Suprimer speedbit search!!

Résolu
Bonjour, je vient d'installer speedbit,ce logiciel ne me convient pas donc je les desinstaller de suite,probleme dans IE7 quand je veux ouvrir un onglet une page avec speedbit souvre a la place de google!j'ai regarder dans les module complemantaire et rien,j'ai fais un scan avec malwarer'byte toujours rien!!!

comment fair pour suprimer ce truc svp ?

merci

13 réponses

  1. bonjour,

    * Télécharge ZHPDiag sur ton bureau :

    https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/
    ou :
    http://www.premiumorange.com/zeb-help-process/zhpdiag.html
    ou :
    https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

    * Laisse toi guider lors de l'installation, il se lancera automatiquement à la fin.

    /!\Utilisateur de Vista et Seven : Clique droit sur le logo de ZHPdiag, « exécuter en tant qu'Administrateur »

    * Clique sur l'icône représentant une loupe (« Lancer le diagnostic »)
    * Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette
    * Héberge le rapport ZHPDiag.txt sur Cijoint, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum :
    http://www.cijoint.fr/
    ou :
    http://ww38.toofiles.com/fr/documents-upload.html

    tuto zhpdiag :
    http://www.premiumorange.com/zeb-help-process/zhpdiag.html
    1. cliquez sur parametre,gere definir le moteur
  2. hello c est fou comment retrirer ce speed bit de merde !!!!!!!!!!!!!! c est une intrusion illégale dans mon ordinateur ! comment fire fox accepte cette barre de navigateur ou est la liberté ?????
    1. pour restaurer le moteur de recherche par défaut par exemple Google il faut télécharger le fichier RestoreBrowserSettings puis l'exécuter .
      une fois exécuter vous aurez un message vous indiquant que le moteur de recherche à été restaurer . Il ne vous reste que allez sur outils puis clic sur options puis sur général puis écrire la page d'accueil désirée et c'est 100°/° résolut
      1. bon j'ai eu du mal mes sa ses finalement lancer voici le rapport!tout internet ses remis a zero tant mieux l'onglet speedbit a disparus je pence que le probleme est resolu un grand merci a toa est ce que je peut tous desinstaller a present?

        ======= RAPPORT D'AD-REMOVER 2.0.0.2,B | UNIQUEMENT XP/VISTA/7 =======

        Mis à jour par TeamXscript le 11/11/10 à 11:40
        Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
        Site web: http://www.teamxscript.org

        C:\Program Files\Ad-Remover\main.exe (CLEAN [4]) -> Lancé à 22:00:06 le 25/11/2010, Mode normal

        Microsoft Windows 7 Édition Familiale Premium (X86)
        benjamin@PC-DE-BENJAMIN (TOSHIBA Satellite P200)

        ============== ACTION(S) ==============

        Dossier supprimé: C:\Program Files\Family Toolbar

        (!) -- Fichiers temporaires supprimés.

        Clé supprimée: HKCU\Software\Ask.com
        Clé supprimée: HKCU\Software\AppDataLow\Software\AskToolbar
        Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}

        ============== SCAN ADDITIONNEL ==============

        ** Mozilla Firefox Version [3.6.3 (fr)] **

        -- C:\Users\mimi\AppData\Roaming\Mozilla\FireFox\Profiles\iocindxn.default\Prefs.js --
        browser.search.selectedEngine, Google
        browser.startup.homepage, hxxp://en-us.start.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:fr:official
        browser.startup.homepage_override.mstone, rv:1.9.1.4

        ========================================

        ** Internet Explorer Version [8.0.7600.16385] **

        [HKCU\Software\Microsoft\Internet Explorer\Main]
        AutoHide: yes
        Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
        Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
        Do404Search: 0x01000000
        Enable Browser Extensions: yes
        Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
        Show_ToolBar: yes
        Start Page: hxxp://fr.msn.com/

        [HKLM\Software\Microsoft\Internet Explorer\Main]
        AutoHide: yes
        Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
        Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
        Delete_Temp_Files_On_Exit: yes
        Local Page: C:\Windows\System32\blank.htm
        Search bar: hxxp://search.msn.com/spbasic.htm
        Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
        Start Page: hxxp://fr.msn.com/

        [HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
        Tabs: res://ieframe.dll/tabswelcome.htm
        Blank: res://mshtml.dll/blank.htm

        ========================================

        C:\Program Files\Ad-Remover\Quarantine: 0 Fichier(s)
        C:\Program Files\Ad-Remover\Backup: 17 Fichier(s)

        C:\Ad-Report-CLEAN[1].txt - 25/11/2010 (463 Octet(s))
        C:\Ad-Report-CLEAN[2].txt - 25/11/2010 (463 Octet(s))
        C:\Ad-Report-CLEAN[3].txt - 25/11/2010 (463 Octet(s))
        C:\Ad-Report-CLEAN[4].txt - 25/11/2010 (2555 Octet(s))

        Fin à: 22:04:13, 25/11/2010

        ============== E.O.F ==============
        1. super :-)

          * Télécharge de AD-Remover sur ton Bureau. (Merci à C_XX)
          http://www.teamxscript.org/adremoverTelechargement.html ( Lien officiel )
          https://www.androidworld.fr/ ( Miroir )
          /!\ Ferme toutes applications en cours /!\

          - Double-clique sur l'icône Ad-remover située sur ton Bureau.
          - Sur la page, clique sur le bouton « Nettoyer »
          - Confirme lancement du scan
          - Laisse travailler l'outil.
          - Poste le rapport qui apparaît à la fin.

          (Le rapport est sauvegardé aussi sous C:\Ad-report(Scan/clean).Txt)

          (CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)
          1. Rapport de ZHPFix 1.12.3221 par Nicolas Coolman, Update du 20/11/2010
            Fichier d'export Registre :
            Run by benjamin at 25/11/2010 20:35:32
            Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
            Contact : nicolascoolman@yahoo.fr

            ========== Fichier HOSTS ==========
            127.0.0.1 => Domaine Supprimé

            Le fichier Hosts est sain

            ========== Récapitulatif ==========
            3 : Fichier HOSTS

            End of the scan

            sa ma donner sa!!!
            1. Seven 32 bit !

              * Lance ZHPFix (soit via le raccourci sur ton Bureau, soit via ZHPDiag en cliquant sur l'écusson vert)
              Clique sur l'icone représentant la lettre H

              clique sur le bouton Hostfix,

              laisse la travailler, poste son rapport
              1. ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
                O44 - LFC:[MD5.A9000000000000000000000024EF1200] - 25/11/2010 - 13:49:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\WindowsUpdate.log [1130042]
                O44 - LFC:[MD5.37440ECCAB612A6F69D842AD18E5EDF6] - 25/11/2010 - 12:51:13 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\PerfStringBackup.INI [1553042]
                O44 - LFC:[MD5.C08294ED4E9E5D9E5058B87F213BFB9D] - 25/11/2010 - 12:51:13 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfc009.dat [107594]
                O44 - LFC:[MD5.976908A207D3172E1FEC28CA4CA41F4D] - 25/11/2010 - 12:51:13 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfc00C.dat [132546]
                O44 - LFC:[MD5.FB340672AE3F9FFFA4DC8145B93CE892] - 25/11/2010 - 12:51:13 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfh009.dat [615958]
                O44 - LFC:[MD5.C8D58A9079C6316603D3F052FEF80DCA] - 25/11/2010 - 12:51:13 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfh00C.dat [704856]
                O44 - LFC:[MD5.6FA4A213DC5C20F41F12D5615BF7C4D5] - 25/11/2010 - 12:42:33 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\setupact.log [4480222]
                O44 - LFC:[MD5.2A3FD59777A940F9C43D1B3A27E14CFF] - 25/11/2010 - 12:42:32 -S-A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\bootstat.dat [67584]
                O44 - LFC:[MD5.A755B82B609C1F2E7816940B4F8CED3F] - 20/11/2010 - 04:47:02 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [5872]
                O44 - LFC:[MD5.A755B82B609C1F2E7816940B4F8CED3F] - 20/11/2010 - 04:47:02 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [5872]
                O44 - LFC:[MD5.9768457BD8AA1507668AE9953F0B269E] - 01/11/2010 - 19:53:39 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\MEMORY.DMP [256983893]
                O44 - LFC:[MD5.01736B2E3F5B29C094E59BFD0DCF4332] - 27/10/2010 - 08:10:17 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\PFRO.log [11834]

                ---\\ Export de clé d'application autorisée (ECAA) (O47)
                O47 - AAKE:Key Export SP - "C:\Program Files\BitTorrent\bittorrent.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) --
                O47 - AAKE:Key Export SP - "C:\Program Files\Orbitdownloader\orbitdm.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) --
                O47 - AAKE:Key Export SP - "C:\Program Files\Orbitdownloader\orbitnet.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) --

                ---\\ Déni du service (Local Security Authority) (LSA) (O48)
                O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
                O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll
                O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll

                ---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52)
                O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
                O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll
                O52 - TDSD: \Drivers32\"msacm.ac3acm"="ac3acm.acm" . (.fccHandler - AC-3 ACM Codec.) -- C:\Windows\System32\ac3acm.acm
                O52 - TDSD: \Drivers32\"msacm.lameacm"="lameACM.acm" . (.http://www.mp3dev.org/ - Lame MP3 codec engine.) -- C:\Windows\System32\lameACM.acm
                O52 - TDSD: \Drivers32\"msacm.vorbis"="vorbis.acm" . (.HMS http://hp.vector.co.jp/authors/VA012897 - Ogg Vorbis CODEC for MSACM.) -- C:\Windows\System32\vorbis.acm
                O52 - TDSD: \Drivers32\"VIDC.FFDS"="ff_vfw.dll" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\ff_vfw.dll
                O52 - TDSD: \Drivers32\"VIDC.XVID"="xvidvfw.dll" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\xvidvfw.dll
                O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
                O52 - TDSD: \drivers.desc\"ac3acm.acm"="AC-3 ACM Codec" . (.fccHandler - AC-3 ACM Codec.) -- C:\Windows\System32\ac3acm.acm
                O52 - TDSD: \drivers.desc\"ff_vfw.dll"="ffdshow video encoder" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\ff_vfw.dll
                O52 - TDSD: \drivers.desc\"lameACM.acm"="Lame ACM MP3 CODEC v3.97b2" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
                O52 - TDSD: \drivers.desc\"vorbis.acm"="Ogg Vorbis Audio CODEC, Based on Xiphophorus libVorbis I 20010910" . (.HMS http://hp.vector.co.jp/authors/VA012897 - Ogg Vorbis CODEC for MSACM.) -- C:\Windows\System32\vorbis.acm
                O52 - TDSD: \drivers.desc\"xvidvfw.dll"="Xvid MPEG-4 Video Codec v1.2-dev" . (.Pas de propriétaire - Pas de description.) -- (.not file.)

                ---\\ Microsoft Control Security Providers (MCSP) (O54)
                O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\system32\credssp.dll
                O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\system32\credssp.dll

                ---\\ Microsoft Windows Policies System (MWPS) (O55)
                O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5
                O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
                O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
                O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
                O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
                O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
                O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
                O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
                O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
                O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
                O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=
                O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
                O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
                O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
                O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
                O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=

                ---\\ Microsoft Windows Policies Explorer (MWPE) (O56)
                O56 - MWPE:[HKLM\...\policies\Explorer] - "BindDirectlyToPropertySetStorage"=0

