Program Files\Nikon
                O43 - CFD: 2012-07-16 - 18:20:00 - [] ----D C:\Program Files\OpenOffice.org 3
                O43 - CFD: 2013-01-17 - 22:11:38 - [] ----D C:\Program Files\Ordi Scrabble
                O43 - CFD: 2012-08-11 - 20:14:23 - [] ----D C:\Program Files\PhotoFiltre
                O43 - CFD: 2014-01-30 - 20:57:46 - [] ----D C:\Program Files\QuickTime
                O43 - CFD: 2009-07-14 - 00:52:30 - [] ----D C:\Program Files\Reference Assemblies
                O43 - CFD: 2014-02-24 - 21:47:09 - [] ----D C:\Program Files\Samsung
                O43 - CFD: 2014-05-27 - 17:09:19 - [] R---D C:\Program Files\Skype
                O43 - CFD: 2013-04-07 - 16:31:50 - [] ----D C:\Program Files\Sony
                O43 - CFD: 2013-04-07 - 16:32:26 - [0] ----D C:\Program Files\Sony Ericsson
                O43 - CFD: 2011-06-02 - 09:52:08 - [] ----D C:\Program Files\Sony Media Go Install
                O43 - CFD: 2014-07-27 - 15:21:10 - [] ----D C:\Program Files\Spybot - Search & Destroy
                O43 - CFD: 2013-12-27 - 20:51:09 - [] ----D C:\Program Files\Stellarium
                O43 - CFD: 2011-09-27 - 08:51:53 - [] ----D C:\Program Files\Techlogg.com ToneShop
                O43 - CFD: 2014-06-30 - 08:42:12 - [] ----D C:\Program Files\TomTom HOME 2
                O43 - CFD: 2011-09-24 - 15:15:58 - [] ----D C:\Program Files\TomTom International B.V
                O43 - CFD: 2009-07-14 - 00:53:23 - [0] --H-D C:\Program Files\Uninstall Information
                O43 - CFD: 2013-05-16 - 06:27:10 - [] ----D C:\Program Files\uTorrent =>P2P.µTorrent
                O43 - CFD: 2011-05-12 - 13:29:23 - [] ----D C:\Program Files\VideoLAN
                O43 - CFD: 2011-08-07 - 18:20:42 - [] ----D C:\Program Files\VirtualDJ
                O43 - CFD: 2011-04-22 - 07:38:31 - [] ----D C:\Program Files\VSO
                O43 - CFD: 2013-07-11 - 03:27:52 - [] ----D C:\Program Files\Windows Defender
                O43 - CFD: 2014-07-10 - 17:45:47 - [] ----D C:\Program Files\Windows Journal
                O43 - CFD: 2013-03-08 - 08:41:12 - [] ----D C:\Program Files\Windows Live
                O43 - CFD: 2011-06-07 - 13:11:53 - [] ----D C:\Program Files\Windows Mail =>.Microsoft Corporation
                O43 - CFD: 2013-12-11 - 04:22:10 - [] ----D C:\Program Files\Windows Media Player =>.Microsoft Corporation
                O43 - CFD: 2011-04-19 - 07:33:29 - [] ----D C:\Program Files\Windows NT
                O43 - CFD: 2011-06-07 - 13:11:53 - [] ----D C:\Program Files\Windows Photo Viewer
                O43 - CFD: 2011-06-07 - 13:11:53 - [] ----D C:\Program Files\Windows Portable Devices
                O43 - CFD: 2011-06-07 - 13:11:53 - [] ----D C:\Program Files\Windows Sidebar
                O43 - CFD: 2014-07-27 - 15:58:55 - [] ----D C:\Program Files\ZHPDiag =>.Nicolas Coolman
                O43 - CFD: 2011-06-17 - 08:54:14 - [] ----D C:\Program Files\Common Files\Adobe
                O43 - CFD: 2011-04-22 - 13:37:50 - [] ----D C:\Program Files\Common Files\Ahead
                O43 - CFD: 2014-01-30 - 21:02:19 - [] ----D C:\Program Files\Common Files\Apple
                O43 - CFD: 2011-06-09 - 10:09:07 - [] ----D C:\Program Files\Common Files\Canon
