XP familliale sp3 - grosse bêtise - combofix

Bonjour, bonsoir

Flinguer un pc en 6 étapes - mode d'emploi :

Je crois que j'ai fait ein a grosseuh bêtise en voulant virer un virus qui me prenait la tête :

1) Ce virus empêchait mon lecteur CD de fonctionner et donc de booter sur un nouveau windows (malgré les pilotes à jour)

2) Le boot USB ne fonctionne pas non plus

3) Nettoyage complet de l'ordi en utilisant : Spybot, Malwarebyte, Avast (gratuit)

4) Rien à faire : Lecteur toujours en panne - pilotes à jour - plus aucune menace détectée

5) ComboFix (sic - mais quel idiot je suis !!)

6) Résultat : Windows installer ne marche plus, et à même disparu de ma liste de services Windows - c'est un version familiale de windows du coup je ne peux pas accéder à tous les services

Conclusion : je ne peux plus rien installer sur ce pc - impossible de booter sur un nouveau Windows ; boot CD et USB ne fonctionnent toujours pas)- La récupération système, paramètre d'usine, ne fonctionne pas non plus ( "BIP" sonore quand je confirme mon choix). Lors d'un tentative de boot, j'ai même constaté qu'il voulait démarrer sur une vieille partition Windows 98 (?!) ... Je crois que le virus est encore là, et rigole bien de moi :o)


Point de restauration : est-ce utile de préciser à quel point je suis un crétin ?


Question : Aurais-je donc réussi à flinguer mon premier PC ?

Config :
(PC portable) ASUSTEK L5D
AMD Athlon 64 - 3000+
1,79 Ghz - 512 Mo de RAM - 500g de DD

CD/DVD lecteur-graveur : Pionner DVD RW - DVR-K14 AS (version 1.0)


Voici le dernier rapport (complet, navré c'est très long) ZHPDiag by Coolman :

~ Rapport de ZHPDiag v2015.2.2.15 - Nicolas Coolman (02/02/2015)
~ Lancé par perso (04/02/2015 17:52:06)
~ Facebook : https://www.facebook.com/nicolascoolman1
~ Adresse du Forum https://nicolascoolman.eu
~ Traduit par Nicolas Coolman
~ Etat de la version : Version à jour.
~ Liste blanche : Désactivée par l'utilisateur
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Not Found


---\\ Navigateurs Internet
MSIE: Internet Explorer v8.0.6001.18702
MFIE: Mozilla Firefox 35.0.1 (Defaut)

---\\ Informations sur les produits Windows
~ Langage: Français
Windows Automatic Updates : OK
Windows Genuine Advantage : OK
Microsoft Windows XP, 32-bit Service Pack 3 (Build 2600)

---\\ Logiciels de protection du système
Avast Free Antivirus v10.0.2208
Malwarebytes' Anti-Malware
Malwarebytes Anti-Malware version 2.0.4.1028
Spybot - Search & Destroy v2.3.39

---\\ Logiciels d'optimisation du système
CCleaner v5.02

---\\ Logiciels de partage PeerToPeer

---\\ Surveillance de Logiciels
Adobe Flash Player 16 ActiveX
Adobe Reader XI
Java 7 Update 75

---\\ Informations sur le système
~ Processor: x86 Family 15 Model 4 Stepping 10, AuthenticAMD
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 510 MB (17% free)
System Restore: Désactivé (Disabled)
System drive C: has 10 GB (30%) free of 32 GB

---\\ Mode de connexion au système
~ Computer Name: NOM-4331E261681
~ User Name: perso
~ All Users Names: SUPPORT_388945a0, perso, HelpAssistant, Administrateur,
~ Unselected Option: None
Logged in as Administrator

---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Documents and Settings\perso\Application Data\ZHP\
~ %AppData% : C:\Documents and Settings\perso\Application Data\
~ %Desktop% : C:\Documents and Settings\perso\Bureau\
~ %Favorites% : C:\Documents and Settings\perso\Favoris\
~ %LocalAppData% : C:\Documents and Settings\perso\Local Settings\Application Data\
~ %StartMenu% : C:\Documents and Settings\perso\Menu Démarrer\
~ %Windir% : C:\WINDOWS\
~ %System% : C:\WINDOWS\system32\

---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 10 Go of 32 Go)
D: Hard drive, Flash drive, Thumb drive (Free 21 Go of 22 Go)

E: CD-ROM drive (Not Inserted) (Edit : si, si ... je vous jure qu'il est "inserted")

F: Floppy drive, Flash card reader, USB Key (Not Inserted)
(Edit : la souris fonctionne impec)

G: Floppy drive, Flash card reader, USB Key (Not Inserted)
(Edit : le lecteur fonctionne, mais je n'arrive pas à booter dessus)


---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
~ Security Center: 45 Scanned in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.14/04/2008 - 04:34:04.) -- C:\WINDOWS\Explorer.exe [1037824]
[MD5.E1948B1F45A176FB4A0251446A5AE86D] - (.Microsoft Corporation - Internet Extensions for Win32.) (.06/03/2014 - 18:58:52.) -- C:\WINDOWS\system32\wininet.dll [920064]
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.14/04/2008 - 04:34:28.) -- C:\WINDOWS\system32\Winlogon.exe [512000]
[MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.17/08/2011 - 15:49:54.) -- C:\WINDOWS\system32\Drivers\AFD.sys [138496]
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/04/2008 - 20:40:30.) -- C:\WINDOWS\system32\Drivers\atapi.sys [96512]
[MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/04/2008 - 21:14:22.) -- C:\WINDOWS\system32\Drivers\Cdfs.sys [63744]
[MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.13/04/2008 - 20:40:46.) -- C:\WINDOWS\system32\Drivers\Cdrom.sys [62976]
[MD5.31F923EB2170FC172C81ABDA0045D18C] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) (.14/04/2008 - 03:57:38.) -- C:\WINDOWS\system32\Drivers\Fips.sys [44672]
[MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.13/04/2008 - 18:36:06.) -- C:\WINDOWS\system32\Drivers\HDAudBus.sys [144384]
[MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - (.Microsoft Corporation - Pilote de port i8042.) (.14/04/2008 - 04:00:52.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [54144]
[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.13/04/2008 - 20:40:58.) -- C:\WINDOWS\system32\Drivers\Imapi.sys [42112]
[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.13/04/2008 - 20:57:16.) -- C:\WINDOWS\system32\Drivers\IpNat.sys [152832]
[MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.13/04/2008 - 21:19:42.) -- C:\WINDOWS\system32\Drivers\IPSec.sys [75264]
[MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.15/07/2011 - 15:29:32.) -- C:\WINDOWS\system32\Drivers\MRxSmb.sys [456320]
[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.13/04/2008 - 21:21:00.) -- C:\WINDOWS\system32\Drivers\netBT.sys [162816]
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.13/04/2008 - 21:15:54.) -- C:\WINDOWS\system32\Drivers\ntfs.sys [574976]
[MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/04/2008 - 04:09:40.) -- C:\WINDOWS\system32\Drivers\Parport.sys [80384]
[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.13/04/2008 - 21:19:44.) -- C:\WINDOWS\system32\Drivers\Rasl2tp.sys [51328]
[MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.13/04/2008 - 20:32:52.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [196224]
[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) (.14/04/2008 - 03:57:34.) -- C:\WINDOWS\system32\Drivers\redbook.sys [58752]
[MD5.46DE1126684369BACE4849E4FC8C43CA] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.14/04/2008 - 03:56:04.) -- C:\WINDOWS\system32\Drivers\volsnap.sys [53376]
~ Generic Processes: Scanned in 00mn 03s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 2/62
~ Mes musiques (My Musics) : 1/2
~ Mes Favoris (My Favorites) : 1/26
~ Mes Documents (My Documents) : 1/195
~ Mon Bureau (My Desktop) : 0/91
~ Menu demarrer (Programs) : 1/32
~ Hidden Files: Scanned in 00mn 00s



