Virus

eilane -  
Bonjour, jai téléchargé HijackThis comme indiqué dans les messages que jai consulté concernant les virus, je vous donne donc le copié/collé du bloc note, merci davance de me répondre car je ny connais rien, c avast qui a detecté et jai tout mis en quarantaine

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:41:07, on 06/07/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\rundll32.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Safari\Safari.exe
C:\Documents and Settings\Laeti\Mes documents\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.01net.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.01net.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer fourni par 01net.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: ShopperReports - {100EB1FD-D03E-47fd-81F3-EE91287F9465} - C:\Program Files\ShopperReports3\bin\3.0.497.0\ShopperReports.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Interest recogniser for Moovida (powered by Spointer) - {E2A7BD67-0EAF-497f-B05B-748D7BF3C421} - C:\Program Files\Fluendo\Moovida\spointer\extensions\moovida_air_ie.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: OfferBox - {FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C} - C:\Program Files\OfferBox\OfferBoxBHO.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [AliceSAV] C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
O4 - Global Startup: Post-it® Software Notes Lite.lnk = C:\Program Files\3M\PSNLite\PsnLite.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: ShopperReports - Compare product prices - {C5428486-50A0-4a02-9D20-520B59A9F9B2} - C:\Program Files\ShopperReports3\bin\3.0.497.0\ShopperReports.dll
O9 - Extra button: ShopperReports - Compare travel rates - {C5428486-50A0-4a02-9D20-520B59A9F9B3} - C:\Program Files\ShopperReports3\bin\3.0.497.0\ShopperReports.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://fichiers.touslesdrivers.com/maconfig/MaConfig_3_5_3_0.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com/activex/ractrl.cab?lmi=100
O17 - HKLM\System\CCS\Services\Tcpip\..\{BD31365F-0A7B-45A0-AD2C-46E08DD99AF0}: NameServer = 192.168.1.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Service Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NMSAccess - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

--
End of file - 9666 bytes

39 réponses

Résumé de la discussion

Une analyse antivirus et un rapport HijackThis révèlent une liste de processus et de modules chargés sur Windows XP, suggérant une infection après la détection Avast et la quarantaine. Des propositions existent pour partager les rapports et poursuivre le nettoyage via des services d'hébergement de logs et des outils complémentaires, tout en évitant des modifications lourdes sans avis. Des échanges évoquent des problèmes lors de certains outils et des difficultés à obtenir un rapport complet, avec indication d'une progression bloquée et la nécessité d'un nouveau rapport. En parallèle, des inquiétudes autour d'éléments manquants et de soucis liés au son, ainsi que l'impact de certains programmes sur le système, soulignent l'importance d'une vérification ciblée des composants critiques avant toute suppression.

Bobot (l’IA à votre service)
  1. g3n-h@ckm@n
    c'est toi qui aides sur cnet.france ?
    1.  jacques.gache Contributeur sécurité
      eillane , pourrais tu poster le rapport par le biais de cijoint pour que l'on puisse l'avoir en entier et en une seul partie , merci

      sinon gen te pose une question ??
  3. eillane
    voici donc Rapport de ZHPDiag v1.27.2406 par Nicolas Coolman, Update du 12/07/2011
    Run by Laeti at 19/07/2011 01:01:17
    Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html

    ---\\ Web Browser
    MSIE: Internet Explorer v8.0.6001.18702
    MFIE: Mozilla Firefox v (Defaut)

    ---\\ System Information
    Windows XP Professional Service Pack 3 (Build 2600)
    ~ Processor: x86 Family 15 Model 6 Stepping 2, GenuineIntel
    ~ Operating System: 32 Bits
    ~ Boot mode: ~ Normal (Normal boot)
    Total RAM: 2943 MB (84% free)
    ~ System Restore: Activé (Enable)
    System drive C: has 8 GB (6%) free of 115 GB

    ---\\ Logged in mode
    ~ Computer Name: SALON
    ~ User Name: Laeti
    ~ All Users Names: SUPPORT_388945a0, Laeti, HelpAssistant, ASPNET, Administrateur,
    ~ Unselected Option: O45,O61,O62,O65,O66,O82
    ~ Logged in as Administrator

    ---\\ Environnement Variables
    ~ %AppData%=C:\Documents and Settings\Laeti\Application Data\
    ~ %Desktop%=C:\Documents and Settings\Laeti\Bureau\
    ~ %Favorites%=C:\Documents and Settings\Laeti\Favoris\
    ~ %LocalAppData%=C:\Documents and Settings\Laeti\Local Settings\Application Data\
    ~ %StartMenu%=C:\Documents and Settings\Laeti\Menu Démarrer\

    ---\\ DOS/Devices
    C:\ Hard drive, Flash drive, Thumb drive (Free 8 Go of 115 Go)
    D:\ Hard drive, Flash drive, Thumb drive (Free 99 Go of 112 Go)
    E:\ Hard drive, Flash drive, Thumb drive (Free 4 Go of 6 Go)
    F:\ CD-ROM drive (Not Inserted)
    G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
    H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
    I:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
    K:\ CD-ROM drive (Not Inserted)

    ---\\ Security Center & Tools Informations
    [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
    [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
    [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
    [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
    [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
    [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK

    ---\\ Recherche particulière de fichiers génériques
    [MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.19/07/2011 - 03:34:03.) -- C:\WINDOWS\Explorer.exe [1037824]
    [MD5.93AD0B78C7357A05F50E594EC7C22300] - (....) (.19/07/2011 - 03:34:20.) -- C:\WINDOWS\system32\rundll32.exe [33792]
    [MD5.42F5E14E33D79C236680468B1E4999F4] - (.Microsoft Corporation - Internet Extensions for Win32.) (.19/07/2011 - 17:06:11.) -- C:\WINDOWS\system32\wininet.dll [916480]
    [MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.19/07/2011 - 03:34:28.) -- C:\WINDOWS\system32\Winlogon.exe [512000]
    [MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.19/07/2011 - 19:40:30.) -- C:\WINDOWS\system32\drivers\atapi.sys [96512]
    [MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.19/07/2011 - 20:15:53.) -- C:\WINDOWS\system32\drivers\ntfs.sys [574976]

    ---\\ Etat des fichiers cachés (Caché/Total)
    ~ Mes images (My Pictures) : 15/57
    ~ Mes musiques (My Musics) : 239/1190
    ~ Mes Favoris (My Favorites) : 4/133
    ~ Mes Documents (My Documents) : 417/23537
    ~ Mon Bureau (My Desktop) : 2/10
    ~ Menu demarrer (Programs) : 6/49

    ---\\ Processus lancés
    [MD5.D16C826F375A44802BF317982E81A7E2] - (.AVAST Software - avast! Service.) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [42184]
    [MD5.9C69E6A25F5500501B14AF43311F8D8B] - (.Microsoft Corporation - Media Center Tray Applet.) -- C:\WINDOWS\ehome\ehtray.exe [64512]
    [MD5.9F3287A1CAF6E365ED2B39BB8D44B0EA] - (.Elaborate Bytes AG - Virtual CloneDrive Daemon.) -- C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [52168]
    [MD5.CA416C33C8F4D6DE53C17AAB7CE2FBD8] - (.TechCity Solutions France - AliceAgent.) -- C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe [81408]
    [MD5.DAEFB050AC8FEE4F1097FCF7CB97220E] - (.Microsoft Corporation - Media Center Media Status Aggregator Servic.) -- C:\WINDOWS\eHome\ehmsas.exe [46592]
    [MD5.93AD0B78C7357A05F50E594EC7C22300] - (...) -- C:\WINDOWS\system32\RUNDLL32.EXE [33792]
    [MD5.13E7CFE8E269ED15E7FC9C3EBBCB7E2B] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe [254696]
    [MD5.E7CF222185411C6A3E68273C452B3283] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\avastUI.exe [3493720]
    [MD5.B9B7084F7DB3D1B036C0B9178472E96A] - (.Logicool - Logicool Desktop Messenger.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe [20480]
    [MD5.A564A22308A3F55235BA2478EE82992D] - (.Hewlett-Packard - hpotdd01.) -- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe [28672]
    [MD5.B75637DA0A24B4B9D12A87D02FC437FE] - (.Logitech Inc. - Logitech SetPoint.) -- C:\Program Files\Logitech\SetPoint\KEM.exe [581632]
    [MD5.32655C9CD64941E6D5E0F031EA9AC34A] - (.Logitech Inc. - Logitech Hardware Abstraction Layer.) -- C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE [29696]
    [MD5.4AC28B51530D3A93B3F27EB7A72F575F] - (...) -- C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe [630784]
    [MD5.5D1347AA5AE6E2F77D7F4F8372D95AC9] - (.Microsoft Corporation - Media Center Receiver Service.) -- C:\WINDOWS\eHome\ehRecvr.exe [237568]
    [MD5.980EEEA91776357518892C5544768E2B] - (.Microsoft Corporation - Service de planification Media Center.) -- C:\WINDOWS\eHome\ehSched.exe [103424]
    [MD5.9DBA73C2F1E76EC4CB837E67C5743596] - (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe [153376]
    [MD5.E75ADCFAFDEF3F4C3AF3332928D59926] - (.Hewlett-Packard Company - LightScribe Service.) -- C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe [73728]
    [MD5.7AEA4DF1CA68FD45DD4BBE1F0243CE7F] - (...) -- C:\Program Files\CDBurnerXP\NMSAccessU.exe [71096]
    [MD5.C501206816F35D20422B4C3F88D62860] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 182.5.) -- C:\WINDOWS\system32\nvsvc32.exe [163908]
    [MD5.0DAD93BB0FECF5016AE3C06CBB0A873B] - (.Microsoft Corporation - COM Surrogate.) -- C:\WINDOWS\system32\dllhost.exe [5120]
    [MD5.89C981608FE15F3BAB8389794220C350] - (.Apple Inc. - Safari.) -- C:\Program Files\Safari\Safari.exe [2388264]
    [MD5.00365B3515C30F66CDB938F6729F3D0C] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [656896]

    ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
    C:\Documents and Settings\Laeti\Local Settings\Application Data\Mozilla\Firefox\Profiles\dx0c1dt4.default\prefs.js
    M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
    M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
    M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
    M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
    M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
    M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
    P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeployJava1.dll
    P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins\npnul32.dll
    P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.4.5".) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll
    P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
    P2 - FPN: [HKLM] [@google.com/npPicasa3,version=3.0.0] - (.Google, Inc. - Picasa plugin.) -- C:\Program Files\Google\Picasa3\npPicasa3.dll
    P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_26 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
    P2 - FPN: [HKLM] [@ma-config.com/HardwareDetection] - (.Cybelsoft - Plugin NPAPI Ma-Config.com.) -- C:\Program Files\ma-config.com\nphardwaredetection.dll
    P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
    P2 - FPN: [HKLM] [@pandonetworks.com/PandoWebPlugin] - (.Pando Networks - Pando Web Plugin.) -- C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll
    P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll
    P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll
    P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.4.5".) -- C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll
    P2 - FPN: [HKCU] [@unity3d.com/UnityPlayer,version=1.0] - (.Unity Technologies ApS - Unity Player 3.3.0f4.) -- C:\Documents and Settings\Laeti\Local Settings\Application Data\Unity\WebPlayer\loader\npUnity3D32.dll
    P2 - FPN: [HKCU] [pandonetworks.com/PandoWebPlugin] - (.Pando Networks - Pando Web Plugin.) -- C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll

    ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
    R0 - HKUS\S-1-5-21-854245398-813497703-725345543-1003\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
    R1 - HKUS\S-1-5-21-854245398-813497703-725345543-1003\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
    R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.19072 (longhorn_ie8_gdr.110420-1700)) -- C:\WINDOWS\system32\ieframe.dll

    ---\\ Internet Explorer, Proxy Management (R5)
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <local>;localhost
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

    ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
    F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe,
    F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

    ---\\ Browser Helper Objects de navigateur (O2)
    O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} Clé orpheline
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java(TM) Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

    ---\\ Internet Explorer Toolbars (O3)
    O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

    ---\\ Applications démarrées par registre & par dossier (O4)
    O4 - HKLM\..\Run: [ehTray] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\WINDOWS\ehome\ehtray.exe
    O4 - HKLM\..\Run: [VirtualCloneDrive] . (.Elaborate Bytes AG - Virtual CloneDrive Daemon.) -- C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
    O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] . (.Logitech Inc. - Logitech Hardware Abstraction Layer.) -- C:\WINDOWS\KHALMNPR.exe
    O4 - HKLM\..\Run: [AliceSAV] . (.TechCity Solutions France - AliceAgent.) -- C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe
    O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32\NvCpl.dll
    O4 - HKLM\..\Run: [NvMediaCenter] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\WINDOWS\system32\NvMcTray.dll
    O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] bthprops.cpl
    O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe
    O4 - HKLM\..\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\avastUI.exe
    O4 - HKCU\..\Run: [PlayNC Launcher] Clé orpheline
    O4 - HKCU\..\Run: [LDM] . (.Logicool - Logicool Desktop Messenger.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
    O4 - HKCU\..\Run: [RegistryBooster] . (.Uniblue Systems Limited - Uniblue Launcher.) -- C:\Program Files\Uniblue\RegistryBooster\launcher.exe
    O4 - HKUS\S-1-5-18\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe
    O4 - HKUS\S-1-5-18\..\Run: [LDM] . (.Logicool - Logicool Desktop Messenger.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
    O4 - HKUS\S-1-5-18\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe
    O4 - HKUS\S-1-5-18\..\Run: [LDM] . (.Logicool - Logicool Desktop Messenger.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
    O4 - HKUS\S-1-5-21-854245398-813497703-725345543-1003\..\Run: [PlayNC Launcher] Clé orpheline
    O4 - HKUS\S-1-5-21-854245398-813497703-725345543-1003\..\Run: [LDM] . (.Logicool - Logicool Desktop Messenger.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
    O4 - HKUS\S-1-5-21-854245398-813497703-725345543-1003\..\Run: [RegistryBooster] . (.Uniblue Systems Limited - Uniblue Launcher.) -- C:\Program Files\Uniblue\RegistryBooster\launcher.exe
    O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\hpoddt01.exe.lnk . (.Hewlett-Packard.) -- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
    O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Logitech Desktop Messenger.lnk . (.Logitech.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
    O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Logitech SetPoint.lnk . (.Logitech Inc..) -- C:\Program Files\Logitech\SetPoint\KEM.exe
    O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Post-it® Software Notes Lite.lnk . (.3M.) -- C:\Program Files\3M\PSNLite\PsnLite.exe
    O4 - Global Startup: C:\Documents And Settings\Laeti\Menu Démarrer\Programmes\Démarrage\RocketDock.lnk . (...) -- C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe

    ---\\ Autres liens utilisateurs (O4)
    O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader 9.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A94000000001}\SC_Reader.ico
    O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Apple Software Update.lnk . (...) -- C:\WINDOWS\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\AppleSoftwareUpdateIco.exe
    O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\CDBurnerXP.lnk . (.Canneverbe Limited.) -- C:\Program Files\CDBurnerXP\cdbxpp.exe
    O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Media Center.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\ehome\ehshell.exe
    O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Post-it® Software Notes Lite.lnk . (.3M.) -- C:\Program Files\3M\PSNLite\PsnLite.exe
    O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Safari.lnk . (...) -- C:\WINDOWS\Installer\{6C1E7AA1-44E9-446D-AAB2-0DE6D9EFEAB1}\SafariIco.exe
    O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk . (.Microsoft Corporation.) -- C:\Program Files\Messenger\msmsgs.exe
    O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Movie Maker\moviemk.exe
    O4 - Global Startup: C:\Documents And Settings\Laeti\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe
    O4 - Global Startup: C:\Documents And Settings\Laeti\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
    O4 - Global Startup: C:\Documents And Settings\Laeti\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe
    O4 - Global Startup: C:\Documents And Settings\Laeti\Menu Démarrer\Programmes\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

    ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
    O8 - Extra context menu item: Add to Google Photos Screensa&ver . (.Google Inc. - Google Photos Screensaver.) -- C:\WINDOWS\system32\GPhotos.scr
    O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~2\Office12\EXCEL.exe
    O8 - Extra context menu item: Google Sidewiki... . (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_43C348BC2E93EB2B.dll

    ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO
    O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (...) -- C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO
    O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe

    ---\\ Winsock hijacker (Layered Service Provider) (O10)
    O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
    O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
    O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
    O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\WINDOWS\system32\wshbth.dll

    ---\\ Objets ActiveX (Downloaded Program Files)(O16)
    O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://fichiers.touslesdrivers.com/maconfig/MaConfig_3_5_3_0.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
    O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com/activex/ractrl.cab?lmi=100

    ---\\ Modification Domaine/Adresses DNS (O17)
    O17 - HKLM\System\CCS\Services\Tcpip\..\{BD31365F-0A7B-45A0-AD2C-46E08DD99AF0}: NameServer = 192.168.1.1
    O17 - HKLM\System\CS1\Services\Tcpip\..\{BD31365F-0A7B-45A0-AD2C-46E08DD99AF0}: NameServer = 192.168.1.1
    O17 - HKLM\System\CS3\Services\Tcpip\..\{BD31365F-0A7B-45A0-AD2C-46E08DD99AF0}: NameServer = 192.168.1.1
    O17 - HKLM\System\CS2\Services\Tcpip\..\{BD31365F-0A7B-45A0-AD2C-46E08DD99AF0}: DhcpNameServer = 192.168.1.1

    ---\\ Protocole additionnel et piratage de protocole (O18)
    O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL

    ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
    O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\Windows\System32\crypt32.dll
    O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\Windows\System32\cryptnet.dll
    O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\Windows\System32\cscdll.dll
    O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll
    O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
    O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
    O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\Windows\System32\sclgntfy.dll
    O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\WlNotify.dll
    O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
    O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll

    ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
    O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
    O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
    O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
    O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll

    ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
    O22 - SharedTaskScheduler: (no name) - {438755C2-A8BA-11D1-B96B-00A0C90312E1} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll
    O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll

    ---\\ Liste des services NT non Microsoft et non désactivés (O23)
    O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
    O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) . (.Hewlett-Packard Company - LightScribe Service.) - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    O23 - Service: NMSAccess (NMSAccess) . (...) - C:\Program Files\CDBurnerXP\NMSAccessU.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 182.5.) - C:\WINDOWS\system32\nvsvc32.exe

    ---\\ Enumération Active Desktop & MHTML Editor (O24)
    O24 - Default MHTML Editor: Last - .(...) - (.not file.)

