Lenteur de pc

Bonjour,
Nouveau sur ce forum, je vous passe le bonjour à tous.
Avant de vous exposer mon problème, je préfère vous dire que j'ai cherché un peu partout sur le forum et tout ce que j'y ai trouvé n'a toujours pas arrangé mon problème.
Donc voilà. Lorsque je navigue sur internet, je trouve que mon pc rame énormément, à du mal à ouvrir les pages, parfois se bloque, ce qui devient vraiment pénible.
Donc j'ai essayé de "nettoyer" cet ordi avec ccleaner, puis les registres, ensuite j'ai ai enlevé les applications qui s'ouvrent au démarrage dans msconfig, puis j'ai trouvé sur votre forum comment supprimer certains fichiers qui ne servent à rien puis j'ai défragmenté mais malheureusement rien y fait. Je suppose une collection de virus....
Je m'en remet à vous et votre savoir pour m'aider.
Voici un rapport hijackthis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:47:30, on 01/06/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\Program Files\InstallPedia\lnetworker.exe
C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\DATAMN~1.EXE
C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Consumer Input\dca-ua.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\SFR\Kit\9props.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Documents and Settings\HP_Administrator\Mes documents\Downloads\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=d490c8d0000000000000002264b5bac6&tlver=1.4.19.19&affID=17160
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Aide à la navigation SFR - {0F6E720A-1A6B-40E1-A294-1D4D19F156C8} - C:\Program Files\SFR\Kit\SFRNavErrorHelper.dll
O2 - BHO: PriceGong - {1631550F-191D-4826-B069-D9439253D926} - C:\Program Files\PriceGong\2.1.0\PriceGongIE.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\bh\BabylonToolbar.dll
O2 - BHO: (no name) - {465E08E7-F005-4389-980F-1D8764B3486C} - (no file)
O2 - BHO: UrlHelper Class - {474597C5-AB09-49d6-A4D5-2E8D7341384E} - C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\IEBHO.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: (no name) - {8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6} - (no file)
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: MediaBar - {ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F} - C:\PROGRA~1\IMESHA~1\MediaBar\ToolBar\iMeshMediaBarDx.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg.dll
O2 - BHO: DCA - {B49699FC-1665-4414-A1CB-C4A2A4A13EEC} - C:\Program Files\Consumer Input\dca-bho.dll
O2 - BHO: Menu Orange IE - {C68AE9C0-0909-4DDC-B661-C1AFB9F5AE53} - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\MenuOrange.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: kikin Plugin - {E601996F-E400-41CA-804B-CD6373A7EEE2} - C:\Program Files\kikin\ie_kikin.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: MediaBar - {ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F} - C:\PROGRA~1\IMESHA~1\MediaBar\ToolBar\iMeshMediaBarDx.dll
O3 - Toolbar: Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [UpdateP2GoShortCut] "C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [IP Network] C:\Program Files\InstallPedia\lnetworker.exe
O4 - HKLM\..\Run: [DATAMNGR] C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\DATAMN~1.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Consumer Input Update] C:\Program Files\Consumer Input\dca-ua.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Connexion SFR 9props.exe] "C:\Program Files\SFR\Kit\9props.exe" /trayicon
O4 - HKCU\..\Run: [X'nBeep] C:\Program Files\X'nBeep 1.1\XnBeep.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O8 - Extra context menu item: &Envoyer à OneNote - res://C:\PROGRA~1\MI1933~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
O8 - Extra context menu item: _ajouter cette page à vos favoris Orange - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\addfavorites_html\addfavorites.html
O8 - Extra context menu item: _envoyer le texte sélectionné par sms - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\sendsmsselectedtext_html\sendsmsselectedtext.html
O8 - Extra context menu item: _envoyer par sms - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\sendsms_html\sendsms.html
O8 - Extra context menu item: _envoyer un mail - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\sendmail_html\sendmail.html
O8 - Extra context menu item: _orange.fr - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\orange_html\orange.html
O8 - Extra context menu item: _rechercher le texte sélectionné - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\selectedsearch_html\selectedsearch.html
O8 - Extra context menu item: _traduire la page - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\translate_html\translate.html
O8 - Extra context menu item: _traduire le texte sélectionné - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\translateSelectedText_html\translateSelectedText.html
O9 - Extra button: (no name) - {0F7195C2-6713-4d93-A1BC-DA5FA33F0A65} - C:\Program Files\kikin\ie_kikin.dll
O9 - Extra 'Tools' menuitem: My kikin - {0F7195C2-6713-4d93-A1BC-DA5FA33F0A65} - C:\Program Files\kikin\ie_kikin.dll
O9 - Extra button: Afficher ou masquer l'HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: https://applications-et-logiciels.orange.fr/
O15 - Trusted Zone: https://www.orange.fr/portail
O16 - DPF: {0972B098-DEE9-4279-AC7E-4BAAA029102D} (PhotoboxPhotowaysUploader5 Control) - http://assets.photobox.com/assets/aurigma/ImageUploader5.cab?20090806143003
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei-4/ZwinkyInitialSetup1.0.1.1.cab
O16 - DPF: {3A226D85-574D-4272-B73C-DBCAECF709B3} (TNSClickerb.Clicker) - http://www.consoclicker.com/TNSClickrb.CAB
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.fr/SnapfishActivia.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} - http://copainsdavant.linternaute.com/framework/lib/objimageuploader/html_include/5.1.1.0/ImageUploader5.cab
O16 - DPF: {6EBC6744-5383-4213-AD5E-66434ECA1812} (F-Secure Online Scanner Launcher) - http://download.sp.f-secure.com/ols/nordnet/orange/so-4.1/resources/fslauncher.cab
O16 - DPF: {70A5EBDC-3EA6-464A-9FF7-084BC150C417} (TNSClickera.Clicker) - http://www.consoclicker.com/TNSClickra.CAB
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O20 - AppInit_DLLs: C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\datamngr.dll C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\IEBHO.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - Unknown owner - C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Service Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: service de mise a jour pour I.P services (I.P services) - Unknown owner - C:\Program Files\InstallPedia\service.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Norton Internet Security - Unknown owner - C:\Program Files\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe (file missing)
O23 - Service: Orange update Core Service - Unknown owner - C:\Program Files\Orange\OrangeUpdate\Service\OUCore.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Sony Ericsson PCCompanion - Avanquest Software - C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe

--
End of file - 13471 bytes

Merci pour votre aide

9 réponses

  1. Ton rapport est trop long pour passer sur le forum.
    Héberge le sur http://www.cijoint.fr/
    - Clique sur Parcourir et cherche le répertoire où est installé ZHPDiag (en général C:\Program Files\ZHPDiag).
    - Sélectionne le fichier ZHPDiag.txt.
    - Clique sur "Cliquez ici pour déposer le fichier".
    - Un lien de cette forme : http://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt est ajouté dans la page.
    - Copie ce lien dans ta réponse.
    1. Voici le rapport:

      Rapport de ZHPDiag v1.27.218 par Nicolas Coolman, Update du 31/05/2011
      Run by HP_Administrator at 01/06/2011 23:20:46
      Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html

      ---\\ Web Browser
      MSIE: Internet Explorer v8.0.6001.18702
      GCIE: Google Chrome v11.0.696.65 (Defaut)

      ---\\ System Information
      Windows XP Home Edition Service Pack 3 (Build 2600)
      Processor: x86 Family 6 Model 28 Stepping 2, GenuineIntel
      Operating System: 32 Bits
      Boot mode: Normal (Normal boot)
      Total RAM: 1015 MB (55% free)
      System Restore: Activé (Enable)
      System drive C: has 38 GB (27%) free of 139 GB

      ---\\ Logged in mode
      Computer Name: COUTE
      User Name: HP_Administrator
      All Users Names: SUPPORT_fddfa904, SUPPORT_388945a0, HP_Administrator, HelpAssistant, Administrateur,
      Unselected Option: O45,O61,O62,O65,O66,O82
      Logged in as Administrator

      ---\\ Environnement Variables
      %AppData%=C:\Documents and Settings\HP_Administrator\Application Data
      %LocalAppData%=C:\Documents and Settings\HP_Administrator\Local Settings\Application Data
      %StartMenu%=C:\Documents and Settings\HP_Administrator\Menu Démarrer

      ---\\ DOS/Devices
      C:\ Hard drive, Flash drive, Thumb drive (Free 38 Go of 139 Go)
      D:\ Hard drive, Flash drive, Thumb drive (Free 6 Go of 10 Go)
      E:\ CD-ROM drive (Not Inserted)
      F:\ CD-ROM drive (Not Inserted)
      G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

      ---\\ Security Center & Tools Informations
      [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
      [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
      [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
      [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
      [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK

      ---\\ Recherche particulière de fichiers génériques
      [MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.14/04/2008 13:00:00.) -- C:\WINDOWS\Explorer.exe [1037824]
      [MD5.77C66BD5CED4E555919A5FB713322CDD] - (.Microsoft Corporation - Internet Extensions for Win32.) (.23/02/2011 00:05:48.) -- C:\WINDOWS\system32\wininet.dll [916480]
      [MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.14/04/2008 13:00:00.) -- C:\WINDOWS\system32\Winlogon.exe [512000]
      [MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/04/2008 11:40:32.) -- C:\WINDOWS\system32\drivers\atapi.sys [96512]
      [MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.14/04/2008 13:00:00.) -- C:\WINDOWS\system32\drivers\ntfs.sys [574976]

      ---\\ Processus lancés
      [MD5.7DE3EE7DBEE14C1F8375CB82466C9321] - (.AVAST Software - avast! Service.) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [42184]
      [MD5.B762C41370476B1D8BE37C3BFC7B8021] - (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.EXE [17021440]
      [MD5.4C53C44E7C20E65445037954DC3A6BA4] - (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe [166424]
      [MD5.D8F3B455D3FA4B40C9BF544F55647C19] - (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe [137752]
      [MD5.FF473648E7B1B37C7F3249A6549FAC72] - (.Hewlett-Packard - HpqSRmon.) -- C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe [150016]
      [MD5.4C6898F15701AE7C41775C14E423FE25] - (.AVAST Software - avast! Antivirus.) -- C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [3459712]
      [MD5.2E5212A0BFB98FE0167C92C76C87AFE3] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe [249064]
      [MD5.C8EFC20CAD7F2F85E4A68829224678A6] - (.Compete, Inc. - Compete DCA Update Agent.) -- C:\Program Files\Consumer Input\dca-ua.exe [175800]
      [MD5.F56197D5CBDCC6A87C242DC8B8EEEE34] - (.Intel Corporation - igfxsrvc Module.) -- C:\WINDOWS\system32\igfxsrvc.exe [256536]
      [MD5.5D61BE7DB55B026A5D61A3EED09D0EAD] - (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408]
      [MD5.5E06A9D23727DAF96FAA796F1135FDCD] - (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe [153376]
      [MD5.5DD44F27BBC1EF834145F109F154ECC7] - (.Google Inc. - Google Chrome.) -- C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe [1010232]
      [MD5.FE30E4A6C01FF9B821725DE37DAF3B98] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [657920]

      ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
      M3 - MFPP: Plugins - [HP_Administrator] -- C:\Program Files\Mozilla FireFox\searchplugins\babylon.xml
      P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
      P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.5.9.620.) -- C:\WINDOWS\system32\Adobe\Director\np32dsw.dll
      P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
      P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_24 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
      P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.60310.0.) -- c:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll
      P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
      P2 - FPN: [HKLM] [@SonyCreativeSoftware.com/Media Go,version=1.0] - (.Sony Media Software and Services Inc - 1.6.) -- C:\Program Files\Sony\Media Go\npmediago.dll
      P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll
      P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll
      P2 - FPN: [HKLM] [@unity3d.com/UnityPlayer] - (.Unity Technologies ApS - Unity Player 2.5.1f5.) -- C:\Program Files\Unity\WebPlayer\loader\npUnity3D32.dll
      P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Pas de propriétaire - Pas de description.) -- C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Update\1.3.21.53\npGoogleUpdate3.dll (.not file.)
      P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Pas de propriétaire - Pas de description.) -- C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Update\1.3.21.53\npGoogleUpdate3.dll (.not file.)

      ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
      G1 - GCS: Preference [User Data\Default] https://www.google.com/?gws_rd=ssl
      G2 - GCE: Preference [User Data\Default] [dhkplhfnhceodhffomolpfigojocbpcb] Babylon Chrome OCR v.1.0 (Activé)

      ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
      R0 - HKUS\S-1-5-21-322340657-3154053047-287275718-1006\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
      R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} Clé orpheline
      R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.19048 (longhorn_ie8_gdr.110221-1700)) -- C:\WINDOWS\system32\ieframe.dll

      ---\\ Internet Explorer, Proxy Management (R5)
      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

      ---\\ ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
      F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,
      F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

      ---\\ Browser Helper Objects de navigateur (O2)
      O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet E.) -- C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
      O2 - BHO: Aide à la navigation SFR - {0F6E720A-1A6B-40E1-A294-1D4D19F156C8} . (.SFR - Aide à la navigation SFR.) -- C:\Program Files\SFR\Kit\SFRNavErrorHelper.dll
      O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
      O2 - BHO: (no name) - {465E08E7-F005-4389-980F-1D8764B3486C} Clé orpheline
      O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline
      O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
      O2 - BHO: (no name) - {8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6} Clé orpheline
      O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg.dll
      O2 - BHO: DCA - {B49699FC-1665-4414-A1CB-C4A2A4A13EEC} . (.Compete, Inc. - Compete DCA Browser Helper Object.) -- C:\Program Files\Consumer Input\dca-bho.dll
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
      O2 - BHO: kikin Plugin - {E601996F-E400-41CA-804B-CD6373A7EEE2} . (.kikin - kikin plugin.) -- C:\Program Files\kikin\ie_kikin.dll
      O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java(TM) Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
      O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet E.) -- C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

      ---\\ Internet Explorer Toolbars (O3)
      O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
      O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll

      ---\\ ---\\ Applications démarrées par registre & par dossier (O4)
      O4 - HKLM\..\Run: [RTHDCPL] . (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.exe
      O4 - HKLM\..\Run: [Alcmtr] . (.Realtek Semiconductor Corp. - Realtek Azalia Audio - Event Monitor.) -- C:\WINDOWS\ALCMTR.exe
      O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe
      O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe
      O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe
      O4 - HKLM\..\Run: [UpdateP2GoShortCut] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe
      O4 - HKLM\..\Run: [hpqSRMon] . (.Hewlett-Packard - HpqSRmon.) -- C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
      O4 - HKLM\..\Run: [avast5] . (.AVAST Software - avast! Antivirus.) -- C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe
      O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe
      O4 - HKLM\..\Run: [MSConfig] . (.Microsoft Corporation - Utilitaire de configuration système.) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe
      O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [Consumer Input Update] . (.Compete, Inc. - Compete DCA Update Agent.) -- C:\Program Files\Consumer Input\dca-ua.exe
      O4 - HKCU\..\Run: [WMPNSCFG] . (.Microsoft Corporation - Application de configuration du service Par.) -- C:\Program Files\Windows Media Player\WMPNSCFG.exe
      O4 - HKCU\..\Run: [Connexion SFR 9props.exe] . (.SFR - Propriétés de la connexion SFR.) -- C:\Program Files\SFR\Kit\9props.exe
      O4 - HKCU\..\Run: [X'nBeep] . (.© Une création http://GraphysWeb.com - X'nBeep, réveil digital pour Windows XP.) -- C:\Program Files\X'nBeep 1.1\XnBeep.exe
      O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      O4 - HKUS\S-1-5-21-322340657-3154053047-287275718-1006\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
      O4 - HKUS\S-1-5-21-322340657-3154053047-287275718-1006\..\Run: [Consumer Input Update] . (.Compete, Inc. - Compete DCA Update Agent.) -- C:\Program Files\Consumer Input\dca-ua.exe
      O4 - HKUS\S-1-5-21-322340657-3154053047-287275718-1006\..\Run: [WMPNSCFG] . (.Microsoft Corporation - Application de configuration du service Par.) -- C:\Program Files\Windows Media Player\WMPNSCFG.exe
      O4 - HKUS\S-1-5-21-322340657-3154053047-287275718-1006\..\Run: [Connexion SFR 9props.exe] . (.SFR - Propriétés de la connexion SFR.) -- C:\Program Files\SFR\Kit\9props.exe
      O4 - HKUS\S-1-5-21-322340657-3154053047-287275718-1006\..\Run: [X'nBeep] . (.© Une création http://GraphysWeb.com - X'nBeep, réveil digital pour Windows XP.) -- C:\Program Files\X'nBeep 1.1\XnBeep.exe
      O4 - HKUS\S-1-5-21-322340657-3154053047-287275718-1006\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

      ---\\ ---\\ Autres liens utilisateurs (O4)
      O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader X.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-AA0000000001}\SC_Reader.ico
      O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Installation du Contrôle Parental.lnk . (.InstallShield Software Corporation.) -- C:\Program Files\Securitoo\Contrôle Parental\Controle_parental.exe
      O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Power2Go.lnk . (.CyberLink Corp..) -- C:\Program Files\Cyberlink\Power2Go\Power2Go.exe
      O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Sécurité et ergonomie du poste de travail.lnk . (...) -- C:\hp\documentation\Safety & Comfort Guide.pdf
      O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk . (.Microsoft Corporation.) -- C:\Program Files\Messenger\msmsgs.exe
      O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Movie Maker\moviemk.exe
      O4 - Global Startup: C:\Documents And Settings\HP_Administrator\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe
      O4 - Global Startup: C:\Documents And Settings\HP_Administrator\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
      O4 - Global Startup: C:\Documents And Settings\HP_Administrator\Menu Démarrer\Programmes\Power2Go.lnk . (.CyberLink Corp..) -- C:\Program Files\Cyberlink\Power2Go\Power2Go.exe
      O4 - Global Startup: C:\Documents And Settings\HP_Administrator\Menu Démarrer\Programmes\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
      O4 - Global Startup: C:\Documents And Settings\HP_Administrator\Menu Démarrer\Programmes\WinRAR.lnk . (...) -- C:\Program Files\WinRAR\WinRAR.exe

      ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
      O8 - Extra context menu item: &Envoyer à OneNote - (.not file.) - C:\PROGRA~1\MI1933~1\Office14\ONBttnIE.dll
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - (.not file.) - C:\PROGRA~1\MI1933~1\Office14\EXCEL.exe
      O8 - Extra context menu item: Google Sidewiki... . (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll
      O8 - Extra context menu item: _ajouter cette page à vos favoris Orange - (.not file.) - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\addfavorites_html\addfavorites.html
      O8 - Extra context menu item: _envoyer le texte sélectionné par sms - (.not file.) - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\sendsmsselectedtext_html\sendsmsselectedtext.html
      O8 - Extra context menu item: _envoyer par sms - (.not file.) - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\sendsms_html\sendsms.html
      O8 - Extra context menu item: _envoyer un mail - (.not file.) - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\sendmail_html\sendmail.html
      O8 - Extra context menu item: _orange.fr - (.not file.) - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\orange_html\orange.html
      O8 - Extra context menu item: _rechercher le texte sélectionné - (.not file.) - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\selectedsearch_html\selectedsearch.html
      O8 - Extra context menu item: _traduire la page - (.not file.) - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\translate_html\translate.html
      O8 - Extra context menu item: _traduire le texte sélectionné - (.not file.) - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\translateSelectedText_html\translateSelectedText.html

      ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
      O9 - Extra button: My kikin - {0F7195C2-6713-4d93-A1BC-DA5FA33F0A65} -- Clé orpheline
      O9 - Extra button: My kikin - {DDE87865-83C5-48c4-8357-2F5B1AA84522} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet Explorer.) -- C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
      O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet Explorer.) -- C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
      O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe

      ---\\ Winsock hijacker (Layered Service Provider) (O10)
      O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
      O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
      O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll

      ---\\ Piratage de l'Option 'Rétablir les paramètres Web' (O14)
      O14 - IERESET.INF: START_PAGE_URL=START_PAGE_URL=http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

      ---\\ Site dans la Zone de confiance d'Internet Explorer (O15)
      O15 - Trusted Zone: [HKCU\...\Domains\www] http.orange.fr