---\\ Processus lancés
[MD5.E3F7EC811923F3F1A77B185F22638E5E] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344] [PID.1864]
[MD5.0F6D872FD048D437DCBF5C1A80194886] - (...) -- C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe [98304] [PID.248]
[MD5.3DE014DFC14E8530F3A85572E2763446] - (.C-Dilla Ltd - C-Dilla RTS Service.) -- C:\WINDOWS\system32\drivers\CDAC11BA.exe [39936] [PID.272]
[MD5.7657C36428671E6405BC3AFF0FF2D83F] - (.Oracle Corporation - Java Quick Starter Service.) -- C:\Program Files\Java\jre7\bin\jqs.exe [182696] [PID.352]
[MD5.0BB29DE40C9D9529793DCDB59A43CF5B] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160] [PID.404]
[MD5.5F82D8188B370B0CF185D4AE2B9B4A0E] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [969016] [PID.612]
[MD5.E4534BCCDD1EA7A7A256BB9D6688A5FC] - (.Nero AG - NeroUpdate.) -- C:\Program Files\Nero\Update\NASvc.exe [490280] [PID.636]
[MD5.17DF01717058EAD5298EB3F1851D3778] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 56.77.) -- C:\WINDOWS\system32\nvsvc32.exe [110659] [PID.652]
[MD5.E0297D369962F00E52BBACE14A554DF5] - (...) -- C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe [118784] [PID.676]
[MD5.3C13F26A4766752314A5413038BD86B4] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes Anti-Malware\mbam.exe [7229752] [PID.2036]
[MD5.D91D8344E73283999777083BF17D54E2] - (.Safer-Networking Ltd. - Spybot-S&D 2 Background update service.) -- C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [2081752] [PID.180]
[MD5.44ADDA5FB88EE14F57A246285775AC2F] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112] [PID.1372]
[MD5.9A1F3AEA8D61AA67D90F1B336C00984E] - (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe [5496600] [PID.3300]
[MD5.2E0B0A051FFAA86E358465BB0880D453] - (.Microsoft Corporation - Windows Update.) -- C:\WINDOWS\system32\wuauclt.exe [53784] [PID.2680]
[MD5.BE52EDAADE29AC59681B6CD60E257C92] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8158720] [PID.3616]
~ Processes Running: Scanned in 00mn 14s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Documents and Settings\perso\Application Data\Mozilla\Firefox\Profiles\03gb11pg.default\prefs.js
M3 - MFPP: Plugins - [perso] -- C:\Documents and Settings\perso\Application Data\Mozilla\Firefox\Profiles\03gb11pg.default\searchplugins\google-avast.xml
M0 - MFSP: prefs.js [perso - 03gb11pg.default] https://www.google.com/?gws_rd=ssl
M2 - MFEP: Extension [perso - 03gb11pg.default] {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi =>.Adblock Plus Extension Mozilla Firefox
P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.75.2] - (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.75.2] - (.Oracle Corporation - Next Generation Java Plug-in 10.75.2 for Mozilla browsers.) -- C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 11.0.8.) -- C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
P2 - FPN: [HKCU] [@adobe.com/Acrobat,version=5.1] - (.Adobe Systems Inc. - Adobe Acrobat Plug-In Version 5.10 for Netscape.) -- C:\Program Files\Adobe\Acrobat 5.0\Reader\Browser\nppdf32.dll
~ Firefox Browser: 10 Scanned in 00mn 01s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.microsoft.com/fr-fr/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = https://www.msn.com/fr-fr/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.google.com/?gws_rd=ssl
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Adobe Systems Inc. - Adobe Acrobat Plug-In Version 5.10 for Netscape.) (No version) -- (.not file.)
R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2
~ IE Browser: 13 Scanned in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\WINDOWS\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Keys: Scanned in 00mn 00s



---\\ Hosts file redirection (O1)
~ Le fichier hôte est sain (The hosts file is clean) (0)
~ Hosts File: Scanned in 00mn 00s



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: Adblock Plus for IE Browser Helper Object - {FFCB3198-32F3-4E8B-9539-4324694ED664} . (.Adblock Plus - Adblock Plus Module.) -- C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll
~ BHO: 10 Scanned in 00mn 01s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Google Toolbar - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{01E04581-4EEE-11D0-BFE9-00AA005B4383} Clé orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{0E5CBF21-D15F-11D0-8301-00AA005B4383} Clé orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Clé orpheline
~ Toolbar: Scanned in 00mn 00s



---\\ Applications lancées au démarrage du système (O4)
O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32\NvCpl.dll =>.NVIDIA Corporation
O4 - HKLM\..\Run: [nwiz] . (.NVIDIA Corporation - NVIDIA nView Wizard, Version 56.77.) -- C:\WINDOWS\system32\nwiz.exe
O4 - HKLM\..\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe =>.Piriform Ltd
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-21-4177085214-2812688077-991643937-1005\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-21-4177085214-2812688077-991643937-1005\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe =>.Piriform Ltd
~ Application: Scanned in 00mn 02s



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} -- Clé orpheline
O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
~ IE Extra Buttons: Scanned in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll =>.Microsoft Corporation
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll =>.Microsoft Corporation
~ Winsock: 3 Scanned in 00mn 00s



---\\ Piratage de l'Option 'Rétablir les paramètres Web' (O14)
O14 - IERESET.INF: START_PAGE_URL=START_PAGE_URL=http://www.asus.com
~ IE Paramètres WEB: Scanned in 00mn 00s



---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: Microsoft XML Parser for Java - (Microsoft XML Parser for Java) - (.not file.) - file:\\C:\WINDOWS\Java\classes\xmldso.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} ((no name)) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
~ Objets ActiveX: Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{87C5CF64-2E1A-4860-AB5D-843427231709}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{87C5CF64-2E1A-4860-AB5D-843427231709}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{87C5CF64-2E1A-4860-AB5D-843427231709}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
~ Domain: Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll
O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
~ Protocole Additionnel: Scanned in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\WINDOWS\system32\cscdll.dll
O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\system32\dimsntfy.dll
O20 - Winlogon Notify: LBTWlgn . (.Logitech, Inc. - Logitech Bluetooth Service.) -- c:\program files\fichiers communs\logishrd\bluetooth\LBTWlgn.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll
O20 - Winlogon Notify: SDWinLogon . (...) -- SDWinLogon.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: WgaLogon . (.Microsoft Corporation - Notifications Windows Genuine Advantage.) -- C:\WINDOWS\system32\WgaLogon.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
~ Winlogon: Scanned in 00mn 00s