    ---\\ Tâches planifiées en automatique (O39)
    O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
    O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\FRU Task #Hewlett-Packard#hp psc 1100 series#1253109987.job
    O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
    O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
    [MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
    [MD5.4D6019BE71C720E2D29F2CE758F7A53B] [APT] [FRU Task #Hewlett-Packard#hp psc 1100 series#1253109987] (...) -- C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpqfrucl.exe
    [MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
    [MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe

    ---\\ Pilotes lancés au démarrage (O41)
    O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
    O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\System32\DRIVERS\cdrom.sys
    O41 - Driver: (ElbyCDIO) . (.Elaborate Bytes AG - ElbyCD Windows NT/2000/XP I/O driver.) - C:\WINDOWS\System32\Drivers\ElbyCDIO.sys
    O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\System32\DRIVERS\i8042prt.sys
    O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\System32\DRIVERS\imapi.sys
    O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\System32\DRIVERS\intelppm.sys
    O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\System32\DRIVERS\ipsec.sys
    O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\System32\DRIVERS\kbdclass.sys
    O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre souris HID.) - C:\WINDOWS\System32\DRIVERS\kbdhid.sys
    O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\System32\DRIVERS\mouclass.sys
    O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\System32\DRIVERS\mrxsmb.sys
    O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\System32\DRIVERS\netbios.sys
    O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\System32\DRIVERS\netbt.sys
    O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\System32\DRIVERS\rasacd.sys
    O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\System32\DRIVERS\rdbss.sys
    O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\System32\DRIVERS\RDPCDD.sys
    O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\System32\DRIVERS\redbook.sys
    O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\WINDOWS\System32\DRIVERS\serial.sys
    O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\System32\DRIVERS\tcpip.sys
    O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\System32\DRIVERS\termdd.sys
    O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
    O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys

    ---\\ Logiciels installés (O42)
    O42 - Logiciel: 7-Zip 4.65 - (.Pas de propriétaire.) [HKLM] -- 7-Zip
    O42 - Logiciel: ATI - Utilitaire de désinstallation du logiciel - (.Pas de propriétaire.) [HKLM] -- All ATI Software
    O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- Adobe AIR
    O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- {FDB3B167-F4FA-461D-976F-286304A57B2A}
    O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
    O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
    O42 - Logiciel: Adobe Reader 9.4.5 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A94000000001}
    O42 - Logiciel: Aion (North America) - (.NCsoft.) [HKCU] -- NCsoft-Aion
    O42 - Logiciel: Aion - (.NCsoft.) [HKCU] -- NCsoft-AionEU
    O42 - Logiciel: Alice Auto-diagnostic - (.Pas de propriétaire.) [HKLM] -- AliceSAV
    O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {853A4763-6643-4604-8D64-28BDD8925F4C}
    O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
    O42 - Logiciel: CCleaner (remove only) - (.Piriform.) [HKLM] -- CCleaner
    O42 - Logiciel: CDBurnerXP - (.CDBurnerXP.) [HKLM] -- {7E265513-8CDA-4631-B696-F40D983F3B07}_is1
    O42 - Logiciel: Disque de souvenirs HP - (.Hewlett-Packard Company.) [HKLM] -- {B376402D-58EA-45EA-BD50-DD924EB67A70}
    O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
    O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
    O42 - Logiciel: High Definition Audio Driver Package - KB888111 - (.Microsoft Corporation.) [HKLM] -- KB888111WXPSP2
    O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
    O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
    O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399
    O42 - Logiciel: Hotfix for Windows Media Player 10 (KB903157) - (.Microsoft Corporation.) [HKLM] -- KB903157
    O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5
    O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5
    O42 - Logiciel: Internet Explorer - (.Microsoft Corporation.) [HKLM] -- {4E414048-A9DD-4F60-AA1D-018E716C88C9}
    O42 - Logiciel: Java(TM) 6 Update 26 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216017FF}
    O42 - Logiciel: K-Lite Codec Pack 4.6.2 (Full) - (.Pas de propriétaire.) [HKLM] -- KLiteCodecPack_is1
    O42 - Logiciel: Kit de Connexion Alice ADSL - (.Pas de propriétaire.) [HKLM] -- {3A0221AD-D30B-4320-8F9B-1D0F0E6C6843}
    O42 - Logiciel: Lecteur Windows Media 11 - (.Pas de propriétaire.) [HKLM] -- Windows Media Player
    O42 - Logiciel: LightScribe System Software 1.14.25.1 - (.LightScribe.) [HKLM] -- {DA9DAC64-C947-47BA-B411-8A1959B177CF}
    O42 - Logiciel: Logitech Desktop Messenger - (.Pas de propriétaire.) [HKLM] -- {900B1197-53F5-4F46-A882-2CFFFE2EEDCB}
    O42 - Logiciel: Logitech SetPoint - (.Pas de propriétaire.) [HKLM] -- {2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}
    O42 - Logiciel: MSN - (.Pas de propriétaire.) [HKLM] -- MSNINST
    O42 - Logiciel: MSXML 6 Service Pack 2 (KB973686) - (.Microsoft Corporation.) [HKLM] -- {56EA8BC0-3751-4B93-BC9D-6651CC36E5AA}
    O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM] -- {425FFD94-36BD-4933-881B-FE0B9DADF2B7}
    O42 - Logiciel: Malwarebytes' Anti-Malware version 1.51.0.1200 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
    O42 - Logiciel: Microsoft .NET Framework 1.0 Hotfix (KB979904) - (.Microsoft Corporation.) [HKLM] -- KB979904
    O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Microsoft.) [HKLM] -- {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
    O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Pas de propriétaire.) [HKLM] -- Microsoft .NET Framework 1.1 (1033)
    O42 - Logiciel: Microsoft .NET Framework 1.1 French Language Pack - (.Microsoft.) [HKLM] -- {9A394342-4A68-4EBA-85A6-55B559F4E700}
    O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB2416447) - (.Pas de propriétaire.) [HKLM] -- M2416447
    O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB979906) - (.Pas de propriétaire.) [HKLM] -- M979906
    O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
    O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
    O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
    O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
    O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1
    O42 - Logiciel: Microsoft Office Access MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}
    O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}
    O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}
    O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}
    O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}
    O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- PROPLUS
    O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}
    O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}
    O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}
    O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}
    O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}
    O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}
    O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}
    O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE}
    O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}
    O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}
    O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}
    O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- Wudf01000
    O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {7299052b-02a4-4627-81f2-1818da5d550d}
    O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}
    O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
    O42 - Logiciel: Moovida - (.Secure Digital Services.) [HKLM] -- {6084C211-01A1-464E-97A0-09772E122B50}
    O42 - Logiciel: Mozilla Firefox (3.6.18) - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.6.18)
    O42 - Logiciel: Mumble and Murmur - (.Mumble.) [HKLM] -- Mumble
    O42 - Logiciel: NCsoft Launcher - (.NCsoft.) [HKLM] -- {5F8E2CBB-949D-4175-AC98-5ADE7F6C9697}
    O42 - Logiciel: NVIDIA Drivers - (.NVIDIA Corporation.) [HKLM] -- NVIDIA Drivers
    O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM] -- {DD1865F0-AD73-40FB-B23E-1822E02396FF}
    O42 - Logiciel: Pack Vista Inspirat 2 1.0 - (.Bricomix.) [HKLM] -- Pack Vista Inspirat 2
    O42 - Logiciel: Pando Media Booster - (.Pando Networks Inc..) [HKLM] -- {980A182F-E0A2-4A40-94C1-AE0C1235902E}
    O42 - Logiciel: Photo et imagerie HP 2.0 - All-in-One - (.Hewlett-Packard Company.) [HKLM] -- {9867A917-5D17-40DE-83BA-BEA5293194B1}
    O42 - Logiciel: Photo et imagerie HP 2.0 - All-in-One Pilote - (.Hewlett-Packard Company.) [HKLM] -- {6ECB39BD-73C2-44DD-B1A0-898207C58D8B}
    O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM] -- Picasa 3
    O42 - Logiciel: Post-it® Software Notes Lite - (.Pas de propriétaire.) [HKLM] -- PSN
    O42 - Logiciel: REALTEK PCIE NIC Driver - (.REALTEK Semiconductor Corp..) [HKLM] -- {17E2F183-BAC4-4D01-BD7A-59F781E17EFA}
    O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
    O42 - Logiciel: Safari - (.Apple Inc..) [HKLM] -- {6C1E7AA1-44E9-446D-AAB2-0DE6D9EFEAB1}
    O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473
    O42 - Logiciel: Skype(TM) 5.0 - (.Skype Technologies S.A..) [HKLM] -- {E633D396-5188-4E9D-8F6B-BFB8BF3467E8}
    O42 - Logiciel: Unity Web Player - (.Unity Technologies ApS.) [HKCU] -- UnityWebPlayer
    O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
    O42 - Logiciel: VirtualCloneDrive - (.Elaborate Bytes.) [HKLM] -- VirtualCloneDrive
    O42 - Logiciel: WinRAR archiver - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver
    O42 - Logiciel: Windows Feature Pack for Storage (32-bit) - IMAPI update for Blu-Ray - (.Microsoft Corporation.) [HKLM] -- KB952011
    O42 - Logiciel: Windows Imaging Component - (.Microsoft Corporation.) [HKLM] -- WIC
    O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8
    O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11
    O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime
    O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11
    O42 - Logiciel: Windows XP Media Center Edition 2005 KB2502898 - (.Microsoft Corporation.) [HKLM] -- KB2502898
    O42 - Logiciel: Windows XP Media Center Edition 2005 KB925766 - (.Microsoft Corporation.) [HKLM] -- KB925766
    O42 - Logiciel: Windows XP Media Center Edition 2005 KB973768 - (.Microsoft Corporation.) [HKLM] -- KB973768
    O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service
    O42 - Logiciel: XnView 1.97.8 - (.Gougelet Pierre-e.) [HKLM] -- XnView_is1
    O42 - Logiciel: avast! Free Antivirus - (.AVAST Software.) [HKLM] -- avast
    O42 - Logiciel: hp psc 1100 series - (.Hewlett-Packard Company.) [HKLM] -- {01161F64-6897-4885-93A0-A9F7BE9A4253}
    O42 - Logiciel: µTorrent - (.Pas de propriétaire.) [HKLM] -- uTorrent

    ---\\ HKCU & HKLM Software Keys
    [HKCU\Software\3M]
    [HKCU\Software\7-Zip]
    [HKCU\Software\ALWIL Software]
    [HKCU\Software\AVAST Software]
    [HKCU\Software\Ad-Remover]
    [HKCU\Software\Adobe]
    [HKCU\Software\Aion]
    [HKCU\Software\Apple Computer, Inc.]
    [HKCU\Software\Apple Inc.]
    [HKCU\Software\BitTorrent]
    [HKCU\Software\Bugsplat]
    [HKCU\Software\Canneverbe Limited]
    [HKCU\Software\CeWe Color]
    [HKCU\Software\ClassesB]
    [HKCU\Software\Classes]
    [HKCU\Software\Clients]
    [HKCU\Software\CoreVorbis]
    [HKCU\Software\Cyberlink]
    [HKCU\Software\Digital River]
    [HKCU\Software\DivXNetworks]
    [HKCU\Software\Elaborate Bytes]
    [HKCU\Software\GNU]
    [HKCU\Software\GSpot Appliance Corp]
    [HKCU\Software\Gabest]
    [HKCU\Software\Genesis Digital Innovations]
    [HKCU\Software\Google]
    [HKCU\Software\Haali]
    [HKCU\Software\Hewlett-Packard]
    [HKCU\Software\HookNetwork]
    [HKCU\Software\INCAInternet]
    [HKCU\Software\Intel]
    [HKCU\Software\JEDI-VCL]
    [HKCU\Software\JavaSoft]
    [HKCU\Software\Jitit Virtual Registry]
    [HKCU\Software\Lavalys]
    [HKCU\Software\LightScribe]
    [HKCU\Software\Local AppWizard-Generated Applications]
    [HKCU\Software\LogMeIn]
    [HKCU\Software\Logitech]
    [HKCU\Software\MUSICMATCH]
    [HKCU\Software\Macromedia]
    [HKCU\Software\Malwarebytes' Anti-Malware]
    [HKCU\Software\MediaInfo]
    [HKCU\Software\MozillaPlugins]
    [HKCU\Software\Mozilla]
    [HKCU\Software\Mumble]
    [HKCU\Software\NCsoft]
    [HKCU\Software\NVIDIA Corporation]
    [HKCU\Software\Netscape]
    [HKCU\Software\ODBC]
    [HKCU\Software\Oak Technology]
    [HKCU\Software\Pando Networks]
    [HKCU\Software\Piriform]
    [HKCU\Software\Policies]
    [HKCU\Software\Realtek]
    [HKCU\Software\Revenger inc.]
    [HKCU\Software\RocketDock]
    [HKCU\Software\SkypeApps]
    [HKCU\Software\Skype]
    [HKCU\Software\SoftVTU]
    [HKCU\Software\Trolltech]
    [HKCU\Software\UberIcon-v1.0.0]
    [HKCU\Software\Unity]
    [HKCU\Software\Usbfix]
    [HKCU\Software\VSO]
    [HKCU\Software\WinRAR SFX]
    [HKCU\Software\WinRAR]
    [HKCU\Software\YahooPartnerToolbar]
    [HKCU\Software\Yahoo]
    [HKCU\Software\cybelsoft]
    [HKLM\Software\3M]
    [HKLM\Software\AGEIA Technologies]
    [HKLM\Software\ALWIL Software]
    [HKLM\Software\ATI Technologies Inc.]
    [HKLM\Software\ATI Technologies]
    [HKLM\Software\AVAST Software]
    [HKLM\Software\Adobe]
    [HKLM\Software\Alice ADSL]
    [HKLM\Software\Apple Computer, Inc.]
    [HKLM\Software\Apple Inc.]
    [HKLM\Software\BackWeb]
    [HKLM\Software\Bricomix.net]
    [HKLM\Software\C07ft5Y]
    [HKLM\Software\Classes]
    [HKLM\Software\Clients]
    [HKLM\Software\Codec Tweak Tool]
    [HKLM\Software\Cyberlink]
    [HKLM\Software\DIOC]
    [HKLM\Software\DivXNetworks]
    [HKLM\Software\Dofus 2]
    [HKLM\Software\Elaborate Bytes]
    [HKLM\Software\GNU]
    [HKLM\Software\Gabest]
    [HKLM\Software\GalaNetEu]
    [HKLM\Software\Gemplus]
    [HKLM\Software\Google]
    [HKLM\Software\HPS]
    [HKLM\Software\HaaliMkx]
    [HKLM\Software\Hewlett-Packard]
    [HKLM\Software\Intel]
    [HKLM\Software\InterVideo]
    [HKLM\Software\JavaSoft]
    [HKLM\Software\JreMetrics]
    [HKLM\Software\KLCodecPack]
    [HKLM\Software\LanSetup]
    [HKLM\Software\LightScribe]
    [HKLM\Software\Macromedia]
    [HKLM\Software\Malwarebytes' Anti-Malware]
    [HKLM\Software\MimarSinan]
    [HKLM\Software\MozillaPlugins]
    [HKLM\Software\Mozilla]
    [HKLM\Software\NCsoft]
    [HKLM\Software\NVIDIA Corporation]
    [HKLM\Software\ODBC]
    [HKLM\Software\Oak Technology]
    [HKLM\Software\Pando Networks]
    [HKLM\Software\Policies]
    [HKLM\Software\Program Groups]
    [HKLM\Software\REALTEK Semiconductor Corporation]
    [HKLM\Software\Realtek Semiconductor Corp.]
    [HKLM\Software\Realtek]
    [HKLM\Software\RegisteredApplications]
    [HKLM\Software\Revenger inc.]
    [HKLM\Software\S3R521]
    [HKLM\Software\Schlumberger]
    [HKLM\Software\Secure]
    [HKLM\Software\Set8168]
    [HKLM\Software\Skype]
    [HKLM\Software\Sonic]
    [HKLM\Software\TechCity]
    [HKLM\Software\TrendMicro]
    [HKLM\Software\Uniblue]
    [HKLM\Software\VSO]
    [HKLM\Software\Windows 3.1 Migration Status]
    [HKLM\Software\Windows]
    [HKLM\Software\XnView]
    [HKLM\Software\Yahoo]
    [HKLM\Software\cybelsoft]
    [HKLM\Software\iColorFolder]
    [HKLM\Software\knight]
    [HKLM\Software\logitech]
    [HKLM\Software\mozilla.org]

    ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
    O43 - CFD: 12/01/2010 - 18:49:14 - [3274392] ----D- C:\Program Files\3M
    O43 - CFD: 20/08/2009 - 14:15:10 - [3094515] ----D- C:\Program Files\7-Zip
    O43 - CFD: 06/07/2011 - 19:32:40 - [323326021] ----D- C:\Program Files\Ad-Remover
    O43 - CFD: 30/10/2010 - 19:06:48 - [163076362] ----D- C:\Program Files\Adobe
    O43 - CFD: 12/01/2010 - 16:37:40 - [123222710] ----D- C:\Program Files\AGEIA Technologies
    O43 - CFD: 01/07/2010 - 00:08:48 - [0] ----D- C:\Program Files\ALDI
    O43 - CFD: 20/08/2009 - 14:07:44 - [1994042] ----D- C:\Program Files\Alice
    O43 - CFD: 29/07/2010 - 11:23:30 - [213188110] ----D- C:\Program Files\Alwil Software
    O43 - CFD: 08/07/2011 - 16:38:44 - [2428606] ----D- C:\Program Files\Apple Software Update
    O43 - CFD: 07/11/2009 - 17:15:44 - [139264] ----D- C:\Program Files\ATI Technologies
    O43 - CFD: 16/07/2009 - 17:39:42 - [2355410] ----D- C:\Program Files\CCleaner
    O43 - CFD: 09/06/2011 - 22:22:52 - [17887826] ----D- C:\Program Files\CDBurnerXP
    O43 - CFD: 16/07/2009 - 22:00:02 - [24619792] ----D- C:\Program Files\Common Files
    O43 - CFD: 16/07/2009 - 16:21:36 - [0] ----D- C:\Program Files\ComPlus Applications
    O43 - CFD: 01/07/2010 - 00:06:54 - [0] ----D- C:\Program Files\Dofus
    O43 - CFD: 21/10/2010 - 18:34:28 - [971528841] ----D- C:\Program Files\Dofus 2
    O43 - CFD: 16/07/2009 - 17:40:58 - [1955543] ----D- C:\Program Files\Elaborate Bytes
    O43 - CFD: 24/06/2011 - 16:09:56 - [422983495] ----D- C:\Program Files\Fichiers communs
    O43 - CFD: 29/01/2010 - 06:47:40 - [96166707] ----D- C:\Program Files\Google
    O43 - CFD: 27/07/2009 - 14:42:32 - [2902968620] ----D- C:\Program Files\gPotato.eu
    O43 - CFD: 16/09/2009 - 16:04:34 - [383066236] ----D- C:\Program Files\Hewlett-Packard
    O43 - CFD: 12/07/2011 - 23:37:00 - [20538172] --H-D- C:\Program Files\InstallShield Installation Information
    O43 - CFD: 07/11/2009 - 17:29:00 - [96701] ----D- C:\Program Files\Intel
    O43 - CFD: 16/06/2011 - 20:00:08 - [4673988] ----D- C:\Program Files\Internet Explorer
    O43 - CFD: 24/06/2011 - 16:09:42 - [81314702] ----D- C:\Program Files\Java
    O43 - CFD: 16/07/2009 - 17:42:16 - [37506493] ----D- C:\Program Files\K-Lite Codec Pack
    O43 - CFD: 27/07/2009 - 10:31:42 - [40282453] ----D- C:\Program Files\Logitech
    O43 - CFD: 07/11/2009 - 17:26:14 - [4935959] ----D- C:\Program Files\ma-config.com
    O43 - CFD: 13/07/2011 - 22:09:08 - [7577396] ----D- C:\Program Files\Malwarebytes' Anti-Malware
    O43 - CFD: 14/01/2010 - 04:54:30 - [2152579] ----D- C:\Program Files\Messenger
    O43 - CFD: 16/07/2009 - 16:25:42 - [0] ----D- C:\Program Files\microsoft frontpage
    O43 - CFD: 16/07/2009 - 17:47:22 - [551059659] ----D- C:\Program Files\Microsoft Office
    O43 - CFD: 16/07/2009 - 17:47:20 - [14904] ----D- C:\Program Files\Microsoft Visual Studio
    O43 - CFD: 16/07/2009 - 17:47:34 - [3178824] ----D- C:\Program Files\Microsoft Works
    O43 - CFD: 16/07/2009 - 17:46:54 - [8152064] ----D- C:\Program Files\Microsoft.NET
    O43 - CFD: 12/08/2010 - 14:18:58 - [10949041] ----D- C:\Program Files\Movie Maker
    O43 - CFD: 25/06/2011 - 09:01:24 - [30507528] ----D- C:\Program Files\Mozilla Firefox
    O43 - CFD: 15/08/2009 - 03:06:32 - [26521] ----D- C:\Program Files\MSBuild
    O43 - CFD: 04/08/2009 - 21:40:18 - [21471461] ----D- C:\Program Files\MSN
    O43 - CFD: 16/07/2009 - 16:19:44 - [8745735] ----D- C:\Program Files\MSN Gaming Zone
    O43 - CFD: 15/08/2009 - 03:01:26 - [6849] ----D- C:\Program Files\MSXML 6.0
    O43 - CFD: 06/04/2010 - 15:48:22 - [37973809] ----D- C:\Program Files\Mumble
    O43 - CFD: 16/08/2009 - 13:35:50 - [378999] ----D- C:\Program Files\MUSICMATCH
    O43 - CFD: 18/07/2009 - 01:33:22 - [48822055834] ----D- C:\Program Files\NCSoft
    O43 - CFD: 14/01/2010 - 04:40:46 - [3285523] ----D- C:\Program Files\NetMeeting
    O43 - CFD: 09/08/2009 - 20:33:06 - [0] ----D- C:\Program Files\NOS
    O43 - CFD: 16/07/2009 - 16:21:26 - [1804] ----D- C:\Program Files\Online Services
    O43 - CFD: 16/12/2010 - 04:00:36 - [4379321] ----D- C:\Program Files\Outlook Express
    O43 - CFD: 27/10/2010 - 18:20:58 - [7367542] ----D- C:\Program Files\Pando Networks
    O43 - CFD: 12/07/2011 - 23:37:00 - [48346159] ----D- C:\Program Files\Realtek
    O43 - CFD: 15/08/2009 - 03:06:22 - [36400897] ----D- C:\Program Files\Reference Assemblies
    O43 - CFD: 08/07/2011 - 16:38:22 - [42293002] ----D- C:\Program Files\Safari
    O43 - CFD: 16/07/2009 - 16:24:00 - [1025] ----D- C:\Program Files\Services en ligne
    O43 - CFD: 12/12/2010 - 17:14:14 - [19057007] R---D- C:\Program Files\Skype
    O43 - CFD: 20/08/2009 - 14:07:52 - [393007] ----D- C:\Program Files\TechCity Solutions
    O43 - CFD: 12/07/2011 - 23:36:56 - [4129440] ----D- C:\Program Files\Uniblue
    O43 - CFD: 16/07/2009 - 16:32:20 - [0] --H-D- C:\Program Files\Uninstall Information
    O43 - CFD: 01/01/2011 - 16:11:36 - [399736] ----D- C:\Program Files\uTorrent
    O43 - CFD: 12/01/2010 - 16:36:38 - [17098024] ----D- C:\Program Files\VLCPortable
    O43 - CFD: 12/07/2011 - 23:36:30 - [117177722] ----D- C:\Program Files\VSO
    O43 - CFD: 15/12/2009 - 05:29:52 - [3581070] ----D- C:\Program Files\Windows Media Connect 2
    O43 - CFD: 15/12/2009 - 05:29:50 - [9600055] ----D- C:\Program Files\Windows Media Player
    O43 - CFD: 14/01/2010 - 04:40:44 - [3942655] ----D- C:\Program Files\Windows NT
    O43 - CFD: 16/07/2009 - 16:21:02 - [41055406] ----D- C:\Program Files\Windows Plus
    O43 - CFD: 16/07/2009 - 16:24:02 - [0] --H-D- C:\Program Files\WindowsUpdate
    O43 - CFD: 16/07/2009 - 17:40:12 - [3892521] ----D- C:\Program Files\WinRAR
    O43 - CFD: 16/07/2009 - 16:25:42 - [0] ----D- C:\Program Files\xerox
    O43 - CFD: 28/09/2010 - 18:40:14 - [8605678] ----D- C:\Program Files\XnView
    O43 - CFD: 19/07/2011 - 01:01:32 - [6241813] ----D- C:\Program Files\ZHPDiag
    O43 - CFD: 16/07/2009 - 22:00:02 - [24619792] ----D- C:\Program Files\Common Files\INCA Shared
    O43 - CFD: 12/01/2010 - 18:49:28 - [4096] ----D- C:\Documents and Settings\Laeti\Application Data\3M
    O43 - CFD: 16/12/2009 - 22:27:54 - [3111875] ----D- C:\Documents and Settings\Laeti\Application Data\Adobe
    O43 - CFD: 16/12/2009 - 22:59:34 - [4648] ----D- C:\Documents and Settings\Laeti\Application Data\app
    O43 - CFD: 26/03/2011 - 11:37:58 - [11173515] ----D- C:\Documents and Settings\Laeti\Application Data\Apple Computer
    O43 - CFD: 18/07/2009 - 18:06:24 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\ATI
    O43 - CFD: 08/06/2011 - 22:45:08 - [1695] ----D- C:\Documents and Settings\Laeti\Application Data\Canneverbe Limited
    O43 - CFD: 25/06/2011 - 09:51:50 - [108406871] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus 2
    O43 - CFD: 12/04/2010 - 10:25:18 - [6896] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus-2.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
    O43 - CFD: 12/04/2010 - 11:36:52 - [9402] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus-3.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
    O43 - CFD: 12/04/2010 - 20:06:10 - [30] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus-4.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
    O43 - CFD: 23/12/2010 - 00:45:14 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus-5.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
    O43 - CFD: 27/02/2011 - 10:22:50 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus-6.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
    O43 - CFD: 15/07/2011 - 18:35:46 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus-7.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
    O43 - CFD: 15/07/2011 - 18:54:08 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus-8.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
    O43 - CFD: 11/04/2010 - 21:10:36 - [16911] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
    O43 - CFD: 20/07/2009 - 12:10:56 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Droppix
    O43 - CFD: 27/03/2011 - 00:52:52 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\dvdcss
    O43 - CFD: 30/06/2010 - 23:43:02 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\FOG Downloader
    O43 - CFD: 18/07/2009 - 01:33:08 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\GetRightToGo
    O43 - CFD: 09/08/2009 - 14:56:24 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Google
    O43 - CFD: 16/01/2011 - 13:38:04 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Help
    O43 - CFD: 16/09/2009 - 16:07:08 - [2828] ----D- C:\Documents and Settings\Laeti\Application Data\Hewlett-Packard
    O43 - CFD: 19/12/2009 - 23:45:56 - [3638] ----D- C:\Documents and Settings\Laeti\Application Data\Icones
    O43 - CFD: 16/07/2009 - 16:32:26 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Identities
    O43 - CFD: 17/07/2009 - 17:34:44 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\InstallShield
    O43 - CFD: 27/07/2009 - 10:36:56 - [10767] ----D- C:\Documents and Settings\Laeti\Application Data\Logitech
    O43 - CFD: 16/07/2009 - 18:43:14 - [58637] ----D- C:\Documents and Settings\Laeti\Application Data\Macromedia
    O43 - CFD: 10/07/2011 - 22:00:38 - [11118634] ----D- C:\Documents and Settings\Laeti\Application Data\Malwarebytes
    O43 - CFD: 08/06/2011 - 22:15:28 - [16] ----D- C:\Documents and Settings\Laeti\Application Data\Media Player Classic
    O43 - CFD: 24/06/2011 - 16:35:40 - [14891755] -S--D- C:\Documents and Settings\Laeti\Application Data\Microsoft
    O43 - CFD: 30/10/2010 - 19:11:46 - [3237806] ----D- C:\Documents and Settings\Laeti\Application Data\Mozilla
    O43 - CFD: 04/08/2009 - 21:40:40 - [853608] ----D- C:\Documents and Settings\Laeti\Application Data\MSNInstaller
    O43 - CFD: 13/11/2010 - 03:41:02 - [435490] ----D- C:\Documents and Settings\Laeti\Application Data\Mumble
    O43 - CFD: 16/12/2009 - 22:59:34 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Reg.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
    O43 - CFD: 17/07/2011 - 21:35:10 - [6582906] ----D- C:\Documents and Settings\Laeti\Application Data\Skype
    O43 - CFD: 21/05/2011 - 22:11:50 - [5544] ----D- C:\Documents and Settings\Laeti\Application Data\skypePM
    O43 - CFD: 12/01/2010 - 17:54:34 - [31965402] ----D- C:\Documents and Settings\Laeti\Application Data\Sun
    O43 - CFD: 25/04/2010 - 01:23:42 - [38815] ----D- C:\Documents and Settings\Laeti\Application Data\teamspeak2
    O43 - CFD: 09/02/2010 - 04:42:32 - [187849] ----D- C:\Documents and Settings\Laeti\Application Data\TS3Client
    O43 - CFD: 12/07/2011 - 23:36:58 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Uniblue
    O43 - CFD: 19/05/2011 - 23:24:58 - [44] ----D- C:\Documents and Settings\Laeti\Application Data\Unity
    O43 - CFD: 14/06/2011 - 03:14:34 - [2913304] ----D- C:\Documents and Settings\Laeti\Application Data\uTorrent
    O43 - CFD: 19/10/2010 - 00:51:44 - [475423] ----D- C:\Documents and Settings\Laeti\Application Data\vlc
    O43 - CFD: 11/07/2011 - 13:32:48 - [5890] ----D- C:\Documents and Settings\Laeti\Application Data\Vso
    O43 - CFD: 28/09/2010 - 18:45:16 - [601052] ----D- C:\Documents and Settings\Laeti\Application Data\XnView
    O43 - CFD: 15/08/2009 - 18:04:12 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Yahoo!
    O43 - CFD: 30/10/2010 - 19:06:26 - [118713] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Adobe
    O43 - CFD: 12/01/2010 - 17:03:58 - [0] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Apple
    O43 - CFD: 12/01/2010 - 17:04:42 - [805144702] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Apple Computer
    O43 - CFD: 24/06/2011 - 16:36:10 - [11125] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\ApplicationHistory
    O43 - CFD: 07/09/2010 - 23:06:32 - [36388416] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\assembly
    O43 - CFD: 18/07/2009 - 18:06:24 - [64435] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\ATI
    O43 - CFD: 07/07/2011 - 03:39:00 - [190064416] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Google
    O43 - CFD: 16/01/2011 - 13:38:04 - [0] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Help
    O43 - CFD: 11/06/2011 - 19:55:00 - [44360252] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Microsoft
    O43 - CFD: 16/07/2009 - 17:44:50 - [0] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Microsoft Help
    O43 - CFD: 30/10/2010 - 19:11:34 - [86608472] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Mozilla
    O43 - CFD: 07/07/2011 - 01:30:16 - [0] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\PackageAware
    O43 - CFD: 28/10/2010 - 01:28:52 - [160084] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\PMB Files
    O43 - CFD: 25/04/2011 - 23:12:16 - [0] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Temp
    O43 - CFD: 19/05/2011 - 22:49:36 - [98862506] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Unity

    ---\\ Derniers fichiers modifié
    1. eillane
      "mode sans echac avec prise en charge réseau" dit moi ? en français, ça ve"ut dire quoi ?
      je suis désolée de tannoncer que je suis trop novice en la metiere pour comprendre 1/10eme de ce que tu me dis... je suis désolée,n va falloir que tu détailles tout tout tout ! Siunon, je ne comprends pas (triste que je suis et super désolée surtout !)
      2. eillane
        nos messages ont dû se confondrent ! je te poste donc un zhpdiag de mon pc a moi, on verra + tard pour mon autre pc, celui de mon fils, je nai plus de net... a dans 1 mois environ ! c triste mais c comme ça... il se trouve que jarrive a aller sur le net environ 1 jour par moi ! c incroyable mais vrai !
        et pourtant, mon fils peut jouer a son jeu 'dofus' jeu sur internet, c fou hein ! et il peut meme sabonner ! c encore plus dingue, mais c vrai !
        1. eillane
          Je vous propose de refaire un scan 'minutieux' avec avast pour voir si mon ordi me trouve encore des virus, je vous tient au courrant dès que le scan minutieu est terminé (je sais que ça prend beaucoup de temps) donc, à demain ! Merci encore de votre aide si précieuse.
          1. eillane
            pour faire suite a mon message précédent, je vais tester votre façon de faire sur mon nouveau pc, sil pouvait accepter la page internet ce serait fabuleux, jy vais de ce pâs. On se mélange les pinceaux avec mes 2 pc jai limpression !
            1. jacques.gache Contributeur sécurité
              ok oui on se mélange les pinceaux , pour ton pc à toi pour être sur que plus rien postes un zhpdiag !! et puis pour le médion poste aussi un zhpdiag tu télécharges sur ton pc qui a internet et tu passes par une clé usb sur l'autre et pariel pour le rapport !!
              PS: sinon sur ton médion as tu regarder si tu pouvais démarrer en mode sans echec avec prise en charge reseau si oui et que tu as internet tu pourrais faire le zhpdiag en direct !!
          2. eillane
            non, sur mon pc dorigine jai acces au net, c sur le second pc "medion" que jai acheté que je nais pas acces au net, mais là, c repartit de plus belle, rien à faire pour se connecter, en ce qui concerne mes problemes de virus sur mon pc dorigine, rien dautre à signaler, mes virus sont ils effacés ? est ce que mon pc à moi est "propre" maintenant ?
            1. eillane
              bonjour, désolé d'avoir tardé à répondre j'étais partie en week end, pour quel ordi je dois faire un zhpdiag ? sachant que le medion ne veut plus aller sur le net... je pense que je reposterais le mois prochain, quand il sera de nouveau décidé à m'autoriser l'acces à une page internet. Merci d'avance.
              1. jacques.gache Contributeur sécurité
                je te parle du pc d'origine de ta demande d'aide , tu dis que tu n'a plus accés au net depuis ce pc regarde si cela pourrait aider pour retrouver le net

                Cliquez sur le bouton Démarrer.

                Cliquez sur l'option de menu Paramètres.

                Cliquez sur l'option Panneau de configuration.

                Après l'ouverture du Panneau de configuration, faites un double clic sur l'icône Connexions réseau. Si votre Panneau de configuration est paramétré pour un affichage en catégories, faites un double clic sur Connexions réseau et Internet puis cliquez sur Connexions réseau tout en bas.

                Vous verrez alors une liste de toutes les connexions réseau disponibles. Repérez la connexion vers votre adaptateur Sans Fil ou Réseau local et faites un clic droit dessus.

                Cliquez simplement sur l'option de menu Réparer.

                Réparer la connexion Internet

                Laissez le processus de réparation se dérouler, et lorsqu'il a terminé, votre connexion Internet devrait être de nouveau opérationnelle.

                Sinon, si une icône de votre réseau apparaît aussi dans la barre des tâches Windows, vous pouvez la réparer en faisant un clic droit sur l'icône et en choisissant Réparer
            2. eillane
              Bon, c cool davoir internet qd on sy attend pas, mais je c que ça va pas durer et ça mattriste, là, TOUT fonctionne NIKEL ! rien à redire ! Mais pour combien de temps ? Jespere vraiment que vous prendrez ma demande en compte, et merci davance pour tout.
              1. jacques.gache Contributeur sécurité
                bonjour, pourrais tu me poster un nouveau zhpdiag mais par cijoint afin qu'il soit complet !!
                et tu me dis si tu as toujours des problèmes et de-quelle genre !!
            3. eillane
              pour faire suite à mes messages précédents = malwarebytes, na rien détecté !
              c plutot positif !!!
              1. eillane
                et voilà, pour terminer mon sujet précédent, nous pouvons nous connecter via safari, ou bien internet explorer (mais là c pas le cas hein ) ou autre moteur de recherche , sur le net, mais cela narrive que environ 1 jour par mois, c'est ce que j'ai pu constater. Jessaie de vous donner le max de détails concernant le PC neuf de mon fils, si vous avez besoin de + dinfo, je reste à votre disposition, et je souhaite aussi ajouter que, par mesure "d'avance", jai téléchargé hijackthis, ainsi que ad- remover et malwarebytes (il scan là actuellement), comme ça si demain le net ne fonctionne plus, je pourrais o moins vous fournir les rapports ! Je vous précise aussi, que le PC Medion de mon fils est sous le systeme dexploitation window7. Encore 1 Million de fois MERCI davance pour le temps que vous prenez pour nous aider ! Merci, merci, merci
                1. eillane
                  RE bonsoir jacques.gache, je me permet de me tourner vers vous pour un autre probleme : nous avons fait lacquisition dun nouvel ordi, un medion, et lorsque nous lavons reçu ce produit cétait dans le but (il est à mon fils ce pc) daller jouer dur "dofus" un jeu en resau assez basique. Nous avons du le renvoyer au SAV car impossible de jouer, aujourdhui nous lavons, mon fils peut jouer à dofus et peut meme sabonner ! mais il ne peut pas aller sur le net, il reçoit toujours un message derreur, ce qui est fort etonnant puisque 'dofus' est un jeu en ligne ! Me comprenez vous ? me suis je bien exprimée ? acceptez vous de nous aider mon fils et moi sur ce probleme ? Par avance, je vous remercie de lintéret que vous nous porterez.
                  1. eillane
                    Je voulais aussi ous préciser un détail. Depuis que j'ai fais ce point de restauration pour retrouver le son, jai des messages derreur qui s'affiche chaque fois que je redémarre mon PC, j'ai noté, je vous cite :

                    ERREUR ===> Le module spécifié est introuvable LoadLibrary (Pythondll) failed

                    ERREUR ===> C:\Program files\Uniblue\Registry Booster\PYTHON26.DLL
                    Merci encore.
                    1. eillane
                      re bonsoir, je pense avoir terminé toutes les taches que vous mavez demandé, néanmoins, lorsque jai fais le dernier ZHPDiag, celui ci a encore bloqué a 64%, jai donc fais comme précédemment, clik sur continuer et fermer la fenetre en question, et ce à plusieures reprises, et ça a fini par reprendre jusque 100%, voici le dernier rapport :

                      Rapport de ZHPDiag v1.27.2406 par Nicolas Coolman, Update du 12/07/2011
                      Run by Laeti at 13/07/2011 23:41:28
                      Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html

                      ---\\ Web Browser
                      MSIE: Internet Explorer v8.0.6001.18702
                      MFIE: Mozilla Firefox v (Defaut)

                      ---\\ System Information
                      Windows XP Professional Service Pack 3 (Build 2600)
                      ~ Processor: x86 Family 15 Model 6 Stepping 2, GenuineIntel
                      ~ Operating System: 32 Bits
                      ~ Boot mode: ~ Normal (Normal boot)
                      Total RAM: 2943 MB (81% free)
                      ~ System Restore: Activé (Enable)
                      System drive C: has 8 GB (7%) free of 115 GB

                      ---\\ Logged in mode
                      ~ Computer Name: SALON
                      ~ User Name: Laeti
                      ~ All Users Names: SUPPORT_388945a0, Laeti, HelpAssistant, ASPNET, Administrateur,
                      ~ Unselected Option: O45,O61,O62,O65,O66,O82
                      ~ Logged in as Administrator

                      ---\\ Environnement Variables
                      ~ %AppData%=C:\Documents and Settings\Laeti\Application Data\
                      ~ %Desktop%=C:\Documents and Settings\Laeti\Bureau\
                      ~ %Favorites%=C:\Documents and Settings\Laeti\Favoris\
                      ~ %LocalAppData%=C:\Documents and Settings\Laeti\Local Settings\Application Data\
                      ~ %StartMenu%=C:\Documents and Settings\Laeti\Menu Démarrer\

                      ---\\ DOS/Devices
                      C:\ Hard drive, Flash drive, Thumb drive (Free 8 Go of 115 Go)
                      D:\ Hard drive, Flash drive, Thumb drive (Free 99 Go of 112 Go)
                      E:\ Hard drive, Flash drive, Thumb drive (Free 4 Go of 6 Go)
                      F:\ CD-ROM drive (Not Inserted)
                      G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
                      H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
                      I:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
                      K:\ CD-ROM drive (Not Inserted)

                      ---\\ Security Center & Tools Informations
                      [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
                      [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
                      [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
                      [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
                      [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
                      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
                      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
                      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
                      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
                      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
                      [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK

                      ---\\ Recherche particulière de fichiers génériques
                      [MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.13/07/2011 - 03:34:03.) -- C:\WINDOWS\Explorer.exe [1037824]
                      [MD5.93AD0B78C7357A05F50E594EC7C22300] - (....) (.13/07/2011 - 03:34:20.) -- C:\WINDOWS\system32\rundll32.exe [33792]
                      [MD5.42F5E14E33D79C236680468B1E4999F4] - (.Microsoft Corporation - Internet Extensions for Win32.) (.13/07/2011 - 17:06:11.) -- C:\WINDOWS\system32\wininet.dll [916480]
                      [MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.13/07/2011 - 03:34:28.) -- C:\WINDOWS\system32\Winlogon.exe [512000]
                      [MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/07/2011 - 19:40:30.) -- C:\WINDOWS\system32\drivers\atapi.sys [96512]
                      [MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.13/07/2011 - 20:15:53.) -- C:\WINDOWS\system32\drivers\ntfs.sys [574976]

                      ---\\ Etat des fichiers cachés (Caché/Total)
                      ~ Mes images (My Pictures) : 15/57
                      ~ Mes musiques (My Musics) : 239/1190
                      ~ Mes Favoris (My Favorites) : 4/133
                      ~ Mes Documents (My Documents) : 417/23537
                      ~ Mon Bureau (My Desktop) : 2/10
                      ~ Menu demarrer (Programs) : 6/49

                      ---\\ Processus lancés
                      [MD5.D16C826F375A44802BF317982E81A7E2] - (.AVAST Software - avast! Service.) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [42184]
                      [MD5.9C69E6A25F5500501B14AF43311F8D8B] - (.Microsoft Corporation - Media Center Tray Applet.) -- C:\WINDOWS\ehome\ehtray.exe [64512]
                      [MD5.9F3287A1CAF6E365ED2B39BB8D44B0EA] - (.Elaborate Bytes AG - Virtual CloneDrive Daemon.) -- C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [52168]
                      [MD5.CA416C33C8F4D6DE53C17AAB7CE2FBD8] - (.TechCity Solutions France - AliceAgent.) -- C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe [81408]
                      [MD5.DAEFB050AC8FEE4F1097FCF7CB97220E] - (.Microsoft Corporation - Media Center Media Status Aggregator Servic.) -- C:\WINDOWS\eHome\ehmsas.exe [46592]
                      [MD5.93AD0B78C7357A05F50E594EC7C22300] - (...) -- C:\WINDOWS\system32\RUNDLL32.EXE [33792]
                      [MD5.13E7CFE8E269ED15E7FC9C3EBBCB7E2B] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe [254696]
                      [MD5.E7CF222185411C6A3E68273C452B3283] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\avastUI.exe [3493720]
                      [MD5.B9B7084F7DB3D1B036C0B9178472E96A] - (.Logicool - Logicool Desktop Messenger.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe [20480]
                      [MD5.A564A22308A3F55235BA2478EE82992D] - (.Hewlett-Packard - hpotdd01.) -- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe [28672]
                      [MD5.B75637DA0A24B4B9D12A87D02FC437FE] - (.Logitech Inc. - Logitech SetPoint.) -- C:\Program Files\Logitech\SetPoint\KEM.exe [581632]
                      [MD5.32655C9CD64941E6D5E0F031EA9AC34A] - (.Logitech Inc. - Logitech Hardware Abstraction Layer.) -- C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE [29696]
                      [MD5.4AC28B51530D3A93B3F27EB7A72F575F] - (...) -- C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe [630784]
                      [MD5.5D1347AA5AE6E2F77D7F4F8372D95AC9] - (.Microsoft Corporation - Media Center Receiver Service.) -- C:\WINDOWS\eHome\ehRecvr.exe [237568]
                      [MD5.980EEEA91776357518892C5544768E2B] - (.Microsoft Corporation - Service de planification Media Center.) -- C:\WINDOWS\eHome\ehSched.exe [103424]
                      [MD5.9DBA73C2F1E76EC4CB837E67C5743596] - (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe [153376]
                      [MD5.E75ADCFAFDEF3F4C3AF3332928D59926] - (.Hewlett-Packard Company - LightScribe Service.) -- C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe [73728]
                      [MD5.7AEA4DF1CA68FD45DD4BBE1F0243CE7F] - (...) -- C:\Program Files\CDBurnerXP\NMSAccessU.exe [71096]
                      [MD5.C501206816F35D20422B4C3F88D62860] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 182.5.) -- C:\WINDOWS\system32\nvsvc32.exe [163908]
                      [MD5.0DAD93BB0FECF5016AE3C06CBB0A873B] - (.Microsoft Corporation - COM Surrogate.) -- C:\WINDOWS\system32\dllhost.exe [5120]
                      [MD5.89C981608FE15F3BAB8389794220C350] - (.Apple Inc. - Safari.) -- C:\Program Files\Safari\Safari.exe [2388264]
                      [MD5.00365B3515C30F66CDB938F6729F3D0C] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [656896]

                      ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
                      C:\Documents and Settings\Laeti\Local Settings\Application Data\Mozilla\Firefox\Profiles\dx0c1dt4.default\prefs.js
                      M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
                      M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
                      M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
                      M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
                      M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
                      M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
                      P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeployJava1.dll
                      P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins\npnul32.dll
                      P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.4.5".) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll
                      P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
                      P2 - FPN: [HKLM] [@google.com/npPicasa3,version=3.0.0] - (.Google, Inc. - Picasa plugin.) -- C:\Program Files\Google\Picasa3\npPicasa3.dll
                      P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_26 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
                      P2 - FPN: [HKLM] [@ma-config.com/HardwareDetection] - (.Cybelsoft - Plugin NPAPI Ma-Config.com.) -- C:\Program Files\ma-config.com\nphardwaredetection.dll
                      P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
                      P2 - FPN: [HKLM] [@pandonetworks.com/PandoWebPlugin] - (.Pando Networks - Pando Web Plugin.) -- C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll
                      P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll
                      P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll
                      P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.4.5".) -- C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll
                      P2 - FPN: [HKCU] [@unity3d.com/UnityPlayer,version=1.0] - (.Unity Technologies ApS - Unity Player 3.3.0f4.) -- C:\Documents and Settings\Laeti\Local Settings\Application Data\Unity\WebPlayer\loader\npUnity3D32.dll
                      P2 - FPN: [HKCU] [pandonetworks.com/PandoWebPlugin] - (.Pando Networks - Pando Web Plugin.) -- C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll

                      ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
                      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                      R0 - HKUS\S-1-5-21-854245398-813497703-725345543-1003\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
                      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
                      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
                      R1 - HKUS\S-1-5-21-854245398-813497703-725345543-1003\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
                      R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.19072 (longhorn_ie8_gdr.110420-1700)) -- C:\WINDOWS\system32\ieframe.dll

                      ---\\ Internet Explorer, Proxy Management (R5)
                      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <local>;localhost
                      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
                      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
                      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
                      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
                      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

                      ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
                      F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe,
                      F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

                      ---\\ Browser Helper Objects de navigateur (O2)
                      O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} Clé orpheline
                      O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                      O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
                      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
                      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll
                      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
                      O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java(TM) Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

                      ---\\ Internet Explorer Toolbars (O3)
                      O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
                      O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

                      ---\\ Applications démarrées par registre & par dossier (O4)
                      O4 - HKLM\..\Run: [ehTray] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\WINDOWS\ehome\ehtray.exe
                      O4 - HKLM\..\Run: [VirtualCloneDrive] . (.Elaborate Bytes AG - Virtual CloneDrive Daemon.) -- C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
                      O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] . (.Logitech Inc. - Logitech Hardware Abstraction Layer.) -- C:\WINDOWS\KHALMNPR.exe
                      O4 - HKLM\..\Run: [AliceSAV] . (.TechCity Solutions France - AliceAgent.) -- C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe
                      O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32\NvCpl.dll
                      O4 - HKLM\..\Run: [NvMediaCenter] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\WINDOWS\system32\NvMcTray.dll
                      O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] bthprops.cpl
                      O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe
                      O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe
                      O4 - HKLM\..\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\avastUI.exe
                      O4 - HKCU\..\Run: [PlayNC Launcher] Clé orpheline
                      O4 - HKCU\..\Run: [LDM] . (.Logicool - Logicool Desktop Messenger.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
                      O4 - HKCU\..\Run: [RegistryBooster] . (.Uniblue Systems Limited - Uniblue Launcher.) -- C:\Program Files\Uniblue\RegistryBooster\launcher.exe
                      O4 - HKUS\S-1-5-18\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe
                      O4 - HKUS\S-1-5-18\..\Run: [LDM] . (.Logicool - Logicool Desktop Messenger.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
                      O4 - HKUS\S-1-5-18\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe
                      O4 - HKUS\S-1-5-18\..\Run: [LDM] . (.Logicool - Logicool Desktop Messenger.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
                      O4 - HKUS\S-1-5-21-854245398-813497703-725345543-1003\..\Run: [PlayNC Launcher] Clé orpheline
                      O4 - HKUS\S-1-5-21-854245398-813497703-725345543-1003\..\Run: [LDM] . (.Logicool - Logicool Desktop Messenger.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
                      O4 - HKUS\S-1-5-21-854245398-813497703-725345543-1003\..\Run: [RegistryBooster] . (.Uniblue Systems Limited - Uniblue Launcher.) -- C:\Program Files\Uniblue\RegistryBooster\launcher.exe
                      O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\hpoddt01.exe.lnk . (.Hewlett-Packard.) -- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
                      O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Logitech Desktop Messenger.lnk . (.Logitech.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
                      O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Logitech SetPoint.lnk . (.Logitech Inc..) -- C:\Program Files\Logitech\SetPoint\KEM.exe
                      O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Post-it® Software Notes Lite.lnk . (.3M.) -- C:\Program Files\3M\PSNLite\PsnLite.exe
                      O4 - Global Startup: C:\Documents And Settings\Laeti\Menu Démarrer\Programmes\Démarrage\RocketDock.lnk . (...) -- C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe

                      ---\\ Autres liens utilisateurs (O4)
                      O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader 9.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A94000000001}\SC_Reader.ico
                      O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Apple Software Update.lnk . (...) -- C:\WINDOWS\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\AppleSoftwareUpdateIco.exe
                      O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\CDBurnerXP.lnk . (.Canneverbe Limited.) -- C:\Program Files\CDBurnerXP\cdbxpp.exe
                      O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Media Center.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\ehome\ehshell.exe
                      O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Post-it® Software Notes Lite.lnk . (.3M.) -- C:\Program Files\3M\PSNLite\PsnLite.exe
                      O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Safari.lnk . (...) -- C:\WINDOWS\Installer\{6C1E7AA1-44E9-446D-AAB2-0DE6D9EFEAB1}\SafariIco.exe
                      O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk . (.Microsoft Corporation.) -- C:\Program Files\Messenger\msmsgs.exe
                      O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Movie Maker\moviemk.exe
                      O4 - Global Startup: C:\Documents And Settings\Laeti\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe
                      O4 - Global Startup: C:\Documents And Settings\Laeti\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
                      O4 - Global Startup: C:\Documents And Settings\Laeti\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe
                      O4 - Global Startup: C:\Documents And Settings\Laeti\Menu Démarrer\Programmes\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

                      ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
                      O8 - Extra context menu item: Add to Google Photos Screensa&ver . (.Google Inc. - Google Photos Screensaver.) -- C:\WINDOWS\system32\GPhotos.scr
                      O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~2\Office12\EXCEL.exe
                      O8 - Extra context menu item: Google Sidewiki... . (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_43C348BC2E93EB2B.dll

                      ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
                      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO
                      O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (...) -- C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO
                      O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe

                      ---\\ Winsock hijacker (Layered Service Provider) (O10)
                      O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
                      O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
                      O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
                      O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\WINDOWS\system32\wshbth.dll

                      ---\\ Objets ActiveX (Downloaded Program Files)(O16)
                      O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://fichiers.touslesdrivers.com/maconfig/MaConfig_3_5_3_0.cab
                      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
                      O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
                      O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com/activex/ractrl.cab?lmi=100

                      ---\\ Modification Domaine/Adresses DNS (O17)
                      O17 - HKLM\System\CCS\Services\Tcpip\..\{BD31365F-0A7B-45A0-AD2C-46E08DD99AF0}: NameServer = 192.168.1.1
                      O17 - HKLM\System\CS1\Services\Tcpip\..\{BD31365F-0A7B-45A0-AD2C-46E08DD99AF0}: NameServer = 192.168.1.1
                      O17 - HKLM\System\CS3\Services\Tcpip\..\{BD31365F-0A7B-45A0-AD2C-46E08DD99AF0}: NameServer = 192.168.1.1
                      O17 - HKLM\System\CS2\Services\Tcpip\..\{BD31365F-0A7B-45A0-AD2C-46E08DD99AF0}: DhcpNameServer = 192.168.1.1

                      ---\\ Protocole additionnel et piratage de protocole (O18)
                      O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL

                      ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
                      O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\Windows\System32\crypt32.dll
                      O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\Windows\System32\cryptnet.dll
                      O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\Windows\System32\cscdll.dll
                      O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll
                      O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
                      O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
                      O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\Windows\System32\sclgntfy.dll
                      O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\WlNotify.dll
                      O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
                      O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll

                      ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
                      O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
                      O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
                      O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
                      O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
                      O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll

                      ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
                      O22 - SharedTaskScheduler: (no name) - {438755C2-A8BA-11D1-B96B-00A0C90312E1} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll
                      O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll

                      ---\\ Liste des services NT non Microsoft et non désactivés (O23)
                      O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
                      O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
                      O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe
                      O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) . (.Hewlett-Packard Company - LightScribe Service.) - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
                      O23 - Service: NMSAccess (NMSAccess) . (...) - C:\Program Files\CDBurnerXP\NMSAccessU.exe
                      O23 - Service: NVIDIA Display Driver Service (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 182.5.) - C:\WINDOWS\system32\nvsvc32.exe

                      ---\\ Enumération Active Desktop & MHTML Editor (O24)
                      O24 - Default MHTML Editor: Last - .(...) - (.not file.)

                      ---\\ Tâches planifiées en automatique (O39)
                      O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
                      O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\FRU Task #Hewlett-Packard#hp psc 1100 series#1253109987.job
                      O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
                      O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
                      [MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
                      [MD5.4D6019BE71C720E2D29F2CE758F7A53B] [APT] [FRU Task #Hewlett-Packard#hp psc 1100 series#1253109987] (...) -- C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpqfrucl.exe
                      [MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
                      [MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe

                      ---\\ Pilotes lancés au démarrage (O41)
                      O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
                      O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\System32\DRIVERS\cdrom.sys
                      O41 - Driver: (ElbyCDIO) . (.Elaborate Bytes AG - ElbyCD Windows NT/2000/XP I/O driver.) - C:\WINDOWS\System32\Drivers\ElbyCDIO.sys
                      O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\System32\DRIVERS\i8042prt.sys
                      O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\System32\DRIVERS\imapi.sys
                      O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\System32\DRIVERS\intelppm.sys
                      O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\System32\DRIVERS\ipsec.sys
                      O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\System32\DRIVERS\kbdclass.sys
                      O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre souris HID.) - C:\WINDOWS\System32\DRIVERS\kbdhid.sys
                      O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\System32\DRIVERS\mouclass.sys
                      O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\System32\DRIVERS\mrxsmb.sys
                      O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\System32\DRIVERS\netbios.sys
                      O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\System32\DRIVERS\netbt.sys
                      O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\System32\DRIVERS\rasacd.sys
                      O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\System32\DRIVERS\rdbss.sys
                      O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\System32\DRIVERS\RDPCDD.sys
                      O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\System32\DRIVERS\redbook.sys
                      O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\WINDOWS\System32\DRIVERS\serial.sys
                      O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\System32\DRIVERS\tcpip.sys
                      O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\System32\DRIVERS\termdd.sys
                      O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
                      O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys

                      ---\\ Logiciels installés (O42)
                      O42 - Logiciel: 7-Zip 4.65 - (.Pas de propriétaire.) [HKLM] -- 7-Zip
                      O42 - Logiciel: ATI - Utilitaire de désinstallation du logiciel - (.Pas de propriétaire.) [HKLM] -- All ATI Software
                      O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- Adobe AIR
                      O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- {FDB3B167-F4FA-461D-976F-286304A57B2A}
                      O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
                      O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
                      O42 - Logiciel: Adobe Reader 9.4.5 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A94000000001}
                      O42 - Logiciel: Aion (North America) - (.NCsoft.) [HKCU] -- NCsoft-Aion
                      O42 - Logiciel: Aion - (.NCsoft.) [HKCU] -- NCsoft-AionEU
                      O42 - Logiciel: Alice Auto-diagnostic - (.Pas de propriétaire.) [HKLM] -- AliceSAV
                      O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {853A4763-6643-4604-8D64-28BDD8925F4C}
                      O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
                      O42 - Logiciel: CCleaner (remove only) - (.Piriform.) [HKLM] -- CCleaner
                      O42 - Logiciel: CDBurnerXP - (.CDBurnerXP.) [HKLM] -- {7E265513-8CDA-4631-B696-F40D983F3B07}_is1
                      O42 - Logiciel: Disque de souvenirs HP - (.Hewlett-Packard Company.) [HKLM] -- {B376402D-58EA-45EA-BD50-DD924EB67A70}
                      O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
                      O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
                      O42 - Logiciel: High Definition Audio Driver Package - KB888111 - (.Microsoft Corporation.) [HKLM] -- KB888111WXPSP2
                      O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
                      O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
                      O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399
                      O42 - Logiciel: Hotfix for Windows Media Player 10 (KB903157) - (.Microsoft Corporation.) [HKLM] -- KB903157
                      O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5
                      O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5
                      O42 - Logiciel: Internet Explorer - (.Microsoft Corporation.) [HKLM] -- {4E414048-A9DD-4F60-AA1D-018E716C88C9}
                      O42 - Logiciel: Java(TM) 6 Update 26 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216017FF}
                      O42 - Logiciel: K-Lite Codec Pack 4.6.2 (Full) - (.Pas de propriétaire.) [HKLM] -- KLiteCodecPack_is1
                      O42 - Logiciel: Kit de Connexion Alice ADSL - (.Pas de propriétaire.) [HKLM] -- {3A0221AD-D30B-4320-8F9B-1D0F0E6C6843}
                      O42 - Logiciel: Lecteur Windows Media 11 - (.Pas de propriétaire.) [HKLM] -- Windows Media Player
                      O42 - Logiciel: LightScribe System Software 1.14.25.1 - (.LightScribe.) [HKLM] -- {DA9DAC64-C947-47BA-B411-8A1959B177CF}
                      O42 - Logiciel: Logitech Desktop Messenger - (.Pas de propriétaire.) [HKLM] -- {900B1197-53F5-4F46-A882-2CFFFE2EEDCB}
                      O42 - Logiciel: Logitech SetPoint - (.Pas de propriétaire.) [HKLM] -- {2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}
                      O42 - Logiciel: MSN - (.Pas de propriétaire.) [HKLM] -- MSNINST
                      O42 - Logiciel: MSXML 6 Service Pack 2 (KB973686) - (.Microsoft Corporation.) [HKLM] -- {56EA8BC0-3751-4B93-BC9D-6651CC36E5AA}
                      O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM] -- {425FFD94-36BD-4933-881B-FE0B9DADF2B7}
                      O42 - Logiciel: Malwarebytes' Anti-Malware version 1.51.0.1200 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
                      O42 - Logiciel: Microsoft .NET Framework 1.0 Hotfix (KB979904) - (.Microsoft Corporation.) [HKLM] -- KB979904
                      O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Microsoft.) [HKLM] -- {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
                      O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Pas de propriétaire.) [HKLM] -- Microsoft .NET Framework 1.1 (1033)
                      O42 - Logiciel: Microsoft .NET Framework 1.1 French Language Pack - (.Microsoft.) [HKLM] -- {9A394342-4A68-4EBA-85A6-55B559F4E700}
                      O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB2416447) - (.Pas de propriétaire.) [HKLM] -- M2416447
                      O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB979906) - (.Pas de propriétaire.) [HKLM] -- M979906
                      O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
                      O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
                      O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
                      O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
                      O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1
                      O42 - Logiciel: Microsoft Office Access MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}
                      O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}
                      O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}
                      O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}
                      O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}
                      O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- PROPLUS
                      O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}
                      O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}
                      O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}
                      O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}
                      O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}
                      O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}
                      O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}
                      O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE}
                      O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}
                      O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}
                      O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}
                      O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- Wudf01000
                      O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {7299052b-02a4-4627-81f2-1818da5d550d}
                      O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}
                      O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
                      O42 - Logiciel: Moovida - (.Secure Digital Services.) [HKLM] -- {6084C211-01A1-464E-97A0-09772E122B50}
                      O42 - Logiciel: Mozilla Firefox (3.6.18) - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.6.18)
                      O42 - Logiciel: Mumble and Murmur - (.Mumble.) [HKLM] -- Mumble
                      O42 - Logiciel: NCsoft Launcher - (.NCsoft.) [HKLM] -- {5F8E2CBB-949D-4175-AC98-5ADE7F6C9697}
                      O42 - Logiciel: NVIDIA Drivers - (.NVIDIA Corporation.) [HKLM] -- NVIDIA Drivers
                      O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM] -- {DD1865F0-AD73-40FB-B23E-1822E02396FF}
                      O42 - Logiciel: Pack Vista Inspirat 2 1.0 - (.Bricomix.) [HKLM] -- Pack Vista Inspirat 2
                      O42 - Logiciel: Pando Media Booster - (.Pando Networks Inc..) [HKLM] -- {980A182F-E0A2-4A40-94C1-AE0C1235902E}
                      O42 - Logiciel: Photo et imagerie HP 2.0 - All-in-One - (.Hewlett-Packard Company.) [HKLM] -- {9867A917-5D17-40DE-83BA-BEA5293194B1}
                      O42 - Logiciel: Photo et imagerie HP 2.0 - All-in-One Pilote - (.Hewlett-Packard Company.) [HKLM] -- {6ECB39BD-73C2-44DD-B1A0-898207C58D8B}
                      O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM] -- Picasa 3
                      O42 - Logiciel: Post-it® Software Notes Lite - (.Pas de propriétaire.) [HKLM] -- PSN
                      O42 - Logiciel: REALTEK PCIE NIC Driver - (.REALTEK Semiconductor Corp..) [HKLM] -- {17E2F183-BAC4-4D01-BD7A-59F781E17EFA}
                      O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
                      O42 - Logiciel: Safari - (.Apple Inc..) [HKLM] -- {6C1E7AA1-44E9-446D-AAB2-0DE6D9EFEAB1}
                      O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473
                      O42 - Logiciel: Skype(TM) 5.0 - (.Skype Technologies S.A..) [HKLM] -- {E633D396-5188-4E9D-8F6B-BFB8BF3467E8}
                      O42 - Logiciel: Unity Web Player - (.Unity Technologies ApS.) [HKCU] -- UnityWebPlayer
                      O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
                      O42 - Logiciel: VirtualCloneDrive - (.Elaborate Bytes.) [HKLM] -- VirtualCloneDrive
                      O42 - Logiciel: WinRAR archiver - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver
                      O42 - Logiciel: Windows Feature Pack for Storage (32-bit) - IMAPI update for Blu-Ray - (.Microsoft Corporation.) [HKLM] -- KB952011
                      O42 - Logiciel: Windows Imaging Component - (.Microsoft Corporation.) [HKLM] -- WIC
                      O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8
                      O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11
                      O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime
                      O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11
                      O42 - Logiciel: Windows XP Media Center Edition 2005 KB2502898 - (.Microsoft Corporation.) [HKLM] -- KB2502898
                      O42 - Logiciel: Windows XP Media Center Edition 2005 KB925766 - (.Microsoft Corporation.) [HKLM] -- KB925766
                      O42 - Logiciel: Windows XP Media Center Edition 2005 KB973768 - (.Microsoft Corporation.) [HKLM] -- KB973768
                      O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service
                      O42 - Logiciel: XnView 1.97.8 - (.Gougelet Pierre-e.) [HKLM] -- XnView_is1
                      O42 - Logiciel: avast! Free Antivirus - (.AVAST Software.) [HKLM] -- avast
                      O42 - Logiciel: hp psc 1100 series - (.Hewlett-Packard Company.) [HKLM] -- {01161F64-6897-4885-93A0-A9F7BE9A4253}
                      O42 - Logiciel: µTorrent - (.Pas de propriétaire.) [HKLM] -- uTorrent

                      ---\\ HKCU & HKLM Software Keys
                      [HKCU\Software\3M]
                      [HKCU\Software\7-Zip]
                      [HKCU\Software\ALWIL Software]
                      [HKCU\Software\AVAST Software]
                      [HKCU\Software\Ad-Remover]
                      [HKCU\Software\Adobe]
                      [HKCU\Software\Aion]
                      [HKCU\Software\Apple Computer, Inc.]
                      [HKCU\Software\Apple Inc.]
                      [HKCU\Software\BitTorrent]
                      [HKCU\Software\Bugsplat]
                      [HKCU\Software\Canneverbe Limited]
                      [HKCU\Software\CeWe Color]
                      [HKCU\Software\ClassesB]
                      [HKCU\Software\Classes]
                      [HKCU\Software\Clients]
                      [HKCU\Software\CoreVorbis]
                      [HKCU\Software\Cyberlink]
                      [HKCU\Software\Digital River]
                      [HKCU\Software\DivXNetworks]
                      [HKCU\Software\Elaborate Bytes]
                      [HKCU\Software\GNU]
                      [HKCU\Software\GSpot Appliance Corp]
                      [HKCU\Software\Gabest]
                      [HKCU\Software\Genesis Digital Innovations]
                      [HKCU\Software\Google]
                      [HKCU\Software\Haali]
                      [HKCU\Software\Hewlett-Packard]
                      [HKCU\Software\HookNetwork]
                      [HKCU\Software\INCAInternet]
                      [HKCU\Software\Intel]
                      [HKCU\Software\JEDI-VCL]
                      [HKCU\Software\JavaSoft]
                      [HKCU\Software\Jitit Virtual Registry]
                      [HKCU\Software\Lavalys]
                      [HKCU\Software\LightScribe]
                      [HKCU\Software\Local AppWizard-Generated Applications]
                      [HKCU\Software\LogMeIn]
                      [HKCU\Software\Logitech]
                      [HKCU\Software\MUSICMATCH]
                      [HKCU\Software\Macromedia]
                      [HKCU\Software\Malwarebytes' Anti-Malware]
                      [HKCU\Software\MediaInfo]
                      [HKCU\Software\MozillaPlugins]
                      [HKCU\Software\Mozilla]
                      [HKCU\Software\Mumble]
                      [HKCU\Software\NCsoft]
                      [HKCU\Software\NVIDIA Corporation]
                      [HKCU\Software\Netscape]
                      [HKCU\Software\ODBC]
                      [HKCU\Software\Oak Technology]
                      [HKCU\Software\Pando Networks]
                      [HKCU\Software\Piriform]
                      [HKCU\Software\Policies]
                      [HKCU\Software\Realtek]
                      [HKCU\Software\Revenger inc.]
                      [HKCU\Software\RocketDock]
                      [HKCU\Software\SkypeApps]
                      [HKCU\Software\Skype]
                      [HKCU\Software\SoftVTU]
                      [HKCU\Software\Trolltech]
                      [HKCU\Software\UberIcon-v1.0.0]
                      [HKCU\Software\Unity]
                      [HKCU\Software\Usbfix]
                      [HKCU\Software\VSO]
                      [HKCU\Software\WinRAR SFX]
                      [HKCU\Software\WinRAR]
                      [HKCU\Software\YahooPartnerToolbar]
                      [HKCU\Software\Yahoo]
                      [HKCU\Software\cybelsoft]
                      [HKLM\Software\3M]
                      [HKLM\Software\AGEIA Technologies]
                      [HKLM\Software\ALWIL Software]
                      [HKLM\Software\ATI Technologies Inc.]
                      [HKLM\Software\ATI Technologies]
                      [HKLM\Software\AVAST Software]
                      [HKLM\Software\Adobe]
                      [HKLM\Software\Alice ADSL]
                      [HKLM\Software\Apple Computer, Inc.]
                      [HKLM\Software\Apple Inc.]
                      [HKLM\Software\BackWeb]
                      [HKLM\Software\Bricomix.net]
                      [HKLM\Software\C07ft5Y]
                      [HKLM\Software\Classes]
                      [HKLM\Software\Clients]
                      [HKLM\Software\Codec Tweak Tool]
                      [HKLM\Software\Cyberlink]
                      [HKLM\Software\DIOC]
                      [HKLM\Software\DivXNetworks]
                      [HKLM\Software\Dofus 2]
                      [HKLM\Software\Elaborate Bytes]
                      [HKLM\Software\GNU]
                      [HKLM\Software\Gabest]
                      [HKLM\Software\GalaNetEu]
                      [HKLM\Software\Gemplus]
                      [HKLM\Software\Google]
                      [HKLM\Software\HPS]
                      [HKLM\Software\HaaliMkx]
                      [HKLM\Software\Hewlett-Packard]
                      [HKLM\Software\Intel]
                      [HKLM\Software\InterVideo]
                      [HKLM\Software\JavaSoft]
                      [HKLM\Software\JreMetrics]
                      [HKLM\Software\KLCodecPack]
                      [HKLM\Software\LanSetup]
                      [HKLM\Software\LightScribe]
                      [HKLM\Software\Macromedia]
                      [HKLM\Software\Malwarebytes' Anti-Malware]
                      [HKLM\Software\MimarSinan]
                      [HKLM\Software\MozillaPlugins]
                      [HKLM\Software\Mozilla]
                      [HKLM\Software\NCsoft]
                      [HKLM\Software\NVIDIA Corporation]
                      [HKLM\Software\ODBC]
                      [HKLM\Software\Oak Technology]
                      [HKLM\Software\Pando Networks]
                      [HKLM\Software\Policies]
                      [HKLM\Software\Program Groups]
                      [HKLM\Software\REALTEK Semiconductor Corporation]
                      [HKLM\Software\Realtek Semiconductor Corp.]
                      [HKLM\Software\Realtek]
                      [HKLM\Software\RegisteredApplications]
                      [HKLM\Software\Revenger inc.]
                      [HKLM\Software\S3R521]
                      [HKLM\Software\Schlumberger]
                      [HKLM\Software\Secure]
                      [HKLM\Software\Set8168]
                      [HKLM\Software\Skype]
                      [HKLM\Software\Sonic]
                      [HKLM\Software\TechCity]
                      [HKLM\Software\TrendMicro]
                      [HKLM\Software\Uniblue]
                      [HKLM\Software\VSO]
                      [HKLM\Software\Windows 3.1 Migration Status]
                      [HKLM\Software\Windows]
                      [HKLM\Software\XnView]
                      [HKLM\Software\Yahoo]
                      [HKLM\Software\cybelsoft]
                      [HKLM\Software\iColorFolder]
                      [HKLM\Software\knight]
                      [HKLM\Software\logitech]
                      [HKLM\Software\mozilla.org]

                      ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
                      O43 - CFD: 12/01/2010 - 18:49:14 - [3274392] ----D- C:\Program Files\3M
                      O43 - CFD: 20/08/2009 - 14:15:10 - [3094515] ----D- C:\Program Files\7-Zip
                      O43 - CFD: 06/07/2011 - 19:32:40 - [323326021] ----D- C:\Program Files\Ad-Remover
                      O43 - CFD: 30/10/2010 - 19:06:48 - [163076362] ----D- C:\Program Files\Adobe
                      O43 - CFD: 12/01/2010 - 16:37:40 - [123222710] ----D- C:\Program Files\AGEIA Technologies
                      O43 - CFD: 01/07/2010 - 00:08:48 - [0] ----D- C:\Program Files\ALDI
                      O43 - CFD: 20/08/2009 - 14:07:44 - [1994042] ----D- C:\Program Files\Alice
                      O43 - CFD: 29/07/2010 - 11:23:30 - [153379006] ----D- C:\Program Files\Alwil Software
                      O43 - CFD: 08/07/2011 - 16:38:44 - [2428606] ----D- C:\Program Files\Apple Software Update
                      O43 - CFD: 07/11/2009 - 17:15:44 - [139264] ----D- C:\Program Files\ATI Technologies
                      O43 - CFD: 16/07/2009 - 17:39:42 - [2355410] ----D- C:\Program Files\CCleaner
                      O43 - CFD: 09/06/2011 - 22:22:52 - [17887826] ----D- C:\Program Files\CDBurnerXP
                      O43 - CFD: 16/07/2009 - 22:00:02 - [24619792] ----D- C:\Program Files\Common Files
                      O43 - CFD: 16/07/2009 - 16:21:36 - [0] ----D- C:\Program Files\ComPlus Applications
                      O43 - CFD: 01/07/2010 - 00:06:54 - [0] ----D- C:\Program Files\Dofus
                      O43 - CFD: 21/10/2010 - 18:34:28 - [971232969] ----D- C:\Program Files\Dofus 2
                      O43 - CFD: 16/07/2009 - 17:40:58 - [1955543] ----D- C:\Program Files\Elaborate Bytes
                      O43 - CFD: 24/06/2011 - 16:09:56 - [422983495] ----D- C:\Program Files\Fichiers communs
                      O43 - CFD: 29/01/2010 - 06:47:40 - [96166707] ----D- C:\Program Files\Google
                      O43 - CFD: 27/07/2009 - 14:42:32 - [2902968620] ----D- C:\Program Files\gPotato.eu
                      O43 - CFD: 16/09/2009 - 16:04:34 - [383066236] ----D- C:\Program Files\Hewlett-Packard
                      O43 - CFD: 12/07/2011 - 23:37:00 - [20538172] --H-D- C:\Program Files\InstallShield Installation Information
                      O43 - CFD: 07/11/2009 - 17:29:00 - [96701] ----D- C:\Program Files\Intel
                      O43 - CFD: 16/06/2011 - 20:00:08 - [4673988] ----D- C:\Program Files\Internet Explorer
                      O43 - CFD: 24/06/2011 - 16:09:42 - [81314702] ----D- C:\Program Files\Java
                      O43 - CFD: 16/07/2009 - 17:42:16 - [37506493] ----D- C:\Program Files\K-Lite Codec Pack
                      O43 - CFD: 27/07/2009 - 10:31:42 - [40280049] ----D- C:\Program Files\Logitech
                      O43 - CFD: 07/11/2009 - 17:26:14 - [4935959] ----D- C:\Program Files\ma-config.com
                      O43 - CFD: 13/07/2011 - 22:09:08 - [7577396] ----D- C:\Program Files\Malwarebytes' Anti-Malware
                      O43 - CFD: 14/01/2010 - 04:54:30 - [2152579] ----D- C:\Program Files\Messenger
                      O43 - CFD: 16/07/2009 - 16:25:42 - [0] ----D- C:\Program Files\microsoft frontpage
                      O43 - CFD: 16/07/2009 - 17:47:22 - [551059659] ----D- C:\Program Files\Microsoft Office
                      O43 - CFD: 16/07/2009 - 17:47:20 - [14904] ----D- C:\Program Files\Microsoft Visual Studio
                      O43 - CFD: 16/07/2009 - 17:47:34 - [3178824] ----D- C:\Program Files\Microsoft Works
                      O43 - CFD: 16/07/2009 - 17:46:54 - [8152064] ----D- C:\Program Files\Microsoft.NET
                      O43 - CFD: 12/08/2010 - 14:18:58 - [10949041] ----D- C:\Program Files\Movie Maker
                      O43 - CFD: 25/06/2011 - 09:01:24 - [30507528] ----D- C:\Program Files\Mozilla Firefox
                      O43 - CFD: 15/08/2009 - 03:06:32 - [26521] ----D- C:\Program Files\MSBuild
                      O43 - CFD: 04/08/2009 - 21:40:18 - [21471461] ----D- C:\Program Files\MSN
                      O43 - CFD: 16/07/2009 - 16:19:44 - [8745735] ----D- C:\Program Files\MSN Gaming Zone
                      O43 - CFD: 15/08/2009 - 03:01:26 - [6849] ----D- C:\Program Files\MSXML 6.0
                      O43 - CFD: 06/04/2010 - 15:48:22 - [37973809] ----D- C:\Program Files\Mumble
                      O43 - CFD: 16/08/2009 - 13:35:50 - [378999] ----D- C:\Program Files\MUSICMATCH
                      O43 - CFD: 18/07/2009 - 01:33:22 - [48822055834] ----D- C:\Program Files\NCSoft
                      O43 - CFD: 14/01/2010 - 04:40:46 - [3285523] ----D- C:\Program Files\NetMeeting
                      O43 - CFD: 09/08/2009 - 20:33:06 - [0] ----D- C:\Program Files\NOS
                      O43 - CFD: 16/07/2009 - 16:21:26 - [1804] ----D- C:\Program Files\Online Services
                      O43 - CFD: 16/12/2010 - 04:00:36 - [4379321] ----D- C:\Program Files\Outlook Express
                      O43 - CFD: 27/10/2010 - 18:20:58 - [7367542] ----D- C:\Program Files\Pando Networks
                      O43 - CFD: 12/07/2011 - 23:37:00 - [48346159] ----D- C:\Program Files\Realtek
                      O43 - CFD: 15/08/2009 - 03:06:22 - [36400897] ----D- C:\Program Files\Reference Assemblies
                      O43 - CFD: 08/07/2011 - 16:38:22 - [42293002] ----D- C:\Program Files\Safari
                      O43 - CFD: 16/07/2009 - 16:24:00 - [1025] ----D- C:\Program Files\Services en ligne
                      O43 - CFD: 12/12/2010 - 17:14:14 - [19057007] R---D- C:\Program Files\Skype
                      O43 - CFD: 20/08/2009 - 14:07:52 - [393007] ----D- C:\Program Files\TechCity Solutions
                      O43 - CFD: 12/07/2011 - 23:36:56 - [4129440] ----D- C:\Program Files\Uniblue
                      O43 - CFD: 16/07/2009 - 16:32:20 - [0] --H-D- C:\Program Files\Uninstall Information
                      O43 - CFD: 01/01/2011 - 16:11:36 - [399736] ----D- C:\Program Files\uTorrent
                      O43 - CFD: 12/01/2010 - 16:36:38 - [17098024] ----D- C:\Program Files\VLCPortable
                      O43 - CFD: 12/07/2011 - 23:36:30 - [117177722] ----D- C:\Program Files\VSO
                      O43 - CFD: 15/12/2009 - 05:29:52 - [3581070] ----D- C:\Program Files\Windows Media Connect 2
                      O43 - CFD: 15/12/2009 - 05:29:50 - [9600055] ----D- C:\Program Files\Windows Media Player
                      O43 - CFD: 14/01/2010 - 04:40:44 - [3942655] ----D- C:\Program Files\Windows NT
                      O43 - CFD: 16/07/2009 - 16:21:02 - [41055406] ----D- C:\Program Files\Windows Plus
                      O43 - CFD: 16/07/2009 - 16:24:02 - [0] --H-D- C:\Program Files\WindowsUpdate
                      O43 - CFD: 16/07/2009 - 17:40:12 - [3892521] ----D- C:\Program Files\WinRAR
                      O43 - CFD: 16/07/2009 - 16:25:42 - [0] ----D- C:\Program Files\xerox
                      O43 - CFD: 28/09/2010 - 18:40:14 - [8605678] ----D- C:\Program Files\XnView
                      O43 - CFD: 13/07/2011 - 23:42:18 - [6245185] ----D- C:\Program Files\ZHPDiag
                      O43 - CFD: 16/07/2009 - 22:00:02 - [24619792] ----D- C:\Program Files\Common Files\INCA Shared
                      O43 - CFD: 12/01/2010 - 18:49:28 - [5632] ----D- C:\Documents and Settings\Laeti\Application Data\3M
                      O43 - CFD: 16/12/2009 - 22:27:54 - [3111875] ----D- C:\Documents and Settings\Laeti\Application Data\Adobe
                      O43 - CFD: 16/12/2009 - 22:59:34 - [4650] ----D- C:\Documents and Settings\Laeti\Application Data\app
                      O43 - CFD: 26/03/2011 - 11:37:58 - [11737258] ----D- C:\Documents and Settings\Laeti\Application Data\Apple Computer
                      O43 - CFD: 18/07/2009 - 18:06:24 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\ATI
                      O43 - CFD: 08/06/2011 - 22:45:08 - [1695] ----D- C:\Documents and Settings\Laeti\Application Data\Canneverbe Limited
                      O43 - CFD: 25/06/2011 - 09:51:50 - [82185567] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus 2
                      O43 - CFD: 12/04/2010 - 10:25:18 - [6896] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus-2.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
                      O43 - CFD: 12/04/2010 - 11:36:52 - [9402] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus-3.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
                      O43 - CFD: 12/04/2010 - 20:06:10 - [30] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus-4.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
                      O43 - CFD: 23/12/2010 - 00:45:14 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus-5.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
                      O43 - CFD: 27/02/2011 - 10:22:50 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus-6.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
                      O43 - CFD: 11/04/2010 - 21:10:36 - [16911] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
                      O43 - CFD: 20/07/2009 - 12:10:56 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Droppix
                      O43 - CFD: 27/03/2011 - 00:52:52 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\dvdcss
                      O43 - CFD: 30/06/2010 - 23:43:02 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\FOG Downloader
                      O43 - CFD: 18/07/2009 - 01:33:08 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\GetRightToGo
                      O43 - CFD: 09/08/2009 - 14:56:24 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Google
                      O43 - CFD: 16/01/2011 - 13:38:04 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Help
                      O43 - CFD: 16/09/2009 - 16:07:08 - [2828] ----D- C:\Documents and Settings\Laeti\Application Data\Hewlett-Packard
                      O43 - CFD: 19/12/2009 - 23:45:56 - [3638] ----D- C:\Documents and Settings\Laeti\Application Data\Icones
                      O43 - CFD: 16/07/2009 - 16:32:26 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Identities
                      O43 - CFD: 17/07/2009 - 17:34:44 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\InstallShield
                      O43 - CFD: 27/07/2009 - 10:36:56 - [10767] ----D- C:\Documents and Settings\Laeti\Application Data\Logitech
                      O43 - CFD: 16/07/2009 - 18:43:14 - [58223] ----D- C:\Documents and Settings\Laeti\Application Data\Macromedia
                      O43 - CFD: 10/07/2011 - 22:00:38 - [11118634] ----D- C:\Documents and Settings\Laeti\Application Data\Malwarebytes
                      O43 - CFD: 08/06/2011 - 22:15:28 - [16] ----D- C:\Documents and Settings\Laeti\Application Data\Media Player Classic
                      O43 - CFD: 24/06/2011 - 16:35:40 - [14880169] -S--D- C:\Documents and Settings\Laeti\Application Data\Microsoft
                      O43 - CFD: 30/10/2010 - 19:11:46 - [3237805] ----D- C:\Documents and Settings\Laeti\Application Data\Mozilla
                      O43 - CFD: 04/08/2009 - 21:40:40 - [853608] ----D- C:\Documents and Settings\Laeti\Application Data\MSNInstaller
                      O43 - CFD: 13/11/2010 - 03:41:02 - [435490] ----D- C:\Documents and Settings\Laeti\Application Data\Mumble
                      O43 - CFD: 16/12/2009 - 22:59:34 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Reg.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
                      O43 - CFD: 21/05/2011 - 22:22:28 - [6627640] ----D- C:\Documents and Settings\Laeti\Application Data\Skype
                      O43 - CFD: 21/05/2011 - 22:11:50 - [5544] ----D- C:\Documents and Settings\Laeti\Application Data\skypePM
                      O43 - CFD: 12/01/2010 - 17:54:34 - [31965402] ----D- C:\Documents and Settings\Laeti\Application Data\Sun
                      O43 - CFD: 25/04/2010 - 01:23:42 - [38815] ----D- C:\Documents and Settings\Laeti\Application Data\teamspeak2
                      O43 - CFD: 09/02/2010 - 04:42:32 - [187849] ----D- C:\Documents and Settings\Laeti\Application Data\TS3Client
                      O43 - CFD: 12/07/2011 - 23:36:58 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Uniblue
                      O43 - CFD: 19/05/2011 - 23:24:58 - [44] ----D- C:\Documents and Settings\Laeti\Application Data\Unity
                      O43 - CFD: 14/06/2011 - 03:14:34 - [2913304] ----D- C:\Documents and Settings\Laeti\Application Data\uTorrent
                      O43 - CFD: 19/10/2010 - 00:51:44 - [475423] ----D- C:\Documents and Settings\Laeti\Application Data\vlc
                      O43 - CFD: 11/07/2011 - 13:32:48 - [5890] ----D- C:\Documents and Settings\Laeti\Application Data\Vso
                      O43 - CFD: 28/09/2010 - 18:45:16 - [601052] ----D- C:\Documents and Settings\Laeti\Application Data\XnView
                      O43 - CFD: 15/08/2009 - 18:04:12 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Yahoo!
                      O43 - CFD: 30/10/2010 - 19:06:26 - [116670] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Adobe
                      O43 - CFD: 12/01/2010 - 17:03:58 - [0] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Apple
                      O43 - CFD: 12/01/2010 - 17:04:42 - [804416259] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Apple Computer
                      O43 - CFD: 24/06/2011 - 16:36:10 - [11125] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\ApplicationHistory
                      O43 - CFD: 07/09/2010 - 23:06:32 - [36388416] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\assembly
                      O43 - CFD: 18/07/2009 - 18:06:24 - [64435] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\ATI
                      O43 - CFD: 07/07/2011 - 03:39:00 - [190064416] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Google
                      O43 - CFD: 16/01/2011 - 13:38:04 - [0] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Help
                      O43 - CFD: 11/06/2011 - 19:55:00 - [44360252] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Microsoft
                      O43 - CFD: 16/07/2009 - 17:44:50 - [0] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Microsoft Help
                      O43 - CFD: 30/10/2010 - 19:11:34 - [55373937] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Mozilla
                      O43 - CFD: 07/07/2011 - 01:30:16 - [0] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\PackageAware
                      O43 - CFD: 28/10/2010 - 01:28:52 - [160084] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\PMB Files
                      O43 - CFD: 25/04/2011 - 23:12:16 - [0] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Temp
                      O43 - CFD: 19/05/2011 - 22:49:36 - [98862506] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Unity