      ---\\ Objets ActiveX (Downloaded Program Files)(O16)
      O16 - DPF: {0972B098-DEE9-4279-AC7E-4BAAA029102D} (PhotoboxPhotowaysUploader5 Control) - http://assets.photobox.com/assets/aurigma/ImageUploader5.cab?20090806143003
      O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
      O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
      O16 - DPF: {3A226D85-574D-4272-B73C-DBCAECF709B3} (TNSClickerb.Clicker) - http://www.consoclicker.com/TNSClickrb.CAB
      O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.fr/SnapfishActivia.cab
      O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} () - http://copainsdavant.linternaute.com/framework/lib/objimageuploader/html_include/5.1.1.0/ImageUploader5.cab
      O16 - DPF: {6EBC6744-5383-4213-AD5E-66434ECA1812} (F-Secure Online Scanner Launcher) - http://download.sp.f-secure.com/ols/nordnet/orange/so-4.1/resources/fslauncher.cab
      O16 - DPF: {70A5EBDC-3EA6-464A-9FF7-084BC150C417} (TNSClickera.Clicker) - http://www.consoclicker.com/TNSClickra.CAB
      O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
      O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

      ---\\ Modification Domaine/Adresses DNS (O17)
      O17 - HKLM\System\CCS\Services\Tcpip\..\{AC554E27-ECA0-4AA4-8C48-CFF9BF08FEFA}: DhcpNameServer = 192.168.1.1
      O17 - HKLM\System\CS1\Services\Tcpip\..\{AC554E27-ECA0-4AA4-8C48-CFF9BF08FEFA}: DhcpNameServer = 192.168.1.1
      O17 - HKLM\System\CS3\Services\Tcpip\..\{AC554E27-ECA0-4AA4-8C48-CFF9BF08FEFA}: DhcpNameServer = 192.168.1.1
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

      ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
      O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\Windows\System32\crypt32.dll
      O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\Windows\System32\cryptnet.dll
      O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\Windows\System32\cscdll.dll
      O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll
      O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
      O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
      O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
      O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\Windows\System32\sclgntfy.dll
      O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\WlNotify.dll
      O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
      O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll

      ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
      O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
      O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
      O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
      O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
      O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll

      ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
      O22 - SharedTaskScheduler: (no name) - {438755C2-A8BA-11D1-B96B-00A0C90312E1} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll
      O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll

      ---\\ Liste des services NT non Microsoft et non désactivés (O23)
      O23 - Service: (ACDaemon) - Clé orpheline
      O23 - Service: (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
      O23 - Service: (dmadmin) . (.Microsoft Corp., Veritas Software - Processus du service Gestionnaire de disque.) - C:\WINDOWS\System32\dmadmin.exe
      O23 - Service: (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
      O23 - Service: (gupdatem) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
      O23 - Service: (gusvc) . (.Google - gusvc.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe
      O23 - Service: (Norton Internet Security) - Clé orpheline
      O23 - Service: (ServiceLayer) . (.Nokia - ServiceLayer Module.) - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
      O23 - Service: (Sony Ericsson PCCompanion) . (.Avanquest Software - Sony Ericsson PCCompanion Service.) - C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe

      ---\\ Enumération Active Desktop & MHTML Editor (O24)
      O24 - Default MHTML Editor: Last - .(...) - (.not file.)

      ---\\ Tâches planifiées en automatique (O39)
      O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
      O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
      O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-322340657-3154053047-287275718-1006Core.job
      O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-322340657-3154053047-287275718-1006UA.job
      O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Nettoyage de disque.job

      ---\\ Pilotes lancés au démarrage (O41)
      O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\System32\DRIVERS\tcpip.sys
      O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
      O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\System32\DRIVERS\cdrom.sys
      O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\System32\DRIVERS\i8042prt.sys
      O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\System32\DRIVERS\imapi.sys
      O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\System32\DRIVERS\intelppm.sys
      O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\System32\DRIVERS\ipsec.sys
      O41 - Driver: (ISODrive) . (.EZB Systems, Inc. - ISO DVD/CD-ROM Device Driver.) - C:\Program Files\UltraISO\drivers\ISODrive.sys
      O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\System32\DRIVERS\kbdclass.sys
      O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\System32\DRIVERS\mouclass.sys
      O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\System32\DRIVERS\mrxsmb.sys
      O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\System32\DRIVERS\netbios.sys
      O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\System32\DRIVERS\netbt.sys
      O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\System32\DRIVERS\rasacd.sys
      O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\System32\DRIVERS\rdbss.sys
      O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\System32\DRIVERS\RDPCDD.sys
      O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\System32\DRIVERS\redbook.sys
      O41 - Driver: (SRTSP) . (. - .) - C:\WINDOWS\system32\drivers\NIS\1000000.07D\SRTSP.sys (.not file.)
      O41 - Driver: (SRTSPX) . (. - .) - C:\WINDOWS\system32\drivers\NIS\1000000.07D\SRTSPX.sys (.not file.)
      O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\System32\DRIVERS\termdd.sys
      O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys

      ---\\ Logiciels installés (O42)
      O42 - Logiciel: 32 Bit HP CIO Components Installer - (.Hewlett-Packard.) [HKLM] -- {2614F54E-A828-49FA-93BA-45A3F756BFAA}
      O42 - Logiciel: AVS Video Converter 6 - (.Online Media Technologies Ltd..) [HKLM] -- AVS4YOU Video Converter 6_is1
      O42 - Logiciel: AVS4YOU Software Navigator 1.3 - (.Online Media Technologies Ltd..) [HKLM] -- AVS4YOU Software Navigator_is1
      O42 - Logiciel: AbiWord 2.8.6 - (.AbiSource Developers.) [HKLM] -- AbiWord2
      O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR
      O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {A2BCA9F1-566C-4805-97D1-7FDC93386723}
      O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
      O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
      O42 - Logiciel: Adobe Reader X (10.0.1) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA0000000001}
      O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player
      O42 - Logiciel: Archiveur WinRAR - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver
      O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
      O42 - Logiciel: AviSynth 2.5 - (.Pas de propriétaire.) [HKLM] -- AviSynth
      O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
      O42 - Logiciel: Consumer Input Software (remove only) - (.Compete Inc..) [HKCU] -- Consumer Input Software
      O42 - Logiciel: CyberLink Recovery Manager - (.CyberLink Corp..) [HKLM] -- {44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}
      O42 - Logiciel: DraftSight - (.Dassault Systèmes.) [HKLM] -- {EE7D7509-CC19-4DED-A439-F50B191C9E37}
      O42 - Logiciel: EZface ActiveX 208 - (.Pas de propriétaire.) [HKLM] -- EZface ActiveX
      O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU] -- Google Chrome
      O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
      O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
      O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
      O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {4286E640-B5FB-11DF-AC4B-005056C00008}
      O42 - Logiciel: HP Customer Participation Program 10.0 - (.HP.) [HKLM] -- HPExtendedCapabilities
      O42 - Logiciel: HP Deskjet F4200 All-In-One Driver Software 10.0 Rel .3 - (.HP.) [HKLM] -- {AE9A67F9-ADF1-4a44-BAB5-C1DB302B37A2}
      O42 - Logiciel: HP Imaging Device Functions 10.0 - (.HP.) [HKLM] -- HP Imaging Device Functions
      O42 - Logiciel: HP Photosmart Essential 3.5 - (.HP.) [HKLM] -- HP Photosmart Essential
      O42 - Logiciel: HP Smart Web Printing 4.60 - (.HP.) [HKLM] -- HP Smart Web Printing
      O42 - Logiciel: HP Solution Center 13.0 - (.HP.) [HKLM] -- HP Solution Center & Imaging Support Tools
      O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM] -- {B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}
      O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
      O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
      O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399
      O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5
      O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5
      O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3
      O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {133742BA-6F46-4D3E-85AF-78631D9AD8B8}
      O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Pas de propriétaire.) [HKLM] -- HDMI
      O42 - Logiciel: JDownloader - (.AppWork UG (haftungsbeschränkt).) [HKLM] -- JDownloader
      O42 - Logiciel: Java(TM) 6 Update 18 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216018F0}
      O42 - Logiciel: Java(TM) 6 Update 24 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216015FF}
      O42 - Logiciel: Lecteur Windows Media 11 - (.Pas de propriétaire.) [HKLM] -- Windows Media Player
      O42 - Logiciel: MSVC80_x86_v2 - (.Nokia.) [HKLM] -- {6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}
      O42 - Logiciel: MSVC90_x86 - (.Nokia.) [HKLM] -- {AF111648-99A1-453E-81DD-80DBBF6DAD0D}
      O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
      O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
      O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
      O42 - Logiciel: MSXML4 Parser - (.Microsoft Game Studios.) [HKLM] -- {01501EBA-EC35-4F9F-8889-3BE346E5DA13}
      O42 - Logiciel: Malwarebytes' Anti-Malware version 1.51.0.1200 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
      O42 - Logiciel: Media Go - (.Sony.) [HKLM] -- {C6AC04F5-5916-4A02-BC36-AF5BC0A3CBD4}
      O42 - Logiciel: MediaBar - (.iMesh Inc..) [HKLM] -- iMesh 1 MediaBar
      O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - FRA - (.Microsoft Corporation.) [HKLM] -- {3F7924B9-D148-3141-87B1-68F36043A940}
      O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
      O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - FRA - (.Microsoft Corporation.) [HKLM] -- {511DF669-2930-30C0-8EB6-552887E29EC8}
      O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
      O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack - fra - (.Microsoft Corporation.) [HKLM] -- {5B76AEA2-D4E5-3B55-B965-ACC36AE0EAFC}
      O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
      O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
      O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
      O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) [HKLM] -- {06E6E30D-B498-442F-A943-07DE41D7F785}
      O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
      O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}
      O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c}
      O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - KB2467175 - (.Microsoft Corporation.) [HKLM] -- {a0fe116e-9a8a-466f-aee0-625cb7c207e3}
      O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
      O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 - (.Microsoft Corporation.) [HKLM] -- {86CE85E6-DBAC-3FFD-B977-E4B79F83C909}
      O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 - (.Microsoft Corporation.) [HKLM] -- {FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}
      O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}
      O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
      O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 - fra - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 Language Pack - fra
      O42 - Logiciel: OpenOffice.org 3.2 - (.OpenOffice.org.) [HKLM] -- {69B040CC-E9B1-4769-950E-87786C9E16AD}
      O42 - Logiciel: Orange Inside - (.Orange.) [HKCU] -- Orange Inside
      O42 - Logiciel: Orange Installeur version 1.2.1.0 - (.Orange.) [HKLM] -- {D13FE823-C575-4451-AC37-E645A67AA581}_1.2.1.0
      O42 - Logiciel: Outils de diagnostic du matériel - (.PC-Doctor, Inc..) [HKLM] -- PC-Doctor for Windows
      O42 - Logiciel: PC Connectivity Solution - (.Nokia.) [HKLM] -- {4B28C077-9958-45F1-8BB4-CBF90A69AD4E}
      O42 - Logiciel: PCIe Soft Data Fax Modem with SmartCP - (.Conexant Systems.) [HKLM] -- CNXT_MODEM_PCI_HSF
      O42 - Logiciel: POB 7 - (.Pas de propriétaire.) [HKLM] -- pob7
      O42 - Logiciel: Package de pilotes Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0) - (.Nokia.) [HKLM] -- 504244733D18C8F63FF584AEB290E3904E791693
      O42 - Logiciel: Package de pilotes Windows - OPTO ELECTRONICS CO.,LTD (optousb) Ports (10/19/2006 1.0.3.0) - (.OPTO ELECTRONICS CO.,LTD.) [HKLM] -- D127120E5ABE3D19A796184C338C39A62539D6AD
      O42 - Logiciel: PlayStation(R)Network Downloader - (.Sony Computer Entertainment Inc..) [HKLM] -- {B6659DD8-00A7-4A24-BBFB-C1F6982E5D66}
      O42 - Logiciel: PlayStation(R)Store - (.Sony Computer Entertainment Inc..) [HKLM] -- {0E532C84-4275-41B3-9D81-D4A1A20D8EE7}
      O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM] -- InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}
      O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM] -- {40BF1E83-20EB-11D8-97C5-0009C5020658}
      O42 - Logiciel: PowerDVD SE - (.Pas de propriétaire.) [HKLM] -- {6811CAA0-BF12-11D4-9EA1-0050BAE317E1}
      O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
      O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM] -- {96AE7E41-E34E-47D0-AC07-1091A8127911}
      O42 - Logiciel: SFR - Kit de connexion - (.SFR.) [HKLM] -- SFR_Kit
      O42 - Logiciel: SFR - Mediacenter Evolution - (.SFR.) [HKLM] -- SFR_Mediacenter Evolution
      O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473
      O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
      O42 - Logiciel: Shop for HP Supplies - (.HP.) [HKLM] -- Shop for HP Supplies
      O42 - Logiciel: Sony Ericsson PC Companion 2.01.173 - (.Sony Ericsson.) [HKLM] -- {F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}
      O42 - Logiciel: Sony Ericsson Update Engine - (.Sony Ericsson Mobile Communications AB.) [HKLM] -- Update Engine
      O42 - Logiciel: UltraISO Premium V9.35 - (.Pas de propriétaire.) [HKLM] -- UltraISO_is1
      O42 - Logiciel: Unity Web Player - (.Unity Technologies ApS.) [HKLM] -- UnityWebPlayer
      O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
      O42 - Logiciel: VLC media player 1.1.7 - (.VideoLAN.) [HKLM] -- VLC media player
      O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8
      O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {B3B487E7-6171-4376-9074-B28082CEB504}
      O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3175E049-F9A9-4A3D-8F19-AC9FB04514D1}
      O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {445B183D-F4F1-45C8-B9DB-F11355CA657B}
      O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime
      O42 - Logiciel: X'nBeep 1.1 - (.GraphysWeb © 2001-2007.) [HKLM] -- X'nBeep_is1
      O42 - Logiciel: XML Paper Specification Shared Components Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- XpsEPSC
      O42 - Logiciel: avast! Free Antivirus - (.AVAST Software.) [HKLM] -- avast
      O42 - Logiciel: kikin plugin 2.9 - (.kikin.) [HKLM] -- {E4A71A41-BCC8-480a-9E69-0DA29CBA7ECA}