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
~ SSODL: 4 Scanned in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Adobe Active File Monitor (AdobeActiveFileMonitor) . (...) - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: C-DillaCdaC11BA (C-DillaCdaC11BA) . (.C-Dilla Ltd - C-Dilla RTS Service.) - C:\WINDOWS\system32\drivers\CDAC11BA.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc
O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Oracle Corporation - Java Quick Starter Service.) - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: C:\Program Files\Nero\Update\NASvc.exe (NAUpdate) . (.Nero AG - NeroUpdate.) - C:\Program Files\Nero\Update\NASvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 56.77.) - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Photoshop Elements Device Connect (PhotoshopElementsDeviceConnect) . (...) - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) . (.Safer-Networking Ltd. - Spybot-S&D 2 Scanner Service.) - C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) . (.Safer-Networking Ltd. - Spybot-S&D 2 Background update service.) - C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) . (.Safer-Networking Ltd. - Windows Security Center integration..) - C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
~ Services: 13 Scanned in 00mn 29s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
O24 - Desktop General: BackupWallPaper - .(...) - C:\Documents and Settings\perso\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop General: WallPaper - .(...) - C:\Documents and Settings\perso\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
~ Desktop Component: 4 Scanned in 00mn 00s



---\\ Enumère les données de BootExecute (BEX) (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (sdnclean.exe) - File not found
~ BEX: 2 Scanned in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
O39 - APT: - (..) -- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job [1002]
O39 - APT: - (..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1cc070c55b56af0.job [1052]
O39 - APT: - (..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job [1056]
O39 - APT: - (..) -- C:\WINDOWS\Tasks\Notification de fin de service de Microsoft Windows XP -mensuellement.job [216]
O39 - APT: - (..) -- C:\WINDOWS\Tasks\Notification de fin de service de Microsoft Windows XP - à la connexion.job [222]
O39 - APT: - (..) -- C:\WINDOWS\Tasks\avast! Emergency Update.job [364]
O39 - APT: - (..) -- C:\WINDOWS\Tasks\Check for updates (Spybot - Search & Destroy).job [644]
O39 - APT: - (..) -- C:\WINDOWS\Tasks\Refresh immunization (Spybot - Search & Destroy).job [616]
O39 - APT: - (..) -- C:\WINDOWS\Tasks\Scan the system (Spybot - Search & Destroy).job [446]
~ Scheduled Task: 9 Scanned in 00mn 00s



---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Mise à jour de la version d'Internet Explorer - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} . (.Microsoft Corporation - IE Per User Active Setup Uninstall Utility.) -- C:\WINDOWS\system32\ieudinit.exe
O40 - ASIC: Lecteur Windows Media - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Utilitaire d'installation du Lecteur Windows Media Microsoft.) -- C:\WINDOWS\inf\unregmp2.exe =>.Microsoft Corporation
O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\WINDOWS\system32\ie4uinit.exe.mui
O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - IEAK branding.) -- C:\WINDOWS\system32\iedkcs32.dll
O40 - ASIC: Outlook Express - >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} . (.Microsoft Corporation - Windows NT User Data Migration Tool.) -- C:\WINDOWS\system32\shmgrate.exe =>.Microsoft Corporation
O40 - ASIC: Microsoft VM - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Microsoft Corporation - Microsoft® VM.) -- C:\WINDOWS\system32\msjava.dll
O40 - ASIC: Macromedia Shockwave Director 8.5 - {166B1BCA-3F9C-11CF-8075-444553540000} . (.Macromedia, Inc. - Shockwave ActiveX Control.) -- C:\WINDOWS\system32\Macromed\Director\SwDir.dll
O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} . (.Microsoft Corporation - Windows Media 6.4 Player Shim.) -- C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: Lecteur Windows Media Microsoft 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media 6.4 Player Shim.) -- C:\WINDOWS\system32\wmpdxm.dll =>.Microsoft Corporation
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\WINDOWS\system32\themeui.dll
O40 - ASIC: Microsoft Outlook Express 6 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Bibliothèque d'installation Outlook Express.) -- C:\Program Files\Outlook Express\setup50.exe =>.Microsoft Corporation
O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (...) -- C:\WINDOWS\INF\msnetmtg.inf
O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (...) -- C:\WINDOWS\INF\msmsgs.inf
O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\WINDOWS\system32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (...) -- C:\WINDOWS\INF\wmp.inf =>.Microsoft Corporation
O40 - ASIC: Carnet d'adresses 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} . (.Microsoft Corporation - Bibliothèque d'installation Outlook Express.) -- C:\Program Files\Outlook Express\setup50.exe =>.Microsoft Corporation
O40 - ASIC: Mise à jour du Bureau Windows - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\WINDOWS\system32\ie4uinit.exe.mui
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\WINDOWS\system32\mscories.dll
O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 16.0 r0.) -- C:\WINDOWS\system32\Macromed\Flash\Flash32_16_0_0_296.ocx
O40 - ASIC: Installed Component - S-1-5-21-4177085214-2812688077-991643937-1005 - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} -- Not Hexadécimal CLSID
~ Active Setup: 21 Scanned in 00mn 04s



---\\ Pilotes lancés au démarrage du système (O41)
O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
O41 - Driver: (AmdK8) . (.Advanced Micro Devices - AMD Processor Driver.) - C:\WINDOWS\system32\DRIVERS\AmdK8.sys
O41 - Driver: (asuskbnt) . (.ASUSTeK COMPUTER INC. - ASUS Hot-Key filter driver..) - C:\WINDOWS\system32\drivers\asuskbnt.sys
O41 - Driver: (aswRdr) . (.AVAST Software - avast! TDI Redirect Driver.) - C:\WINDOWS\system32\drivers\aswRdr.sys
O41 - Driver: (aswSnx) . (.AVAST Software - avast! Virtualization Driver.) - C:\WINDOWS\system32\drivers\aswSnx.sys
O41 - Driver: (aswSP) . (.AVAST Software - avast! self protection module.) - C:\WINDOWS\system32\drivers\aswSP.sys
O41 - Driver: (aswTdi) . (.AVAST Software - avast! TDI Filter Driver.) - C:\WINDOWS\system32\drivers\aswTdi.sys
O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys
O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys
O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys
O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys
O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys
O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS\netbios.sys
O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS\netbt.sys
O41 - Driver: (Processor) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\system32\DRIVERS\processr.sys
O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERS\rasacd.sys
O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\system32\DRIVERS\redbook.sys
O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\WINDOWS\system32\DRIVERS\serial.sys
O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS\tcpip.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS\termdd.sys
O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
O41 - Driver: Windows Socket 2.0 Non-IFS Service Provider Support Environment (WS2IFSL) . (.Microsoft Corporation - Winsock2 IFS Layer.) - C:\WINDOWS\system32\drivers\ws2ifsl.sys
~ Drivers: 78 Scanned in 00mn 07s