                ---\\ Liste des Drivers Système (SDL) (O58)
                O58 - SDL:[MD5.21E785EBD7DC90A06391141AAC7892FB] - 14/07/2009 - 02:26:15 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys
                O58 - SDL:[MD5.0C676BC278D5B59FF5ABD57BBE9123F2] - 14/07/2009 - 02:26:17 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys
                O58 - SDL:[MD5.7C7B5EE4B7B822EC85321FE23A27DB33] - 14/07/2009 - 02:26:15 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\system32\drivers\adpu320.sys
                O58 - SDL:[MD5.7E10E3BB9B258AD8A9300F91214D67B9] - 13/07/2009 - 23:13:48 ---A- . (.LSI Corp - SoftModem Device Driver.) -- C:\Windows\system32\drivers\AGRSM.sys
                O58 - SDL:[MD5.0D40BCF52EA90FC7DF2AEAB6503DEA44] - 14/07/2009 - 02:26:15 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\system32\drivers\aliide.sys
                O58 - SDL:[MD5.2101A86C25C154F8314B24EF49D7FBC2] - 14/07/2009 - 02:26:15 ---A- . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\system32\drivers\amdsata.sys
                O58 - SDL:[MD5.EA43AF0C423FF267355F74E7A53BDABA] - 14/07/2009 - 02:26:15 ---A- . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller Driver for Windows fa.) -- C:\Windows\system32\drivers\amdsbs.sys
                O58 - SDL:[MD5.B81C2B5616F6420A9941EA093A92B150] - 14/07/2009 - 02:26:15 ---A- . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\system32\drivers\amdxata.sys
                O58 - SDL:[MD5.2932004F49677BD84DBC72EDB754FFB3] - 14/07/2009 - 02:26:15 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys
                O58 - SDL:[MD5.5D6F36C46FD283AE1B57BD2E9FEB0BC7] - 14/07/2009 - 02:26:15 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys
                O58 - SDL:[MD5.5DB4826CE026F0E0BD982137D3BC42D1] - 12/11/2008 - 17:53:27 ---A- . (.ALWIL Software - avast! File System Access Blocking Driver.) -- C:\Windows\system32\drivers\aswFsBlk.sys
                O58 - SDL:[MD5.F1549C82BD547D0F70D5909F5592A340] - 12/11/2008 - 17:53:17 ---A- . (.ALWIL Software - avast! File System Minifilter for Windows 2003/Vista.) -- C:\Windows\system32\drivers\aswMonFlt.sys
                O58 - SDL:[MD5.5C09ACB2A721225D76EF10752BEAD097] - 12/11/2008 - 17:52:28 ---A- . (.ALWIL Software - avast! TDI RDR Driver.) -- C:\Windows\system32\drivers\aswRdr.sys
                O58 - SDL:[MD5.E1B96FDCE71DBD67F75D2979DDA4DF8D] - 12/11/2008 - 17:53:38 ---A- . (.ALWIL Software - avast! self protection module.) -- C:\Windows\system32\drivers\aswSP.sys
                O58 - SDL:[MD5.9BB4B307BA4DCDE9FC98F4FDF8851D37] - 12/11/2008 - 17:52:37 ---A- . (.ALWIL Software - avast! TDI Filter Driver.) -- C:\Windows\system32\drivers\aswTdi.sys
                O58 - SDL:[MD5.19529728442D4794B96D1B8A9A63ECA1] - 05/05/2010 - 03:46:22 ---A- . (.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\system32\drivers\atikmdag.sys
                O58 - SDL:[MD5.B44737FF566B5888D15FDB66849F34E5] - 05/05/2010 - 02:23:00 ---A- . (.Advanced Micro Devices, Inc. - AMD multi-vendor Miniport Driver.) -- C:\Windows\system32\drivers\atikmpag.sys
                O58 - SDL:[MD5.70AF0409DE16E6EF7BE74F98652EFC37] - 03/03/2010 - 05:22:26 ---A- . (.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\system32\drivers\atipmdag.sys
                O58 - SDL:[MD5.14FE36D8F2C6A2435275338D061A0B66] - 20/12/2009 - 21:33:46 ---A- . (.Avira GmbH - Avira Minifilter Driver.) -- C:\Windows\system32\drivers\avgntflt.sys
                O58 - SDL:[MD5.BD8869EB9CDE6BBE4508D869929869EE] - 13/07/2009 - 23:02:49 ---A- . (.Broadcom Corporation - Pilote unifié NDIS6.x Broadcom NetXtreme Gigabit Ethernet..) -- C:\Windows\system32\drivers\b57nd60x.sys
                O58 - SDL:[MD5.9F9ACC7F7CCDE8A15C282D3F88B43309] - 13/07/2009 - 23:53:28 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys
                O58 - SDL:[MD5.56801AD62213A41F6497F96DEE83755A] - 13/07/2009 - 23:53:28 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys
                O58 - SDL:[MD5.845B8CE732E67F3B4133164868C666EA] - 14/07/2009 - 01:57:25 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys
                O58 - SDL:[MD5.203F0B1E73ADADBBB7B7B1FABD901F6B] - 13/07/2009 - 23:53:32 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys
                O58 - SDL:[MD5.BD456606156BA17E60A04E18016AE54B] - 13/07/2009 - 23:53:33 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys
                O58 - SDL:[MD5.AF72ED54503F717A43268B3CC5FAEC2E] - 13/07/2009 - 23:53:33 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys
                O58 - SDL:[MD5.1A231ABEC60FD316EC54C66715543CEC] - 13/07/2009 - 23:02:48 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\system32\drivers\bxvbdx.sys
                O58 - SDL:[MD5.9714B7C918C6543D69074EC101F86AC4] - 15/10/2009 - 15:39:14 ---A- . (.Sonic Solutions - CDR4 CD and DVD Place Holder Driver (see PxHelp).) -- C:\Windows\system32\drivers\cdr4_xp.sys
                O58 - SDL:[MD5.0D856D16C08440BFB566D6CDD9948D4E] - 15/10/2009 - 15:39:14 ---A- . (.Sonic Solutions - CDRAL Place Holder Driver (see PxHelp).) -- C:\Windows\system32\drivers\cdralw2k.sys
                O58 - SDL:[MD5.C537B1DB64D495B9B4717B4D6D9EDBF2] - 14/07/2009 - 02:26:21 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\cmdide.sys
                O58 - SDL:[MD5.C3156B712E3873AAD354F1696B2B2925] - 06/03/2007 - 14:01:04 ---A- . (.COMPAL ELECTRONIC INC. - CPLIR.) -- C:\Windows\system32\drivers\CplIR.sys
                O58 - SDL:[MD5.8B30250D573A8F6B4BD23195160D8707] - 14/07/2009 - 02:20:28 ---A- . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\system32\drivers\djsvs.sys
                O58 - SDL:[MD5.0ED67910C8C326796FAA00B2BF6D9D3C] - 14/07/2009 - 02:20:28 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys
                O58 - SDL:[MD5.024E1B5CAC09731E4D868E64DBFB4AB0] - 13/07/2009 - 23:02:48 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\system32\drivers\evbdx.sys
                O58 - SDL:[MD5.C44E3C2BAB6837DB337DDEE7544736DB] - 13/07/2009 - 23:54:14 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\system32\drivers\hcw85cir.sys
                O58 - SDL:[MD5.295FDC419039090EB8B49FFDBB374549] - 14/07/2009 - 02:20:28 ---A- . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Driver.) -- C:\Windows\system32\drivers\HpSAMD.sys
                O58 - SDL:[MD5.26541A068572F650A2FA490726FE81BE] - 03/03/2010 - 18:33:26 ---A- . (.Intel Corporation - Intel Rapid Storage Technology driver - x86.) -- C:\Windows\system32\drivers\iaStor.sys
                O58 - SDL:[MD5.934AF4D7C5F457B9F0743F4299B77B67] - 14/07/2009 - 02:20:36 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\system32\drivers\iaStorV.sys
                O58 - SDL:[MD5.4173FF5708F3236CF25195FECD742915] - 14/07/2009 - 02:20:36 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\system32\drivers\iirsp.sys
                O58 - SDL:[MD5.A383F2CEA0A8F4E76E71ABC869BD5748] - 18/01/2007 - 15:40:56 ---A- . (.TOSHIBA CORPORATION - TOSHIBA RAID Driver.) -- C:\Windows\system32\drivers\KR10I.sys
                O58 - SDL:[MD5.6E9922332386C2A49936B30B2B6FD298] - 18/01/2007 - 15:47:18 ---A- . (.TOSHIBA CORPORATION - TOSHIBA RAID Driver.) -- C:\Windows\system32\drivers\KR10N.sys
                O58 - SDL:[MD5.9419FAAC6552A51542DBBA02971C841C] - 11/11/2008 - 12:41:00 ---A- . (.LG Electronics Inc. - LG CDMA USB Multi function Driver.) -- C:\Windows\system32\drivers\lgusbbus.sys
                O58 - SDL:[MD5.C0A466FA4FFEC464320E159BC1BBDC0C] - 11/11/2008 - 12:41:00 ---A- . (.LG Electronics Inc. - LG CDMA USB Diagnostics Driver.) -- C:\Windows\system32\drivers\lgusbdiag.sys
                O58 - SDL:[MD5.F74A54774A9B0AFEB3C40ADEC68AA600] - 11/11/2008 - 12:42:00 ---A- . (.LG Electronics Inc. - LG CDMA USB Modem Driver.) -- C:\Windows\system32\drivers\lgusbmodem.sys
                O58 - SDL:[MD5.EB119A53CCF2ACC000AC71B065B78FEF] - 14/07/2009 - 02:20:36 ---A- . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_fc.sys
                O58 - SDL:[MD5.8ADE1C877256A22E49B75D1CC9161F9C] - 14/07/2009 - 02:20:37 ---A- . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas.sys
                O58 - SDL:[MD5.DC9DC3D3DAA0E276FD2EC262E38B11E9] - 14/07/2009 - 02:20:36 ---A- . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas2.sys
                O58 - SDL:[MD5.0A036C7D7CAB643A7F07135AC47E0524] - 14/07/2009 - 02:20:36 ---A- . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_scsi.sys
                O58 - SDL:[MD5.67B48A903430C6D4FB58CBACA1866601] - 29/04/2010 - 14:39:26 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbam.sys
                O58 - SDL:[MD5.C7DD7D9739785BD3A6B8499EEC1DEE7E] - 29/04/2010 - 14:39:38 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbamswissarmy.sys
                O58 - SDL:[MD5.0FFF5B045293002AB38EB1FD1FC2FB74] - 14/07/2009 - 02:20:36 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows 7 for x86.) -- C:\Windows\system32\drivers\megasas.sys
                O58 - SDL:[MD5.DCBAB2920C75F390CAF1D29F675D03D6] - 14/07/2009 - 02:20:36 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\system32\drivers\MegaSR.sys
                O58 - SDL:[MD5.C4F27BA95327B6441CA44DDCFB47562A] - 26/04/2007 - 21:09:38 ---A- . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\Windows\system32\drivers\NETw4v32.sys
                O58 - SDL:[MD5.FEB745E4669476C8D368F6C1CA7C7442] - 13/01/2010 - 07:29:56 ---A- . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\Windows\system32\drivers\NETw5v32.sys
                O58 - SDL:[MD5.1D85C4B390B0EE09C7A46B91EFB2C097] - 14/07/2009 - 02:20:44 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\system32\drivers\nfrd960.sys
                O58 - SDL:[MD5.3F3D04B1D08D43C16EA7963954EC768D] - 14/07/2009 - 02:20:44 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\system32\drivers\nvraid.sys
                O58 - SDL:[MD5.C99F251A5DE63C6F129CF71933ACED0F] - 14/07/2009 - 02:20:44 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\system32\drivers\nvstor.sys
                O58 - SDL:[MD5.FD2041E9BA03DB7764B2248F02475079] - 26/08/2008 - 09:26:12 ---A- . (.Nokia - PCCS Mode Change Filter Driver.) -- C:\Windows\system32\drivers\pccsmcfd.sys
                O58 - SDL:[MD5.153D02480A0A2F45785522E814C634B6] - 15/10/2009 - 15:39:14 ---A- . (.Sonic Solutions - Px Engine Device Driver for Windows 2000/XP.) -- C:\Windows\system32\drivers\PxHelp20.sys
                O58 - SDL:[MD5.AB95ECF1F6659A60DDC166D8315B0751] - 14/07/2009 - 02:19:04 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\system32\drivers\ql2300.sys
                O58 - SDL:[MD5.B4DD51DD25182244B86737DC51AF2270] - 14/07/2009 - 02:19:04 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\system32\drivers\ql40xx.sys
                O58 - SDL:[MD5.0F16D98C3AF2138FABFA20ADDE4E01FE] - 05/09/2007 - 10:36:26 ---A- . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function Driver.) -- C:\Windows\system32\drivers\RTKVHDA.sys
                O58 - SDL:[MD5.949F74CB383A1D5DA67AEA9CCD4A8B87] - 31/03/2010 - 02:13:28 ---A- . (.Realtek Semiconductor Corporation - Realtek RTL8187B NDIS Driver.) -- C:\Windows\system32\drivers\RTL8187B.sys
                O58 - SDL:[MD5.A1ADC7B4C074744662207DA6EDCDFBB0] - 02/09/2009 - 11:09:24 ---A- . (.Realtek - Realtek 8136/8168/8169 NDIS6 32-bit Driver.) -- C:\Windows\system32\drivers\Rtlh86.sys
                O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 13/07/2009 - 21:50:20 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\system32\drivers\secdrv.sys
                O58 - SDL:[MD5.A9F0486851BECB6DDA1D89D381E71055] - 14/07/2009 - 02:19:04 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\system32\drivers\sisraid2.sys
                O58 - SDL:[MD5.3727097B55738E2F554972C3BE5BC1AA] - 14/07/2009 - 02:19:04 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\system32\drivers\sisraid4.sys
                O58 - SDL:[MD5.1C000000000000000000000024EF1200] - 06/08/2010 - 02:56:13 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\drivers\sptd.sys
                O58 - SDL:[MD5.DB32D325C192B801DF274BFD12A7E72B] - 14/07/2009 - 02:19:04 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\system32\drivers\stexstor.sys
                O58 - SDL:[MD5.AC4459D34F22B52FEB6E619746FF6BD4] - 27/07/2007 - 08:32:30 ---A- . (.Synaptics, Inc. - Synaptics Touchpad Driver.) -- C:\Windows\system32\drivers\SynTP.sys
                O58 - SDL:[MD5.0C82061920A2DE35D33C2C2BB83B1E98] - 15/02/2007 - 18:48:14 ---A- . (.The OpenVPN Project - TAP-Win32 Virtual Network Driver.) -- C:\Windows\system32\drivers\tap0801.sys
                O58 - SDL:[MD5.592639E8322B123694BF3C97C7AECA50] - 19/10/2007 - 09:50:50 ---A- . (.Steganos GmbH - TAP-Win32 Virtual Network Driver.) -- C:\Windows\system32\drivers\tapavpn.sys
                O58 - SDL:[MD5.1825BCEB47BF41C5A9F0E44DE82FC27A] - 18/10/2006 - 11:50:04 ---A- . (.TOSHIBA Corporation. - Toshiba ODD Writing Driver For x86..) -- C:\Windows\system32\drivers\tdcmdpst.sys
                O58 - SDL:[MD5.E4C85C291DDB3DC5E4A2F227CA465BA6] - 24/01/2007 - 13:44:06 ---A- . (.Texas Instruments - tifm21.sys.) -- C:\Windows\system32\drivers\tifm21.sys
                O58 - SDL:[MD5.5C4103544612E5011EF46301B93D1AA6] - 23/10/2006 - 15:32:20 ---A- . (.TOSHIBA Corporation - TOSHIBA Bluetooth EC Driver.) -- C:\Windows\system32\drivers\tosrfec.sys
                O58 - SDL:[MD5.792A8B80F8188ABA4B2BE271583F3E46] - 09/11/2007 - 04:00:52 ---A- . (.TOSHIBA Corporation - TOSHIBA ACPI-Based Value Added Logical and General Purpose Devi.) -- C:\Windows\system32\drivers\TVALZ_O.SYS
                O58 - SDL:[MD5.3B929A72AAEA96DC0150D3A6DA268C89] - 16/04/2007 - 09:19:10 ---A- . (.Chicony Electronics Co., Ltd. - UVCFTR_S.sys.) -- C:\Windows\system32\drivers\UVCFTR_S.SYS
                O58 - SDL:[MD5.E43574F6A56A0EE11809B48C09E4FD3C] - 14/07/2009 - 02:19:10 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\viaide.sys
                O58 - SDL:[MD5.9DFA0CC2F8855A04816729651175B631] - 14/07/2009 - 02:19:11 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\system32\drivers\vsmraid.sys
                O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 13/07/2009 - 22:40:41 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\ANSI.SYS
                O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 13/07/2009 - 22:40:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\country.sys
                O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 13/07/2009 - 22:40:40 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\HIMEM.SYS
                O58 - SDL:[MD5.492090267B9608C62B956CD29BE3AFB7] - 13/07/2009 - 22:40:43 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\KEY01.SYS
                O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 13/07/2009 - 22:40:43 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\KEYBOARD.SYS
                O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 13/07/2009 - 22:40:23 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS.SYS
                O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 13/07/2009 - 22:40:31 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS404.SYS
                O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 13/07/2009 - 22:40:35 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS411.SYS
                O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 13/07/2009 - 22:40:39 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS412.SYS
                O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 13/07/2009 - 22:40:27 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS804.SYS
                O58 - SDL:[MD5.2E4112FB7D1B76E11ADFD7487B5D0E95] - 13/07/2009 - 22:40:11 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO.SYS
                O58 - SDL:[MD5.A98EBD4C2DF983665BF2D1AF49949974] - 13/07/2009 - 22:40:15 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO404.SYS
                O58 - SDL:[MD5.3F7E6406EDEF197C5CAAB2240EEF6F48] - 13/07/2009 - 22:40:17 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO411.SYS
                O58 - SDL:[MD5.3E64D681B776CC57BDC38A46D881F85B] - 13/07/2009 - 22:40:19 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO412.SYS
                O58 - SDL:[MD5.D86B6435729231C171432B4E77801BDB] - 13/07/2009 - 22:40:13 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO804.SYS