                O43 - CFD: 2014-05-15 - 03:08:11 - [] ----D C:\Program Files\Common Files\DESIGNER
                O43 - CFD: 2012-11-04 - 17:40:15 - [] ----D C:\Program Files\Common Files\InstallShield
                O43 - CFD: 2013-04-20 - 08:37:10 - [] ----D C:\Program Files\Common Files\Java
                O43 - CFD: 2011-08-03 - 08:04:00 - [] ----D C:\Program Files\Common Files\microsoft shared
                O43 - CFD: 2013-03-27 - 20:28:14 - [] ----D C:\Program Files\Common Files\Nikon
                O43 - CFD: 2009-07-13 - 22:37:05 - [] ----D C:\Program Files\Common Files\Services
                O43 - CFD: 2014-05-27 - 17:09:19 - [] ----D C:\Program Files\Common Files\Skype
                O43 - CFD: 2011-06-03 - 11:02:05 - [] ----D C:\Program Files\Common Files\Sony Shared
                O43 - CFD: 2009-07-13 - 22:37:05 - [] ----D C:\Program Files\Common Files\SpeechEngines
                O43 - CFD: 2012-11-17 - 04:01:43 - [] ----D C:\Program Files\Common Files\System
                O43 - CFD: 2011-04-19 - 08:40:18 - [] ----D C:\Program Files\Common Files\Windows Live
                O43 - CFD: 2014-01-30 - 21:03:02 - [] ----D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
                O43 - CFD: 2011-06-17 - 08:54:12 - [] ----D C:\ProgramData\Adobe
                O43 - CFD: 2014-01-30 - 20:59:47 - [] ----D C:\ProgramData\Apple
                O43 - CFD: 2011-05-10 - 21:32:17 - [] ----D C:\ProgramData\Apple Computer
                O43 - CFD: 2009-07-14 - 00:53:55 - [] -SH-D C:\ProgramData\Application Data
                O43 - CFD: 2013-10-21 - 06:13:37 - [] ----D C:\ProgramData\AVAST Software
                O43 - CFD: 2011-04-19 - 07:33:29 - [] -SH-D C:\ProgramData\Bureau
                O43 - CFD: 2011-04-19 - 07:55:59 - [] --H-D C:\ProgramData\CanonBJ
                O43 - CFD: 2009-07-14 - 00:53:55 - [] -SH-D C:\ProgramData\Desktop
                O43 - CFD: 2009-07-14 - 00:53:55 - [] -SH-D C:\ProgramData\Documents
                O43 - CFD: 2013-10-09 - 20:29:35 - [] ----D C:\ProgramData\DriverGenius
                O43 - CFD: 2013-04-01 - 17:55:03 - [] ----D C:\ProgramData\DVD Shrink
                O43 - CFD: 2013-03-27 - 20:27:38 - [] ----D C:\ProgramData\EnterNHelp
                O43 - CFD: 2011-04-19 - 07:33:29 - [] -SH-D C:\ProgramData\Favoris
                O43 - CFD: 2009-07-14 - 00:53:55 - [] -SH-D C:\ProgramData\Favorites
                O43 - CFD: 2013-10-30 - 20:30:16 - [] ----D C:\ProgramData\InstallMate =>PUP.Tarma
                O43 - CFD: 2013-02-17 - 15:08:17 - [] ----D C:\ProgramData\iRinger
                O43 - CFD: 2014-07-27 - 13:52:07 - [] ----D C:\ProgramData\Malwarebytes
                O43 - CFD: 2011-12-08 - 12:24:55 - [] ----D C:\ProgramData\McAfee
                O43 - CFD: 2011-04-19 - 07:33:29 - [] -SH-D C:\ProgramData\Menu Démarrer
                O43 - CFD: 2014-01-18 - 11:32:49 - [] -S--D C:\ProgramData\Microsoft
                O43 - CFD: 2014-07-09 - 21:32:19 - [] ----D C:\ProgramData\Microsoft Help
                O43 - CFD: 2011-04-19 - 07:33:29 - [] -SH-D C:\ProgramData\Modèles
                O43 - CFD: 2012-05-04 - 18:28:56 - [] ----D C:\ProgramData\Mozilla