---\\ Logiciels installés (O42)
O42 - Logiciel: 200 jeux de réussite - (...) [HKLM] -- 200 jeux de réussite
O42 - Logiciel: ABBYY FineReader 5.0 Sprint - (.ABBYY Software House.) [HKLM] -- {D1696920-9794-4BBC-8A30-7A88763DE5A2}
O42 - Logiciel: ABBYY FineReader 6.0 - (.ABBYY Software House.) [HKLM] -- {AF600F7B-67A7-48D9-BA3B-0FF97F35F970}
O42 - Logiciel: AMD Processor Driver - (.AMD.) [HKLM] -- {C151CE54-E7EA-4804-854B-F515368B0798}
O42 - Logiciel: ASUS Enhanced Display Driver For Notebook - (.ASUSTeK COMPUTER INC..) [HKLM] -- InstallShield_{315ACD04-BCEB-478B-9B1D-5431D0E6CB11}
O42 - Logiciel: ASUS WLAN Card Utilities/Driver - (...) [HKLM] -- {8F722FA9-B994-4C9B-B292-FD32D6206EDF}
O42 - Logiciel: ATK0100 ACPI UTILITY - (...) [HKLM] -- Hcontrol
O42 - Logiciel: Adblock Plus pour IE (32-bits) - (.Eyeo GmbH.) [HKLM] -- {F1C06581-0924-4A88-A519-202F8D9178C0}
O42 - Logiciel: Adobe Flash Player 16 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Photoshop Elements 3.0 - (.Adobe Systems, Inc..) [HKLM] -- {851C67EF-068A-4060-9EF5-2E3DDCD68382} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Reader XI (11.0.08) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AB0000000001}
O42 - Logiciel: Analyseur et SDK MSXML 4.0 SP2 - (.Microsoft Corporation.) [HKLM] -- {716E0306-8318-4364-8B8F-0CC4E9376BAC}
O42 - Logiciel: Avast Free Antivirus - (.AVAST Software.) [HKLM] -- avast
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
O42 - Logiciel: Cosmo Player 2.1 (38329) - (...) [HKLM] -- Cosmo Player 2.1
O42 - Logiciel: EPSON Copy Utility 3 - (...) [HKLM] -- {67EDD823-135A-4D59-87BD-950616D6E857}
O42 - Logiciel: EPSON Scan - (...) [HKLM] -- EPSON Scanner
O42 - Logiciel: EPSON Smart Panel - (...) [HKLM] -- {6C11D561-620B-47DA-A693-4C597F3CDF40}
O42 - Logiciel: Encyclopaedia Britannica 2008 Ultimate Reference Suite - (.Encyclopaedia Britannica, Inc..) [HKLM] -- Encyclopaedia Britannica 2008 Ultimate Reference Suite
O42 - Logiciel: Encyclopédie Universelle Larousse - (...) [HKLM] -- {666ADC9C-9C34-4B56-8B22-0419F257FB80}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: High-Definition Video Playback 10 - (.Nero AG.) [HKLM] -- {237CCB62-8454-43E3-B158-3ACD0134852E}
O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5
O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5
O42 - Logiciel: Java 7 Update 75 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F03217075FF}
O42 - Logiciel: L'Amerzone - (...) [HKLM] -- L'Amerzone
O42 - Logiciel: Larousse Multilingue - (...) [HKLM] -- {A0E8792C-11E1-42EF-844C-EB87E3AADD19}
O42 - Logiciel: Logitech SetPoint 6.65 - (.Logitech.) [HKLM] -- sp6
O42 - Logiciel: MSXML 4.0 SP2 (KB927978) - (.Microsoft Corporation.) [HKLM] -- {37477865-A3F1-4772-AD43-AAFC6BCFF99F}
O42 - Logiciel: MSXML 4.0 SP2 (KB936181) - (.Microsoft Corporation.) [HKLM] -- {C04E32E0-0416-434D-AFB9-6969D703A9EF}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM] -- {2188D50C-BA8A-47AD-8477-17B5BE12532D}
O42 - Logiciel: Malwarebytes Anti-Malware version 2.0.4.1028 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes Anti-Malware_is1
O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Marvell Miniport Driver - (.Marvell.) [HKLM] -- Marvell Miniport Driver
O42 - Logiciel: Microsoft Internationalized Domain Names Mitigation APIs - (.Microsoft Corporation.) [HKLM] -- IDNMitigationAPIs
O42 - Logiciel: Microsoft Kernel-Mode Driver Framework Feature Pack 1.9 - (.Microsoft Corporation.) [HKLM] -- Wdf01009
O42 - Logiciel: Microsoft National Language Support Downlevel APIs - (.Microsoft Corporation.) [HKLM] -- NLSDownlevelMapping
O42 - Logiciel: Microsoft Primary Interoperability Assemblies 2005 - (.Microsoft Corporation.) [HKLM] -- {D24DB8B9-BB6C-4334-9619-BA1C650E13D3}
O42 - Logiciel: Microsoft Works 7.0 - (.Microsoft Corporation.) [HKLM] -- {64D114CE-4234-45C2-B60A-2B07D5A48F72}
O42 - Logiciel: Monopoly - (...) [HKLM] -- Monopoly
O42 - Logiciel: Mozilla Firefox 35.0.1 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 35.0.1 (x86 fr)
O42 - Logiciel: NVIDIA Display Driver - (...) [HKLM] -- NVIDIA Display Driver
O42 - Logiciel: NVIDIA Drivers - (...) [HKLM] -- NVIDIA Drivers
O42 - Logiciel: Nero 10 Menu TemplatePack Basic - (.Nero AG.) [HKLM] -- {63AA3EAB-23BB-48B2-9AD0-44F878075604}
O42 - Logiciel: Nero 10 Movie ThemePack Basic - (.Nero AG.) [HKLM] -- {F5CB822F-B365-43D1-BCC0-4FDA1A2017A7}
O42 - Logiciel: Nero BackItUp 10 - (.Nero AG.) [HKLM] -- {68AB6930-5BFF-4FF6-923B-516A91984FE6}
O42 - Logiciel: Nero BackItUp 10 Help (CHM) - (.Nero AG.) [HKLM] -- {08C8666B-C502-4AB3-B4CB-D74AC42D14FE}
O42 - Logiciel: Nero BurnRights 10 - (.Nero AG.) [HKLM] -- {943CFD7D-5336-47AF-9418-E02473A5A517}
O42 - Logiciel: Nero BurnRights 10 Help (CHM) - (.Nero AG.) [HKLM] -- {555868C6-49FB-484F-BB43-8980651A1B00}
O42 - Logiciel: Nero Burning ROM 10 - (.Nero AG.) [HKLM] -- {7A5D731D-B4B3-490E-B339-75685712BAAB}
O42 - Logiciel: Nero BurningROM 10 Help (CHM) - (.Nero AG.) [HKLM] -- {9B6B24BE-80E7-46C4-9FA5-B167D5E0F345}
O42 - Logiciel: Nero Control Center 10 - (.Nero AG.) [HKLM] -- {6DFB899F-17A2-48F0-A533-ED8D6866CF38}
O42 - Logiciel: Nero ControlCenter 10 Help (CHM) - (.Nero AG.) [HKLM] -- {523B2B1B-D8DB-4B41-90FF-C4D799E2758A}
O42 - Logiciel: Nero Core Components 10 - (.Nero AG.) [HKLM] -- {2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}
O42 - Logiciel: Nero CoverDesigner 10 - (.Nero AG.) [HKLM] -- {FCF00A6E-FB58-477A-ABE9-232907105521}
O42 - Logiciel: Nero CoverDesigner 10 Help (CHM) - (.Nero AG.) [HKLM] -- {C3273C55-E1E4-41FF-8D69-0158090DB8D8}
O42 - Logiciel: Nero DiscSpeed 10 - (.Nero AG.) [HKLM] -- {34490F4E-48D0-492E-8249-B48BECF0537C}
O42 - Logiciel: Nero DiscSpeed 10 Help (CHM) - (.Nero AG.) [HKLM] -- {C18A0418-442A-4186-AF98-D08F5054A2FC}
O42 - Logiciel: Nero Dolby Files 10 - (.Nero AG.) [HKLM] -- {C3580AC4-C827-4332-B935-9A282ED5BB97}