      ---\\ HKCU & HKLM Software Keys
      [HKCU\Software\AC3Filter]
      [HKCU\Software\ALWIL Software]
      [HKCU\Software\AVAST Software]
      [HKCU\Software\AVS4YOU]
      [HKCU\Software\Ad-Remover]
      [HKCU\Software\Adobe]
      [HKCU\Software\AppDataLow\Software\Adobe]
      [HKCU\Software\AppDataLow\Software\Macromedia]
      [HKCU\Software\AppDataLow\Software\Microsoft]
      [HKCU\Software\AppDataLow\Software]
      [HKCU\Software\AppDataLow]
      [HKCU\Software\Apple Computer, Inc.]
      [HKCU\Software\ArcSoft]
      [HKCU\Software\Aurigma]
      [HKCU\Software\CDDB]
      [HKCU\Software\Classes.crx]
      [HKCU\Software\Classes]
      [HKCU\Software\Clients]
      [HKCU\Software\Command]
      [HKCU\Software\CompeteInc]
      [HKCU\Software\Compete]
      [HKCU\Software\CoreAAC]
      [HKCU\Software\Cyberlink]
      [HKCU\Software\Cygnus Solutions]
      [HKCU\Software\Dassault Systemes]
      [HKCU\Software\DirectShow]
      [HKCU\Software\DivXNetworks]
      [HKCU\Software\EasyBoot Systems]
      [HKCU\Software\F-Secure]
      [HKCU\Software\FIXIO PC Utilities]
      [HKCU\Software\Google]
      [HKCU\Software\Graphys]
      [HKCU\Software\Headlight]
      [HKCU\Software\Hewlett-Packard]
      [HKCU\Software\Hilgraeve Inc]
      [HKCU\Software\HookNetwork]
      [HKCU\Software\IM Providers]
      [HKCU\Software\InstallCore]
      [HKCU\Software\Intel]
      [HKCU\Software\JEDI-VCL]
      [HKCU\Software\JavaSoft]
      [HKCU\Software\Jitit Virtual Registry]
      [HKCU\Software\Kayenko]
      [HKCU\Software\Local AppWizard-Generated Applications]
      [HKCU\Software\Macromedia]
      [HKCU\Software\Magnet]
      [HKCU\Software\Malwarebytes' Anti-Malware]
      [HKCU\Software\Minisoft]
      [HKCU\Software\MozillaPlugins]
      [HKCU\Software\Mozilla]
      [HKCU\Software\Netscape]
      [HKCU\Software\Neuf]
      [HKCU\Software\Nokia]
      [HKCU\Software\ODBC]
      [HKCU\Software\Official-eMule]
      [HKCU\Software\OpenOffice.org]
      [HKCU\Software\OrangeInside]
      [HKCU\Software\Piriform]
      [HKCU\Software\Policies]
      [HKCU\Software\Realsil]
      [HKCU\Software\Realtek]
      [HKCU\Software\SWActivation]
      [HKCU\Software\Snapfish]
      [HKCU\Software\Softonic]
      [HKCU\Software\Solidworks Corporation]
      [HKCU\Software\Sony Corporation]
      [HKCU\Software\Sony Creative Software]
      [HKCU\Software\Sony Ericsson]
      [HKCU\Software\SuperSoftwarePackage]
      [HKCU\Software\Trend Micro]
      [HKCU\Software\Trolltech]
      [HKCU\Software\Unity]
      [HKCU\Software\VB and VBA Program Settings]
      [HKCU\Software\Videohost]
      [HKCU\Software\VirginMega]
      [HKCU\Software\WinRAR SFX]
      [HKCU\Software\WinRAR]
      [HKCU\Software\Windows Live Writer]
      [HKCU\Software\Wyzo]
      [HKCU\Software\YahooPartnerToolbar]
      [HKCU\Software\freeplayer.org]
      [HKCU\Software\imeshmediabartb]
      [HKCU\Software\kde.org]
      [HKCU\Software\keyhole.com]
      [HKCU\Software\mkvmergeGUI]
      [HKCU\Software\yahooinstall]
      [HKLM\Software\ALWIL Software]
      [HKLM\Software\AVAST Software]
      [HKLM\Software\AVS4YOU]
      [HKLM\Software\AbiWord]
      [HKLM\Software\Adobe]
      [HKLM\Software\AppDataLow]
      [HKLM\Software\ArcSoft]
      [HKLM\Software\C07ft5Y]
      [HKLM\Software\CDDB]
      [HKLM\Software\CXT]
      [HKLM\Software\Classes]
      [HKLM\Software\Clients]
      [HKLM\Software\CompeteInc]
      [HKLM\Software\Conexant Systems]
      [HKLM\Software\CyberLink]
      [HKLM\Software\Cygnus Solutions]
      [HKLM\Software\Dassault Systemes]
      [HKLM\Software\EZFace]
      [HKLM\Software\EasyBoot Systems]
      [HKLM\Software\GYOZA]
      [HKLM\Software\Gemplus]
      [HKLM\Software\Google]
      [HKLM\Software\HP]
      [HKLM\Software\Hewlett-Packard]
      [HKLM\Software\HighCriteria]
      [HKLM\Software\ICE]
      [HKLM\Software\Intel]
      [HKLM\Software\JavaSoft]
      [HKLM\Software\JreMetrics]
      [HKLM\Software\Kayenko]
      [HKLM\Software\Macromedia]
      [HKLM\Software\Magnet]
      [HKLM\Software\Malwarebytes' Anti-Malware]
      [HKLM\Software\MicroQuill]
      [HKLM\Software\MimarSinan]
      [HKLM\Software\MozillaPlugins]
      [HKLM\Software\Mozilla]
      [HKLM\Software\Neuf]
      [HKLM\Software\Nokia]
      [HKLM\Software\ODBC]
      [HKLM\Software\Official-eMule]
      [HKLM\Software\OpenOffice.org]
      [HKLM\Software\Orange]
      [HKLM\Software\PC Connectivity Solution]
      [HKLM\Software\PC-Doctor]
      [HKLM\Software\PCSuite]
      [HKLM\Software\Piriform]
      [HKLM\Software\PocketSoft]
      [HKLM\Software\Policies]
      [HKLM\Software\Program Groups]
      [HKLM\Software\Realtek Semiconductor Corp.]
      [HKLM\Software\Realtek]
      [HKLM\Software\RegisteredApplications]
      [HKLM\Software\SECURITOO]
      [HKLM\Software\SOFTWARE]
      [HKLM\Software\Sagem]
      [HKLM\Software\Schlumberger]
      [HKLM\Software\Secure]
      [HKLM\Software\Sony Corporation]
      [HKLM\Software\Sony Creative Software]
      [HKLM\Software\Sony Ericsson]
      [HKLM\Software\Sony Media Software]
      [HKLM\Software\Sony]
      [HKLM\Software\Sun Microsystems]
      [HKLM\Software\The Silicon Realms Toolworks]
      [HKLM\Software\TrendMicro]
      [HKLM\Software\Uniblue]
      [HKLM\Software\Unity]
      [HKLM\Software\VideoLAN]
      [HKLM\Software\Windows 3.1 Migration Status]
      [HKLM\Software\Windows]
      [HKLM\Software\iMeshMediabarTb]
      [HKLM\Software\mozilla.org]
      [HKLM\Software\office]

      ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
      O43 - CFD: 01/06/2011 - 22:31:14 - [307759814] ----D- C:\Program Files\Fichiers communs
      O43 - CFD: 01/06/2011 - 23:20:54 - [0] ----D- C:\Program Files\Norton Internet Security
      O43 - CFD: 01/06/2011 - 23:20:58 - [3891672] ----D- C:\Program Files\ZHPDiag
      O43 - CFD: 12/05/2011 - 14:31:12 - [21296762] ----D- C:\Program Files\AbiWord
      O43 - CFD: 01/06/2011 - 23:05:32 - [91837050] ----D- C:\Program Files\Ad-Remover
      O43 - CFD: 02/03/2011 - 15:19:00 - [114310881] ----D- C:\Program Files\Adobe
      O43 - CFD: 12/07/2010 - 10:18:12 - [158521416] ----D- C:\Program Files\Alwil Software
      O43 - CFD: 02/03/2010 - 11:12:10 - [4859926] ----D- C:\Program Files\AviSynth 2.5
      O43 - CFD: 15/10/2009 - 20:20:38 - [9433897] ----D- C:\Program Files\AVS4YOU
      O43 - CFD: 16/10/2009 - 17:20:40 - [22832244] ----D- C:\Program Files\AVSVideoConverter6
      O43 - CFD: 01/06/2011 - 09:36:20 - [3753504] ----D- C:\Program Files\CCleaner
      O43 - CFD: 08/12/2008 - 11:01:36 - [0] ----D- C:\Program Files\ComPlus Applications
      O43 - CFD: 08/12/2008 - 11:17:34 - [1048576] ----D- C:\Program Files\CONEXANT
      O43 - CFD: 21/03/2011 - 16:21:14 - [3693332] ----D- C:\Program Files\Consumer Input
      O43 - CFD: 08/12/2008 - 11:42:14 - [172018212] ----D- C:\Program Files\Cyberlink
      O43 - CFD: 10/04/2011 - 15:37:14 - [167799301] ----D- C:\Program Files\Dassault Systemes
      O43 - CFD: 09/04/2011 - 09:42:32 - [3717088] ----D- C:\Program Files\DIFX
      O43 - CFD: 10/09/2009 - 14:45:02 - [1250993] ----D- C:\Program Files\EZFace
      O43 - CFD: 20/05/2010 - 15:25:12 - [28] ----D- C:\Program Files\Fluendo
      O43 - CFD: 26/09/2010 - 13:22:26 - [123166387] ----D- C:\Program Files\Google
      O43 - CFD: 04/06/2009 - 17:00:58 - [0] ----D- C:\Program Files\Hewlett-Packard
      O43 - CFD: 02/07/2009 - 00:03:56 - [204265568] ----D- C:\Program Files\Hp
      O43 - CFD: 21/05/2011 - 07:59:28 - [37800860] --H-D- C:\Program Files\InstallShield Installation Information
      O43 - CFD: 08/12/2008 - 11:14:32 - [64868] ----D- C:\Program Files\Intel
      O43 - CFD: 13/04/2011 - 07:03:46 - [5362286] ----D- C:\Program Files\Internet Explorer
      O43 - CFD: 05/03/2011 - 12:58:58 - [171303451] ----D- C:\Program Files\Java
      O43 - CFD: 29/05/2011 - 10:12:50 - [57654318] ----D- C:\Program Files\JDownloader
      O43 - CFD: 07/12/2010 - 15:54:32 - [1390226] ----D- C:\Program Files\kikin
      O43 - CFD: 02/01/2011 - 11:12:46 - [17] ----D- C:\Program Files\LimeWire
      O43 - CFD: 01/06/2011 - 22:02:34 - [7566987] ----D- C:\Program Files\Malwarebytes' Anti-Malware
      O43 - CFD: 19/11/2010 - 19:47:52 - [2158723] ----D- C:\Program Files\Messenger
      O43 - CFD: 15/10/2009 - 10:57:22 - [1721508] ----D- C:\Program Files\Microsoft
      O43 - CFD: 08/12/2008 - 11:04:04 - [0] ----D- C:\Program Files\microsoft frontpage
      O43 - CFD: 14/11/2010 - 10:58:10 - [0] ----D- C:\Program Files\Microsoft Office
      O43 - CFD: 22/04/2011 - 06:20:24 - [38388859] ----D- C:\Program Files\Microsoft Silverlight
      O43 - CFD: 13/08/2010 - 03:48:30 - [10374874] ----D- C:\Program Files\Movie Maker
      O43 - CFD: 24/04/2011 - 11:03:20 - [2423] ----D- C:\Program Files\Mozilla Firefox
      O43 - CFD: 08/12/2008 - 11:28:40 - [25757] ----D- C:\Program Files\MSBuild
      O43 - CFD: 19/11/2010 - 19:03:58 - [19278399] ----D- C:\Program Files\MSN
      O43 - CFD: 08/12/2008 - 11:00:44 - [8745735] ----D- C:\Program Files\MSN Gaming Zone
      O43 - CFD: 04/06/2009 - 23:14:46 - [0] ----D- C:\Program Files\MSXML 4.0
      O43 - CFD: 08/12/2008 - 11:02:00 - [3285523] ----D- C:\Program Files\NetMeeting
      O43 - CFD: 08/12/2008 - 11:00:52 - [1804] ----D- C:\Program Files\Online Services
      O43 - CFD: 11/08/2010 - 17:13:02 - [379964498] ----D- C:\Program Files\OpenOffice.org 3
      O43 - CFD: 27/12/2010 - 12:54:44 - [1583030] ----D- C:\Program Files\Orange
      O43 - CFD: 16/12/2010 - 00:32:32 - [4379321] ----D- C:\Program Files\Outlook Express
      O43 - CFD: 19/05/2011 - 14:42:50 - [13568935] ----D- C:\Program Files\PC Connectivity Solution
      O43 - CFD: 08/12/2008 - 11:33:16 - [110460866] ----D- C:\Program Files\PC-Doctor for Windows
      O43 - CFD: 08/05/2011 - 12:12:26 - [102918843] ----D- C:\Program Files\POB 7
      O43 - CFD: 19/05/2010 - 14:09:14 - [62589198] ----D- C:\Program Files\Realtek
      O43 - CFD: 08/12/2008 - 11:28:34 - [37387521] ----D- C:\Program Files\Reference Assemblies
      O43 - CFD: 25/05/2010 - 10:37:18 - [38412056] ----D- C:\Program Files\Securitoo
      O43 - CFD: 08/12/2008 - 11:02:12 - [1025] ----D- C:\Program Files\Services en ligne
      O43 - CFD: 23/04/2011 - 10:52:54 - [62789846] ----D- C:\Program Files\SFR
      O43 - CFD: 02/01/2011 - 11:58:04 - [81920819] ----D- C:\Program Files\Sony
      O43 - CFD: 26/03/2011 - 13:18:30 - [69968136] ----D- C:\Program Files\Sony Ericsson
      O43 - CFD: 02/01/2011 - 11:53:56 - [66146] ----D- C:\Program Files\Sony Media Go Install
      O43 - CFD: 01/06/2011 - 22:16:30 - [401868] ----D- C:\Program Files\Trend Micro
      O43 - CFD: 14/10/2009 - 20:41:24 - [6010610] ----D- C:\Program Files\UltraISO
      O43 - CFD: 01/06/2011 - 09:25:32 - [0] ----D- C:\Program Files\Uniblue
      O43 - CFD: 08/12/2008 - 11:07:08 - [0] --H-D- C:\Program Files\Uninstall Information
      O43 - CFD: 09/10/2009 - 18:16:18 - [24908958] ----D- C:\Program Files\Unity
      O43 - CFD: 30/03/2011 - 06:54:00 - [101457172] ----D- C:\Program Files\VLC
      O43 - CFD: 19/11/2010 - 20:04:08 - [45806173] ----D- C:\Program Files\Windows Live
      O43 - CFD: 15/11/2009 - 13:26:48 - [3596942] ----D- C:\Program Files\Windows Media Connect 2
      O43 - CFD: 29/08/2009 - 16:06:14 - [8278281] ----D- C:\Program Files\Windows Media Player
      O43 - CFD: 08/12/2008 - 11:00:42 - [3942655] ----D- C:\Program Files\Windows NT
      O43 - CFD: 08/12/2008 - 11:02:16 - [0] --H-D- C:\Program Files\WindowsUpdate
      O43 - CFD: 07/08/2009 - 20:48:08 - [3525705] ----D- C:\Program Files\WinRAR
      O43 - CFD: 13/05/2011 - 06:59:30 - [1804395] ----D- C:\Program Files\X'nBeep 1.1
      O43 - CFD: 08/12/2008 - 11:04:04 - [0] ----D- C:\Program Files\xerox
      O43 - CFD: 27/06/2010 - 17:59:34 - [166] ----D- C:\Program Files\Fichiers Communs\ArcSoft
      O43 - CFD: 02/03/2011 - 15:19:12 - [3515885] ----D- C:\Program Files\Fichiers Communs\Adobe
      O43 - CFD: 13/02/2010 - 10:54:22 - [32158176] ----D- C:\Program Files\Fichiers Communs\Adobe AIR
      O43 - CFD: 15/10/2009 - 20:20:34 - [54234772] ----D- C:\Program Files\Fichiers Communs\AVSMedia
      O43 - CFD: 14/10/2009 - 20:41:24 - [262144] ----D- C:\Program Files\Fichiers Communs\EZB Systems
      O43 - CFD: 05/06/2009 - 17:56:14 - [756] ----D- C:\Program Files\Fichiers Communs\France Telecom
      O43 - CFD: 04/06/2009 - 17:00:48 - [469525] ----D- C:\Program Files\Fichiers Communs\Hewlett-Packard
      O43 - CFD: 04/06/2009 - 17:00:30 - [5688484] ----D- C:\Program Files\Fichiers Communs\HP
      O43 - CFD: 08/12/2008 - 11:42:10 - [3179774] ----D- C:\Program Files\Fichiers Communs\InstallShield
      O43 - CFD: 05/03/2011 - 12:59:36 - [1247175] ----D- C:\Program Files\Fichiers Communs\Java
      O43 - CFD: 19/11/2010 - 20:04:00 - [16733215] ----D- C:\Program Files\Fichiers Communs\Microsoft Shared
      O43 - CFD: 08/12/2008 - 11:01:58 - [284160] ----D- C:\Program Files\Fichiers Communs\MSSoap
      O43 - CFD: 08/12/2008 - 11:56:10 - [0] ----D- C:\Program Files\Fichiers Communs\ODBC
      O43 - CFD: 08/12/2008 - 11:02:00 - [8106] ----D- C:\Program Files\Fichiers Communs\Services
      O43 - CFD: 02/01/2011 - 11:58:16 - [341472] ----D- C:\Program Files\Fichiers Communs\Sony Shared
      O43 - CFD: 08/12/2008 - 11:56:08 - [3787229] ----D- C:\Program Files\Fichiers Communs\SpeechEngines
      O43 - CFD: 14/11/2010 - 10:54:36 - [13518053] ----D- C:\Program Files\Fichiers Communs\System
      O43 - CFD: 04/06/2009 - 15:54:18 - [172330722] ----D- C:\Program Files\Fichiers Communs\Windows Live
      O43 - CFD: 02/03/2011 - 15:20:30 - [17412171] ----D- C:\Documents and Settings\HP_Administrator\Application Data\Adobe
      O43 - CFD: 27/06/2010 - 09:43:14 - [3782564] ----D- C:\Documents and Settings\HP_Administrator\Application Data\ArcSoft
      O43 - CFD: 15/10/2009 - 17:16:20 - [0] ----D- C:\Documents and Settings\HP_Administrator\Application Data\AVS4YOU
      O43 - CFD: 24/04/2011 - 11:03:58 - [0] ----D- C:\Documents and Settings\HP_Administrator\Application Data\BabylonToolbar
      O43 - CFD: 23/05/2010 - 17:30:36 - [726742] ----D- C:\Documents and Settings\HP_Administrator\Application Data\banshee-1
      O43 - CFD: 29/11/2009 - 20:22:30 - [554] ----D- C:\Documents and Settings\HP_Administrator\Application Data\com.adobe.example.widget-programmes.40247E01796E652D304FB5752B197AB47987A585.1
      O43 - CFD: 06/06/2009 - 11:04:24 - [0] ----D- C:\Documents and Settings\HP_Administrator\Application Data\CyberLink
      O43 - CFD: 10/04/2011 - 15:38:18 - [3282851] ----D- C:\Documents and Settings\HP_Administrator\Application Data\DraftSight
      O43 - CFD: 28/09/2010 - 20:56:26 - [1031] ----D- C:\Documents and Settings\HP_Administrator\Application Data\dvdcss
      O43 - CFD: 19/01/2010 - 11:50:54 - [14332] ----D- C:\Documents and Settings\HP_Administrator\Application Data\GetRightToGo
      O43 - CFD: 28/03/2010 - 19:08:42 - [100406] ----D- C:\Documents and Settings\HP_Administrator\Application Data\Google
      O43 - CFD: 07/06/2009 - 20:53:20 - [48943] ----D- C:\Documents and Settings\HP_Administrator\Application Data\HP
      O43 - CFD: 01/06/2011 - 17:40:44 - [234775] ----D- C:\Documents and Settings\HP_Administrator\Application Data\HPAppData
      O43 - CFD: 02/07/2010 - 03:35:06 - [21355] ----D- C:\Documents and Settings\HP_Administrator\Application Data\HpUpdate
      O43 - CFD: 08/12/2008 - 11:04:02 - [0] ----D- C:\Documents and Settings\HP_Administrator\Application Data\Identities
      O43 - CFD: 31/10/2010 - 15:51:34 - [4191] ----D- C:\Documents and Settings\HP_Administrator\Application Data\kikin
      O43 - CFD: 01/01/2011 - 20:58:00 - [954728] ----D- C:\Documents and Settings\HP_Administrator\Application Data\LimeWire
      O43 - CFD: 29/06/2009 - 22:45:36 - [2007943] ----D- C:\Documents and Settings\HP_Administrator\Application Data\Macromedia
      O43 - CFD: 01/06/2011 - 22:02:42 - [1208087] ----D- C:\Documents and Settings\HP_Administrator\Application Data\Malwarebytes
      O43 - CFD: 02/03/2011 - 15:20:30 - [37260774] -S--D- C:\Documents and Settings\HP_Administrator\Application Data\Microsoft
      O43 - CFD: 25/04/2011 - 09:27:38 - [0] ----D- C:\Documents and Settings\HP_Administrator\Application Data\mkvtoolnix
      O43 - CFD: 10/04/2011 - 14:41:44 - [0] ----D- C:\Documents and Settings\HP_Administrator\Application Data\Mozilla
      O43 - CFD: 04/06/2009 - 14:31:28 - [24394] ----D- C:\Documents and Settings\HP_Administrator\Application Data\MSNInstaller
      O43 - CFD: 01/06/2011 - 09:45:14 - [3072] ----D- C:\Documents and Settings\HP_Administrator\Application Data\Nokia
      1. Ok ,