                      1. eillane
                        voici le rapport maleware

                        Malwarebytes' Anti-Malware 1.51.0.1200
                        www.malwarebytes.org

                        Version de la base de données: 7116

                        Windows 5.1.2600 Service Pack 3
                        Internet Explorer 8.0.6001.18702

                        13/07/2011 23:31:34
                        mbam-log-2011-07-13 (23-31-34).txt

                        Type d'examen: Examen complet (C:\|D:\|E:\|F:\|G:\|H:\|I:\|K:\|)
                        Elément(s) analysé(s): 262537
                        Temps écoulé: 52 minute(s), 3 seconde(s)

                        Processus mémoire infecté(s): 0
                        Module(s) mémoire infecté(s): 0
                        Clé(s) du Registre infectée(s): 1
                        Valeur(s) du Registre infectée(s): 0
                        Elément(s) de données du Registre infecté(s): 0
                        Dossier(s) infecté(s): 0
                        Fichier(s) infecté(s): 3

                        Processus mémoire infecté(s):
                        (Aucun élément nuisible détecté)

                        Module(s) mémoire infecté(s):
                        (Aucun élément nuisible détecté)

                        Clé(s) du Registre infectée(s):
                        HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_QUERYEXPLORER_SERVICE (Adware.QueryExplorer) -> Quarantined and deleted successfully.

                        Valeur(s) du Registre infectée(s):
                        (Aucun élément nuisible détecté)

                        Elément(s) de données du Registre infecté(s):
                        (Aucun élément nuisible détecté)

                        Dossier(s) infecté(s):
                        (Aucun élément nuisible détecté)

                        Fichier(s) infecté(s):
                        c:\system volume information\_restore{0c86064d-d9ed-4361-933d-19fe03728441}\RP528\A0096918.exe (Trojan.FakeMS) -> Quarantined and deleted successfully.
                        c:\WINDOWS\ie8\iexplore.exe (Trojan.FakeMS) -> Quarantined and deleted successfully.
                        d:\utilitaire\petits jeux cool\zuma deluxe\varia entrainement\zuma.deluxe.v1.0_trainer-fff\Trainer.exe (PUP.HackTool.HotKeysHook) -> Not selected for removal.
                        1. eillane
                          ah oui je me suis trompé, jai confondu entre les 2 rapports, bon bah je poste le zhpfix que jai faisRapport de ZHPFix 1.12.3338 par Nicolas Coolman, Update du 12/07/2011
                          Fichier d'export Registre :
                          Run by Laeti at 13/07/2011 21:00:24
                          Windows XP Professional Service Pack 3 (Build 2600)
                          Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html

                          ========== Clé(s) du Registre ==========
                          SUPPRIME Partiel Software Key: {6084C211-01A1-464E-97A0-09772E122B50}
                          SUPPRIME Key: HKCU\Software\Moovida
                          SUPPRIME Key: HKLM\Software\CrazyLoader
                          SUPPRIME Key: HKLM\Software\Moovida
                          ABSENT CLSID MPSK: {b8f7842d-4355-11e0-9a1d-00138fe50013}
                          SUPPRIME CLSID MPSK: {e8d4ff68-d3d0-11de-9736-00138fe50013}
                          SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\ForceRenive
                          SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ShopperReportsSA
                          SUPPRIME Key: HKLM\Software\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}
                          SUPPRIME Key: HKLM\Software\Classes\Interface\{65A16874-2ED0-460E-A547-5FE2EC3A13A7}
                          SUPPRIME Key: HKLM\Software\Classes\Interface\{71E02280-5212-45C3-B174-4D5A35DA254F}
                          SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C5F65718-341D-4e7d-9842-FCB9CC89527E}
                          SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C5F65718-341D-4e7d-9842-FCB9CC89527E}
                          SUPPRIME Key: HKLM\Software\Classes\Installer\Features\5B4758C25396ECF468E04F8E063287FF

                          ========== Valeur(s) du Registre ==========
                          SUPPRIME RunValue: RTHDCPL
                          SUPPRIME RunValue: Alcmtr
                          SUPPRIME RunValue: nwiz
                          SUPPRIME RunValue: Adobe Reader Speed Launcher
                          SUPPRIME RunValue: ctfmon.exe
                          ABSENT RunValue: ctfmon.exe
                          SUPPRIME AAKE KeyValue: C:\Program Files\CrazyLoader\crazyloader.exe
                          Aucune valeur présente dans la clé d'exception du registre (FirewallRaz)

                          ========== Dossier(s) ==========
                          SUPPRIME Folder*: C:\Documents and Settings\Laeti\Application Data\moovida-1
                          SUPPRIME Folder*: C:\Documents and Settings\Laeti\Local Settings\Application Data\crazyloader Air
                          SUPPRIME Folder*: C:\Documents and Settings\Laeti\Local Settings\Application Data\Moovida
                          SUPPRIME Folder*: C:\Documents and Settings\Laeti\Local Settings\Application Data\moovida Air
                          SUPPRIME Flash Cookies: 19
                          SUPPRIME Temporaires Windows: : 69

                          ========== Fichier(s) ==========
                          SUPPRIME c:\documents and settings\all users\menu démarrer\programmes\moovida.lnk
                          ABSENT File: c:\program files\fluendo\moovida\moovida.exe
                          SUPPRIME c:\documents and settings\laeti\menu démarrer\programmes\moovida.lnk
                          ABSENT File: c:\program files\crazyloader\crazyloader.exe
                          ABSENT Folder/File: c:\documents and settings\laeti\local settings\application data\crazyloader air
                          ABSENT Folder/File: c:\documents and settings\laeti\local settings\application data\moovida air
                          ABSENT Folder/File: c:\documents and settings\laeti\local settings\application data\moovida
                          SUPPRIME Flash Cookies: 3
                          SUPPRIME Temporaires Windows: : 43

                          ========== Fichier HOSTS ==========
                          Le fichier Hosts est sain

                          ========== Restauration Système ==========
                          Point de restauration du système créé avec succès

                          ========== Récapitulatif ==========
                          14 : Clé(s) du Registre
                          8 : Valeur(s) du Registre
                          6 : Dossier(s)
                          9 : Fichier(s)
                          1 : Fichier HOSTS
                          1 : Restauration Système

                          ========== Chemin du fichier rapport ==========
                          C:\Program Files\ZHPDiag\ZHPFixReport.txt

                          End of the scan in 01mn 41s
                          c bon ? c bien celui ci ? je pense que oui
                          1. eillane
                            oui oui dsl... javais pas vu sur linstant, mais c bon jai commencé denvoyé les rapports, voici maintenant celui de usbfix (ça va jai pris le coup de main)

                            ############################## | UsbFix 7.049 | [Suppression]

                            Utilisateur: Laeti (Administrateur) # SALON [ ]
                            Mis à jour le 12/07/2011 par TeamXscript
                            Lancé à 21:49:38 | 13/07/2011
                            Site Web: http://www.teamxscript.org
                            Submit your sample: http://www.teamxscript.org/Upload.php
                            Contact: TeamXscript.ElDesaparecido@gmail.com

                            CPU: Intel(R) Pentium(R) D CPU 3.00GHz
                            CPU 2: Intel(R) Pentium(R) D CPU 3.00GHz
                            Microsoft Windows XP Professionnel (5.1.2600 32-Bit) # Service Pack 3
                            Internet Explorer 8.0.6001.18702

                            Pare-feu Windows: Activé
                            Antivirus: avast! Antivirus 5.0.100664499 [(!) Disabled | Updated]
                            RAM -> 2943 Mo
                            C:\ (%systemdrive%) -> Disque fixe # 115 Go (8 Go libre(s) - 7%) [] # NTFS
                            D:\ -> Disque fixe # 112 Go (99 Go libre(s) - 89%) [BACKUP] # NTFS
                            E:\ -> Disque fixe # 6 Go (4 Go libre(s) - 61%) [RECOVER] # FAT32
                            F:\ -> CD-ROM
                            J:\ -> Disque amovible # 8 Go (7 Go libre(s) - 93%) [] # FAT32
                            K:\ -> CD-ROM
                            L:\ -> Disque fixe # 233 Go (167 Go libre(s) - 72%) [Expansion Drive] # NTFS

                            ################## | Éléments infectieux |

                            Supprimé! C:\Recycler\S-1-5-21-854245398-813497703-725345543-1003
                            Supprimé! C:\Recycler\S-1-5-21-854245398-813497703-725345543-1003(2)
                            Supprimé! D:\Recycler\S-1-5-21-854245398-813497703-725345543-1003
                            Supprimé! D:\Recycler\S-1-5-21-854245398-813497703-725345543-1003(2)
                            Supprimé! L:\Recycler\S-1-5-21-854245398-813497703-725345543-1003