O42 - Logiciel: Nero Express 10 - (.Nero AG.) [HKLM] -- {70550193-1C22-445C-8FA4-564E155DB1A7}
O42 - Logiciel: Nero Express 10 Help (CHM) - (.Nero AG.) [HKLM] -- {33643918-7957-4839-92C7-EA96CB621A98}
O42 - Logiciel: Nero InfoTool 10 - (.Nero AG.) [HKLM] -- {F412B4AF-388C-4FF5-9B2F-33DB1C536953}
O42 - Logiciel: Nero InfoTool 10 Help (CHM) - (.Nero AG.) [HKLM] -- {66049135-9659-4AAD-9169-9CCA269EBB3E}
O42 - Logiciel: Nero MediaHub 10 - (.Nero AG.) [HKLM] -- {1F7FB68F-52F6-46A3-B42F-38CE46295AE5}
O42 - Logiciel: Nero MediaHub 10 Help (CHM) - (.Nero AG.) [HKLM] -- {F467862A-D9CA-47ED-8D81-B4B3C9399272}
O42 - Logiciel: Nero Multimedia Suite 10 - (.Nero AG.) [HKLM] -- {277C1559-4CF7-44FF-8D07-98AA9C13AABD}
O42 - Logiciel: Nero RescueAgent 10 - (.Nero AG.) [HKLM] -- {E337E787-CF61-4B7B-B84F-509202A54023}
O42 - Logiciel: Nero RescueAgent 10 Help (CHM) - (.Nero AG.) [HKLM] -- {92E25238-61A3-4ACD-A407-3C480EEF47A7}
O42 - Logiciel: Nero StartSmart 10 - (.Nero AG.) [HKLM] -- {F61D489E-6C44-49AC-AD02-7DA8ACA73A65}
O42 - Logiciel: Nero StartSmart 10 Help (CHM) - (.Nero AG.) [HKLM] -- {F6117F9C-ADB5-4590-9BE4-12C7BEC28702}
O42 - Logiciel: Nero Update - (.Nero AG.) [HKLM] -- {65BB0407-4CC8-4DC7-952E-3EEFDF05602A}
O42 - Logiciel: NvMixer - (...) [HKLM] -- {D7A6C517-11F2-419F-B5BB-27772B939698}
O42 - Logiciel: OpenOffice.org Installer 1.0 - (.Sun Microsystems.) [HKLM] -- {3A2AF807-9F9F-43C9-A24A-17B617238B74}
O42 - Logiciel: Perf2480P_2580P Guide de réf. - (...) [HKLM] -- Perf2480P_2580P Guide de réf.
O42 - Logiciel: PhotoImpression 5 - (...) [HKLM] -- {66C8BE35-8BBB-472B-96C7-C7C9A499F988}
O42 - Logiciel: Realtek AC'97 Audio - (.Realtek Semiconductor Corp..) [HKLM] -- {FB08F381-6533-4108-B7DD-039E11FBC27E}
O42 - Logiciel: ScanToWeb - (...) [HKLM] -- {EBAE381B-60A6-4863-AA9F-FCAB755BC9E5}
O42 - Logiciel: Shockwave - (...) [HKLM] -- Shockwave
O42 - Logiciel: Should I Remove It - (.Reason Software Company Inc..) [HKCU] -- Should I Remove It 1.0.4
O42 - Logiciel: Should I Remove It - (.Reason Software Company Inc..) [HKLM] -- {4E62123C-4C0D-4123-A8A2-C0103B92D7EA}
O42 - Logiciel: SoftV92 Data Fax Modem with SmartCP - (...) [HKLM] -- CNXT_MODEM_PCI_VEN_10DE&DEV_00d9&SUBSYS_18561043
O42 - Logiciel: Spybot - Search & Destroy - (.Safer-Networking Ltd..) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1
O42 - Logiciel: Synaptics Pointing Device Driver - (...) [HKLM] -- SynTPDeinstKey
O42 - Logiciel: Universalis 12 - (...) [HKLM] -- Encyclopædia Universalis12
O42 - Logiciel: Universalis 13 - (...) [HKLM] -- Encyclopædia Universalis13
O42 - Logiciel: WinRAR 5.20 (32-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver
O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474) - (.Microsoft Corporation.) [HKLM] -- WgaNotify
O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130) - (.Microsoft Corporation.) [HKLM] -- KB892130
O42 - Logiciel: Windows Internet Explorer 7 - (.Microsoft Corporation.) [HKLM] -- ie7
O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8
O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service
~ Logic: 69 Scanned in 00mn 00s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\ABBYY]
[HKCU\Software\ALWIL Software]
[HKCU\Software\ASUS]
[HKCU\Software\AVAST Software]
[HKCU\Software\AdblockPlus]
[HKCU\Software\Adobe]
[HKCU\Software\Ahead]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\ArcSoft]
[HKCU\Software\BITSoft]
[HKCU\Software\Caphyon]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\CosmoSoftware]
[HKCU\Software\Cyberlink]
[HKCU\Software\EMME]
[HKCU\Software\EPSON]
[HKCU\Software\Google]
[HKCU\Software\IM Providers]
[HKCU\Software\Intel]
[HKCU\Software\InterTrust]
[HKCU\Software\JavaSoft]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\Logitech]
[HKCU\Software\Macromedia]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Nero]
[HKCU\Software\Netscape]
[HKCU\Software\POWER4 GEAR]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\Reason]
[HKCU\Software\SEIKO EPSON]
[HKCU\Software\Safer Networking Limited]
[HKCU\Software\Smart Panel]
[HKCU\Software\Sun Microsystems]
[HKCU\Software\Synaptics]
[HKCU\Software\Terravirtual]
[HKCU\Software\Trend Micro]
[HKCU\Software\Trolltech]
[HKCU\Software\WeDlMngr] =>PUP.weDownloadManager
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKLM\Software\ABBYY]
[HKLM\Software\ALWIL Software]
[HKLM\Software\AMD]
[HKLM\Software\ASIO]
[HKLM\Software\AVAST Software]
[HKLM\Software\Adblock Plus for IE]
[HKLM\Software\Adobe]
[HKLM\Software\AdwCleaner]
[HKLM\Software\Ahead]
[HKLM\Software\Alienware]
[HKLM\Software\Anuman Interactive]
[HKLM\Software\ArcSoft]
[HKLM\Software\Asus]
[HKLM\Software\Britannica 8.0]
[HKLM\Software\BrowserChoice]
[HKLM\Software\C07ft5Y]
[HKLM\Software\CXT]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\CosmoSoftware]
[HKLM\Software\CyberLink]
[HKLM\Software\EPSON]
[HKLM\Software\Gemplus]
[HKLM\Software\Google]
[HKLM\Software\Havas Interactive]
[HKLM\Software\InstallShield]
[HKLM\Software\InstalledOptions]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\Larousse]
[HKLM\Software\Link Data Security]
[HKLM\Software\Logitech]
[HKLM\Software\Macromedia]
[HKLM\Software\Malwarebytes Anti-Rootkit]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\Marvell]
[HKLM\Software\Microfolie's]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\Nero]
[HKLM\Software\NewSoft]
[HKLM\Software\ODBC]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\Program Groups]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\STURM]
[HKLM\Software\SYSTEMOLEDDE]
[HKLM\Software\Safer Networking Limited]
[HKLM\Software\Schlumberger]
[HKLM\Software\Secure]
[HKLM\Software\Smart Panel]
[HKLM\Software\Sun Microsystems]
[HKLM\Software\Swearware]
[HKLM\Software\Synaptics]
[HKLM\Software\TerraVirtual]