                ---\\ Liste des outils de nettoyage (LATC) (O63)
                O63 - Logiciel: ZHPDiag 1.27 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1

                ---\\ Liste des services Legacy (LALS) (O64)
                O64 - Services: CurCS - C:\Windows\system32\drivers\afd.sys (AFD) .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD
                O64 - Services: CurCS - C:\Windows\System32\DRIVERS\atikmdag.sys - amdkmdag (amdkmdag) .(.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) - LEGACY_AMDKMDAG
                O64 - Services: CurCS - C:\Windows\System32\drivers\archlp.sys (.not file.) - archlp (archlp) .(.Pas de propriétaire - Pas de description.) - LEGACY_ARCHLP
                O64 - Services: CurCS - C:\Windows\System32\DRIVERS\aswFsBlk.sys - aswFsBlk (aswFsBlk) .(.ALWIL Software - avast! File System Access Blocking Driver.) - LEGACY_ASWFSBLK
                O64 - Services: CurCS - C:\Windows\System32\DRIVERS\aswMonFlt.sys - aswMonFlt (aswMonFlt) .(.ALWIL Software - avast! File System Minifilter for Windows 2.) - LEGACY_ASWMONFLT
                O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWRDR.sys - (.not file.) - aswRdr (aswRdr) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWRDR
                O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWSP.sys - (.not file.) - avast! Self Protection (aswSP) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWSP
                O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWTDI.sys - (.not file.) - avast! Network Shield Support (aswTdi) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWTDI
                O64 - Services: CurCS - C:\Windows\system32\Drivers\AVGNTFLT.sys - avgntflt (avgntflt) .(.Pas de propriétaire - Pas de description.) - LEGACY_AVGNTFLT
                O64 - Services: CurCS - C:\Windows\system32\Drivers\BEEP.sys - (.not file.) - Beep (Beep) .(.Pas de propriétaire - Pas de description.) - LEGACY_BEEP
                O64 - Services: CurCS - C:\Windows\system32\browser.dll (bowser) .(.Microsoft Corporation - DLL du service Explorateur d'ordinateurs.) - LEGACY_BOWSER
                O64 - Services: CurCS - C:\Windows\System32\DRIVERS\cdfs.sys - CD/DVD File System Reader (cdfs) .(.Microsoft Corporation - CD-ROM File System Driver.) - LEGACY_CDFS
                O64 - Services: CurCS - C:\Windows\system32\clfs.sys (CLFS) .(.Microsoft Corporation - Common Log File System Driver.) - LEGACY_CLFS
                O64 - Services: CurCS - C:\Windows\System32\Drivers\cng.sys - CNG (CNG) .(.Microsoft Corporation - Kernel Cryptography, Next Generation.) - LEGACY_CNG
                O64 - Services: CurCS - C:\Windows\system32\drivers\dfsc.sys (DfsC) .(.Microsoft Corporation - DFS Namespace Client Driver.) - LEGACY_DFSC
                O64 - Services: CurCS - C:\Windows\system32\drivers\discache.sys (discache) .(.Microsoft Corporation - System Indexer/Cache Driver.) - LEGACY_DISCACHE
                O64 - Services: CurCS - C:\Windows\system32\drivers\dxgkrnl.sys - LDDM Graphics Subsystem (DXGKrnl) .(.Microsoft Corporation - DirectX Graphics Kernel.) - LEGACY_DXGKRNL
                O64 - Services: CurCS - C:\Windows\system32\Drivers\FASTFAT.sys - (.not file.) - FAT12/16/32 File System Driver (fastfat) .(.Pas de propriétaire - Pas de description.) - LEGACY_FASTFAT
                O64 - Services: CurCS - C:\Windows\system32\drivers\fileinfo.sys (FileInfo) .(.Microsoft Corporation - FileInfo Filter Driver.) - LEGACY_FILEINFO
                O64 - Services: CurCS - C:\Windows\system32\drivers\fltmgr.sys (FltMgr) .(.Microsoft Corporation - Gestionnaire de filtres de système de fichi.) - LEGACY_FLTMGR
                O64 - Services: CurCS - C:\Windows\system32\Drivers\FS_REC.sys - Fs_Rec (Fs_Rec) .(.Pas de propriétaire - Pas de description.) - LEGACY_FS_REC
                O64 - Services: CurCS - C:\Windows\system32\drivers\fvevol.sys (fvevol) .(.Microsoft Corporation - BitLocker Drive Encryption Driver.) - LEGACY_FVEVOL
                O64 - Services: CurCS - C:\Windows\system32\drivers\http.sys (HTTP) .(.Microsoft Corporation - HTTP Pile du protocole.) - LEGACY_HTTP
                O64 - Services: CurCS - C:\Windows\system32\drivers\hwpolicy.sys (hwpolicy) .(.Microsoft Corporation - Hardware Policy Driver.) - LEGACY_HWPOLICY
                O64 - Services: CurCS - C:\Windows\System32\Drivers\ksecdd.sys - KSecDD (KSecDD) .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECDD
                O64 - Services: CurCS - C:\Windows\System32\Drivers\ksecpkg.sys - KSecPkg (KSecPkg) .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECPKG
                O64 - Services: CurCS - C:\Windows\System32\DRIVERS\lltdio.sys - Link-Layer Topology Discovery Mapper I/O Driver (lltdio) .(.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) - LEGACY_LLTDIO
                O64 - Services: CurCS - C:\Windows\system32\drivers\luafv.sys (luafv) .(.Microsoft Corporation - Pilote de filtre de virtualisation de fichi.) - LEGACY_LUAFV
                O64 - Services: CurCS - C:\Windows\system32\drivers\mbam.sys - MBAMProtector (MBAMProtector) .(.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) - LEGACY_MBAMPROTECTOR
                O64 - Services: CurCS - C:\Windows\system32\drivers\mountmgr.sys (mountmgr) .(.Microsoft Corporation - Gestionnaire des points de montage.) - LEGACY_MOUNTMGR
                O64 - Services: CurCS - C:\Windows\system32\FirewallAPI.dll (mpsdrv) .(.Microsoft Corporation - API du Pare-feu Windows.) - LEGACY_MPSDRV
                O64 - Services: CurCS - C:\Windows\system32\wkssvc.dll (mrxsmb) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB
                O64 - Services: CurCS - C:\Windows\system32\wkssvc.dll (mrxsmb10) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB10
                O64 - Services: CurCS - C:\Windows\system32\wkssvc.dll (mrxsmb20) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB20
                O64 - Services: CurCS - C:\Windows\system32\Drivers\MSFS.sys - Msfs (Msfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_MSFS
                O64 - Services: CurCS - C:\Windows\System32\DRIVERS\msisadrv.sys - msisadrv (msisadrv) .(.Microsoft Corporation - ISA Driver.) - LEGACY_MSISADRV
                O64 - Services: CurCS - C:\Windows\system32\drivers\mup.sys (Mup) .(.Microsoft Corporation - Multiple UNC Provider Driver.) - LEGACY_MUP
                O64 - Services: CurCS - C:\Windows\System32\DRIVERS\nwifi.sys - NativeWiFi Filter (NativeWifiP) .(.Microsoft Corporation - Pilote de miniport WiFi natif.) - LEGACY_NATIVEWIFIP
                O64 - Services: CurCS - C:\Windows\system32\drivers\ndis.sys (NDIS) .(.Microsoft Corporation - Pilote NDIS 6.20.) - LEGACY_NDIS
                O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ndisuio.sys - NDIS Usermode I/O Protocol (Ndisuio) .(.Microsoft Corporation - Pilote d'E/S du mode utilisateur NDIS.) - LEGACY_NDISUIO
                O64 - Services: CurCS - C:\Windows\system32\Drivers\NDPROXY.sys - NDProxy (NDProxy) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDPROXY
                O64 - Services: CurCS - C:\Windows\System32\DRIVERS\netbios.sys - NetBIOS Interface (NetBIOS) .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS
                O64 - Services: CurCS - C:\Windows\system32\drivers\netbt.sys (NetBT) .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT
                O64 - Services: CurCS - C:\Windows\system32\Drivers\NPFS.sys - Npfs (Npfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NPFS
                O64 - Services: CurCS - C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy) .(.Microsoft Corporation - NSI Proxy.) - LEGACY_NSIPROXY
                O64 - Services: CurCS - C:\Windows\system32\Drivers\NTFS.sys - Ntfs (Ntfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NTFS
                O64 - Services: CurCS - C:\Windows\system32\Drivers\NULL.sys - Null (Null) .(.Pas de propriétaire - Pas de description.) - LEGACY_NULL
                O64 - Services: CurCS - C:\Windows\System32\drivers\pcw.sys - Performance Counters for Windows Driver (pcw) .(.Microsoft Corporation - Performance Counters for Windows Driver.) - LEGACY_PCW
                O64 - Services: CurCS - C:\Windows\System32\drivers\peauth.sys - PEAUTH (PEAUTH) .(.Microsoft Corporation - Protected Environment Authentication and Au.) - LEGACY_PEAUTH
                O64 - Services: CurCS - C:\Windows\system32\drivers\pacer.sys (Psched) .(.Microsoft Corporation - Planificateur de paquets QoS.) - LEGACY_PSCHED
                O64 - Services: CurCS - C:\Windows\system32\drivers\qwavedrv.sys (QWAVEdrv) .(.Microsoft Corporation - Pilote du support de Microsoft Quality Wind.) - LEGACY_QWAVEDRV
                O64 - Services: CurCS - C:\Windows\system32\wkssvc.dll (rdbss) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_RDBSS
                O64 - Services: CurCS - C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD
                O64 - Services: CurCS - C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD) .(.Microsoft Corporation - RDP Encoder Miniport.) - LEGACY_RDPENCDD
                O64 - Services: CurCS - C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP) .(.Microsoft Corporation - RDP Reflector Driver Miniport.) - LEGACY_RDPREFMP
                O64 - Services: CurCS - C:\Windows\system32\Drivers\RDPWD.sys - (.not file.) - RDP Winstation Driver (RDPWD) .(.Pas de propriétaire - Pas de description.) - LEGACY_RDPWD
                O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rspndr.sys - Link-Layer Topology Discovery Responder (rspndr) .(.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) - LEGACY_RSPNDR
                O64 - Services: CurCS - C:\Windows\system32\Drivers\SECDRV.sys - (.not file.) - Security Driver (secdrv) .(.Pas de propriétaire - Pas de description.) - LEGACY_SECDRV
                O64 - Services: CurCS - C:\Windows\system32\Drivers\SPLDR.sys - (.not file.) - Security Processor Loader Driver (spldr) .(.Pas de propriétaire - Pas de description.) - LEGACY_SPLDR
                O64 - Services: CurCS - C:\Windows\System32\Drivers\sptd.sys - sptd (sptd) .(.Pas de propriétaire - Pas de description.) - LEGACY_SPTD
                O64 - Services: CurCS - C:\Windows\system32\srvsvc.dll (srv) .(.Microsoft Corporation - DLL du service Serveur.) - LEGACY_SRV
                O64 - Services: CurCS - C:\Windows\system32\srvsvc.dll (srv2) .(.Microsoft Corporation - DLL du service Serveur.) - LEGACY_SRV2
                O64 - Services: CurCS - C:\Windows\System32\DRIVERS\srvnet.sys - srvnet (srvnet) .(.Microsoft Corporation - Server Network driver.) - LEGACY_SRVNET
                O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (Tcpip) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TCPIP
                O64 - Services: CurCS - C:\Windows\System32\drivers\tcpipreg.sys - TCP/IP Registry Compatibility (tcpipreg) .(.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) - LEGACY_TCPIPREG
                O64 - Services: CurCS - C:\Windows\System32\drivers\tdtcp.sys - TDTCP (TDTCP) .(.Microsoft Corporation - TCP Transport Driver.) - LEGACY_TDTCP
                O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (tdx) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TDX
                O64 - Services: CurCS - C:\Windows\system32\DRIVERS\tssecsrv.sys (tssecsrv) .(.Microsoft Corporation - TS Security Filter Driver.) - LEGACY_TSSECSRV
                O64 - Services: CurCS - C:\Windows\System32\DRIVERS\udfs.sys - udfs (udfs) .(.Microsoft Corporation - UDF File System Driver.) - LEGACY_UDFS
                O64 - Services: CurCS - C:\Windows\system32\drivers\vga.sys - VgaSave (VgaSave) .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE
                O64 - Services: CurCS - C:\Windows\system32\drivers\volmgrx.sys (volmgrx) .(.Microsoft Corporation - Pilote d'extension du gestionnaire de volum.) - LEGACY_VOLMGRX
                O64 - Services: CurCS - C:\Windows\System32\DRIVERS\volsnap.sys - Volumes de stockage (volsnap) .(.Microsoft Corporation - Pilote de cliché instantané du volume.) - LEGACY_VOLSNAP
                O64 - Services: CurCS - C:\Windows\System32\DRIVERS\vwififlt.sys - Virtual WiFi Filter Driver (vwififlt) .(.Microsoft Corporation - Virtual WiFi Filter Driver.) - LEGACY_VWIFIFLT
                O64 - Services: CurCS - C:\Windows\system32\rascfg.dll (Wanarpv6) .(.Microsoft Corporation - Objets de configuration RAS.) - LEGACY_WANARPV6
                O64 - Services: CurCS - C:\Windows\System32\drivers\Wdf01000.sys - Kernel Mode Driver Frameworks service (Wdf01000) .(.Microsoft Corporation - Runtime de l'infrastructure de pilotes en m.) - LEGACY_WDF01000
                O64 - Services: CurCS - C:\Windows\System32\DRIVERS\wfplwf.sys - WFP Lightweight Filter (WfpLwf) .(.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - LEGACY_WFPLWF
                O64 - Services: CurCS - C:\Windows\system32\drivers\ws2ifsl.sys - Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0 (ws2ifsl) .(.Microsoft Corporation - Couche IFS Winsock2.) - LEGACY_WS2IFSL
                O64 - Services: CurCS - C:\Windows\System32\drivers\WudfPf.sys - User Mode Driver Frameworks Platform Driver (WudfPf) .(.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) - LEGACY_WUDFPF

                ---\\ Observateur d'évènement d'application (OEA) (O66)
                O66 - EventLog: ID=1000 (Application Error) - (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\javaw.exe
                O66 - EventLog: ID=1000 (Application Error) - (.Microsoft Corporation - Service Partage réseau du Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmpnetwk.exe
                O66 - EventLog: ID=1000 (Application Error) - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
                O66 - EventLog: ID=1000 (Application Error) - (.3r1c - Converts MKV files to VOB.) -- C:\Program Files\mkv2vob\mkv2vob.exe
                O66 - EventLog: ID=1000 (Application Error) - (.mpc-hc@Sourceforge - Media Player Classic - Homecinema.) -- C:\Program Files\Satsuki Decoder Pack\MPC\mplayerc.exe
                O66 - EventLog: ID=1000 (Application Error) - (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmplayer.exe
                O66 - EventLog: ID=1000 (Application Error) - (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
                O66 - EventLog: ID=1000 (Application Error) - (.Pas de propriétaire - FFmpeg video converter.) -- C:\Program Files\PS3 Media Server\win32\ffmpeg.exe
                O66 - EventLog: ID=1000 (Application Error) - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\VideoLAN\VLC\vlc.exe

                ---\\ File Associations Shell Spawning (O67)
                O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] "%1" %* (.not file.)
                O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
                O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] "%1" %* (.not file.)
                O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] "%1" %* (.not file.)
                O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] "%1" %* (.not file.)
                O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Pas de propriétaire - Pas de description.) -- "C:\Program Files\Internet Explorer\IEXPLORE.exe
                O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
                O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
                O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] "%1" %* (.not file.)
                O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
                O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] "%1" %* (.not file.)
                O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] "%1" %* (.not file.)
                O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] "%1" %* (.not file.)
                O67 - Shell Spawning: <.html> <htmlfile>[HKCR\..\open\Command] (.Pas de propriétaire - Pas de description.) -- "C:\Program Files\Internet Explorer\IEXPLORE.exe
                O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
                O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe

                ---\\ Start Menu Internet (SMI) (O68)
                O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
                O68 - StartMenuInternet: <Opera.exe> <Opera>[HKLM\..\Shell\open\Command] (.Pas de propriétaire - Pas de description.) -- "C:\Program Files\Opera\Opera.exe (.not file.)