        La suite demandée stp:

        Télécharge MBAM et installe le selon l'emplacement par défaut
        http://www.malwarebytes.org/mbam.php
        * Effectue la mise à jour et lance Malwarebytes' Anti-Malware
        * Clique dans l'onglet du haut "Recherche"
        * Coche l'option "Exécuter un examen rapide" puis sur le bouton "Rechercher"
        * Choisis de scanner tous tes disques durs, puis clique sur 'Lancer l'examen"

        A la fin de l'analyse, si MBAM n'a rien trouvé :

        * Clique sur OK, le rapport s'ouvre spontanément

        Si des menaces ont été détectées :

        * Clique sur OK puis "Afficher les résultats"
        * Choisis l'option "Supprimer la sélection"
        * Si MBAM demande le redémarrage de Windows : Clique sur "Oui"
        * Une fois le PC redémarré, le rapport se trouve dans l'onglet "Rapports/Logs"
        * Sinon le rapport s'ouvre automatiquement après la suppression

        Quelque soit le résultat, copie/colle le rapport dans le prochain message
        1. Voilà le dernier rapport:

          Malwarebytes' Anti-Malware 1.51.0.1200
          www.malwarebytes.org

          Version de la base de données: 6748

          Windows 5.1.2600 Service Pack 3
          Internet Explorer 8.0.6001.18702

          01/06/2011 22:52:24
          mbam-log-2011-06-01 (22-52-24).txt

          Type d'examen: Examen rapide
          Elément(s) analysé(s): 149417
          Temps écoulé: 3 minute(s), 9 seconde(s)

          Processus mémoire infecté(s): 0
          Module(s) mémoire infecté(s): 0
          Clé(s) du Registre infectée(s): 0
          Valeur(s) du Registre infectée(s): 0
          Elément(s) de données du Registre infecté(s): 0
          Dossier(s) infecté(s): 0
          Fichier(s) infecté(s): 0

          Processus mémoire infecté(s):
          (Aucun élément nuisible détecté)

          Module(s) mémoire infecté(s):
          (Aucun élément nuisible détecté)

          Clé(s) du Registre infectée(s):
          (Aucun élément nuisible détecté)

          Valeur(s) du Registre infectée(s):
          (Aucun élément nuisible détecté)

          Elément(s) de données du Registre infecté(s):
          (Aucun élément nuisible détecté)

          Dossier(s) infecté(s):
          (Aucun élément nuisible détecté)

          Fichier(s) infecté(s):
          (Aucun élément nuisible détecté)
      2. Salut,

        * Télécharge de AD-Remover sur ton Bureau. (Merci à C_XX)
        http://www.teamxscript.org/adremoverTelechargement.html

        /!\ Déconnecte-toi d'internet et ferme toutes applications en cours /!\

        Désactive provisoirement et seulement le temps de l'utilisation de ADremover, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.

        - Double-clique sur l'icône Ad-remover située sur ton Bureau.
        - Sur la page, clique sur le bouton « NETTOYER »
        - Confirme lancement du scan
        - Laisse travailler l'outil.
        - Poste le rapport qui apparaît à la fin.

        (Le rapport est sauvegardé aussi sous C:\Ad-report(Scan/clean).Txt)

        Ensuite:

        Télécharge MBAM et installe le selon l'emplacement par défaut
        http://www.malwarebytes.org/mbam.php
        * Effectue la mise à jour et lance Malwarebytes' Anti-Malware
        * Clique dans l'onglet du haut "Recherche"
        * Coche l'option "Exécuter un examen rapide" puis sur le bouton "Rechercher"
        * Choisis de scanner tous tes disques durs, puis clique sur 'Lancer l'examen"

        A la fin de l'analyse, si MBAM n'a rien trouvé :

        * Clique sur OK, le rapport s'ouvre spontanément

        Si des menaces ont été détectées :

        * Clique sur OK puis "Afficher les résultats"
        * Choisis l'option "Supprimer la sélection"
        * Si MBAM demande le redémarrage de Windows : Clique sur "Oui"
        * Une fois le PC redémarré, le rapport se trouve dans l'onglet "Rapports/Logs"
        * Sinon le rapport s'ouvre automatiquement après la suppression

        Quelque soit le résultat, copie/colle le rapport dans le prochain message

        ....
        1. Ok merci, je fais tout ça et au prochain message je donne les rapports
        2. Alors j'ai fait ce que vous m'avez tous demandé.
          J'ai désinstallé babylon comme demandé par roberto-3
          Puis j'ai fait les 2 nettoyages demandé par Vent d'ouest.
          Voici le rapport de AD-Remover:

          ======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======

          Mis à jour par TeamXscript le 12/04/11
          Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
          Site web: http://www.teamxscript.org

          C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 21:05:46 le 01/06/2011, Mode normal

          Microsoft Windows XP Édition familiale Service Pack 3 (X86)
          HP_Administrator@COUTE ( )

          ============== ACTION(S) ==============

          Service: "I.P services" Stoppé et supprimé

          Fichier supprimé: C:\WINDOWS\Downloaded Program Files\F3initialsetup1.0.1.1.inf
          Dossier supprimé: C:\Program Files\InstallPedia
          Fichier supprimé: C:\WINDOWS\system32\Utils.dll
          Dossier supprimé: C:\Documents and Settings\HP_Administrator\Application Data\FunWebProducts
          Dossier supprimé: C:\Program Files\FunWebProducts
          Dossier supprimé: C:\Program Files\MyWebSearch
          Dossier supprimé: C:\Documents and Settings\HP_Administrator\Application Data\PriceGong
          Dossier supprimé: C:\Program Files\PriceGong
          Dossier supprimé: C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\networker
          Dossier supprimé: C:\Documents and Settings\HP_Administrator\Application Data\OfferBox
          Dossier supprimé: C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\iMesh
          Dossier supprimé: C:\Program Files\iMesh Applications
          Dossier supprimé: C:\Documents and Settings\HP_Administrator\Application Data\iMeshMediabarTb

          (!) -- Fichiers temporaires supprimés.