[HKLM\Software\TrendMicro]
[HKLM\Software\Universalis]
[HKLM\Software\WinRAR]
[HKLM\Software\Windows 3.1 Migration Status]
[HKLM\Software\Windows]
[HKLM\Software\cybelsoft]
[HKLM\Software\jumpshot.com]
[HKLM\Software\mozilla.org]
~ Key Software: 278 Scanned in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 03/06/2005 - 10:46:20 - [] ----D C:\Program Files\Fichiers communs
O43 - CFD: 03/06/2005 - 10:47:40 - [] ----D C:\Program Files\CONEXANT
O43 - CFD: 03/06/2005 - 10:51:22 - [] ----D C:\Program Files\Windows NT
O43 - CFD: 03/06/2005 - 10:51:22 - [] ----D C:\Program Files\MSN
O43 - CFD: 03/06/2005 - 10:51:36 - [] ----D C:\Program Files\MSN Gaming Zone
O43 - CFD: 03/06/2005 - 10:51:36 - [] ----D C:\Program Files\Messenger
O43 - CFD: 03/06/2005 - 10:51:42 - [] ----D C:\Program Files\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 03/06/2005 - 10:51:42 - [0] ----D C:\Program Files\Online Services
O43 - CFD: 03/06/2005 - 10:52:18 - [0] ----D C:\Program Files\ComPlus Applications
O43 - CFD: 03/06/2005 - 10:52:38 - [] ----D C:\Program Files\Internet Explorer
O43 - CFD: 03/06/2005 - 10:52:42 - [] ----D C:\Program Files\Outlook Express =>.Microsoft Corporation
O43 - CFD: 03/06/2005 - 10:52:42 - [] ----D C:\Program Files\NetMeeting
O43 - CFD: 03/06/2005 - 10:52:46 - [] ----D C:\Program Files\Movie Maker
O43 - CFD: 03/06/2005 - 10:53:16 - [] ----D C:\Program Files\Services en ligne
O43 - CFD: 03/06/2005 - 10:53:20 - [0] --H-D C:\Program Files\WindowsUpdate
O43 - CFD: 03/06/2005 - 10:54:52 - [] ----D C:\Program Files\microsoft frontpage
O43 - CFD: 03/06/2005 - 10:54:54 - [] ----D C:\Program Files\xerox
O43 - CFD: 03/06/2005 - 11:00:54 - [] ----D C:\Program Files\Adobe
O43 - CFD: 03/06/2005 - 11:01:08 - [] ----D C:\Program Files\Asus
O43 - CFD: 03/06/2005 - 11:01:56 - [] --H-D C:\Program Files\InstallShield Installation Information
O43 - CFD: 03/06/2005 - 11:03:20 - [] ----D C:\Program Files\Synaptics
O43 - CFD: 03/06/2005 - 11:04:18 - [] ----D C:\Program Files\Trend Micro
O43 - CFD: 03/06/2005 - 11:06:28 - [0] --H-D C:\Program Files\Uninstall Information
O43 - CFD: 03/06/2005 - 11:47:16 - [] ----D C:\Program Files\Ahead
O43 - CFD: 03/06/2005 - 11:59:54 - [] ----D C:\Program Files\CyberLink
O43 - CFD: 04/06/2005 - 06:44:38 - [] ----D C:\Program Files\Microsoft Works
O43 - CFD: 18/06/2005 - 06:06:58 - [] ----D C:\Program Files\Anuman Interactive
O43 - CFD: 28/06/2005 - 19:13:30 - [] ----D C:\Program Files\Alwil Software
O43 - CFD: 26/07/2005 - 19:12:38 - [] ----D C:\Program Files\Larousse
O43 - CFD: 26/07/2005 - 19:13:24 - [] ----D C:\Program Files\directx
O43 - CFD: 26/07/2005 - 19:23:42 - [] ----D C:\Program Files\CosmoSoftware
O43 - CFD: 28/07/2005 - 19:18:36 - [0] ----D C:\Program Files\MSXML 4.0
O43 - CFD: 05/08/2005 - 14:09:38 - [] ----D C:\Program Files\L'Amerzone
O43 - CFD: 10/09/2005 - 08:54:34 - [] ----D C:\Program Files\epson
O43 - CFD: 10/09/2005 - 08:56:48 - [] ----D C:\Program Files\Smart Panel
O43 - CFD: 10/09/2005 - 08:59:18 - [] ----D C:\Program Files\ArcSoft
O43 - CFD: 10/09/2005 - 09:01:12 - [] ----D C:\Program Files\ABBYY
O43 - CFD: 27/09/2005 - 17:50:50 - [] ----D C:\Program Files\OnePlayer
O43 - CFD: 21/04/2007 - 07:01:18 - [] ----D C:\Program Files\Universalis
O43 - CFD: 21/04/2007 - 07:12:54 - [] ----D C:\Program Files\Google
O43 - CFD: 04/05/2007 - 12:39:34 - [] ----D C:\Program Files\MSN Messenger
O43 - CFD: 04/05/2007 - 16:05:42 - [] ----D C:\Program Files\Ihsv
O43 - CFD: 02/11/2007 - 16:02:54 - [] --H-D C:\Program Files\Zero G Registry
O43 - CFD: 02/11/2007 - 16:02:54 - [] ----D C:\Program Files\Britannica 8.0
O43 - CFD: 23/12/2007 - 16:25:42 - [0] ----D C:\Program Files\Neuf
O43 - CFD: 29/06/2008 - 13:17:48 - [] ----D C:\Program Files\Sun
O43 - CFD: 30/05/2009 - 14:07:40 - [] ----D C:\Program Files\CCleaner
O43 - CFD: 19/09/2009 - 08:42:14 - [] ----D C:\Program Files\Alice
O43 - CFD: 31/10/2011 - 16:16:20 - [] ----D C:\Program Files\AVAST Software
O43 - CFD: 28/01/2015 - 11:48:06 - [] ----D C:\Program Files\ma-config.com
O43 - CFD: 29/01/2015 - 13:39:46 - [] ----D C:\Program Files\AMD
O43 - CFD: 29/01/2015 - 14:15:52 - [] ----D C:\Program Files\Marvell
O43 - CFD: 29/01/2015 - 14:26:38 - [] ----D C:\Program Files\NVIDIA Corporation
O43 - CFD: 29/01/2015 - 15:29:32 - [] ----D C:\Program Files\Realtek AC97
O43 - CFD: 29/01/2015 - 16:08:52 - [] ----D C:\Program Files\Logitech
O43 - CFD: 31/01/2015 - 06:50:04 - [] ----D C:\Program Files\Reference Assemblies
O43 - CFD: 31/01/2015 - 06:50:58 - [] ----D C:\Program Files\MSBuild
O43 - CFD: 31/01/2015 - 09:15:38 - [] ----D C:\Program Files\QuickTime
O43 - CFD: 31/01/2015 - 12:04:48 - [] ----D C:\Program Files\Java
O43 - CFD: 31/01/2015 - 13:43:30 - [] ----D C:\Program Files\Adblock Plus for IE
O43 - CFD: 31/01/2015 - 15:03:42 - [] ----D C:\Program Files\Reason
O43 - CFD: 31/01/2015 - 15:58:38 - [] ----D C:\Program Files\Mozilla Firefox
O43 - CFD: 31/01/2015 - 21:18:24 - [] ----D C:\Program Files\Microsoft.NET
O43 - CFD: 01/02/2015 - 11:01:40 - [] ----D C:\Program Files\Spybot - Search & Destroy 2
O43 - CFD: 01/02/2015 - 17:39:36 - [] ----D C:\Program Files\Nero
O43 - CFD: 02/02/2015 - 10:31:42 - [] ----D C:\Program Files\ZHPDiag =>.Nicolas Coolman
O43 - CFD: 02/02/2015 - 15:50:16 - [] ----D C:\Program Files\WinRAR
O43 - CFD: 02/02/2015 - 15:55:14 - [] ----D C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD: 02/02/2015 - 16:15:18 - [] ----D C:\Program Files\Malwarebytes Anti-Malware
O43 - CFD: 03/06/2005 - 10:46:20 - [] ----D C:\Program Files\Fichiers communs\Microsoft Shared
O43 - CFD: 03/06/2005 - 10:46:20 - [] ----D C:\Program Files\Fichiers communs\SpeechEngines
O43 - CFD: 03/06/2005 - 10:46:22 - [] ----D C:\Program Files\Fichiers communs\ODBC
O43 - CFD: 03/06/2005 - 10:52:40 - [] ----D C:\Program Files\Fichiers communs\System