                ---\\ Search Browser Infection (SBI) (O69)
                O69 - SBI: SearchScopes [HKCU] {46269002-3F48-42EC-9EA1-02FB23727901} [DefaultScope] - (Google) - https://www.google.fr/?gws_rd=ssl

                ---\\ Recherche des services démarrés par Svchost (SSS) (O83)
                O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d'application.) -- C:\Windows\System32\aelupsvc.dll [62464]
                O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [67584]
                O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [67584]
                O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\system32\srvsvc.dll [168448]
                O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [591360]
                O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [667136]
                O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [473088]
                O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d'accès distant.) -- C:\Windows\System32\rasauto.dll [90624]
                O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d'accès distant.) -- C:\Windows\System32\rasmans.dll [285184]
                O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d'interface dynamique.) -- C:\Windows\System32\mprdim.dll [75264]
                O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d'événements système (SENS).) -- C:\Windows\System32\sens.dll [49664]
                O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll [300544]
                O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\Windows\System32\tapisrv.dll [241664]
                O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur hôte de session Burea.) -- C:\Windows\System32\termsrv.dll [543232]
                O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\system32\wuaueng.dll [1912832]
                O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\Windows\System32\qmgr.dll [589312]
                O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [328192]
                O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll [497152]
                O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll [21504]
                O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d'application.) -- C:\Windows\System32\appinfo.dll [46592]
                O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\system32\iscsiexe.dll [114688]
                O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\system32\mmcss.dll [49664]
                O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [61440]
                O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [98304]
                O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\system32\profsvc.dll [162816]
                O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\system32\schedsvc.dll [743424]
                O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\system32\kmsvc.dll [71168]
                O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à distance.) -- C:\Windows\system32\sessenv.dll [99328]
                O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\system32\wbem\WMIsvc.dll [168960]
                O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d'ordinateurs.) -- C:\Windows\System32\browser.dll [102400]
                O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\system32\themeservice.dll [37376]
                O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [76800]

                ---\\ Recherche particuliere à la racine de certains dossiers (SPRF) (O84)
                [MD5.AE0F2B24223AE2246B667692EFCD5FFF] [SPRF] (.Pas de propriétaire - Pas de description.) -- C:\Program Files\ffdsasetts.reg [2092]
                [MD5.5E17EC962BE296776A2F47571581475E] [SPRF] (.Pas de propriétaire - Pas de description.) -- C:\Program Files\ffdssetts.reg [3956]
                [MD5.3762C43C5940734B0F278805EE73E624] [SPRF] (.Pas de propriétaire - Pas de description.) -- C:\Program Files\ffdsvsetts.reg [33668]
                [MD5.2E276EE61FCFE0DBE357F2B614006E67] [SPRF] (.Pas de propriétaire - Pas de description.) -- C:\Users\benjamin\AppData\Local\GDIPFONTCACHEV1.DAT [82848]
                [MD5.B1F8BF29CA434F5D6DBC195B6F1976A7] [SPRF] (.Pas de propriétaire - Pas de description.) -- C:\Users\benjamin\AppData\Local\Temp\cacaonew634a1c.exe [304368]
                [MD5.B1F8BF29CA434F5D6DBC195B6F1976A7] [SPRF] (.Pas de propriétaire - Pas de description.) -- C:\Users\benjamin\AppData\Local\Temp\cacaonew7bdc9c.exe [304368]
                [MD5.819899ECA6A3D7CE8D678F875054AF04] [SPRF] (.Speedbit Ltd. - DAP Uninstall.) -- C:\Users\benjamin\AppData\Local\Temp\DapRemove.exe [128536]
                [MD5.31882AAB8F75C100C1F888690333FC34] [SPRF] (.Pas de propriétaire - Pas de description.) -- C:\Users\benjamin\AppData\Local\Temp\~gu-ver.dat [590]

                ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
                SR - | Auto 05/05/2010 172032 | C:\Windows\system32\atiesrxx.exe (AMD External Events Utility) . (.AMD.) - C:\Windows\system32\atiesrxx.exe
                SR - | Auto 12/11/2008 18752 | "C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe (aswUpdSv) . (.ALWIL Software.) - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                SR - | Auto 12/11/2008 155160 | "C:\Program Files\Alwil Software\Avast4\ashServ.exe (avast! Antivirus) . (.ALWIL Software.) - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                SS - | Demand 12/11/2008 254040 | "C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe (avast! Mail Scanner) . (.ALWIL Software.) - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                SS - | Demand 12/11/2008 352920 | "C:\Program Files\Alwil Software\Avast4\ashWebSv.exe (avast! Web Scanner) . (.ALWIL Software.) - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                SR - | Auto 06/03/2007 198168 | "C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe (Capture Device Service) . (.InterVideo Inc..) - C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
                SR - | Auto 14/11/2006 40960 | C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe (CFSvcs) . (.TOSHIBA CORPORATION.) - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
                SR - | Auto 19/01/2010 858384 | C:\Program Files\Intel\WiFi\bin\EvtEng.exe (EvtEng) . (.Intel(R) Corporation.) - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
                SS - | Demand 05/10/2010 655624 | "C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (FLEXnet Licensing Service) . (.Acresso Software Inc..) - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
                SS - | Demand 14/07/2009 66056 | C:\Program Files\NOS\bin\getPlus_HelperSvc.exe (getPlus(R) Helper) . (.NOS Microsystems Ltd..) - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
                SS - | Auto 27/09/2009 133104 | "C:\Program Files\Google\Update\GoogleUpdate.exe (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
                SS - | Demand 05/08/2009 182768 | "C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (gusvc) . (.Google.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                SR - | Auto 03/03/2010 13336 | "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
                SS - | Demand 22/10/2004 73728 | "C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe (IDriverT) . (.Macrovision Corporation.) - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
                SS - | Demand 10/06/2010 253808 | "C:\Program Files\ma-config.com\maconfservice.exe (maconfservice) . (.CybelSoft.) - C:\Program Files\ma-config.com\maconfservice.exe
                SR - | Auto 29/04/2010 304464 | "C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
                SR - | Demand 12/12/2008 537896 | "C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe (NMIndexingService) . (.Nero AG.) - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
                SR - | Auto 19/01/2010 473360 | C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (RegSrvc) . (.Intel(R) Corporation.) - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
                SR - | Auto 19/05/2009 240512 | "C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (SeaPort) . (.Microsoft Corporation.) - C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
                SR - | Auto 19/09/2007 77824 | C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe (TNaviSrv) . (.TOSHIBA Corporation.) - C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe
                SR - | Auto 25/05/2006 114688 | C:\Windows\system32\TODDSrv.exe (TODDSrv) . (.TOSHIBA Corporation.) - C:\Windows\system32\TODDSrv.exe
                SR - | Auto 29/03/2007 427576 | "C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe (TosCoSrv) . (.TOSHIBA Corporation.) - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
                SR - | Auto 23/08/2006 49152 | C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe (UleadBurningHelper) . (.Ulead Systems, Inc..) - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
                SR - | Demand 13/06/2010 1343400 | C:\Windows\system32\Wat\WatAdminSvc.exe (WatAdminSvc) . (.Pas de propriétaire.) - C:\Windows\system32\Wat\WatAdminSvc.exe
                SR - | Auto 14/07/2009 20992 | C:\Program Files\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
                SR - | Auto 14/07/2009 20992 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\system32\svchost.exe

                ---\\ Recherche Master Boot Record Infection (MBR)(O80)
                Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.1 by Gmer, http://www.gmer.net
                Run by benjamin at 25/11/2010 17:36:53

                device: opened successfully
                user: MBR read successfully

                Disk trace:
                called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys halmacpi.dll iaStor.sys spqm.sys
                C:\Windows\system32\DRIVERS\iaStor.sys Intel Corporation Intel Rapid Storage Technology driver
                System32\Drivers\spqm.sys
                1 ntkrnlpa!IofCallDriver[0x8304A458] -> \Device\Harddisk0\DR0[0x87CC1030]
                3 CLASSPNP[0x89B0F59E] -> ntkrnlpa!IofCallDriver[0x8304A458] -> [0x861D7958]
                5 ACPI[0x891B53B2] -> ntkrnlpa!IofCallDriver[0x8304A458] -> \Device\Ide\IAAStorageDevice-0[0x8618D028]
                kernel: MBR read successfully
                user & kernel MBR OK

                ---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)
                MBRCheck, version 1.2.3 by ad13, http://ad13.geekstog
                Run by benjamin at 25/11/2010 17:36:57
                186 GB \\.\PhysicalDrive0 Windows 7 MBR code detected
                SHA1: 4379A3D43019B46FA357F7DD6A53B45A3CA8FB79
                Dump file Name : C:\Program Files\ZHPDiag\MBRDump_11-25-10_17-36-59_PhysicalDrive0.bin

                ---\\ Liste des émulateurs de CD/DVD (Hook du MBR)
                O58 - SDL:[MD5.1C000000000000000000000024EF1200] - 06/08/2010 - 02:56:13 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\drivers\sptd.sys

                ---\\ Infection BT - BHO/Toolbar (Possible)
                [HKCU\Software\Ask.com]

                End of the scan (1196 lines in 04mn 38s)(0)
                1. je ne comprend pas je poste les lien et sa me ramenen a chaque fois a la pade d'aceuille du site!!!
                  au pire je te fais un copier collez du contenu!!!

                  Rapport de ZHPDiag v1.27.135 par Nicolas Coolman, Update du 22/11/2010
                  Run by benjamin at 25/11/2010 17:32:21
                  Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
                  Contact : nicolascoolman@yahoo.fr

                  ---\\ Web Browser
                  MSIE: Internet Explorer v8.0.7600.16385 (Defaut)
                  OPIE: Opera v10.63
                  GCIE: Google Chrome v

                  ---\\ System Information
                  Windows 7 Home Premium Edition, 32-bit (Build 7600)
                  Processor: x86 Family 6 Model 15 Stepping 13, GenuineIntel
                  Operating System: 32 Bits
                  Boot mode: Normal (Normal boot)
                  Total RAM: 2046 MB (55% free)
                  System drive C: has 40 GB (43%) free of 93 GB

                  ---\\ Logged in mode
                  Computer Name: PC-DE-BENJAMIN
                  User Name: benjamin
                  All Users Names: mimi, Mcx1-PC-DE-BENJAMIN, HomeGroupUser$, benjamin, ASPNET, Administrateur,
                  Unselected Option: O1,O45,O61,O62,O65,O82
                  Logged in as Administrator

                  ---\\ DOS/Devices
                  C:\ Hard drive, Flash drive, Thumb drive (Free 40 Go of 93 Go)
                  D:\ CD-ROM drive (Not Inserted)
                  E:\ Hard drive, Flash drive, Thumb drive (Free 13 Go of 92 Go)
                  F:\ CD-ROM drive (Not Inserted)

                  ---\\ Security Center & Tools Informations
                  [HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
                  [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
                  [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
                  [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
                  [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
                  [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
                  [HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
                  [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
                  [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
                  [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
                  [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
                  [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
                  [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
                  [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
                  [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
                  [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK
                  [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK
                  [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
                  [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK

                  ---\\ Recherche particulière de fichiers génériques
                  [MD5.2626FC9755BE22F805D3CFA0CE3EE727] - (.Microsoft Corporation - Explorateur Windows.) (.31/10/2009 06:45:39.) -- C:\Windows\Explorer.exe [2614272]
                  [MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 02:14:45.) -- C:\Windows\System32\Wininit.exe [96256]
                  [MD5.37CDB7E72EB66BA85A87CBE37E7F03FD] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.28/10/2009 07:17:59.) -- C:\Windows\System32\Winlogon.exe [285696]
                  [MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 02:26:15.) -- C:\Windows\System32\drivers\atapi.sys [21584]

                  ---\\ Processus lancés
                  [MD5.866CD9A4BF30B79B3BEC2D4E2ED2F059] - (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe [4702208]
                  [MD5.F5EF0675D6EC37F81F8794AEC9630BE0] - (.TOSHIBA Corporation - TOSHIBA Power Saver.) -- C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe [411192]
                  [MD5.B7879E125645DC2FED70B0BD6E694F6C] - (.ALWIL Software - avast! service GUI component.) -- C:\Program Files\Alwil Software\Avast4\ashDisp.exe [81000]
                  [MD5.5D61BE7DB55B026A5D61A3EED09D0EAD] - (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408]
                  [MD5.4D59B0B63AB11345E36D07D3A4CDFC22] - (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [898344]
                  [MD5.3E64D6BFEC27E07A5A0D6DCA0229E700] - (.Synaptics, Inc. - Toshiba Custom PlugIn Application.) -- C:\Program Files\Synaptics\SynTP\SynToshiba.exe [200704]
                  [MD5.2F86F0BC335F7B04B5271693E9E2AD11] - (.Orbitdownloader.com - P2P service of Orbit Downloader.) -- C:\Program Files\Orbitdownloader\orbitnet.exe [557056]
                  [MD5.008F2FE191618133A68F1AC190DC6044] - (.BitTorrent, Inc. - µTorrent.) -- C:\Program Files\uTorrent\uTorrent.exe [328056]
                  [MD5.711FD53E441255983C0AB014E2F107F4] - (.Adobe Systems, Inc. - Adobe® Flash® Player Installer/Uninstaller.) -- C:\Windows\system32\Macromed\Flash\FlashUtil10l_ActiveX.exe [233936]
                  [MD5.AC53E87A01F8BCB1DDBCA60A817D87B7] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [621056]