                O43 - CFD: 2013-03-27 - 20:26:58 - [] ----D C:\ProgramData\Nature
                O43 - CFD: 2013-04-01 - 16:22:11 - [] ----D C:\ProgramData\Nikon
                O43 - CFD: 2013-03-27 - 20:27:38 - [] ----D C:\ProgramData\PDEs
                O43 - CFD: 2013-03-27 - 20:26:58 - [] ----D C:\ProgramData\Perl
                O43 - CFD: 2014-02-24 - 21:46:36 - [] ----D C:\ProgramData\Samsung
                O43 - CFD: 2014-05-27 - 17:09:21 - [] ----D C:\ProgramData\Skype
                O43 - CFD: 2011-06-02 - 20:58:08 - [] ----D C:\ProgramData\Sony Corporation
                O43 - CFD: 2013-04-07 - 16:32:28 - [0] ----D C:\ProgramData\Sony Ericsson
                O43 - CFD: 2014-07-27 - 15:20:18 - [] ----D C:\ProgramData\Spybot - Search & Destroy
                O43 - CFD: 2009-07-14 - 00:53:55 - [] -SH-D C:\ProgramData\Start Menu
                O43 - CFD: 2013-09-07 - 12:24:53 - [] ----D C:\ProgramData\SummerSoft
                O43 - CFD: 2011-06-21 - 23:42:00 - [] ----D C:\ProgramData\Sun
                O43 - CFD: 2013-03-27 - 20:26:22 - [] ----D C:\ProgramData\Tables
                O43 - CFD: 2009-07-14 - 00:53:55 - [] -SH-D C:\ProgramData\Templates
                O43 - CFD: 2011-09-24 - 15:16:19 - [] ----D C:\ProgramData\TomTom
                O43 - CFD: 2013-03-27 - 20:27:38 - [] ----D C:\ProgramData\Ultima_T15
                O43 - CFD: 2011-04-19 - 12:26:44 - [] ----D C:\ProgramData\VirtualizedApplications
                O43 - CFD: 2011-04-27 - 21:03:28 - [] ----D C:\ProgramData\vsosdk
                O43 - CFD: 2011-05-10 - 21:32:36 - [] ----D C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
                O43 - CFD: 2013-06-25 - 12:06:42 - [0] ----D C:\Users\Lionel\AppData\Roaming\.minecraft
                O43 - CFD: 2011-05-05 - 10:20:18 - [] ----D C:\Users\Lionel\AppData\Roaming\Adobe
                O43 - CFD: 2012-04-09 - 10:49:08 - [] ----D C:\Users\Lionel\AppData\Roaming\AnvSoft
                O43 - CFD: 2013-02-17 - 16:54:59 - [] ----D C:\Users\Lionel\AppData\Roaming\Apple Computer
                O43 - CFD: 2013-03-27 - 20:37:29 - [] ----D C:\Users\Lionel\AppData\Roaming\ArcSoft
                O43 - CFD: 2011-06-09 - 11:50:06 - [] ----D C:\Users\Lionel\AppData\Roaming\Audacity
                O43 - CFD: 2013-10-22 - 08:01:33 - [] ----D C:\Users\Lionel\AppData\Roaming\AVAST Software
                O43 - CFD: 2012-11-16 - 20:43:46 - [] ----D C:\Users\Lionel\AppData\Roaming\BudgetExpress 3
                O43 - CFD: 2011-05-31 - 14:07:49 - [] ----D C:\Users\Lionel\AppData\Roaming\dvdcss
                O43 - CFD: 2012-05-05 - 08:45:43 - [] ----D C:\Users\Lionel\AppData\Roaming\GetRightToGo
                O43 - CFD: 2011-04-19 - 07:33:46 - [] ----D C:\Users\Lionel\AppData\Roaming\Identities
                O43 - CFD: 2011-04-19 - 07:54:55 - [] ----D C:\Users\Lionel\AppData\Roaming\Macromedia
                O43 - CFD: 2014-07-27 - 13:52:07 - [0] ----D C:\Users\Lionel\AppData\Roaming\Malwarebytes
                O43 - CFD: 2009-07-14 - 05:00:41 - [0] ----D C:\Users\Lionel\AppData\Roaming\Media Center Programs
                O43 - CFD: 2013-08-06 - 09:58:17 - [] -S--D C:\Users\Lionel\AppData\Roaming\Microsoft