          Clé supprimée: HKLM\Software\Classes\CLSID\{1631550F-191D-4826-B069-D9439253D926}
          Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1631550F-191D-4826-B069-D9439253D926}
          Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1631550F-191D-4826-B069-D9439253D926}
          Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1631550F-191D-4826-B069-D9439253D926}
          Clé supprimée: HKLM\Software\Classes\AppID\{835315FC-1BF6-4CA9-80CD-F6C158D40692}
          Clé supprimée: HKLM\Software\Classes\CLSID\{474597C5-AB09-49d6-A4D5-2E8D7341384E}
          Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{474597C5-AB09-49d6-A4D5-2E8D7341384E}
          Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{474597C5-AB09-49d6-A4D5-2E8D7341384E}
          Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{474597C5-AB09-49d6-A4D5-2E8D7341384E}
          Clé supprimée: HKLM\Software\Classes\CLSID\{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F}
          Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F}
          Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F}
          Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F}
          Clé supprimée: HKLM\Software\Classes\CLSID\{D2A2595C-4FE4-4315-AA9B-19DBD6271B71}
          Clé supprimée: HKLM\Software\Classes\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC}
          Clé supprimée: HKLM\Software\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
          Clé supprimée: HKLM\Software\Classes\Interface\{C8D424EF-CB21-49A0-8659-476FBAB0F8E8}
          Clé supprimée: HKLM\Software\Classes\Interface\{CF54BE1C-9359-4395-8533-1657CF209CFE}
          Clé supprimée: HKLM\Software\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}
          Clé supprimée: HKLM\Software\Classes\TypeLib\{8B3372D0-09F0-41A5-8D9B-134E148672FB}
          Clé supprimée: HKLM\Software\Classes\TypeLib\{A147AA03-820F-4A0F-9F34-D6CB4004A2F9}
          Clé supprimée: HKLM\Software\Classes\TypeLib\{AA2E16F2-387A-415F-BA95-B89BAF3AF109}
          Clé supprimée: HKLM\Software\Classes\TypeLib\{D518921A-4A03-425E-9873-B9A71756821E}
          Clé supprimée: HKLM\Software\Classes\iMeshIEHelper.DNSGuard
          Clé supprimée: HKLM\Software\Classes\iMeshIEHelper.DNSGuard.1
          Clé supprimée: HKLM\Software\Classes\PriceFactorIE.PriceGongBHO
          Clé supprimée: HKLM\Software\Classes\PriceFactorIE.PriceGongBHO.1
          Clé supprimée: HKLM\Software\Classes\PriceGongIE.PriceGongCtrl
          Clé supprimée: HKLM\Software\Classes\PriceGongIE.PriceGongCtrl.1
          Clé supprimée: HKLM\Software\Classes\AppID\PriceGongIE.DLL
          Clé supprimée: HKLM\Software\DataMngr
          Clé supprimée: HKLM\Software\FocusInteractive
          Clé supprimée: HKLM\Software\Fun Web Products
          Clé supprimée: HKLM\Software\FunWebProducts
          Clé supprimée: HKLM\Software\InstallPedia
          Clé supprimée: HKLM\Software\MyWebSearch
          Clé supprimée: HKLM\Software\OfferBox
          Clé supprimée: HKCU\Software\DataMngr
          Clé supprimée: HKCU\Software\Fun Web Products
          Clé supprimée: HKCU\Software\FunWebProducts
          Clé supprimée: HKCU\Software\iMesh
          Clé supprimée: HKCU\Software\MyWebSearch
          Clé supprimée: HKCU\Software\OfferBox
          Clé supprimée: HKCU\Software\PriceGong
          Clé supprimée: HKCU\Software\Winsudate
          Clé supprimée: HKU\.DEFAULT\Software\FBSearch
          Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1F096B29-E9DA-4D64-8D63-936BE7762CC5}
          Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59}
          Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}
          Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59}
          Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{271DCEE5-75F4-4120-AB9A-2397631FE099}
          Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{28D35620-51D9-11DE-9D13-2DB156D89593}
          Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3441C289-2158-4b32-9E5B-DB30573329AA}
          Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59C7FC09-1C83-4648-B3E6-003D2BBC7481}
          Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8D3A6FAF-2E3E-478a-9051-A895149DD1BE}
          Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170B96C-28D4-4626-8358-27E6CAEEF907}
          Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C6FB7C8A-5532-4d47-85D2-3AD59F0C8A7F}
          Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C87A99E0-0979-4f66-B035-4B9134AD879E}
          Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1A71FA0-FF48-48dd-9B6D-7A13A3E42127}
          Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DDB1968E-EAD6-40fd-8DAE-FF14757F60C7}
          Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F138D901-86F0-4383-99B6-9CDD406036DA}
          Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F8F572AF-2E67-405f-BBD6-40B87307BE77}
          Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\pricegong
          Clé supprimée: HKLM\Software\Classes\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239}
          Clé supprimée: HKLM\Software\Classes\CLSID\{A4730EBE-43A6-443e-9776-36915D323AD3}
          Clé supprimée: HKLM\Software\Google\Chrome\Extensions\bjeikeheijdjdfjbmknpefojickbkmom
          Clé supprimée: HKLM\Software\Microsoft\Code Store Database\Distribution Units\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
          Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68AF847F-6E91-45DD-9B68-D6A12C30E5D7}
          Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll
          Clé supprimée: HKLM\Software\Microsoft\Multimedia\WMPlayer\Schemes\f3pss

          Valeur supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|DataMngr
          Valeur supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|IP Network
          Valeur supprimée: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F}

          ============== SCAN ADDITIONNEL ==============

          **** Google Chrome Version [11.0.696.65] ****

          Extension\dbknnmebcajacipdbplichlbfjbjamlf (c:\Facemoi\facemoi_chrome.crx) (?)
          Extension\dhkplhfnhceodhffomolpfigojocbpcb (C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbar.crx) (?)
          Extension\hfdldabepacecakhpnhldhpejjfaaidf (c:\Facemoi\facemoi_chrome.crx) (?)
          Extension\icmlaeflemplmjndnaapfdbbnpncnbda (C:\Program Files\Alwil Software\Avast5\WebRep\Chrome\aswWebRepChrome.crx) (?)

          -- C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default --
          Preferences - default_search_provider: "Google" (Activé: true) (hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7GZAZ_fr)
          Plugin - Chrome NaCl (Activé: false) (C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\11.0.696.65\ppGoogleNaClPluginChrome.dll)
          Plugin - Media Go Detector (Activé: true) (C:\Program Files\Sony\Media Go\npmediago.dll)
          Plugin - Unity Player (Activé: true) (C:\Program Files\Unity\WebPlayer\loader\npUnity3D32.dll)
          Plugin - "Java" (Activé: true)
          Plugin - "Silverlight" (Activé: true)
          Plugin - "Chrome NaCl" (Activé: false)
          Plugin - "Babylon Chrome Plugin" (Activé: true)
          Plugin - "Media Go Detector" (Activé: true)
          Plugin - "Unity Player" (Activé: true)

          ========================================

          **** Internet Explorer Version [8.0.6001.18702] ****

          HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
          HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
          HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
          HKCU_Main|Start Page - hxxp://fr.msn.com/
          HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
          HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
          HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
          HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
          HKLM_Main|Start Page - hxxp://fr.msn.com/
          HKCU_URLSearchHooks|{08C06D61-F1F3-4799-86F8-BE1A89362C85} (x)
          HKCU_SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} - "?" (?)
          HKCU_SearchScopes\{814C76CB-2623-43F4-AAD0-58A0E5190A20} - "Orange" (hxxp://www.orange.fr/bin/frame1px.cgi?u=hxxp%3A//r.voila.fr/se%3Frdata%3D{search...)
          HKCU_SearchScopes\{AC129BF9-68BF-4bc4-A1DC-ECB62712FF99} - "kikin Search" (hxxp://search.kikin.com/search/?q={searchTerms})
          HKLM_Toolbar|{98889811-442D-49dd-99D7-DC866BE87DBC} (C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll)
          HKLM_Toolbar|{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} (C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll)
          HKCU_ElevationPolicy\{8F8BAD52-D4D2-4669-9E8E-A7AAE8393056} - C:\Program Files\kikin\KikinBroker.exe (kikin)
          HKCU_ElevationPolicy\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D} - C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Update\1.3.21.53\GoogleUpdateOnDemand.exe (x)
          HKCU_ElevationPolicy\{C442AC41-9200-4770-8CC0-7CDB4F245C55} - C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Update\GoogleUpdate.exe (x)
          HKLM_ElevationPolicy\${ELV_GUID} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe (Babylon Ltd.)
          HKLM_ElevationPolicy\{B2321D2F-1154-4d97-AD3E-2FE0BAE2897B} - C:\Program Files\SFR\Kit\9launch.exe (SFR)
          HKLM_Extensions\{0F7195C2-6713-4d93-A1BC-DA5FA33F0A65} - "?" (?)
          HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?)
          BHO\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8} - "Objet d'aide à la navigation SFR" (C:\Program Files\SFR\Kit\SFRNavErrorHelper.dll)
          BHO\{2EECD738-5844-4a99-B4B6-146BF802613B} - "CescrtHlpr Object" (C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\bh\BabylonToolbar.dll)
          BHO\{465E08E7-F005-4389-980F-1D8764B3486C} (?)
          BHO\{5C255C8A-E604-49b4-9D64-90988571CECB} (?)
          BHO\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - "Search Helper" (C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll)
          BHO\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6} (?)
          BHO\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - "avast! WebRep" (C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll)
          BHO\{B49699FC-1665-4414-A1CB-C4A2A4A13EEC} - "DCA BHO" (C:\Program Files\Consumer Input\dca-bho.dll)
          BHO\{C68AE9C0-0909-4DDC-B661-C1AFB9F5AE53} - "OrangeMenu Object" (C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\MenuOrange.dll)
          BHO\{E601996F-E400-41CA-804B-CD6373A7EEE2} - "kikin Plugin" (C:\Program Files\kikin\ie_kikin.dll)