                  ---\\ Opera, Plugins,Démarrage,Recherche (P1,B0,B1)
                  B0 - SPO: operaprefs.ini [benjamin] Home URL=https://www.google.fr/?gws_rd=ssl

                  ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2)
                  P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\Macromed\Flash\NPSWF32.dll
                  P2 - FPN: [HKLM] [@divx.com/DivX Browser Plugin,version=1.0.0] - (.DivX,Inc. - DivX Web Player version 2.0.3.4.) -- C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
                  P2 - FPN: [HKLM] [@divx.com/DivX Player Plugin,version=1.0.0] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (.not file.)
                  P2 - FPN: [HKLM] [@ma-config.com/HardwareDetection] - (.Cybelsoft - Plugin NPAPI Ma-Config.com.) -- C:\Program Files\ma-config.com\nphardwaredetection.dll
                  P2 - FPN: [HKLM] [@microsoft.com/GENUINE] - (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\Wat\npWatWeb.dll
                  P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=14.0.8081.0709] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
                  P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
                  P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=8] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.2.183.39\npGoogleOneClick8.dll
                  P2 - FPN: [HKCU] [@unity3d.com/UnityPlayer,version=1.0] - (.Unity Technologies ApS - Unity Player 2.6.1f3.) -- C:\Users\benjamin\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll

                  ---\\ Internet Explorer, Démarrage,Recherche,URSearchHook (R0,R1,R3)
                  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
                  R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
                  R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (8.00.7600.16385 (win7_rtm.090713-1255)) -- C:\Windows\System32\ieframe.dll

                  ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
                  F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
                  F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe
                  F2 - REG:system.ini: VMApplet=C:\WINDOWS\system32\SystemPropertiesPerformance.exe

                  ---\\ Browser Helper Objects de navigateur (O2)
                  O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} . (.Orbitdownloader.com - Orbitcth.) -- C:\Program Files\Orbitdownloader\orbitcth.dll
                  O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                  O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
                  O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                  O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} . (.SEIKO EPSON CORPORATION / CyCom Technology - Epson Easy Photo Print (TBL).) -- C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
                  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
                  O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll
                  O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
                  O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll

                  ---\\ Internet Explorer Toolbars (O3)
                  O3 - Toolbar: Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} . (.Pas de propriétaire - Grab Pro.) -- C:\Program Files\Orbitdownloader\GrabPro.dll
                  O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll
                  O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} . (.SEIKO EPSON CORPORATION / CyCom Technology - Epson Easy Photo Print (TBL).) -- C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
                  O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

                  ---\\ Applications démarrées par registre & par dossier (O4)
                  O4 - HKLM\..\Run: [SynTPStart] . (.Synaptics, Inc. - Synaptics Pointing Device starter.) -- C:\Program Files\Synaptics\SynTP\SynTPStart.exe
                  O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe
                  O4 - HKLM\..\Run: [TPwrMain] . (.TOSHIBA Corporation - TOSHIBA Power Saver.) -- C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
                  O4 - HKLM\..\Run: [avast!] . (.ALWIL Software - avast! service GUI component.) -- C:\Program Files\Alwil Software\Avast4\ashDisp.exe
                  O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
                  O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
                  O4 - HKLM\..\Run: [B2C_AGENT] . (.LG Electronics - B2C NotiAgent MFC ?? ????.) -- C:\ProgramData\LGMOBILEAX\B2C_Client\B2CNotiAgent.exe
                  O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
                  O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
                  O4 - HKLM\..\Run: [DivXUpdate] . (.Pas de propriétaire - DivX Update.) -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
                  O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
                  O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] . (.Nero AG - Nero Home.) -- C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
                  O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                  O4 - HKCU\..\Run: [Connexion SFR 9props.exe] . (.SFR - Propriétés de la connexion SFR.) -- C:\Program Files\SFR\Kit\9props.exe
                  O4 - HKCU\..\Run: [cacaoweb] . (.Pas de propriétaire - Pas de description.) -- C:\Users\benjamin\AppData\Roaming\cacaoweb\cacaoweb.exe
                  O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
                  O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
                  O4 - HKUS\S-1-5-21-3044871919-414637709-4090314853-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
                  O4 - HKUS\S-1-5-21-3044871919-414637709-4090314853-1000\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] . (.Nero AG - Nero Home.) -- C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
                  O4 - HKUS\S-1-5-21-3044871919-414637709-4090314853-1000\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                  O4 - HKUS\S-1-5-21-3044871919-414637709-4090314853-1000\..\Run: [Connexion SFR 9props.exe] . (.SFR - Propriétés de la connexion SFR.) -- C:\Program Files\SFR\Kit\9props.exe
                  O4 - HKUS\S-1-5-21-3044871919-414637709-4090314853-1000\..\Run: [cacaoweb] . (.Pas de propriétaire - Pas de description.) -- C:\Users\benjamin\AppData\Roaming\cacaoweb\cacaoweb.exe
                  O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
                  O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe

                  ---\\ Autres liens utilisateurs (O4)
                  O4 - Global Startup: C:\Documents And Settings\benjamin\Desktop\abgx360 GUI.lnk . (.Pas de propriétaire.) -- C:\Program Files\abgx360\abgx360gui.exe
                  O4 - Global Startup: C:\Documents And Settings\benjamin\Desktop\DivX Movies.lnk . (.Pas de propriétaire.) -- C:\Users\benjamin\Videos\DivX Movies
                  O4 - Global Startup: C:\Documents And Settings\benjamin\Desktop\DVD Decrypter.lnk . (.LIGHTNING UK!.) -- C:\Program Files\DVD Decrypter\DVDDecrypter.exe
                  O4 - Global Startup: C:\Documents And Settings\benjamin\Desktop\Glary Utilities.lnk . (.Glarysoft Ltd.) -- C:\Program Files\Glary Utilities\Integrator.exe
                  O4 - Global Startup: C:\Documents And Settings\benjamin\Desktop\JDownloader.lnk . (.AppWork UG (haftungsbeschränkt).) -- C:\Program Files\JDownloader\JDownloader.exe
                  O4 - Global Startup: C:\Documents And Settings\benjamin\Desktop\mkv2vob.lnk . (.3r1c.) -- C:\Program Files\mkv2vob\loader.exe
                  O4 - Global Startup: C:\Documents And Settings\benjamin\Desktop\Nero Vision.lnk . (.Nero AG.) -- C:\Program Files\Nero\Nero8\Nero Vision\NeroVision.exe
                  O4 - Global Startup: C:\Documents And Settings\benjamin\Desktop\Rosetta Stone Version 3.lnk . (.Multidmedia Limited.) -- C:\Windows\Installer\{99011A6E-5200-11DE-BDB8-7ACD56D89593}\MainIcon.exe
                  O4 - Global Startup: C:\Documents And Settings\benjamin\Desktop\WBFS Manager 3.0.lnk . (.Pas de propriétaire.) -- C:\Program Files\WBFS\WBFS Manager 3.0\WBFSManager.exe
                  O4 - Global Startup: C:\Users\benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
                  O4 - Global Startup: C:\Users\benjamin\Desktop\abgx360 GUI.lnk . (.Pas de propriétaire.) -- C:\Program Files\abgx360\abgx360gui.exe
                  O4 - Global Startup: C:\Users\benjamin\Desktop\DivX Movies.lnk . (.Pas de propriétaire.) -- C:\Users\benjamin\Videos\DivX Movies
                  O4 - Global Startup: C:\Users\benjamin\Desktop\DVD Decrypter.lnk . (.LIGHTNING UK!.) -- C:\Program Files\DVD Decrypter\DVDDecrypter.exe
                  O4 - Global Startup: C:\Users\benjamin\Desktop\Glary Utilities.lnk . (.Glarysoft Ltd.) -- C:\Program Files\Glary Utilities\Integrator.exe
                  O4 - Global Startup: C:\Users\benjamin\Desktop\JDownloader.lnk . (.AppWork UG (haftungsbeschränkt).) -- C:\Program Files\JDownloader\JDownloader.exe
                  O4 - Global Startup: C:\Users\benjamin\Desktop\mkv2vob.lnk . (.3r1c.) -- C:\Program Files\mkv2vob\loader.exe
                  O4 - Global Startup: C:\Users\benjamin\Desktop\Nero Vision.lnk . (.Nero AG.) -- C:\Program Files\Nero\Nero8\Nero Vision\NeroVision.exe
                  O4 - Global Startup: C:\Users\benjamin\Desktop\Rosetta Stone Version 3.lnk . (.Multidmedia Limited.) -- C:\Windows\Installer\{99011A6E-5200-11DE-BDB8-7ACD56D89593}\MainIcon.exe
                  O4 - Global Startup: C:\Users\benjamin\Desktop\WBFS Manager 3.0.lnk . (.Pas de propriétaire.) -- C:\Program Files\WBFS\WBFS Manager 3.0\WBFSManager.exe
                  O4 - Global Startup: C:\Users\benjamin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\DVD Decrypter.lnk . (.LIGHTNING UK!.) -- C:\Program Files\DVD Decrypter\DVDDecrypter.exe
                  O4 - Global Startup: C:\Users\benjamin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
                  O4 - Global Startup: C:\Users\benjamin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Opera.lnk . (.Opera Software.) -- C:\Program Files\Opera\opera.exe
                  O4 - Global Startup: C:\Users\benjamin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - Clé orpheline
                  O4 - Global Startup: C:\Users\benjamin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - Clé orpheline

                  ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
                  O8 - Extra context menu item: &Download by Orbit . (.Orbitdownloader.com - Orbitmxt.) -- C:\Program Files\Orbitdownloader\orbitmxt.dll
                  O8 - Extra context menu item: &Grab video by Orbit . (.Orbitdownloader.com - Orbitmxt.) -- C:\Program Files\Orbitdownloader\orbitmxt.dll
                  O8 - Extra context menu item: Do&wnload selected by Orbit . (.Orbitdownloader.com - Orbitmxt.) -- C:\Program Files\Orbitdownloader\orbitmxt.dll
                  O8 - Extra context menu item: Down&load all by Orbit . (.Orbitdownloader.com - Orbitmxt.) -- C:\Program Files\Orbitdownloader\orbitmxt.dll
                  O8 - Extra context menu item: Google Sidewiki... . (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll

                  ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
                  O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                  O9 - Extra button: eBay - Achetez, Vendez - {76577871-04EC-495E-A12B-91F7C3600AFA} . (.Pas de propriétaire - Pas de description.) -- C:\Toshiba\Webshops\eBay\ebay.ico
                  O9 - Extra button: Amazon.fr - {8A918C1D-E123-4E36-B562-5C1519E434CE} . (.Pas de propriétaire - Pas de description.) -- C:\Toshiba\Webshops\Amazon\amazon.ico
                  O9 - Extra 'Tools' menuitem: eBay - {C08CAF1D-C0A3-40D5-9970-06D067EAC017} . (.not file.) - C:\Toshiba\ebay\ebay.ico

                  ---\\ Winsock hijacker (Layered Service Provider) (O10)
                  O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
                  O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
                  O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
                  O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
                  O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
                  O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll

                  ---\\ Objets ActiveX (Downloaded Program Files)(O16)
                  O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Plugin Control) - http://appldnld.apple.com/QuickTime/qtactivex/qtplugin.cab
                  O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
                  O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} ("Ma-Config.com control) - http://fichiers.touslesdrivers.com/maconfig/MaConfig_4_1_0_3.cab
                  O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

                  ---\\ Modification Domaine/Adresses DNS (O17)
                  O17 - HKLM\System\CCS\Services\Tcpip\..\{9F267473-9432-4C76-8D06-5C75DA9B1EFC}: DhcpNameServer = 192.168.1.1
                  O17 - HKLM\System\CCS\Services\Tcpip\..\{F25DDDC8-F0B4-42B7-BA6E-75F30E8ABCF8}: DhcpNameServer = 192.168.1.1
                  O17 - HKLM\System\CS1\Services\Tcpip\..\{9F267473-9432-4C76-8D06-5C75DA9B1EFC}: DhcpNameServer = 192.168.1.1
                  O17 - HKLM\System\CS1\Services\Tcpip\..\{F25DDDC8-F0B4-42B7-BA6E-75F30E8ABCF8}: DhcpNameServer = 192.168.1.1
                  O17 - HKLM\System\CS2\Services\Tcpip\..\{9F267473-9432-4C76-8D06-5C75DA9B1EFC}: DhcpNameServer = 192.168.1.1
                  O17 - HKLM\System\CS2\Services\Tcpip\..\{F25DDDC8-F0B4-42B7-BA6E-75F30E8ABCF8}: DhcpNameServer = 192.168.1.1
                  O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

                  ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
                  O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.

                  ---\\ Liste des services NT non Microsoft et non désactivés (O23)
                  O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\system32\atiesrxx.exe
                  O23 - Service: (aswUpdSv) . (.ALWIL Software - avast! Antivirus updating service.) - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                  O23 - Service: (avast! Antivirus) . (.ALWIL Software - avast! antivirus service.) - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                  O23 - Service: (Capture Device Service) . (.InterVideo Inc. - Capture Device Service.) - C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
                  O23 - Service: (CFSvcs) . (.TOSHIBA CORPORATION - Service of ConfigFree..) - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
                  O23 - Service: (EvtEng) . (.Intel(R) Corporation - Intel(R) PROSet/Wireless Event Log Service.) - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
                  O23 - Service: (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
                  O23 - Service: (IAStorDataMgrSvc) . (.Intel Corporation - IAStorDataSvc.) - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
                  O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
                  O23 - Service: (RegSrvc) . (.Intel(R) Corporation - Intel(R) PROSet/Wireless Registry Service.) - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
                  O23 - Service: (TNaviSrv) . (.TOSHIBA Corporation - TOSHIBA Navi Support Service.) - C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe
                  O23 - Service: (TODDSrv) . (.TOSHIBA Corporation - TDCSrv Application.) - C:\Windows\system32\TODDSrv.exe
                  O23 - Service: (TosCoSrv) . (.TOSHIBA Corporation - TOSHIBA Power Saver.) - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
                  O23 - Service: (UleadBurningHelper) . (.Ulead Systems, Inc. - ULCDRSvr.) - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

                  ---\\ Enumération Active Desktop & MHTML Editor (O24)
                  O24 - Default MHTML Editor: Last - .(.Pas de propriétaire - Pas de description.) - (.not file.)