O43 - CFD: 03/06/2005 - 10:52:50 - [] ----D C:\Program Files\Fichiers communs\MSSoap
O43 - CFD: 03/06/2005 - 10:52:52 - [] ----D C:\Program Files\Fichiers communs\Services
O43 - CFD: 03/06/2005 - 11:00:54 - [] ----D C:\Program Files\Fichiers communs\Adobe
O43 - CFD: 03/06/2005 - 11:01:46 - [] ----D C:\Program Files\Fichiers communs\InstallShield
O43 - CFD: 03/06/2005 - 11:47:26 - [] ----D C:\Program Files\Fichiers communs\Ahead
O43 - CFD: 29/01/2015 - 14:26:38 - [] ----D C:\Program Files\Fichiers communs\NVIDIA Shared
O43 - CFD: 29/01/2015 - 16:06:28 - [] ----D C:\Program Files\Fichiers communs\LogiShrd
O43 - CFD: 31/01/2015 - 12:56:20 - [] ----D C:\Program Files\Fichiers communs\Java
O43 - CFD: 01/02/2015 - 17:39:44 - [] ----D C:\Program Files\Fichiers communs\Nero
O43 - CFD: 03/06/2005 - 10:45:48 - [] -S--D C:\Documents and Settings\All Users\Application Data\Microsoft
O43 - CFD: 03/06/2005 - 11:00:32 - [] ----D C:\Documents and Settings\All Users\Application Data\SBSI
O43 - CFD: 03/06/2005 - 11:47:32 - [] ----D C:\Documents and Settings\All Users\Application Data\Ahead
O43 - CFD: 04/06/2005 - 07:02:34 - [] ----D C:\Documents and Settings\All Users\Application Data\Adobe
O43 - CFD: 26/07/2005 - 19:17:00 - [] ----D C:\Documents and Settings\All Users\Application Data\QuickTime
O43 - CFD: 21/04/2007 - 07:05:28 - [] ----D C:\Documents and Settings\All Users\Application Data\UniversalisV12
O43 - CFD: 21/04/2007 - 07:12:54 - [] ----D C:\Documents and Settings\All Users\Application Data\Google
O43 - CFD: 21/04/2007 - 07:13:14 - [] ----D C:\Documents and Settings\All Users\Application Data\Link Data Security
O43 - CFD: 04/05/2007 - 15:33:22 - [] ----D C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
O43 - CFD: 02/11/2007 - 15:41:58 - [] ----D C:\Documents and Settings\All Users\Application Data\UniversalisV13
O43 - CFD: 02/11/2007 - 16:22:34 - [] ----D C:\Documents and Settings\All Users\Application Data\Apple Computer
O43 - CFD: 03/05/2010 - 16:07:56 - [] ----D C:\Documents and Settings\All Users\Application Data\Alwil Software
O43 - CFD: 06/08/2010 - 07:38:24 - [] ----D C:\Documents and Settings\All Users\Application Data\Sun
O43 - CFD: 31/10/2011 - 16:16:20 - [] ----D C:\Documents and Settings\All Users\Application Data\AVAST Software
O43 - CFD: 28/09/2012 - 11:36:04 - [] ----D C:\Documents and Settings\All Users\Application Data\Malwarebytes
O43 - CFD: 03/01/2002 - 03:10:10 - [0] ----D C:\Documents and Settings\All Users\Application Data\nView_Profiles
O43 - CFD: 28/01/2015 - 11:48:06 - [] ----D C:\Documents and Settings\All Users\Application Data\ma-config.com
O43 - CFD: 29/01/2015 - 13:04:00 - [] ----D C:\Documents and Settings\All Users\Application Data\RogueKiller
O43 - CFD: 29/01/2015 - 16:09:58 - [] ----D C:\Documents and Settings\All Users\Application Data\Logishrd
O43 - CFD: 31/01/2015 - 12:11:10 - [] ----D C:\Documents and Settings\All Users\Application Data\Oracle
O43 - CFD: 31/01/2015 - 23:07:16 - [] ----D C:\Documents and Settings\All Users\Application Data\Nero
O43 - CFD: 01/02/2015 - 11:01:58 - [] ----D C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
O43 - CFD: 03/02/2015 - 08:58:58 - [0] ----D C:\Documents and Settings\All Users\Application Data\Malwarebytes' Anti-Malware (portable)
O43 - CFD: 03/06/2005 - 10:46:04 - [] R---D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
O43 - CFD: 03/06/2005 - 10:51:42 - [] R---D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires
O43 - CFD: 03/06/2005 - 10:51:42 - [] R---D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Jeux
O43 - CFD: 03/06/2005 - 10:52:10 - [] R---D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Outils d'administration
O43 - CFD: 03/06/2005 - 11:02:38 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ASUS Live Update
O43 - CFD: 03/06/2005 - 11:02:48 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ASUS Utility
O43 - CFD: 04/06/2005 - 06:47:18 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Microsoft Works
O43 - CFD: 18/06/2005 - 06:06:58 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Anuman Interactive
O43 - CFD: 26/07/2005 - 19:23:46 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Cosmo Player
O43 - CFD: 28/07/2005 - 19:06:36 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Larousse
O43 - CFD: 05/08/2005 - 14:09:46 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\L'Amerzone
O43 - CFD: 10/09/2005 - 08:54:38 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\EPSON Scan
O43 - CFD: 10/09/2005 - 08:55:06 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\EPSON
O43 - CFD: 10/09/2005 - 08:56:48 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\EPSON Smart Panel
O43 - CFD: 10/09/2005 - 08:57:50 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\EPSON Utility Suite
O43 - CFD: 10/09/2005 - 08:58:44 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\EPSON Scan to Web
O43 - CFD: 10/09/2005 - 08:59:20 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ArcSoft PhotoImpression 5
O43 - CFD: 10/09/2005 - 09:01:24 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ABBYY FineReader Tools
O43 - CFD: 21/04/2007 - 07:05:16 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Encyclopædia Universalis
O43 - CFD: 31/10/2011 - 16:04:04 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\CCleaner
O43 - CFD: 28/01/2015 - 11:48:10 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ma-config.com
O43 - CFD: 29/01/2015 - 14:26:36 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\NVIDIA Corporation
O43 - CFD: 29/01/2015 - 16:11:00 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Logitech
O43 - CFD: 31/01/2015 - 12:56:00 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Java
O43 - CFD: 01/02/2015 - 11:02:26 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Spybot - Search & Destroy 2