          ========================================

          C:\Program Files\Ad-Remover\Quarantine: 574 Fichier(s)
          C:\Program Files\Ad-Remover\Backup: 13 Fichier(s)

          C:\Ad-Report-CLEAN[1].txt - 01/06/2011 21:06:00 (12645 Octet(s))

          Fin à: 21:07:31, 01/06/2011

          ============== E.O.F ==============
        3. Voici le rapport de MBAM:

          Malwarebytes' Anti-Malware 1.51.0.1200
          www.malwarebytes.org

          Version de la base de données: 6748

          Windows 5.1.2600 Service Pack 3
          Internet Explorer 8.0.6001.18702

          01/06/2011 22:09:05
          mbam-log-2011-06-01 (22-09-05).txt

          Type d'examen: Examen rapide
          Elément(s) analysé(s): 150057
          Temps écoulé: 3 minute(s), 27 seconde(s)

          Processus mémoire infecté(s): 0
          Module(s) mémoire infecté(s): 0
          Clé(s) du Registre infectée(s): 10
          Valeur(s) du Registre infectée(s): 1
          Elément(s) de données du Registre infecté(s): 1
          Dossier(s) infecté(s): 1
          Fichier(s) infecté(s): 3

          Processus mémoire infecté(s):
          (Aucun élément nuisible détecté)

          Module(s) mémoire infecté(s):
          (Aucun élément nuisible détecté)

          Clé(s) du Registre infectée(s):
          HKEY_CLASSES_ROOT\AppID\{90A52F08-64AC-4DC6-9D7D-4516670275D3} (Trojan.Downloader) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\CLSID\{C68AE9C0-0909-4DDC-B661-C1AFB9F5AE53} (Trojan.Downloader) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\TypeLib\{90A52F08-64AC-4DC6-9D7D-4516670275D3} (Trojan.Downloader) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\Interface\{6C51F7E9-8542-4F25-A30F-2060157752E1} (Trojan.Downloader) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\Orange.MenuIE.1 (Trojan.Downloader) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\Orange.MenuIE (Trojan.Downloader) -> Quarantined and deleted successfully.
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C68AE9C0-0909-4DDC-B661-C1AFB9F5AE53} (Trojan.Downloader) -> Quarantined and deleted successfully.
          HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{C68AE9C0-0909-4DDC-B661-C1AFB9F5AE53} (Trojan.Downloader) -> Quarantined and deleted successfully.
          HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C68AE9C0-0909-4DDC-B661-C1AFB9F5AE53} (Trojan.Downloader) -> Quarantined and deleted successfully.
          HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} (Trojan.Vundo) -> Quarantined and deleted successfully.

          Valeur(s) du Registre infectée(s):
          HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell (Worm.AutoRun) -> Value: Shell -> Delete on reboot.

          Elément(s) de données du Registre infecté(s):
          HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell (Hijack.Shell) -> Bad: (C:\RECYCLER\S-1-5-21-2027305432-4603279265-559897194-4583\recycle.exe,explorer.exe) Good: (Explorer.exe) -> Quarantined and deleted successfully.

          Dossier(s) infecté(s):
          c:\RECYCLER\s-1-5-21-0324232222-888888379-781133308-1995 (Trojan.Agent.M) -> Quarantined and deleted successfully.

          Fichier(s) infecté(s):
          c:\documents and settings\hp_administrator\application data\Orange\orangeinside\menuorange.dll (Trojan.Downloader) -> Quarantined and deleted successfully.
          c:\documents and settings\hp_administrator\mes documents\downloads\aviconvertersetup.exe (Adware.Agent) -> Quarantined and deleted successfully.
          c:\RECYCLER\s-1-5-21-0324232222-888888379-781133308-1995\Desktop.ini (Trojan.Agent.M) -> Quarantined and deleted successfully.

          J'ai fait la suppression de la sélection....
        4. Enfin pour finir je met un nouveau rapport hijack this:

          Logfile of Trend Micro HijackThis v2.0.4
          Scan saved at 22:20:19, on 01/06/2011
          Platform: Windows XP SP3 (WinNT 5.01.2600)
          MSIE: Internet Explorer v8.00 (8.00.6001.18702)
          Boot mode: Normal

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\system32\svchost.exe
          C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
          C:\WINDOWS\Explorer.EXE
          C:\WINDOWS\system32\spoolsv.exe
          C:\WINDOWS\RTHDCPL.EXE
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\system32\hkcmd.exe
          C:\WINDOWS\system32\igfxpers.exe
          C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
          C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
          C:\Program Files\Java\jre6\bin\jqs.exe
          C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\Program Files\Consumer Input\dca-ua.exe
          C:\Program Files\Windows Media Player\WMPNSCFG.exe
          C:\Program Files\X'nBeep 1.1\XnBeep.exe
          C:\WINDOWS\system32\igfxsrvc.exe
          C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\system32\wuauclt.exe
          C:\WINDOWS\system32\NOTEPAD.EXE
          C:\WINDOWS\system32\NOTEPAD.EXE
          C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
          C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
          C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
          C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
          C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
          C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
          C:\WINDOWS\system32\msiexec.exe
          C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=54896
          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
          R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
          R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)
          O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
          O2 - BHO: Aide à la navigation SFR - {0F6E720A-1A6B-40E1-A294-1D4D19F156C8} - C:\Program Files\SFR\Kit\SFRNavErrorHelper.dll
          O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
          O2 - BHO: (no name) - {465E08E7-F005-4389-980F-1D8764B3486C} - (no file)
          O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
          O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
          O2 - BHO: (no name) - {8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6} - (no file)
          O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
          O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
          O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
          O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg.dll
          O2 - BHO: DCA - {B49699FC-1665-4414-A1CB-C4A2A4A13EEC} - C:\Program Files\Consumer Input\dca-bho.dll
          O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
          O2 - BHO: kikin Plugin - {E601996F-E400-41CA-804B-CD6373A7EEE2} - C:\Program Files\kikin\ie_kikin.dll
          O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
          O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
          O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
          O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
          O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
          O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
          O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
          O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
          O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
          O4 - HKLM\..\Run: [UpdateP2GoShortCut] "C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
          O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
          O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
          O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe"
          O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
          O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe"
          O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
          O4 - HKCU\..\Run: [Consumer Input Update] C:\Program Files\Consumer Input\dca-ua.exe
          O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
          O4 - HKCU\..\Run: [Connexion SFR 9props.exe] "C:\Program Files\SFR\Kit\9props.exe" /trayicon
          O4 - HKCU\..\Run: [X'nBeep] C:\Program Files\X'nBeep 1.1\XnBeep.exe
          O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
          O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
          O8 - Extra context menu item: &Envoyer à OneNote - res://C:\PROGRA~1\MI1933~1\Office14\ONBttnIE.dll/105
          O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office14\EXCEL.EXE/3000
          O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
          O8 - Extra context menu item: _ajouter cette page à vos favoris Orange - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\addfavorites_html\addfavorites.html
          O8 - Extra context menu item: _envoyer le texte sélectionné par sms - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\sendsmsselectedtext_html\sendsmsselectedtext.html
          O8 - Extra context menu item: _envoyer par sms - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\sendsms_html\sendsms.html
          O8 - Extra context menu item: _envoyer un mail - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\sendmail_html\sendmail.html
          O8 - Extra context menu item: _orange.fr - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\orange_html\orange.html
          O8 - Extra context menu item: _rechercher le texte sélectionné - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\selectedsearch_html\selectedsearch.html
          O8 - Extra context menu item: _traduire la page - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\translate_html\translate.html
          O8 - Extra context menu item: _traduire le texte sélectionné - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\translateSelectedText_html\translateSelectedText.html
          O9 - Extra button: (no name) - {0F7195C2-6713-4d93-A1BC-DA5FA33F0A65} - C:\Program Files\kikin\ie_kikin.dll
          O9 - Extra 'Tools' menuitem: My kikin - {0F7195C2-6713-4d93-A1BC-DA5FA33F0A65} - C:\Program Files\kikin\ie_kikin.dll
          O9 - Extra button: Afficher ou masquer l'HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
          O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
          O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O15 - Trusted Zone: https://applications-et-logiciels.orange.fr/
          O15 - Trusted Zone: https://www.orange.fr/portail
          O16 - DPF: {0972B098-DEE9-4279-AC7E-4BAAA029102D} (PhotoboxPhotowaysUploader5 Control) - http://assets.photobox.com/assets/aurigma/ImageUploader5.cab?20090806143003
          O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
          O16 - DPF: {3A226D85-574D-4272-B73C-DBCAECF709B3} (TNSClickerb.Clicker) - http://www.consoclicker.com/TNSClickrb.CAB
          O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.fr/SnapfishActivia.cab
          O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} - http://copainsdavant.linternaute.com/framework/lib/objimageuploader/html_include/5.1.1.0/ImageUploader5.cab
          O16 - DPF: {6EBC6744-5383-4213-AD5E-66434ECA1812} (F-Secure Online Scanner Launcher) - http://download.sp.f-secure.com/ols/nordnet/orange/so-4.1/resources/fslauncher.cab
          O16 - DPF: {70A5EBDC-3EA6-464A-9FF7-084BC150C417} (TNSClickera.Clicker) - http://www.consoclicker.com/TNSClickra.CAB
          O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
          O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
          O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
          O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
          O23 - Service: ArcSoft Connect Daemon (ACDaemon) - Unknown owner - C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe (file missing)
          O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
          O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
          O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
          O23 - Service: Service Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe
          O23 - Service: Service Google Update (gupdatem) (gupdatem) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe
          O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
          O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
          O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
          O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
          O23 - Service: Norton Internet Security - Unknown owner - C:\Program Files\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe (file missing)
          O23 - Service: Orange update Core Service - Unknown owner - C:\Program Files\Orange\OrangeUpdate\Service\OUCore.exe
          O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
          O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
          O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
          O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
          O23 - Service: Sony Ericsson PCCompanion - Avanquest Software - C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe
          O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
          O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
          O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe
          O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe
      3. bonjour

        commence à désinstaller Babylon

        ensuite il faut la version hijackthis V2.0.4