                            ################## | Registre |

                            ################## | Mountpoints2 |

                            ################## | Listing |

                            [06/07/2011 - 19:35:59 | N | 16533] C:\Ad-Report-CLEAN[1].txt
                            [06/07/2011 - 23:14:01 | N | 2673] C:\Ad-Report-CLEAN[2].txt
                            [13/07/2011 - 21:09:18 | N | 2739] C:\Ad-Report-CLEAN[3].txt
                            [16/07/2009 - 17:48:58 | D ] C:\ATI
                            [16/07/2009 - 16:25:28 | N | 0] C:\AUTOEXEC.BAT
                            [10/07/2011 - 20:23:32 | D ] C:\Autorun(2).inf
                            [12/07/2011 - 23:36:48 | RASHD ] C:\Autorun.inf
                            [12/07/2011 - 23:54:25 | N | 209] C:\boot.ini
                            [10/08/2004 - 14:00:00 | N | 4952] C:\Bootfont.bin
                            [12/07/2011 - 23:36:22 | D ] C:\Config.Msi
                            [16/07/2009 - 16:25:28 | N | 0] C:\CONFIG.SYS
                            [16/07/2009 - 16:30:36 | D ] C:\Documents and Settings
                            [13/07/2011 - 13:37:19 | D ] C:\En attente
                            [27/10/2010 - 18:53:52 | D ] C:\GAMIGO
                            [30/06/2011 - 14:13:04 | N | 10725] C:\hpfr3420.log
                            [30/06/2011 - 14:13:04 | N | 525] C:\hpfr3420.xml
                            [07/11/2009 - 17:28:47 | D ] C:\Intel
                            [16/07/2009 - 16:25:28 | N | 0] C:\IO.SYS
                            [16/07/2009 - 16:25:28 | N | 0] C:\MSDOS.SYS
                            [16/07/2009 - 17:44:29 | RHD ] C:\MSOCache
                            [10/08/2004 - 14:00:00 | N | 47564] C:\NTDETECT.COM
                            [14/01/2010 - 04:38:56 | N | 252240] C:\ntldr
                            [07/11/2009 - 17:34:45 | D ] C:\NVIDIA
                            [13/07/2011 - 21:10:36 | ASH | 1610612736] C:\pagefile.sys
                            [11/07/2011 - 23:05:51 | N | 512] C:\PhysicalDisk0_MBR.bin
                            [07/11/2009 - 17:28:36 | D ] C:\pilotes
                            [12/07/2011 - 23:36:58 | D ] C:\Program Files
                            [13/07/2011 - 21:50:42 | SHD ] C:\RECYCLER
                            [16/07/2009 - 16:29:38 | SHD ] C:\System Volume Information
                            [10/07/2011 - 20:46:32 | N | 2394] C:\TB.txt
                            [19/10/2010 - 00:40:26 | D ] C:\Temp
                            [12/07/2011 - 23:36:48 | D ] C:\ToolBar SD
                            [13/07/2011 - 21:50:42 | D ] C:\UsbFix
                            [13/07/2011 - 21:50:42 | A | 1444] C:\UsbFix.txt
                            [10/07/2011 - 20:15:51 | D ] C:\UsbFix_Upload_Me
                            [13/07/2011 - 21:11:12 | D ] C:\WINDOWS
                            [10/07/2011 - 19:39:46 | N | 38966] C:\ZHPExportRegistry-10-07-2011-19-39-46.txt
                            [13/07/2011 - 21:00:24 | N | 37778] C:\ZHPExportRegistry-13-07-2011-21-00-24.txt
                            [03/01/2007 - 17:05:26 | N | 168592911] D:\(App) -Adobe Photoshop 7.0_for PC_with serial (Photoshop7.0+Illustrator7.0.zip
                            [15/12/2009 - 05:29:57 | D ] D:\0d8a326925892ed20acaac246ed7
                            [16/07/2009 - 17:41:15 | N | 75595848] D:\9-3_1_legacy_xp32-64_dd_ccc.exe
                            [15/12/2009 - 05:29:14 | D ] D:\9f713c0f2ac2aa016292f7c3db22b1d4
                            [17/07/2009 - 17:33:06 | N | 363552] D:\aion.exe
                            [10/07/2011 - 20:23:32 | D ] D:\Autorun(2).inf
                            [12/07/2011 - 23:37:06 | RASHD ] D:\Autorun.inf
                            [17/07/2009 - 15:19:31 | N | 308160] D:\avast_home_setup.exe
                            [04/12/2009 - 02:40:11 | D ] D:\bricopack-vista-inspirat-ultimate-2-crystalxp.net-fr-130
                            [11/02/2008 - 01:28:25 | N | 28981233] D:\bricopack-vista-inspirat-ultimate-2-crystalxp.net-fr-130.zip
                            [16/02/2009 - 17:25:18 | N | 3171208] D:\ccsetup216.exe
                            [16/02/2009 - 17:23:35 | N | 3183182] D:\cdbxp_setup_4.2.3.1110.exe
                            [02/08/2008 - 23:36:46 | D ] D:\Delicious 2 Deluxe + crack
                            [12/12/2008 - 14:02:15 | N | 181040153] D:\Delicious 2 Deluxe + crack.rar
                            [06/07/2011 - 17:41:37 | N | 180100102] D:\Deluxe Pack Games-14 Games (Zuma,Cake Mania 1&2, Feeding Frenzy 1 &2, Diner Dash 2, Pizza Frenzy,.rar
                            [23/05/2009 - 01:21:33 | N | 2953069] D:\DofusInstaller_v1_27_0.exe
                            [12/10/2008 - 18:12:03 | N | 2945816] D:\dotnetfx3setup.exe
                            [06/07/2009 - 09:39:02 | N | 341634] D:\Downloader_4Story_FR.exe
                            [02/05/2006 - 09:53:13 | D ] D:\Driver
                            [15/08/2009 - 03:06:06 | D ] D:\ebec5711bd3151ea2833f8d3
                            [26/01/2008 - 18:08:58 | N | 5843256] D:\Firefox Setup 2.0.0.11.exe
                            [30/10/2010 - 19:09:20 | N | 8174952] D:\Firefox Setup 3.5.15.exe
                            [16/07/2009 - 19:21:14 | N | 812568246] D:\fly_for_fun_client_complet_-_acte_iii_bataille_pour_madrigal_francais_41629.exe
                            [04/08/2009 - 02:23:54 | N | 1424839] D:\FTool Extended.rar
                            [12/10/2008 - 17:12:31 | N | 2513432] D:\infinst_autol.exe
                            [26/10/2010 - 14:36:17 | N | 19725152] D:\installation-ie8-xp-01NET.exe
                            [20/06/2009 - 16:46:12 | N | 1878888] D:\install_flash_player.exe
                            [27/10/2010 - 18:48:43 | N | 927093996] D:\LastChaos_French_Setup.exe
                            [01/05/2008 - 13:07:20 | N | 4225744] D:\Limewire Lime Wire Pro 4[1].12.3.exe
                            [08/08/2010 - 03:49:21 | N | 1046048] D:\moovida-setup.exe
                            [12/01/2010 - 18:48:58 | N | 2502128] D:\pn30lous.exe
                            [13/07/2011 - 21:50:42 | SHD ] D:\RECYCLER
                            [07/05/2009 - 21:17:12 | N | 176212096] D:\rw2_021_w02_fra.exe
                            [14/04/2008 - 10:48:48 | N | 91003576] D:\Samsung Pc Studio 3 (Pc Studio 2.0.9 Internet Acess Usb Driver 4.24 Mobile Sgh Z500.rar
                            [14/04/2008 - 08:04:46 | N | 65761963] D:\Samsung PC Studio v.3.1.1 Live Update Installer + USB Drivers + Manual PDF_DnGnMsTr.rar
                            [20/06/2009 - 13:54:09 | N | 49623696] D:\SetupDroppixRecorder01Net.exe
                            [30/12/2007 - 07:06:58 | N | 1000052483] D:\shaiya.exe
                            [02/04/2009 - 19:15:32 | N | 1084022848] D:\Shaiya_FR_FullClient_090310.exe
                            [27/12/2009 - 01:52:07 | N | 2020136] D:\SkypeSetup.exe
                            [04/02/2008 - 02:28:10 | D ] D:\StudioLine3
                            [19/01/2007 - 02:23:10 | SHD ] D:\System Volume Information
                            [02/05/2006 - 12:08:06 | D ] D:\Tools
                            [10/02/2010 - 17:46:43 | D ] D:\Utilitaire
                            [06/11/2008 - 17:37:07 | D ] D:\WOW
                            [17/07/2008 - 14:37:01 | N | 93493255] D:\[Full Version] diner dash (ok).zip
                            [02/05/2006 - 15:02:48 | N | 24] E:\SWCONF.DAT
                            [02/05/2006 - 09:57:02 | D ] E:\Recover
                            [12/07/2011 - 23:37:08 | RASHD ] E:\Autorun.inf
                            [10/07/2011 - 20:23:34 | D ] E:\Autorun(2).inf
                            [29/05/2006 - 15:33:32 | N | 49] E:\PASS.RPT
                            [19/01/2007 - 20:05:26 | SHD ] E:\System Volume Information
                            [19/01/2007 - 21:31:26 | SHD ] E:\Recycled
                            [02/01/2009 - 23:52:08 | D ] J:\App
                            [03/01/2009 - 00:05:12 | D ] J:\Data
                            [03/01/2009 - 00:05:14 | D ] J:\EmDesk
                            [30/09/2007 - 21:37:58 | N | 79198] J:\EmDesk.exe
                            [10/07/2011 - 20:23:34 | RASHD ] J:\Autorun.inf
                            [02/02/2011 - 10:45:27 | D ] L:\$AVG
                            [10/07/2011 - 20:19:42 | SHD ] L:\$RECYCLE.BIN
                            [11/07/2011 - 22:43:58 | D ] L:\(PC GAME+CRACK) Luxor
                            [06/02/2011 - 13:44:34 | N | 142] L:\.~lock.projet pedagogique les ajoncs.docx#
                            [01/01/2011 - 21:00:32 | N | 7685226251] L:\Alice In Wonderland 3D.mkv
                            [12/01/2011 - 20:13:40 | N | 733323264] L:\Arsène Lupin.avi
                            [10/07/2011 - 20:23:32 | RASHD ] L:\Autorun.inf
                            [13/11/2008 - 19:04:43 | N | 53054] L:\baba.ico
                            [09/06/2011 - 13:35:02 | D ] L:\backup
                            [10/07/2011 - 18:35:07 | D ] L:\Bleach part 1
                            [12/06/2011 - 12:43:52 | D ] L:\Bleach part 2
                            [01/04/2011 - 01:51:33 | N | 740259840] L:\Elle.S.appelait.Sarah.2011.LIMITED.FRENCH.SUBFORCED.REPACK.1CD.DVDRiP.XViD-UraM.avi
                            [13/01/2011 - 17:32:00 | D ] L:\FILMS et séries
                            [08/06/2011 - 20:29:46 | N | 12602568] L:\Firefox Setup 4-3.0.1.exe
                            [16/04/2011 - 22:26:58 | N | 3108653056] L:\fr_windows_7_enterprise_with_sp1_x64_dvd_620217.iso
                            [11/07/2011 - 22:50:10 | D ] L:\jeux1
                            [16/02/2011 - 18:33:05 | N | 734683136] L:\L'Effet Papillon 2.avi
                            [20/01/2011 - 04:10:45 | N | 1651010447] L:\L'expérience.mkv
                            [26/01/2010 - 18:53:21 | N | 732956672] L:\L'illusionniste.avi
                            [23/09/2010 - 18:03:18 | N | 27398] L:\laetitia.ico
                            [13/01/2011 - 17:15:02 | D ] L:\le dernier maitre de l'air
                            [12/01/2011 - 19:01:14 | N | 730183680] L:\Le Syndrome du Titanic.avi
                            [31/01/2011 - 13:50:18 | N | 733272064] L:\LovBones.avi
                            [13/01/2011 - 17:21:06 | D ] L:\Matrix I.II.III
                            [02/04/2011 - 17:16:06 | N | 735811584] L:\Memoires D'une Geisha Dvdrip Fr .avi
                            [06/02/2011 - 21:15:15 | N | 734230528] L:\Never.Let.Me.Go..avi
                            [10/02/2011 - 11:28:48 | N | 735752192] L:\persecutions.avi
                            [10/07/2011 - 18:35:11 | D ] L:\Play liste
                            [13/07/2011 - 21:50:42 | SHD ] L:\RECYCLER
                            [01/04/2000 - 18:04:28 | SHD ] L:\System Volume Information
                            [27/03/2011 - 17:21:28 | D ] L:\The Good Wife saison 1 french dvdrip
                            [13/01/2011 - 17:14:38 | D ] L:\The.Crazies.FRENCH.DVDRIP.XviD.AC3-WTF
                            [06/01/2011 - 21:13:29 | N | 1465036800] L:\The.Tournament.READNFO.FRENCH.DVDRIP.XVID.AC3-TBoss.avi
                            [10/07/2011 - 18:35:07 | ASH | 4096] L:\Thumbs.db
                            [10/07/2011 - 18:35:06 | D ] L:\[REC]2007.VOST.multi.DVD-rip

                            ################## | Vaccin |

                            C:\Autorun(2).inf -> Vaccin créé par UsbFix (TeamXscript)
                            C:\Autorun.inf -> Vaccin créé par UsbFix (TeamXscript)
                            D:\Autorun(2).inf -> Vaccin créé par UsbFix (TeamXscript)
                            D:\Autorun.inf -> Vaccin créé par UsbFix (TeamXscript)
                            E:\Autorun.inf -> Vaccin créé par UsbFix (TeamXscript)
                            E:\Autorun(2).inf -> Vaccin créé par UsbFix (TeamXscript)
                            J:\Autorun.inf -> Vaccin créé par UsbFix (TeamXscript)
                            L:\Autorun.inf -> Vaccin créé par UsbFix (TeamXscript)
                            1. eillane
                              voici le rapport ad remover
                              ======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======

                              Mis à jour par TeamXscript le 12/04/11
                              Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
                              Site web: http://www.teamxscript.org

                              C:\Program Files\Ad-Remover\main.exe (CLEAN [3]) -> Lancé à 21:07:04 le 13/07/2011, Mode normal

                              Microsoft Windows XP Professionnel Service Pack 3 (X86)
                              Laeti@SALON ( )

                              ============== ACTION(S) ==============

                              (!) -- Fichiers temporaires supprimés.

                              ============== SCAN ADDITIONNEL ==============

                              **** Mozilla Firefox Version [3.6.18 (fr)] ****

                              HKLM_MozillaPlugins\@pandonetworks.com/PandoWebPlugin (x)
                              HKLM_MozillaPlugins\Adobe Reader (x)
                              HKCU_MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0 (x)
                              HKCU_MozillaPlugins\pandonetworks.com/PandoWebPlugin (x)

                              -- C:\Documents and Settings\Laeti\Application Data\Mozilla\FireFox\Profiles\dx0c1dt4.default --
                              Prefs.js - browser.startup.homepage_override.mstone, rv:1.9.2.18

                              ========================================

                              **** Internet Explorer Version [8.0.6001.18702] ****

                              HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
                              HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                              HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
                              HKCU_Main|Start Page - hxxp://fr.msn.com/
                              HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
                              HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                              HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
                              HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                              HKLM_Main|Start Page - hxxp://fr.msn.com/
                              HKCU_SearchScopes\{550f51ed-7625-4b6f-9e7b-3f0debb33cc0} - "Wibeez" (hxxp://www.wibeez.com/meteo?search&q={searchTerms})
                              HKLM_Toolbar|{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} (C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll)
                              HKLM_ElevationPolicy\{C9BDBBC1-2B4F-4669-BB5A-51C8D1770C1A} - C:\WINDOWS\Downloaded Program Files\LMIGuardian.exe (LogMeIn, Inc.)
                              HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?)
                              BHO\{02478D38-C3F9-4efb-9B51-7695ECA05670} (?)
                              BHO\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - "avast! WebRep" (C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll)

                              ========================================

                              C:\Program Files\Ad-Remover\Quarantine: 3228 Fichier(s)
                              C:\Program Files\Ad-Remover\Backup: 28 Fichier(s)

                              C:\Ad-Report-CLEAN[1].txt - 06/07/2011 19:34:10 (16533 Octet(s))
                              C:\Ad-Report-CLEAN[2].txt - 06/07/2011 23:13:12 (2673 Octet(s))
                              C:\Ad-Report-CLEAN[3].txt - 13/07/2011 21:08:33 (2357 Octet(s))

                              Fin à: 21:09:18, 13/07/2011

                              ============== E.O.F ==============
                            2. eillane
                              Rapport de ZHPDiag v1.27.2406 par Nicolas Coolman, Update du 12/07/2011
                              Run by Laeti at 13/07/2011 18:25:01
                              Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html

                              ---\\ Web Browser
                              MSIE: Internet Explorer v8.0.6001.18702
                              MFIE: Mozilla Firefox v (Defaut)

                              ---\\ System Information
                              Windows XP Professional Service Pack 3 (Build 2600)
                              ~ Processor: x86 Family 15 Model 6 Stepping 2, GenuineIntel
                              ~ Operating System: 32 Bits
                              ~ Boot mode: ~ Normal (Normal boot)
                              Total RAM: 2943 MB (76% free)
                              ~ System Restore: Activé (Enable)
                              System drive C: has 8 GB (7%) free of 115 GB

                              ---\\ Logged in mode
                              ~ Computer Name: SALON
                              ~ User Name: Laeti
                              ~ All Users Names: SUPPORT_388945a0, Laeti, HelpAssistant, ASPNET, Administrateur,
                              ~ Unselected Option: O45,O61,O62,O65,O66,O82
                              ~ Logged in as Administrator

                              ---\\ Environnement Variables
                              ~ %AppData%=C:\Documents and Settings\Laeti\Application Data\
                              ~ %Desktop%=C:\Documents and Settings\Laeti\Bureau\
                              ~ %Favorites%=C:\Documents and Settings\Laeti\Favoris\
                              ~ %LocalAppData%=C:\Documents and Settings\Laeti\Local Settings\Application Data\
                              ~ %StartMenu%=C:\Documents and Settings\Laeti\Menu Démarrer\

                              ---\\ DOS/Devices
                              C:\ Hard drive, Flash drive, Thumb drive (Free 8 Go of 115 Go)
                              D:\ Hard drive, Flash drive, Thumb drive (Free 99 Go of 112 Go)
                              E:\ Hard drive, Flash drive, Thumb drive (Free 4 Go of 6 Go)
                              F:\ CD-ROM drive (Not Inserted)
                              G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
                              H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
                              I:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
                              K:\ CD-ROM drive (Not Inserted)

                              ---\\ Security Center & Tools Informations
                              [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
                              [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
                              [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
                              [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
                              [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
                              [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
                              [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
                              [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
                              [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
                              [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
                              [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK

                              ---\\ Recherche particulière de fichiers génériques
                              [MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.13/07/2011 - 03:34:03.) -- C:\WINDOWS\Explorer.exe [1037824]
                              [MD5.93AD0B78C7357A05F50E594EC7C22300] - (....) (.13/07/2011 - 03:34:20.) -- C:\WINDOWS\system32\rundll32.exe [33792]
                              [MD5.42F5E14E33D79C236680468B1E4999F4] - (.Microsoft Corporation - Internet Extensions for Win32.) (.13/07/2011 - 17:06:11.) -- C:\WINDOWS\system32\wininet.dll [916480]
                              [MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.13/07/2011 - 03:34:28.) -- C:\WINDOWS\system32\Winlogon.exe [512000]
                              [MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/07/2011 - 19:40:30.) -- C:\WINDOWS\system32\drivers\atapi.sys [96512]
                              [MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.13/07/2011 - 20:15:53.) -- C:\WINDOWS\system32\drivers\ntfs.sys [574976]

                              ---\\ Etat des fichiers cachés (Caché/Total)
                              ~ Mes images (My Pictures) : 15/57
                              ~ Mes musiques (My Musics) : 239/1190
                              ~ Mes Favoris (My Favorites) : 4/133
                              ~ Mes Documents (My Documents) : 417/23536
                              ~ Mon Bureau (My Desktop) : 2/10
                              ~ Menu demarrer (Programs) : 6/50

                              ---\\ Processus lancés
                              [MD5.D16C826F375A44802BF317982E81A7E2] - (.AVAST Software - avast! Service.) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [42184]
                              [MD5.9C69E6A25F5500501B14AF43311F8D8B] - (.Microsoft Corporation - Media Center Tray Applet.) -- C:\WINDOWS\ehome\ehtray.exe [64512]
                              [MD5.DAEFB050AC8FEE4F1097FCF7CB97220E] - (.Microsoft Corporation - Media Center Media Status Aggregator Servic.) -- C:\WINDOWS\eHome\ehmsas.exe [46592]
                              [MD5.5D1347AA5AE6E2F77D7F4F8372D95AC9] - (.Microsoft Corporation - Media Center Receiver Service.) -- C:\WINDOWS\eHome\ehRecvr.exe [237568]
                              [MD5.692733BE9E923044CEBC96CF882CCEBE] - (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.EXE [16264192]
                              [MD5.980EEEA91776357518892C5544768E2B] - (.Microsoft Corporation - Service de planification Media Center.) -- C:\WINDOWS\eHome\ehSched.exe [103424]
                              [MD5.9DBA73C2F1E76EC4CB837E67C5743596] - (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe [153376]
                              [MD5.9F3287A1CAF6E365ED2B39BB8D44B0EA] - (.Elaborate Bytes AG - Virtual CloneDrive Daemon.) -- C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [52168]
                              [MD5.E75ADCFAFDEF3F4C3AF3332928D59926] - (.Hewlett-Packard Company - LightScribe Service.) -- C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe [73728]
                              [MD5.CA416C33C8F4D6DE53C17AAB7CE2FBD8] - (.TechCity Solutions France - AliceAgent.) -- C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe [81408]
                              [MD5.93AD0B78C7357A05F50E594EC7C22300] - (...) -- C:\WINDOWS\system32\RUNDLL32.EXE [33792]
                              [MD5.13E7CFE8E269ED15E7FC9C3EBBCB7E2B] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe [254696]
                              [MD5.7AEA4DF1CA68FD45DD4BBE1F0243CE7F] - (...) -- C:\Program Files\CDBurnerXP\NMSAccessU.exe [71096]
                              [MD5.E7CF222185411C6A3E68273C452B3283] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\avastUI.exe [3493720]
                              [MD5.B9B7084F7DB3D1B036C0B9178472E96A] - (.Logicool - Logicool Desktop Messenger.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe [20480]
                              [MD5.C501206816F35D20422B4C3F88D62860] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 182.5.) -- C:\WINDOWS\system32\nvsvc32.exe [163908]
                              [MD5.A564A22308A3F55235BA2478EE82992D] - (.Hewlett-Packard - hpotdd01.) -- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe [28672]
                              [MD5.B75637DA0A24B4B9D12A87D02FC437FE] - (.Logitech Inc. - Logitech SetPoint.) -- C:\Program Files\Logitech\SetPoint\KEM.exe [581632]
                              [MD5.4AC28B51530D3A93B3F27EB7A72F575F] - (...) -- C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe [630784]
                              [MD5.32655C9CD64941E6D5E0F031EA9AC34A] - (.Logitech Inc. - Logitech Hardware Abstraction Layer.) -- C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE [29696]
                              [MD5.0DAD93BB0FECF5016AE3C06CBB0A873B] - (.Microsoft Corporation - COM Surrogate.) -- C:\WINDOWS\system32\dllhost.exe [5120]
                              [MD5.89C981608FE15F3BAB8389794220C350] - (.Apple Inc. - Safari.) -- C:\Program Files\Safari\Safari.exe [2388264]
                              [MD5.00365B3515C30F66CDB938F6729F3D0C] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [656896]