                  ---\\ Redirection du fichier Hosts (O1)
                  O1 - Hosts: ---------------------------------
                  O1 - Hosts: | Hosts Optimisé par Hajdar pour |
                  O1 - Hosts: | le bonheur des internautes |
                  O1 - Hosts: | hTTp://AdZHosts.BlogSpot.Com |
                  O1 - Hosts: | |
                  O1 - Hosts: |Merci à tous pour votre soutiens |
                  O1 - Hosts: | |
                  O1 - Hosts: | kakudhajdar@gmail.com |
                  O1 - Hosts: ---------------------------------

                  ---\\ Tâches planifiées en automatique (O39)
                  O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GlaryInitialize.job
                  O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
                  O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
                  [MD5.70FFCB9B44BEF2E2D94C0ECDE130FAE3] [APT] [GlaryInitialize] (.Glarysoft Ltd.) -- C:\Program Files\Glary Utilities\initialize.exe
                  [MD5.626A24ED1228580B9518C01930936DF9] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
                  [MD5.626A24ED1228580B9518C01930936DF9] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
                  [MD5.00000000000000000000000000000000] [APT] [{239201D5-FF36-4C3B-9182-26D4A9339592}] (.Pas de propriétaire.) -- C:\SIERRA\MasterCook 5\Programme\MasterCook.exe (.not file.)
                  [MD5.00000000000000000000000000000000] [APT] [{24CB82B8-DF2C-434F-B394-9AA18792658C}] (.Pas de propriétaire.) -- C:\Program Files\Skype\Phone\Skype.exe (.not file.)
                  [MD5.00000000000000000000000000000000] [APT] [{3D506130-7A4B-491E-B3A5-96C9AC39F732}] (.Pas de propriétaire.) -- C:\Program Files\Transcode360\uninstall.exe (.not file.)
                  [MD5.00000000000000000000000000000000] [APT] [{5EA072A3-2BDB-41ED-8365-76637607E8F2}] (.Pas de propriétaire.) -- C:\SIERRA\MasterCook 5\Programme\MasterCook.exe (.not file.)
                  [MD5.00000000000000000000000000000000] [APT] [{8E78F418-37FA-4DE1-AA34-C46B19E947A2}] (.Pas de propriétaire.) -- C:\Windows\IsUn040c.exe2.dll (.not file.)
                  [MD5.00000000000000000000000000000000] [APT] [{ADB7BC44-ED29-4D81-BC5E-3B04688441DA}] (.Pas de propriétaire.) -- C:\Windows\System32\XBCDSU.cpl (.not file.)
                  [MD5.00000000000000000000000000000000] [APT] [{C1C96E93-5F9C-4FE9-BD65-EED75716B731}] (.Pas de propriétaire.) -- C:\SIERRA\MasterCook 5\Programme\MasterCook.exe (.not file.)
                  [MD5.00000000000000000000000000000000] [APT] [{F6921943-2169-46BE-AF69-3611C1DE7480}] (.Pas de propriétaire.) -- C:\SIERRA\MasterCook 5\Programme\MasterCook.exe (.not file.)

                  ---\\ Composants installés (ActiveSetup Installed Components) (O40)
                  O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\regutils.dll
                  O40 - ASIC: Microsoft Windows - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Pas de propriétaire - Pas de description.) -- "C:\Program Files\Windows Mail\WinMail.exe
                  O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11CF-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 10.1 r102.) -- C:\Windows\system32\Macromed\Flash\Flash10l.ocx

                  ---\\ Pilotes lancés au démarrage (O41)
                  O41 - Driver: C:\Windows\system32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
                  O41 - Driver: (archlp) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\System32\drivers\archlp.sys (.not file.)
                  O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
                  O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
                  O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
                  O41 - Driver: C:\Windows\system32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
                  O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\System32\DRIVERS\mssmbios.sys
                  O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
                  O41 - Driver: C:\Windows\system32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
                  O41 - Driver: C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
                  O41 - Driver: C:\Windows\system32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
                  O41 - Driver: C:\Windows\system32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
                  O41 - Driver: C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
                  O41 - Driver: C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
                  O41 - Driver: C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
                  O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
                  O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys
                  O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
                  O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys
                  O41 - Driver: C:\Windows\system32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
                  O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys

                  ---\\ Logiciels installés (O42)
                  O42 - Logiciel: ATI Catalyst Install Manager - (.ATI Technologies, Inc..) [HKLM] -- {EE84642F-D557-A6F3-4F22-1B25A524E73E}
                  O42 - Logiciel: Adobe Download Manager - (.NOS Microsystems Ltd..) [HKLM] -- {E2883E8F-472F-4fb0-9522-AC9BF37916A7}
                  O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
                  O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
                  O42 - Logiciel: Adobe Reader 9.4.1 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A94000000001}
                  O42 - Logiciel: Advertising Center - (.Nero AG.) [HKLM] -- {B2EC4A38-B545-4A00-8214-13FE0E915E6D}
                  O42 - Logiciel: Akamai NetSession Interface - (.Pas de propriétaire.) [HKLM] -- Akamai
                  O42 - Logiciel: Archiveur WinRAR - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver
                  O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
                  O42 - Logiciel: Bluetooth Stack for Windows by Toshiba - (.Pas de propriétaire.) [HKLM] -- {CEBB6BFB-D708-4F99-A633-BC2600E01EF6}
                  O42 - Logiciel: Camera Assistant Software for Toshiba - (.Chicony Electronics Co.,Ltd..) [HKLM] -- {37C866E4-AA67-4725-9E95-A39968DD7960}
                  O42 - Logiciel: Code de la Route - (.Micro Application.) [HKLM] -- {A37A26D5-8444-4862-933B-478371D0299D}
                  O42 - Logiciel: Codeur Windows Media Série 9 - (.Microsoft Corporation.) [HKLM] -- {E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
                  O42 - Logiciel: Codeur Windows Media Série 9 - (.Pas de propriétaire.) [HKLM] -- Windows Media Encoder 9
                  O42 - Logiciel: Configuration DivX - (.DivX, Inc. .) [HKLM] -- DivX Setup.divx.com
                  O42 - Logiciel: DVD Decrypter (Remove Only) - (.Pas de propriétaire.) [HKLM] -- DVD Decrypter
                  O42 - Logiciel: DVD MovieFactory for TOSHIBA - (.Ulead Systems, Inc..) [HKLM] -- {F214EAA4-A069-4BAF-9DA4-4DB8BEEDE485}
                  O42 - Logiciel: DivX Plus DirectShow Filters - (.DivX, Inc..) [HKLM] -- DivX Plus DirectShow Filters
                  O42 - Logiciel: DolbyFiles - (.Nero AG.) [HKLM] -- {B1ADF008-E898-4FE2-8A1F-690D9A06ACAF}
                  O42 - Logiciel: EPSON SX210 Series Printer Uninstall - (.SEIKO EPSON Corporation.) [HKLM] -- EPSON SX210 Series
                  O42 - Logiciel: EPSON Scan - (.Pas de propriétaire.) [HKLM] -- EPSON Scanner
                  O42 - Logiciel: Emdedded IR Driver - (.Compal Electronics, Inc..) [HKLM] -- InstallShield_{A6D4234C-CB02-4048-AC3E-AD09404FA35A}
                  O42 - Logiciel: Epson Easy Photo Print 2 - (.SEIKO EPSON CORPORATION.) [HKLM] -- {87C2248A-C7DD-49ED-9BCD-B312A9D0819E}
                  O42 - Logiciel: Epson Stylus SX210_SX410_TX210_TX410 Manuel - (.Pas de propriétaire.) [HKLM] -- Epson Stylus SX210_SX410_TX210_TX410 Guide d'utilisation
                  O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {B131E59D-202C-43C6-84C9-68F0C37541F1}
                  O42 - Logiciel: Glary Utilities Pro 2.27.0.982 - (.Glarysoft Ltd.) [HKLM] -- Glary Utilities_is1
                  O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
                  O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
                  O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
                  O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3
                  O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {46ABBC54-1872-4AA3-95E2-F2C063A63F31}
                  O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM] -- {3E29EE6C-963A-4aae-86C1-DC237C4A49FC}
                  O42 - Logiciel: InterVideo DeviceService - (.InterVideo.) [HKLM] -- {521AAD14-5030-44BB-8B0E-5CE65FCE57E0}
                  O42 - Logiciel: JDownloader - (.AppWork UG (haftungsbeschränkt).) [HKLM] -- JDownloader
                  O42 - Logiciel: Java(TM) 6 Update 20 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216020FF}
                  O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {E2DFE069-083E-4631-9B6C-43C48E991DE5}
                  O42 - Logiciel: K-Lite Mega Codec Pack 3.8.0 - (.Pas de propriétaire.) [HKLM] -- KLiteCodecPack_is1
                  O42 - Logiciel: LG Android Driver - (.LG Electronics.) [HKLM] -- {4E4F8163-9889-4BAB-B2E7-DBAAE248C1EB}
                  O42 - Logiciel: LG PC Suite III - (.LG Electronics.) [HKLM] -- {C0E18DC4-C74A-4889-AE3A-933471023787}
                  O42 - Logiciel: LG USB Modem Drivers - (.LG Electronics.) [HKLM] -- {FA02ACAC-9E14-4878-A257-92A22A647C2C}
                  O42 - Logiciel: Logiciel Intel(R) PROSet/Wireless WiFi - (.Intel Corporation.) [HKLM] -- {B90E5EBE-DF18-44D5-9D18-689ADEE9DA6C}
                  O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
                  O42 - Logiciel: MSXML 4.0 SP2 (KB927978) - (.Microsoft Corporation.) [HKLM] -- {37477865-A3F1-4772-AD43-AAFC6BCFF99F}
                  O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
                  O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
                  O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM] -- {62008929-7F3E-4565-A3DF-F55F35009021}
                  O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
                  O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Microsoft.) [HKLM] -- {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
                  O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Pas de propriétaire.) [HKLM] -- Microsoft .NET Framework 1.1 (1033)
                  O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB953297) - (.Pas de propriétaire.) [HKLM] -- M953297
                  O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
                  O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
                  O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) [HKLM] -- {4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
                  O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {8A74E887-8F0F-4017-AF53-CBA42211AAA5}
                  O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
                  O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}
                  O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {7299052b-02a4-4627-81f2-1818da5d550d}
                  O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c}
                  O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
                  O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}
                  O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
                  O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 Language Pack SP1 - fra
                  O42 - Logiciel: My 7 Optimizer - (.Pas de propriétaire.) [HKLM] -- My 7 Optimizer
                  O42 - Logiciel: Nero 8 - (.Nero AG.) [HKLM] -- {1CA7ACD6-B21B-4240-AA05-4FC55F6E1036}
                  O42 - Logiciel: Nero ControlCenter - (.Nero AG.) [HKLM] -- {BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}
                  O42 - Logiciel: Nero Installer - (.Nero AG.) [HKLM] -- {E8A80433-302B-4FF1-815D-FCC8EAC482FF}
                  O42 - Logiciel: Nero Vision - (.Nero AG.) [HKLM] -- {43E39830-1826-415D-8BAE-86845787B54B}
                  O42 - Logiciel: OpenOffice.org 3.2 - (.OpenOffice.org.) [HKLM] -- {4EE2EF4B-25D3-4D44-8384-A2B96F811F55}
                  O42 - Logiciel: Opera 10.63 - (.Opera Software ASA.) [HKLM] -- {87CC8013-56D1-43E1-A0A5-AD406B4EBA95}
                  O42 - Logiciel: Orbit Downloader - (.www.orbitdownloader.com.) [HKLM] -- Orbit_is1
                  O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}
                  O42 - Logiciel: Realtek Ethernet Controller Driver For Windows Vista and Later - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
                  O42 - Logiciel: Realtek High Definition Audio Driver - (.Pas de propriétaire.) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
                  O42 - Logiciel: Rosetta Stone Version 3 - (.Rosetta Stone Ltd..) [HKLM] -- {148E08FF-D7C4-46ED-8D4D-601C67FE0AFD}
                  O42 - Logiciel: Rosetta Stone Version 3 - (.Rosetta Stone Ltd..) [HKLM] -- {99011A6E-5200-11DE-BDB8-7ACD56D89593}
                  O42 - Logiciel: Réducteur de bruit lect. CD/DVD - (.TOSHIBA.) [HKLM] -- {9FE35071-CAB2-4E79-93E7-BFC6A2DC5C5D}
                  O42 - Logiciel: SFR - Kit de connexion - (.SFR.) [HKLM] -- SFR_Kit
                  O42 - Logiciel: Satsuki Decoder Pack 4301 - (.Pas de propriétaire.) [HKLM] -- Satsuki Decoder Pack
                  O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics.) [HKLM] -- SynTPDeinstKey
                  O42 - Logiciel: TOSHIBA Assist - (.Pas de propriétaire.) [HKLM] -- {12B3A009-A080-4619-9A2A-C6DB151D8D67}
                  O42 - Logiciel: TOSHIBA ConfigFree - (.TOSHIBA.) [HKLM] -- {78C6A78A-8B03-48C8-A47C-78BA1FCA2307}
                  O42 - Logiciel: TOSHIBA DVD PLAYER - (.TOSHIBA Corporation.) [HKLM] -- {6C5F3BDC-0A1B-4436-A696-5939629D5C31}
                  O42 - Logiciel: TOSHIBA Disc Creator - (.TOSHIBA Corporation.) [HKLM] -- {5DA0E02F-970B-424B-BF41-513A5018E4C0}
                  O42 - Logiciel: TOSHIBA Extended Tiles for Windows Mobility Center - (.Toshiba.) [HKLM] -- InstallShield_{617C36FD-0CBE-4600-84B2-441CEB12FADF}
                  O42 - Logiciel: TOSHIBA Flash Cards Support Utility - (.TOSHIBA.) [HKLM] -- InstallShield_{620BBA5E-F848-4D56-8BDA-584E44584C5E}
                  O42 - Logiciel: TOSHIBA Hardware Setup - (.TOSHIBA.) [HKLM] -- InstallShield_{5279374D-87FE-4879-9385-F17278EBB9D3}
                  O42 - Logiciel: TOSHIBA Mot de passe responsable - (.TOSHIBA.) [HKLM] -- InstallShield_{51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}
                  O42 - Logiciel: TOSHIBA SD Memory Utilities - (.TOSHIBA.) [HKLM] -- {EBFF48F5-3CFA-436F-8FD5-94FB01D3A0A7}
                  O42 - Logiciel: TOSHIBA Software Modem - (.Agere Systems.) [HKLM] -- TOSHIBA Software Modem
                  O42 - Logiciel: TOSHIBA Value Added Package - (.TOSHIBA Corporation.) [HKLM] -- InstallShield_{FEDD27A0-B306-45EF-BF58-B527406B42C8}
                  O42 - Logiciel: Texas Instruments PCIxx21/x515/xx12 drivers. - (.Nom de votre société.) [HKLM] -- InstallShield_{DB780B85-B4B5-4864-A49C-9B706B169C93}
                  O42 - Logiciel: Uninstall 1.0.0.1 - (.Pas de propriétaire.) [HKLM] -- Uninstall_is1
                  O42 - Logiciel: Unity Web Player - (.Unity Technologies ApS.) [HKCU] -- UnityWebPlayer
                  O42 - Logiciel: VC80CRTRedist - 8.0.50727.4053 - (.DivX, Inc.) [HKLM] -- {5EE7D259-D137-4438-9A5F-42F432EC0421}
                  O42 - Logiciel: VCRedistSetup - (.Nero AG.) [HKLM] -- {3921A67A-5AB1-4E48-9444-C71814CF3027}
                  O42 - Logiciel: VideoLAN VLC media player 0.8.6e - (.VideoLAN Team.) [HKLM] -- VLC media player
                  O42 - Logiciel: WBFS Manager 3.0 - (.AlexDP.) [HKLM] -- WBFS Manager 3.0
                  O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3B4E636E-9D65-4D67-BA61-189800823F52}
                  O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM] -- {2075CB0A-D26F-4DAA-B424-5079296B43BA}
                  O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {5DD76286-9BE7-4894-A990-E905E91AC818}
                  O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {770F1BEC-2871-4E70-B837-FB8525FFA3B1}
                  O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM] -- {53B20C18-D8D4-4588-8737-9BBFE303C354}
                  O42 - Logiciel: Windows Live Toolbar - (.Microsoft Corporation.) [HKLM] -- {F7D27C70-90F5-49B9-B188-0A133C0CE353}
                  O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {4634B21A-CC07-4396-890C-2B8168661FEA}
                  O42 - Logiciel: abgx360 v1.0.2 - (.Pas de propriétaire.) [HKLM] -- abgx360
                  O42 - Logiciel: avast! Antivirus - (.Alwil Software.) [HKLM] -- avast!
                  O42 - Logiciel: mkv2vob - (.3r1c.) [HKLM] -- {21AE04E8-EBF6-40DB-9AA9-B7A80C5D057D}
                  O42 - Logiciel: neroxml - (.Nero AG.) [HKLM] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B}
                  O42 - Logiciel: µTorrent - (.Pas de propriétaire.) [HKLM] -- uTorrent