O43 - CFD: 01/02/2015 - 17:39:38 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Nero
O43 - CFD: 02/02/2015 - 10:31:54 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ZHP =>.Nicolas Coolman
O43 - CFD: 02/02/2015 - 15:50:22 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\WinRAR
O43 - CFD: 02/02/2015 - 15:55:18 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Malwarebytes' Anti-Malware
O43 - CFD: 02/02/2015 - 16:15:30 - [] ----D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Malwarebytes Anti-Malware
O43 - CFD: 03/06/2005 - 11:00:54 - [] ----D C:\Documents and Settings\perso\Application Data\InterTrust
O43 - CFD: 03/06/2005 - 10:54:50 - [] ----D C:\Documents and Settings\perso\Application Data\Identities
O43 - CFD: 03/06/2005 - 10:45:48 - [] -S--D C:\Documents and Settings\perso\Application Data\Microsoft
O43 - CFD: 04/06/2005 - 07:05:06 - [] ----D C:\Documents and Settings\perso\Application Data\Adobe
O43 - CFD: 04/06/2005 - 14:53:10 - [] ----D C:\Documents and Settings\perso\Application Data\CyberLink
O43 - CFD: 18/06/2005 - 06:13:12 - [0] ----D C:\Documents and Settings\perso\Application Data\Help
O43 - CFD: 10/09/2005 - 09:01:58 - [] ----D C:\Documents and Settings\perso\Application Data\ABBYY
O43 - CFD: 10/09/2005 - 09:25:16 - [] ----D C:\Documents and Settings\perso\Application Data\Smart Panel
O43 - CFD: 26/09/2005 - 16:12:24 - [] ----D C:\Documents and Settings\perso\Application Data\Macromedia
O43 - CFD: 21/10/2006 - 08:50:38 - [] ----D C:\Documents and Settings\perso\Application Data\ArcSoft
O43 - CFD: 21/04/2007 - 07:07:24 - [] ----D C:\Documents and Settings\perso\Application Data\Sun
O43 - CFD: 21/04/2007 - 07:13:22 - [] ----D C:\Documents and Settings\perso\Application Data\Mozilla
O43 - CFD: 21/04/2007 - 07:13:22 - [] ----D C:\Documents and Settings\perso\Application Data\Universalis V12
O43 - CFD: 04/05/2007 - 11:37:28 - [] ----D C:\Documents and Settings\perso\Application Data\Google
O43 - CFD: 17/11/2007 - 07:17:26 - [] ----D C:\Documents and Settings\perso\Application Data\Universalis V13
O43 - CFD: 28/09/2012 - 11:36:16 - [] ----D C:\Documents and Settings\perso\Application Data\Malwarebytes
O43 - CFD: 29/01/2015 - 12:46:24 - [] ----D C:\Documents and Settings\perso\Application Data\AVAST Software
O43 - CFD: 29/01/2015 - 13:39:10 - [] ----D C:\Documents and Settings\perso\Application Data\InstallShield
O43 - CFD: 29/01/2015 - 16:05:00 - [] ----D C:\Documents and Settings\perso\Application Data\Logishrd
O43 - CFD: 29/01/2015 - 16:05:00 - [] ----D C:\Documents and Settings\perso\Application Data\Logitech
O43 - CFD: 31/01/2015 - 09:33:40 - [] ----D C:\Documents and Settings\perso\Application Data\Apple Computer
O43 - CFD: 31/01/2015 - 13:43:34 - [] ----D C:\Documents and Settings\perso\Application Data\Adblock Plus for IE
O43 - CFD: 31/01/2015 - 23:24:48 - [] ----D C:\Documents and Settings\perso\Application Data\Nero
O43 - CFD: 02/02/2015 - 10:31:42 - [] ----D C:\Documents and Settings\perso\Application Data\ZHP =>.Nicolas Coolman
O43 - CFD: 02/02/2015 - 15:52:40 - [] ----D C:\Documents and Settings\perso\Application Data\WinRAR
O43 - CFD: 03/06/2005 - 10:54:32 - [] ----D C:\Documents and Settings\perso\Local Settings\Application Data\Microsoft
O43 - CFD: 18/06/2005 - 06:13:10 - [0] ----D C:\Documents and Settings\perso\Local Settings\Application Data\Help
O43 - CFD: 10/09/2005 - 09:01:58 - [] ----D C:\Documents and Settings\perso\Local Settings\Application Data\ABBYY
O43 - CFD: 26/09/2005 - 15:32:50 - [] ----D C:\Documents and Settings\perso\Local Settings\Application Data\Identities
O43 - CFD: 21/04/2007 - 07:06:40 - [] ----D C:\Documents and Settings\perso\Local Settings\Application Data\{7148F0A6-6813-11D6-A77B-00B0D0142050}
O43 - CFD: 21/04/2007 - 07:13:28 - [] ----D C:\Documents and Settings\perso\Local Settings\Application Data\UniversalisV12
O43 - CFD: 04/05/2007 - 11:37:28 - [] ----D C:\Documents and Settings\perso\Local Settings\Application Data\Google
O43 - CFD: 17/11/2007 - 07:17:34 - [] ----D C:\Documents and Settings\perso\Local Settings\Application Data\UniversalisV13
O43 - CFD: 28/02/2010 - 08:59:14 - [] ----D C:\Documents and Settings\perso\Local Settings\Application Data\Temp
O43 - CFD: 03/01/2002 - 03:15:48 - [] ----D C:\Documents and Settings\perso\Local Settings\Application Data\Ahead
O43 - CFD: 29/01/2015 - 11:13:00 - [] ----D C:\Documents and Settings\perso\Local Settings\Application Data\Microsoft Corporation
O43 - CFD: 29/01/2015 - 19:52:34 - [] ----D C:\Documents and Settings\perso\Local Settings\Application Data\Apple Computer
O43 - CFD: 31/01/2015 - 09:13:42 - [] ----D C:\Documents and Settings\perso\Local Settings\Application Data\Apple
O43 - CFD: 31/01/2015 - 12:27:24 - [] ----D C:\Documents and Settings\perso\Local Settings\Application Data\Sun
O43 - CFD: 31/01/2015 - 13:44:14 - [] ----D C:\Documents and Settings\perso\Local Settings\Application Data\Adblock Plus for IE
O43 - CFD: 31/01/2015 - 13:58:28 - [] ----D C:\Documents and Settings\perso\Local Settings\Application Data\Adobe
O43 - CFD: 31/01/2015 - 15:59:40 - [] ----D C:\Documents and Settings\perso\Local Settings\Application Data\Mozilla
O43 - CFD: 04/02/2015 - 15:30:40 - [] ----D C:\Documents and Settings\perso\Local Settings\Application Data\PCHealth
O43 - CFD: 03/06/2005 - 10:53:16 - [] R---D C:\Documents and Settings\perso\Menu Démarrer\Programmes\Accessoires
O43 - CFD: 03/06/2005 - 10:46:04 - [] R---D C:\Documents and Settings\perso\Menu Démarrer\Programmes\Démarrage
O43 - CFD: 05/08/2005 - 18:28:30 - [] R---D C:\Documents and Settings\perso\Menu Démarrer\Programmes\Outils d'administration
O43 - CFD: 02/11/2007 - 16:21:52 - [] ----D C:\Documents and Settings\perso\Menu Démarrer\Programmes\Britannica 8.0
O43 - CFD: 30/05/2009 - 14:07:42