                O43 - CFD: 2012-12-23 - 11:17:48 - [] ----D C:\Users\Lionel\AppData\Roaming\Mipony
                O43 - CFD: 2011-04-19 - 09:20:50 - [] ----D C:\Users\Lionel\AppData\Roaming\Mozilla
                O43 - CFD: 2012-06-21 - 16:58:18 - [] ----D C:\Users\Lionel\AppData\Roaming\OpenOffice.org
                O43 - CFD: 2012-08-11 - 20:48:29 - [] ----D C:\Users\Lionel\AppData\Roaming\PhotoFiltre
                O43 - CFD: 2014-02-24 - 22:23:20 - [] ----D C:\Users\Lionel\AppData\Roaming\Samsung
                O43 - CFD: 2014-07-28 - 16:34:11 - [] ----D C:\Users\Lionel\AppData\Roaming\Skype
                O43 - CFD: 2011-05-29 - 13:13:23 - [] ----D C:\Users\Lionel\AppData\Roaming\SoftGrid Client
                O43 - CFD: 2011-06-02 - 09:58:08 - [] ----D C:\Users\Lionel\AppData\Roaming\Sony
                O43 - CFD: 2013-12-27 - 21:16:37 - [] ----D C:\Users\Lionel\AppData\Roaming\Stellarium
                O43 - CFD: 2013-01-17 - 21:37:28 - [] ----D C:\Users\Lionel\AppData\Roaming\System
                O43 - CFD: 2012-04-24 - 13:30:33 - [] ----D C:\Users\Lionel\AppData\Roaming\TeamViewer
                O43 - CFD: 2011-09-24 - 15:16:10 - [] ----D C:\Users\Lionel\AppData\Roaming\TomTom
                O43 - CFD: 2011-04-19 - 10:14:40 - [0] ----D C:\Users\Lionel\AppData\Roaming\TP
                O43 - CFD: 2014-07-27 - 12:43:10 - [] ----D C:\Users\Lionel\AppData\Roaming\uTorrent =>P2P.µTorrent
                O43 - CFD: 2014-07-10 - 21:36:15 - [] ----D C:\Users\Lionel\AppData\Roaming\vlc
                O43 - CFD: 2014-07-06 - 09:29:31 - [] ----D C:\Users\Lionel\AppData\Roaming\Vso
                O43 - CFD: 2011-04-24 - 21:45:22 - [] ----D C:\Users\Lionel\AppData\Roaming\Windows Live Writer
                O43 - CFD: 2014-07-28 - 16:37:15 - [] ----D C:\Users\Lionel\AppData\Roaming\ZHP =>.Nicolas Coolman
                O43 - CFD: 2011-06-09 - 10:13:36 - [0] ----D C:\Users\Lionel\AppData\Roaming\ZoomBrowser EX
                O43 - CFD: 2014-01-26 - 09:37:09 - [] ----D C:\Users\Lionel\AppData\Local\Adobe
                O43 - CFD: 2011-05-10 - 21:31:25 - [] ----D C:\Users\Lionel\AppData\Local\Apple
                O43 - CFD: 2013-06-07 - 21:18:19 - [] ----D C:\Users\Lionel\AppData\Local\Apple Computer
                O43 - CFD: 2011-04-19 - 07:33:41 - [] -SH-D C:\Users\Lionel\AppData\Local\Application Data
                O43 - CFD: 2014-06-30 - 08:35:13 - [] ----D C:\Users\Lionel\AppData\Local\Downloaded Installations
                O43 - CFD: 2013-12-01 - 18:01:36 - [0] ----D C:\Users\Lionel\AppData\Local\ElevatedDiagnostics
                O43 - CFD: 2014-06-15 - 19:25:25 - [] -SH-D C:\Users\Lionel\AppData\Local\EmieSiteList
                O43 - CFD: 2014-06-15 - 19:25:25 - [] -SH-D C:\Users\Lionel\AppData\Local\EmieUserList
                O43 - CFD: 2011-04-19 - 07:54:53 - [] ----D C:\Users\Lionel\AppData\Local\Google
                O43 - CFD: 2011-04-19 - 07:33:41 - [] -SH-D
                1. lilidurhone Contributeur sécurité
                  * Pour héberger le rapport, rends toi sur cjoint.com
                  * Clique sur choisissez un fichier va chercher le rapport dans ton PC.