                  ---\\ HKCU & HKLM Software Keys
                  [HKCU\Software\ABBYY]
                  [HKCU\Software\AC3Filter]
                  [HKCU\Software\ALWIL Software]
                  [HKCU\Software\AMD]
                  [HKCU\Software\ATI Technologies Inc.]
                  [HKCU\Software\ATI]
                  [HKCU\Software\Acoustica]
                  [HKCU\Software\Adobe]
                  [HKCU\Software\Ahead]
                  [HKCU\Software\Ahusoft]
                  [HKCU\Software\AppDataLow\Software\AskToolbar]
                  [HKCU\Software\AppDataLow\Software\DivXNetworks]
                  [HKCU\Software\AppDataLow\Software\Google]
                  [HKCU\Software\AppDataLow\Software\Microsoft]
                  [HKCU\Software\AppDataLow\Software\Monitored]
                  [HKCU\Software\AppDataLow\Software\Unity]
                  [HKCU\Software\AppDataLow\Software\settings]
                  [HKCU\Software\AppDataLow\Software]
                  [HKCU\Software\AppDataLow]
                  [HKCU\Software\Apple Computer, Inc.]
                  [HKCU\Software\ArcSoft]
                  [HKCU\Software\Ask.com]
                  [HKCU\Software\BitTorrent]
                  [HKCU\Software\Blizzard Entertainment]
                  [HKCU\Software\CDDB]
                  [HKCU\Software\CEC_CM_SW]
                  [HKCU\Software\Classes]
                  [HKCU\Software\Clients]
                  [HKCU\Software\CoreAAC]
                  [HKCU\Software\CoreVorbis]
                  [HKCU\Software\Cyberlink]
                  [HKCU\Software\DT Soft]
                  [HKCU\Software\DVD Decrypter]
                  [HKCU\Software\DVDVideoSoft]
                  [HKCU\Software\DivXNetworks]
                  [HKCU\Software\DivX]
                  [HKCU\Software\Epson]
                  [HKCU\Software\GNU]
                  [HKCU\Software\GSpot Appliance Corp]
                  [HKCU\Software\Gabest]
                  [HKCU\Software\GlarySoft]
                  [HKCU\Software\Google]
                  [HKCU\Software\Haali]
                  [HKCU\Software\IM Providers]
                  [HKCU\Software\ImgBurn]
                  [HKCU\Software\Intel]
                  [HKCU\Software\JavaSoft]
                  [HKCU\Software\LG Electronics Inc]
                  [HKCU\Software\Lake]
                  [HKCU\Software\Licenses]
                  [HKCU\Software\LowRegistry]
                  [HKCU\Software\Lucent]
                  [HKCU\Software\Macromedia]
                  [HKCU\Software\Magnet]
                  [HKCU\Software\MainConcept]
                  [HKCU\Software\Malwarebytes' Anti-Malware]
                  [HKCU\Software\MozillaPlugins]
                  [HKCU\Software\Mozilla]
                  [HKCU\Software\MyHeritage.com]
                  [HKCU\Software\NCH Software]
                  [HKCU\Software\NCH Swift Sound]
                  [HKCU\Software\Nektra]
                  [HKCU\Software\Nero]
                  [HKCU\Software\Netscape]
                  [HKCU\Software\Neuf]
                  [HKCU\Software\OpenOffice.org]
                  [HKCU\Software\Opera Software]
                  [HKCU\Software\Paint.NET]
                  [HKCU\Software\Policies]
                  [HKCU\Software\ProgSense]
                  [HKCU\Software\RealNetworks]
                  [HKCU\Software\Realtek]
                  [HKCU\Software\SWiSHzone.com]
                  [HKCU\Software\Satsuki Decoder Pack]
                  [HKCU\Software\Skype]
                  [HKCU\Software\Smart Projects]
                  [HKCU\Software\Steganos]
                  [HKCU\Software\SubSystems]
                  [HKCU\Software\Synaptics]
                  [HKCU\Software\TOSHIBA]
                  [HKCU\Software\Trolltech]
                  [HKCU\Software\TuneUp]
                  [HKCU\Software\Ulead Systems]
                  [HKCU\Software\Ulead]
                  [HKCU\Software\Uniblue]
                  [HKCU\Software\Unity]
                  [HKCU\Software\VB and VBA Program Settings]
                  [HKCU\Software\VirtualDub.org]
                  [HKCU\Software\Vision Thing]
                  [HKCU\Software\WIISCRUBBER]
                  [HKCU\Software\WinRAR SFX]
                  [HKCU\Software\WinRAR]
                  [HKCU\Software\YahooPartnerToolbar]
                  [HKCU\Software\abgx360gui]
                  [HKCU\Software\cacaoweb]
                  [HKCU\Software\cybelsoft]
                  [HKCU\Software\epsxe]
                  [HKCU\Software\orbit]
                  [HKCU\Software\yahoo]
                  [HKLM\Software\ABBYY]
                  [HKLM\Software\ACE Compression Software]
                  [HKLM\Software\ALWIL Software]
                  [HKLM\Software\AMD]
                  [HKLM\Software\ATI Technologies]
                  [HKLM\Software\ATI]
                  [HKLM\Software\Adobe]
                  [HKLM\Software\Agere]
                  [HKLM\Software\Ahead]
                  [HKLM\Software\Apple Computer, Inc.]
                  [HKLM\Software\Apple Inc.]
                  [HKLM\Software\ArcSoft]
                  [HKLM\Software\AviSynth]
                  [HKLM\Software\BitTorrent]
                  [HKLM\Software\BrowserChoice]
                  [HKLM\Software\CDDB]
                  [HKLM\Software\COMPAL]
                  [HKLM\Software\Classes]
                  [HKLM\Software\Clients]
                  [HKLM\Software\Codec Tweak Tool]
                  [HKLM\Software\CyberLink]
                  [HKLM\Software\DT Soft]
                  [HKLM\Software\DVDVideoSoft]
                  [HKLM\Software\Debug]
                  [HKLM\Software\DivXNetworks]
                  [HKLM\Software\DivX]
                  [HKLM\Software\EPSON]
                  [HKLM\Software\FullCircle]
                  [HKLM\Software\GNU]
                  [HKLM\Software\Gabest]
                  [HKLM\Software\GlarySoft]
                  [HKLM\Software\Google]
                  [HKLM\Software\HaaliMkx]
                  [HKLM\Software\InstallShield]
                  [HKLM\Software\InstalledOptions]
                  [HKLM\Software\Intel]
                  [HKLM\Software\InterVideo]
                  [HKLM\Software\Internet Download Manager]
                  [HKLM\Software\JavaSoft]
                  [HKLM\Software\JreMetrics]
                  [HKLM\Software\KLCodecPack]
                  [HKLM\Software\KoYoTe]
                  [HKLM\Software\LSI]
                  [HKLM\Software\Licenses]
                  [HKLM\Software\Lucent]
                  [HKLM\Software\Macromedia]
                  [HKLM\Software\Macrovision]
                  [HKLM\Software\Malwarebytes' Anti-Malware]
                  [HKLM\Software\MimarSinan]
                  [HKLM\Software\MozillaPlugins]
                  [HKLM\Software\Mozilla]
                  [HKLM\Software\MyHeritage.com]
                  [HKLM\Software\NCH Software]
                  [HKLM\Software\NCH Swift Sound]
                  [HKLM\Software\NOS]
                  [HKLM\Software\NeroDigital]
                  [HKLM\Software\Nero]
                  [HKLM\Software\Netscape]
                  [HKLM\Software\Neuf]
                  [HKLM\Software\Nokia]
                  [HKLM\Software\ODBC]
                  [HKLM\Software\OpenOffice.org]
                  [HKLM\Software\Opera Software]
                  [HKLM\Software\Orbit]
                  [HKLM\Software\Policies]
                  [HKLM\Software\RTLSetup]
                  [HKLM\Software\RealNetworks]
                  [HKLM\Software\Realtek]
                  [HKLM\Software\RegisteredApplications]
                  [HKLM\Software\S3R521]
                  [HKLM\Software\Sierra OnLine]
                  [HKLM\Software\Sonic]
                  [HKLM\Software\Steganos]
                  [HKLM\Software\Sun Microsystems]
                  [HKLM\Software\SymDebug]
                  [HKLM\Software\Symantec]
                  [HKLM\Software\Synaptics]
                  [HKLM\Software\Sys Modules]
                  [HKLM\Software\TOSHIBA]
                  [HKLM\Software\Transcode360]
                  [HKLM\Software\TuneUp]
                  [HKLM\Software\Ulead Systems]
                  [HKLM\Software\Uniblue]
                  [HKLM\Software\Volatile]
                  [HKLM\Software\WinRAR]
                  [HKLM\Software\Yahoo]
                  [HKLM\Software\cybelsoft]
                  [HKLM\Software\iTinySoft]
                  [HKLM\Software\mozilla.org]

                  ---\\ Contenu des dossiers ProgramFiles/ProgramData (O43)
                  O43 - CFD: 10/09/2010 - 17:54:02 ----D- C:\Program Files\abgx360
                  O43 - CFD: 17/08/2010 - 21:39:56 ----D- C:\Program Files\Adobe
                  O43 - CFD: 20/12/2009 - 21:53:56 ----D- C:\Program Files\Alwil Software
                  O43 - CFD: 03/11/2009 - 15:09:30 ----D- C:\Program Files\ATI
                  O43 - CFD: 19/06/2010 - 15:20:16 ----D- C:\Program Files\ATI Technologies
                  O43 - CFD: 03/11/2009 - 15:09:42 ----D- C:\Program Files\AviSynth 2.5
                  O43 - CFD: 03/11/2009 - 15:09:42 ----D- C:\Program Files\BitTorrent
                  O43 - CFD: 03/11/2009 - 15:09:44 ----D- C:\Program Files\Camera Assistant Software for Toshiba
                  O43 - CFD: 27/05/2010 - 11:51:06 ----D- C:\Program Files\Cisco
                  O43 - CFD: 16/11/2010 - 02:19:04 ----D- C:\Program Files\Common Files
                  O43 - CFD: 05/10/2010 - 00:55:16 ----D- C:\Program Files\DAEMON Tools Lite
                  O43 - CFD: 27/05/2010 - 14:16:36 ----D- C:\Program Files\DIFX
                  O43 - CFD: 16/11/2010 - 02:19:40 ----D- C:\Program Files\DivX
                  O43 - CFD: 19/10/2009 - 21:16:56 ----D- C:\Program Files\Dun74
                  O43 - CFD: 04/09/2010 - 17:49:44 ----D- C:\Program Files\DVD Decrypter
                  O43 - CFD: 14/07/2009 - 10:01:10 ----D- C:\Program Files\DVD Maker
                  O43 - CFD: 27/05/2010 - 11:14:26 ----D- C:\Program Files\El Juky
                  O43 - CFD: 03/11/2009 - 15:11:30 ----D- C:\Program Files\Elaborate Bytes
                  O43 - CFD: 03/11/2009 - 15:11:30 ----D- C:\Program Files\ElcomSoft
                  O43 - CFD: 19/02/2010 - 19:32:26 ----D- C:\Program Files\epson
                  O43 - CFD: 19/02/2010 - 19:34:22 ----D- C:\Program Files\Epson Software
                  O43 - CFD: 01/04/2010 - 22:59:56 ----D- C:\Program Files\Family Toolbar
                  O43 - CFD: 03/11/2009 - 16:30:56 -SH-D- C:\Program Files\Fichiers communs
                  O43 - CFD: 03/11/2009 - 15:11:42 ----D- C:\Program Files\FreeTime
                  O43 - CFD: 09/09/2010 - 09:36:04 ----D- C:\Program Files\Glary Utilities
                  O43 - CFD: 14/04/2010 - 17:17:38 ----D- C:\Program Files\Google
                  O43 - CFD: 03/11/2009 - 15:12:24 ----D- C:\Program Files\IDM
                  O43 - CFD: 01/09/2010 - 18:17:22 --H-D- C:\Program Files\InstallShield Installation Information
                  O43 - CFD: 26/04/2010 - 15:29:46 ----D- C:\Program Files\Intel
                  O43 - CFD: 14/10/2010 - 12:24:42 ----D- C:\Program Files\Internet Explorer
                  O43 - CFD: 03/11/2009 - 15:12:48 ----D- C:\Program Files\InterVideo
                  O43 - CFD: 23/04/2010 - 17:24:16 ----D- C:\Program Files\Java
                  O43 - CFD: 25/11/2010 - 15:09:50 ----D- C:\Program Files\JDownloader
                  O43 - CFD: 24/02/2010 - 22:23:08 ----D- C:\Program Files\JRE
                  O43 - CFD: 03/11/2009 - 15:13:04 ----D- C:\Program Files\K-Lite Codec Pack
                  O43 - CFD: 01/09/2010 - 18:19:54 ----D- C:\Program Files\LG Electronics
                  O43 - CFD: 03/11/2009 - 15:13:04 ----D- C:\Program Files\ltmoh
                  O43 - CFD: 27/05/2010 - 12:08:20 ----D- C:\Program Files\LudoSoft
                  O43 - CFD: 19/06/2010 - 15:01:50 ----D- C:\Program Files\ma-config.com
                  O43 - CFD: 22/06/2010 - 14:16:48 ----D- C:\Program Files\Malwarebytes' Anti-Malware
                  O43 - CFD: 25/11/2009 - 16:17:50 ----D- C:\Program Files\Micro Application
                  O43 - CFD: 19/12/2009 - 22:57:18 ----D- C:\Program Files\Microsoft
                  O43 - CFD: 03/11/2009 - 15:13:06 ----D- C:\Program Files\Microsoft Games
                  O43 - CFD: 19/12/2009 - 22:58:14 ----D- C:\Program Files\Microsoft SQL Server Compact Edition
                  O43 - CFD: 19/12/2009 - 22:59:28 ----D- C:\Program Files\Microsoft Sync Framework
                  O43 - CFD: 22/08/2010 - 20:16:12 ----D- C:\Program Files\mkv2vob
                  O43 - CFD: 14/07/2009 - 05:52:32 ----D- C:\Program Files\MSBuild
                  O43 - CFD: 16/03/2010 - 13:23:04 ----D- C:\Program Files\MSXML 4.0
                  O43 - CFD: 15/11/2010 - 16:11:14 ----D- C:\Program Files\NCH Software
                  O43 - CFD: 16/12/2009 - 00:44:40 ----D- C:\Program Files\Nero
                  O43 - CFD: 03/11/2009 - 15:14:32 ----D- C:\Program Files\NOS
                  O43 - CFD: 24/02/2010 - 22:23:06 ----D- C:\Program Files\OpenOffice.org 3
                  O43 - CFD: 25/10/2010 - 21:41:36 ----D- C:\Program Files\Opera
                  O43 - CFD: 12/10/2010 - 14:40:22 ----D- C:\Program Files\Orbitdownloader
                  O43 - CFD: 22/02/2010 - 16:23:24 ----D- C:\Program Files\PS3 Media Server
                  O43 - CFD: 24/11/2010 - 03:04:08 ----D- C:\Program Files\QuickTime
                  O43 - CFD: 03/11/2009 - 15:14:54 ----D- C:\Program Files\Real
                  O43 - CFD: 03/11/2009 - 15:15:10 ----D- C:\Program Files\Realtek
                  O43 - CFD: 14/07/2009 - 05:52:32 ----D- C:\Program Files\Reference Assemblies
                  O43 - CFD: 10/10/2010 - 11:53:56 ----D- C:\Program Files\Rosetta Stone
                  O43 - CFD: 03/11/2009 - 15:15:30 ----D- C:\Program Files\Satsuki Decoder Pack
                  O43 - CFD: 30/11/2009 - 19:39:30 ----D- C:\Program Files\SFR
                  O43 - CFD: 23/11/2009 - 17:08:44 ----D- C:\Program Files\Sierra On-Line
                  O43 - CFD: 03/11/2009 - 15:00:32 ----D- C:\Program Files\Synaptics
                  O43 - CFD: 21/06/2010 - 16:33:44 ----D- C:\Program Files\TOSHIBA
                  O43 - CFD: 14/12/2009 - 23:24:08 ----D- C:\Program Files\Ulead Systems
                  O43 - CFD: 14/07/2009 - 05:53:24 --H-D- C:\Program Files\Uninstall Information
                  O43 - CFD: 12/10/2010 - 01:25:02 ----D- C:\Program Files\uTorrent
                  O43 - CFD: 03/11/2009 - 15:18:54 ----D- C:\Program Files\VideoLAN
                  O43 - CFD: 19/04/2010 - 16:23:32 ----D- C:\Program Files\WBFS
                  O43 - CFD: 24/11/2009 - 21:12:36 ----D- C:\Program Files\Webteh
                  O43 - CFD: 03/11/2009 - 15:19:10 ----D- C:\Program Files\Windows Calendar
                  O43 - CFD: 03/11/2009 - 15:19:10 ----D- C:\Program Files\Windows Collaboration
                  O43 - CFD: 14/07/2009 - 09:39:40 ----D- C:\Program Files\Windows Defender
                  O43 - CFD: 14/07/2009 - 10:01:08 ----D- C:\Program Files\Windows Journal
                  O43 - CFD: 20/12/2009 - 21:57:30 ----D- C:\Program Files\Windows Live
                  O43 - CFD: 03/11/2009 - 15:19:12 ----D- C:\Program Files\Windows Live SkyDrive
                  O43 - CFD: 12/05/2010 - 23:10:18 ----D- C:\Program Files\Windows Mail
                  O43 - CFD: 03/11/2009 - 15:19:12 ----D- C:\Program Files\Windows Media Components
                  O43 - CFD: 14/10/2010 - 12:24:40 ----D- C:\Program Files\Windows Media Player
                  O43 - CFD: 03/11/2009 - 16:30:56 ----D- C:\Program Files\Windows NT
                  O43 - CFD: 03/11/2009 - 15:19:14 ----D- C:\Program Files\Windows Photo Gallery
                  O43 - CFD: 14/07/2009 - 09:39:40 ----D- C:\Program Files\Windows Photo Viewer
                  O43 - CFD: 14/07/2009 - 05:52:34 ----D- C:\Program Files\Windows Portable Devices
                  O43 - CFD: 03/11/2009 - 15:19:14 ----D- C:\Program Files\Windows Sidebar
                  O43 - CFD: 03/11/2009 - 15:19:34 ----D- C:\Program Files\WinRAR
                  O43 - CFD: 25/11/2010 - 17:33:04 ----D- C:\Program Files\ZHPDiag
                  O43 - CFD: 07/10/2010 - 12:51:32 ----D- C:\Program Files\Common Files\Adobe
                  O43 - CFD: 25/11/2010 - 16:42:46 ----D- C:\Program Files\Common Files\Akamai
                  O43 - CFD: 15/11/2009 - 22:51:34 ----D- C:\Program Files\Common Files\CyberLink
                  O43 - CFD: 16/11/2010 - 02:19:12 ----D- C:\Program Files\Common Files\DivX Shared
                  O43 - CFD: 14/04/2010 - 17:09:48 ----D- C:\Program Files\Common Files\DVDVideoSoft
                  O43 - CFD: 03/11/2009 - 15:11:04 ----D- C:\Program Files\Common Files\InstallShield
                  O43 - CFD: 27/05/2010 - 11:50:56 ----D- C:\Program Files\Common Files\Intel
                  O43 - CFD: 14/12/2009 - 00:29:04 ----D- C:\Program Files\Common Files\InterVideo
                  O43 - CFD: 23/04/2010 - 17:25:38 ----D- C:\Program Files\Common Files\Java
                  O43 - CFD: 05/10/2010 - 01:00:44 ----D- C:\Program Files\Common Files\Macrovision Shared
                  O43 - CFD: 03/11/2009 - 15:11:08 ----D- C:\Program Files\Common Files\microsoft shared
                  O43 - CFD: 16/12/2009 - 00:45:58 ----D- C:\Program Files\Common Files\Nero
                  O43 - CFD: 14/12/2009 - 19:51:44 ----D- C:\Program Files\Common Files\PX Storage Engine
                  O43 - CFD: 21/06/2010 - 22:56:22 ----D- C:\Program Files\Common Files\Real
                  O43 - CFD: 14/07/2009 - 03:37:06 ----D- C:\Program Files\Common Files\Services
                  O43 - CFD: 14/07/2009 - 03:37:06 ----D- C:\Program Files\Common Files\SpeechEngines
                  O43 - CFD: 03/11/2009 - 15:11:24 ----D- C:\Program Files\Common Files\Symantec Shared
                  O43 - CFD: 14/07/2009 - 09:39:40 ----D- C:\Program Files\Common Files\System
                  O43 - CFD: 03/11/2009 - 15:11:26 ----D- C:\Program Files\Common Files\Toshiba Shared
                  O43 - CFD: 03/11/2009 - 15:11:28 ----D- C:\Program Files\Common Files\Ulead Systems
                  O43 - CFD: 03/11/2009 - 15:11:28 ----D- C:\Program Files\Common Files\Windows Live
                  O43 - CFD: 22/08/2010 - 20:13:14 ----D- C:\Program Files\Common Files\Wise Installation Wizard
                  O43 - CFD: 17/08/2010 - 21:37:16 ----D- C:\ProgramData\Adobe
                  O43 - CFD: 03/11/2009 - 15:19:34 ----D- C:\ProgramData\Apple
                  O43 - CFD: 14/07/2009 - 05:53:56 -SH-D- C:\ProgramData\Application Data
                  O43 - CFD: 03/11/2009 - 15:19:34 ----D- C:\ProgramData\ArcSoft
                  O43 - CFD: 19/06/2010 - 15:21:16 ----D- C:\ProgramData\ATI
                  O43 - CFD: 20/12/2009 - 21:58:28 ----D- C:\ProgramData\Avira
                  O43 - CFD: 03/11/2009 - 16:30:56 -SH-D- C:\ProgramData\Bureau
                  O43 - CFD: 13/12/2009 - 20:13:34 ----D- C:\ProgramData\CyberLink
                  O43 - CFD: 03/11/2009 - 15:19:40 ----D- C:\ProgramData\DAEMON Tools Lite
                  O43 - CFD: 14/07/2009 - 05:53:56 -SH-D- C:\ProgramData\Desktop
                  O43 - CFD: 16/11/2010 - 02:20:04 ----D- C:\ProgramData\DivX
                  O43 - CFD: 14/07/2009 - 05:53:56 -SH-D- C:\ProgramData\Documents
                  O43 - CFD: 14/04/2010 - 18:24:14 ----D- C:\ProgramData\DriverScanner
                  O43 - CFD: 19/02/2010 - 19:51:50 ----D- C:\ProgramData\EPSON
                  O43 - CFD: 03/11/2009 - 16:30:56 -SH-D- C:\ProgramData\Favoris
                  O43 - CFD: 14/07/2009 - 05:53:56 -SH-D- C:\ProgramData\Favorites
                  O43 - CFD: 10/10/2010 - 11:51:42 ----D- C:\ProgramData\FLEXnet
                  O43 - CFD: 03/11/2009 - 15:19:40 ----D- C:\ProgramData\Google
                  O43 - CFD: 03/11/2009 - 15:19:40 ----D- C:\ProgramData\Installations
                  O43 - CFD: 27/05/2010 - 11:55:52 ----D- C:\ProgramData\Intel
                  O43 - CFD: 16/03/2010 - 17:20:38 ----D- C:\ProgramData\LGMOBILEAX
                  O43 - CFD: 19/06/2010 - 15:01:50 ----D- C:\ProgramData\ma-config.com
                  O43 - CFD: 03/11/2009 - 15:19:42 ----D- C:\ProgramData\Malwarebytes
                  O43 - CFD: 03/11/2009 - 16:30:56 -SH-D- C:\ProgramData\Menu Démarrer
                  O43 - CFD: 25/11/2009 - 16:17:50 ----D- C:\ProgramData\Micro Application
                  O43 - CFD: 05/06/2010 - 14:36:14 ----D- C:\ProgramData\Microsoft
                  O43 - CFD: 03/11/2009 - 16:30:56 -SH-D- C:\ProgramData\Modèles
                  O43 - CFD: 15/11/2010 - 16:07:24 ----D- C:\ProgramData\NCH Swift Sound
                  O43 - CFD: 05/04/2010 - 18:34:28 ----D- C:\ProgramData\Nero
                  O43 - CFD: 03/11/2009 - 15:20:16 ----D- C:\ProgramData\NOS
                  O43 - CFD: 03/12/2009 - 21:15:34 ----D- C:\ProgramData\PC Suite
                  O43 - CFD: 08/12/2009 - 00:29:06 ----D- C:\ProgramData\Real
                  O43 - CFD: 27/05/2010 - 11:55:54 ----D- C:\ProgramData\Roaming
                  O43 - CFD: 16/11/2010 - 17:54:18 ----D- C:\ProgramData\Rosetta Stone
                  O43 - CFD: 05/04/2010 - 18:35:56 ----D- C:\ProgramData\Skype
                  O43 - CFD: 25/11/2010 - 13:36:40 ----D- C:\ProgramData\SpeedBit
                  O43 - CFD: 14/07/2009 - 05:53:56 -SH-D- C:\ProgramData\Start Menu
                  O43 - CFD: 02/02/2010 - 21:24:34 ----D- C:\ProgramData\Sun
                  O43 - CFD: 03/11/2009 - 15:20:26 ----D- C:\ProgramData\Symantec
                  O43 - CFD: 25/11/2010 - 13:36:02 ---AD- C:\ProgramData\Temp
                  O43 - CFD: 14/07/2009 - 05:53:56 -SH-D- C:\ProgramData\Templates
                  O43 - CFD: 03/11/2009 - 15:20:26 ----D- C:\ProgramData\Toshiba
                  O43 - CFD: 03/11/2009 - 15:20:26 ----D- C:\ProgramData\ToshibaEurope
                  O43 - CFD: 03/11/2009 - 15:20:26 ----D- C:\ProgramData\TuneUp Software
                  O43 - CFD: 19/02/2010 - 19:35:02 ----D- C:\ProgramData\UDL
                  O43 - CFD: 14/12/2009 - 23:24:08 ----D- C:\ProgramData\Ulead Systems
                  O43 - CFD: 03/11/2009 - 15:20:28 ----D- C:\ProgramData\Vista64
                  O43 - CFD: 03/11/2009 - 15:20:28 ----D- C:\ProgramData\WindowsSearch
                  O43 - CFD: 03/11/2009 - 15:20:28 ----D- C:\ProgramData\XP
                  O43 - CFD: 07/10/2010 - 12:51