                  * Le rapport est hébergé:
                  - Pour XP : C:\Documents and Settings\username\Local Settings\Application Data\ZHP
                  - Depuis Vista : C:\Users\username\AppData\Roaming\ZHP

                  * Une fois le rapport trouvé, sélectionne le, et clique sur Ouvrir

                  * Choisis le type de diffusion (illimitée ou 21 jours)
                  * Puis cliques sur créer le lien cjoint

                  * Une fois que tu auras obtenu le lien copies colle dans ta prochaine réponse

                  * Pour t'aider https://www.commentcamarche.net/faq/29493-utiliser-cjoint-pour-heberger-des-fichiers
                  2. lilidurhone Contributeur sécurité
                    * Télécharge sur le bureau RogueKiller

                    * Quitte tous tes programmes en cours.

                    * Sous Vista/Seven et windows 8 , clique droit -> lancer en tant qu'administrateur

                    * Sinon lance simplement RogueKiller.exe

                    * Patiente pendant le pre-scan, puis clique sur le bouton Scan

                    * Un rapport RKreport.txt a du se créer sur le bureau, poste-le en l'hébergeant sur cjoint

                    * Pour t'aider https://www.commentcamarche.net/faq/29493-utiliser-cjoint-pour-heberger-des-fichiers

                    Note : Si le programme a été bloqué, ne pas hésiter à essayer plusieurs fois.
                    2. lilidurhone Contributeur sécurité
                      Décoches avant suppression

                      [Suspicious.Path] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mbr -> TROUVÉ
                      [Suspicious.Path] HKEY_LOCAL_MACHINE\System\ControlSet001\Services\mbr -> TROUVÉ

                      [PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> TROUVÉ
                      [PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> TROUVÉ
                      2. lilidurhone Contributeur sécurité
                        * Télécharge Junkware Removal Tool à cette adresse (ne clique pas sur télécharger, le téléchargement va débuter automatiquement) : https://www.bleepingcomputer.com/download/junkware-removal-tool/dl/131/

                        * Enregistre-le sur ton bureau.

                        * Ferme toutes les applications en cours.

                        * Ouvre JRT.exe et appuie sur Entrée : si tu es sous Windows Vista, 7 ou 8, ouvre-le en faisant : clic droit => Exécuter en tant qu'administrateur.

                        * Patiente le temps que l'outil travaille : le bureau va disparaître quelques instants, c'est tout à fait normal.

                        * À la fin de l'analyse, un rapport nommé JRT.txt va s'ouvrir. Héberge-le comme ceci et poste le lien obtenu dans ta prochaine réponse.

                        Tutoriel : http://www.forum-entraide-informatique.com/support/junkware-removal-tool-tutoriel-t8260.html
                        • 1
                        • 2

                        Discussions similaires

                        Adwcleaner Mac
                        Weel

                        21 réponses
                        ADW Cleaner, un substitut gratuit pour Mac ?
                        Fanny0604

                        1 réponse
                        Softonic,est-ce un virus ?
                        techmel1

                        6 réponses
                        Chrome://newtab
                        Nova

                        14 réponses
                        Désinstaller Softonic
                        Diguimette

                        5 réponses