                              ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
                              C:\Documents and Settings\Laeti\Local Settings\Application Data\Mozilla\Firefox\Profiles\dx0c1dt4.default\prefs.js
                              M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
                              M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
                              M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
                              M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
                              M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
                              M3 - MFPP: Plugins - [Laeti] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
                              P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeployJava1.dll
                              P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins\npnul32.dll
                              P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.4.5".) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll
                              P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
                              P2 - FPN: [HKLM] [@google.com/npPicasa3,version=3.0.0] - (.Google, Inc. - Picasa plugin.) -- C:\Program Files\Google\Picasa3\npPicasa3.dll
                              P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_26 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
                              P2 - FPN: [HKLM] [@ma-config.com/HardwareDetection] - (.Cybelsoft - Plugin NPAPI Ma-Config.com.) -- C:\Program Files\ma-config.com\nphardwaredetection.dll
                              P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
                              P2 - FPN: [HKLM] [@pandonetworks.com/PandoWebPlugin] - (.Pando Networks - Pando Web Plugin.) -- C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll
                              P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll
                              P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll
                              P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.4.5".) -- C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll
                              P2 - FPN: [HKCU] [@unity3d.com/UnityPlayer,version=1.0] - (.Unity Technologies ApS - Unity Player 3.3.0f4.) -- C:\Documents and Settings\Laeti\Local Settings\Application Data\Unity\WebPlayer\loader\npUnity3D32.dll
                              P2 - FPN: [HKCU] [pandonetworks.com/PandoWebPlugin] - (.Pando Networks - Pando Web Plugin.) -- C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll

                              ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
                              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                              R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                              R0 - HKUS\S-1-5-21-854245398-813497703-725345543-1003\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
                              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
                              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
                              R1 - HKUS\S-1-5-21-854245398-813497703-725345543-1003\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
                              R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.19072 (longhorn_ie8_gdr.110420-1700)) -- C:\WINDOWS\system32\ieframe.dll

                              ---\\ Internet Explorer, Proxy Management (R5)
                              R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <local>;localhost
                              R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
                              R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
                              R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
                              R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
                              R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

                              ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
                              F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe,
                              F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

                              ---\\ Browser Helper Objects de navigateur (O2)
                              O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} Clé orpheline
                              O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                              O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
                              O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
                              O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll
                              O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
                              O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java(TM) Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

                              ---\\ Internet Explorer Toolbars (O3)
                              O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
                              O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

                              ---\\ Applications démarrées par registre & par dossier (O4)
                              O4 - HKLM\..\Run: [ehTray] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\WINDOWS\ehome\ehtray.exe
                              O4 - HKLM\..\Run: [RTHDCPL] . (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.exe
                              O4 - HKLM\..\Run: [Alcmtr] . (.Realtek Semiconductor Corp. - Realtek Azalia Audio - Event Monitor.) -- C:\WINDOWS\ALCMTR.exe
                              O4 - HKLM\..\Run: [VirtualCloneDrive] . (.Elaborate Bytes AG - Virtual CloneDrive Daemon.) -- C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
                              O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] . (.Logitech Inc. - Logitech Hardware Abstraction Layer.) -- C:\WINDOWS\KHALMNPR.exe
                              O4 - HKLM\..\Run: [AliceSAV] . (.TechCity Solutions France - AliceAgent.) -- C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe
                              O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32\NvCpl.dll
                              O4 - HKLM\..\Run: [nwiz] . (...) -- C:\Windows\System32\nwiz.exe
                              O4 - HKLM\..\Run: [NvMediaCenter] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\WINDOWS\system32\NvMcTray.dll
                              O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] bthprops.cpl
                              O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
                              O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe
                              O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe
                              O4 - HKLM\..\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\avastUI.exe
                              O4 - HKCU\..\Run: [PlayNC Launcher] Clé orpheline
                              O4 - HKCU\..\Run: [LDM] . (.Logicool - Logicool Desktop Messenger.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
                              O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
                              O4 - HKCU\..\Run: [RegistryBooster] . (.Uniblue Systems Limited - Uniblue Launcher.) -- C:\Program Files\Uniblue\RegistryBooster\launcher.exe
                              O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
                              O4 - HKUS\S-1-5-18\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe
                              O4 - HKUS\S-1-5-18\..\Run: [LDM] . (.Logicool - Logicool Desktop Messenger.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
                              O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
                              O4 - HKUS\S-1-5-18\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe
                              O4 - HKUS\S-1-5-18\..\Run: [LDM] . (.Logicool - Logicool Desktop Messenger.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
                              O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
                              O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
                              O4 - HKUS\S-1-5-21-854245398-813497703-725345543-1003\..\Run: [PlayNC Launcher] Clé orpheline
                              O4 - HKUS\S-1-5-21-854245398-813497703-725345543-1003\..\Run: [LDM] . (.Logicool - Logicool Desktop Messenger.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
                              O4 - HKUS\S-1-5-21-854245398-813497703-725345543-1003\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
                              O4 - HKUS\S-1-5-21-854245398-813497703-725345543-1003\..\Run: [RegistryBooster] . (.Uniblue Systems Limited - Uniblue Launcher.) -- C:\Program Files\Uniblue\RegistryBooster\launcher.exe
                              O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\hpoddt01.exe.lnk . (.Hewlett-Packard.) -- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
                              O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Logitech Desktop Messenger.lnk . (.Logitech.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
                              O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Logitech SetPoint.lnk . (.Logitech Inc..) -- C:\Program Files\Logitech\SetPoint\KEM.exe
                              O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Post-it® Software Notes Lite.lnk . (.3M.) -- C:\Program Files\3M\PSNLite\PsnLite.exe
                              O4 - Global Startup: C:\Documents And Settings\Laeti\Menu Démarrer\Programmes\Démarrage\RocketDock.lnk . (...) -- C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe

                              ---\\ Autres liens utilisateurs (O4)
                              O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader 9.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A94000000001}\SC_Reader.ico
                              O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Apple Software Update.lnk . (...) -- C:\WINDOWS\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\AppleSoftwareUpdateIco.exe
                              O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\CDBurnerXP.lnk . (.Canneverbe Limited.) -- C:\Program Files\CDBurnerXP\cdbxpp.exe
                              O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Media Center.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\ehome\ehshell.exe
                              O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Moovida.lnk . (...) -- C:\Program Files\Fluendo\Moovida\Moovida.exe (.not file.)
                              O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Post-it® Software Notes Lite.lnk . (.3M.) -- C:\Program Files\3M\PSNLite\PsnLite.exe
                              O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Safari.lnk . (...) -- C:\WINDOWS\Installer\{6C1E7AA1-44E9-446D-AAB2-0DE6D9EFEAB1}\SafariIco.exe
                              O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk . (.Microsoft Corporation.) -- C:\Program Files\Messenger\msmsgs.exe
                              O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Movie Maker\moviemk.exe
                              O4 - Global Startup: C:\Documents And Settings\Laeti\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe
                              O4 - Global Startup: C:\Documents And Settings\Laeti\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
                              O4 - Global Startup: C:\Documents And Settings\Laeti\Menu Démarrer\Programmes\Moovida.lnk . (...) -- C:\Program Files\Fluendo\Moovida\Moovida.exe (.not file.)
                              O4 - Global Startup: C:\Documents And Settings\Laeti\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe
                              O4 - Global Startup: C:\Documents And Settings\Laeti\Menu Démarrer\Programmes\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

                              ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
                              O8 - Extra context menu item: Add to Google Photos Screensa&ver . (.Google Inc. - Google Photos Screensaver.) -- C:\WINDOWS\system32\GPhotos.scr
                              O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~2\Office12\EXCEL.exe
                              O8 - Extra context menu item: Google Sidewiki... . (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_43C348BC2E93EB2B.dll

                              ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
                              O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO
                              O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (...) -- C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO
                              O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe

                              ---\\ Winsock hijacker (Layered Service Provider) (O10)
                              O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
                              O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
                              O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
                              O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\WINDOWS\system32\wshbth.dll

                              ---\\ Objets ActiveX (Downloaded Program Files)(O16)
                              O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://fichiers.touslesdrivers.com/maconfig/MaConfig_3_5_3_0.cab
                              O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
                              O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
                              O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com/activex/ractrl.cab?lmi=100

                              ---\\ Modification Domaine/Adresses DNS (O17)
                              O17 - HKLM\System\CCS\Services\Tcpip\..\{BD31365F-0A7B-45A0-AD2C-46E08DD99AF0}: NameServer = 192.168.1.1
                              O17 - HKLM\System\CS1\Services\Tcpip\..\{BD31365F-0A7B-45A0-AD2C-46E08DD99AF0}: NameServer = 192.168.1.1
                              O17 - HKLM\System\CS3\Services\Tcpip\..\{BD31365F-0A7B-45A0-AD2C-46E08DD99AF0}: NameServer = 192.168.1.1
                              O17 - HKLM\System\CS2\Services\Tcpip\..\{BD31365F-0A7B-45A0-AD2C-46E08DD99AF0}: DhcpNameServer = 192.168.1.1

                              ---\\ Protocole additionnel et piratage de protocole (O18)
                              O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL

                              ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
                              O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\Windows\System32\crypt32.dll
                              O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\Windows\System32\cryptnet.dll
                              O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\Windows\System32\cscdll.dll
                              O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll
                              O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
                              O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
                              O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\Windows\System32\sclgntfy.dll
                              O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\WlNotify.dll
                              O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
                              O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll

                              ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
                              O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
                              O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
                              O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
                              O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
                              O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll

                              ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
                              O22 - SharedTaskScheduler: (no name) - {438755C2-A8BA-11D1-B96B-00A0C90312E1} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll
                              O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll

                              ---\\ Liste des services NT non Microsoft et non désactivés (O23)
                              O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
                              O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
                              O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe
                              O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) . (.Hewlett-Packard Company - LightScribe Service.) - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
                              O23 - Service: NMSAccess (NMSAccess) . (...) - C:\Program Files\CDBurnerXP\NMSAccessU.exe
                              O23 - Service: NVIDIA Display Driver Service (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 182.5.) - C:\WINDOWS\system32\nvsvc32.exe

                              ---\\ Enumération Active Desktop & MHTML Editor (O24)
                              O24 - Default MHTML Editor: Last - .(...) - (.not file.)

                              ---\\ Tâches planifiées en automatique (O39)
                              O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
                              O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\FRU Task #Hewlett-Packard#hp psc 1100 series#1253109987.job
                              O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
                              O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
                              [MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
                              [MD5.4D6019BE71C720E2D29F2CE758F7A53B] [APT] [FRU Task #Hewlett-Packard#hp psc 1100 series#1253109987] (...) -- C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpqfrucl.exe
                              [MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
                              [MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe

                              ---\\ Pilotes lancés au démarrage (O41)
                              O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
                              O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\System32\DRIVERS\cdrom.sys
                              O41 - Driver: (ElbyCDIO) . (.Elaborate Bytes AG - ElbyCD Windows NT/2000/XP I/O driver.) - C:\WINDOWS\System32\Drivers\ElbyCDIO.sys
                              O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\System32\DRIVERS\i8042prt.sys
                              O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\System32\DRIVERS\imapi.sys
                              O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\System32\DRIVERS\intelppm.sys
                              O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\System32\DRIVERS\ipsec.sys
                              O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\System32\DRIVERS\kbdclass.sys
                              O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre souris HID.) - C:\WINDOWS\System32\DRIVERS\kbdhid.sys
                              O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\System32\DRIVERS\mouclass.sys
                              O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\System32\DRIVERS\mrxsmb.sys
                              O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\System32\DRIVERS\netbios.sys
                              O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\System32\DRIVERS\netbt.sys
                              O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\System32\DRIVERS\rasacd.sys
                              O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\System32\DRIVERS\rdbss.sys
                              O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\System32\DRIVERS\RDPCDD.sys
                              O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\System32\DRIVERS\redbook.sys
                              O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\WINDOWS\System32\DRIVERS\serial.sys
                              O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\System32\DRIVERS\tcpip.sys
                              O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\System32\DRIVERS\termdd.sys
                              O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
                              O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys

                              ---\\ Logiciels installés (O42)
                              O42 - Logiciel: 7-Zip 4.65 - (.Pas de propriétaire.) [HKLM] -- 7-Zip
                              O42 - Logiciel: ATI - Utilitaire de désinstallation du logiciel - (.Pas de propriétaire.) [HKLM] -- All ATI Software
                              O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- Adobe AIR
                              O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- {FDB3B167-F4FA-461D-976F-286304A57B2A}
                              O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
                              O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
                              O42 - Logiciel: Adobe Reader 9.4.5 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A94000000001}
                              O42 - Logiciel: Aion (North America) - (.NCsoft.) [HKCU] -- NCsoft-Aion
                              O42 - Logiciel: Aion - (.NCsoft.) [HKCU] -- NCsoft-AionEU
                              O42 - Logiciel: Alice Auto-diagnostic - (.Pas de propriétaire.) [HKLM] -- AliceSAV
                              O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {853A4763-6643-4604-8D64-28BDD8925F4C}
                              O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
                              O42 - Logiciel: CCleaner (remove only) - (.Piriform.) [HKLM] -- CCleaner
                              O42 - Logiciel: CDBurnerXP - (.CDBurnerXP.) [HKLM] -- {7E265513-8CDA-4631-B696-F40D983F3B07}_is1
                              O42 - Logiciel: Disque de souvenirs HP - (.Hewlett-Packard Company.) [HKLM] -- {B376402D-58EA-45EA-BD50-DD924EB67A70}
                              O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
                              O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
                              O42 - Logiciel: High Definition Audio Driver Package - KB888111 - (.Microsoft Corporation.) [HKLM] -- KB888111WXPSP2
                              O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
                              O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
                              O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399
                              O42 - Logiciel: Hotfix for Windows Media Player 10 (KB903157) - (.Microsoft Corporation.) [HKLM] -- KB903157
                              O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5
                              O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5
                              O42 - Logiciel: Internet Explorer - (.Microsoft Corporation.) [HKLM] -- {4E414048-A9DD-4F60-AA1D-018E716C88C9}
                              O42 - Logiciel: Java(TM) 6 Update 26 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216017FF}
                              O42 - Logiciel: K-Lite Codec Pack 4.6.2 (Full) - (.Pas de propriétaire.) [HKLM] -- KLiteCodecPack_is1
                              O42 - Logiciel: Kit de Connexion Alice ADSL - (.Pas de propriétaire.) [HKLM] -- {3A0221AD-D30B-4320-8F9B-1D0F0E6C6843}
                              O42 - Logiciel: Lecteur Windows Media 11 - (.Pas de propriétaire.) [HKLM] -- Windows Media Player
                              O42 - Logiciel: LightScribe System Software 1.14.25.1 - (.LightScribe.) [HKLM] -- {DA9DAC64-C947-47BA-B411-8A1959B177CF}
                              O42 - Logiciel: Logitech Desktop Messenger - (.Pas de propriétaire.) [HKLM] -- {900B1197-53F5-4F46-A882-2CFFFE2EEDCB}
                              O42 - Logiciel: Logitech SetPoint - (.Pas de propriétaire.) [HKLM] -- {2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}
                              O42 - Logiciel: MSN - (.Pas de propriétaire.) [HKLM] -- MSNINST
                              O42 - Logiciel: MSXML 6 Service Pack 2 (KB973686) - (.Microsoft Corporation.) [HKLM] -- {56EA8BC0-3751-4B93-BC9D-6651CC36E5AA}
                              O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM] -- {425FFD94-36BD-4933-881B-FE0B9DADF2B7}
                              O42 - Logiciel: Microsoft .NET Framework 1.0 Hotfix (KB979904) - (.Microsoft Corporation.) [HKLM] -- KB979904
                              O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Microsoft.) [HKLM] -- {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
                              O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Pas de propriétaire.) [HKLM] -- Microsoft .NET Framework 1.1 (1033)
                              O42 - Logiciel: Microsoft .NET Framework 1.1 French Language Pack - (.Microsoft.) [HKLM] -- {9A394342-4A68-4EBA-85A6-55B559F4E700}
                              O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB2416447) - (.Pas de propriétaire.) [HKLM] -- M2416447
                              O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB979906) - (.Pas de propriétaire.) [HKLM] -- M979906
                              O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
                              O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
                              O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
                              O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
                              O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1
                              O42 - Logiciel: Microsoft Office Access MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}
                              O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}
                              O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}
                              O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}
                              O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}
                              O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- PROPLUS
                              O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}
                              O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}
                              O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}
                              O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}
                              O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}
                              O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}
                              O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}
                              O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE}
                              O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}
                              O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}
                              O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}
                              O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- Wudf01000
                              O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {7299052b-02a4-4627-81f2-1818da5d550d}
                              O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}
                              O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
                              O42 - Logiciel: Moovida - (.Secure Digital Services.) [HKLM] -- {6084C211-01A1-464E-97A0-09772E122B50}
                              O42 - Logiciel: Mozilla Firefox (3.6.18) - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.6.18)
                              O42 - Logiciel: Mumble and Murmur - (.Mumble.) [HKLM] -- Mumble
                              O42 - Logiciel: NCsoft Launcher - (.NCsoft.) [HKLM] -- {5F8E2CBB-949D-4175-AC98-5ADE7F6C9697}
                              O42 - Logiciel: NVIDIA Drivers - (.NVIDIA Corporation.) [HKLM] -- NVIDIA Drivers
                              O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM] -- {DD1865F0-AD73-40FB-B23E-1822E02396FF}
                              O42 - Logiciel: Pack Vista Inspirat 2 1.0 - (.Bricomix.) [HKLM] -- Pack Vista Inspirat 2
                              O42 - Logiciel: Pando Media Booster - (.Pando Networks Inc..) [HKLM] -- {980A182F-E0A2-4A40-94C1-AE0C1235902E}
                              O42 - Logiciel: Photo et imagerie HP 2.0 - All-in-One - (.Hewlett-Packard Company.) [HKLM] -- {9867A917-5D17-40DE-83BA-BEA5293194B1}
                              O42 - Logiciel: Photo et imagerie HP 2.0 - All-in-One Pilote - (.Hewlett-Packard Company.) [HKLM] -- {6ECB39BD-73C2-44DD-B1A0-898207C58D8B}
                              O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM] -- Picasa 3
                              O42 - Logiciel: Post-it® Software Notes Lite - (.Pas de propriétaire.) [HKLM] -- PSN
                              O42 - Logiciel: REALTEK PCIE NIC Driver - (.REALTEK Semiconductor Corp..) [HKLM] -- {17E2F183-BAC4-4D01-BD7A-59F781E17EFA}
                              O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
                              O42 - Logiciel: Safari - (.Apple Inc..) [HKLM] -- {6C1E7AA1-44E9-446D-AAB2-0DE6D9EFEAB1}
                              O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473
                              O42 - Logiciel: Skype(TM) 5.0 - (.Skype Technologies S.A..) [HKLM] -- {E633D396-5188-4E9D-8F6B-BFB8BF3467E8}
                              O42 - Logiciel: Unity Web Player - (.Unity Technologies ApS.) [HKCU] -- UnityWebPlayer
                              O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
                              O42 - Logiciel: VirtualCloneDrive - (.Elaborate Bytes.) [HKLM] -- VirtualCloneDrive
                              O42 - Logiciel: WinRAR archiver - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver
                              O42 - Logiciel: Windows Feature Pack for Storage (32-bit) - IMAPI update for Blu-Ray - (.Microsoft Corporation.) [HKLM] -- KB952011
                              O42 - Logiciel: Windows Imaging Component - (.Microsoft Corporation.) [HKLM] -- WIC
                              O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8
                              O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11
                              O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime
                              O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11
                              O42 - Logiciel: Windows XP Media Center Edition 2005 KB2502898 - (.Microsoft Corporation.) [HKLM] -- KB2502898
                              O42 - Logiciel: Windows XP Media Center Edition 2005 KB925766 - (.Microsoft Corporation.) [HKLM] -- KB925766
                              O42 - Logiciel: Windows XP Media Center Edition 2005 KB973768 - (.Microsoft Corporation.) [HKLM] -- KB973768
                              O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service
                              O42 - Logiciel: XnView 1.97.8 - (.Gougelet Pierre-e.) [HKLM] -- XnView_is1
                              O42 - Logiciel: avast! Free Antivirus - (.AVAST Software.) [HKLM] -- avast
                              O42 - Logiciel: hp psc 1100 series - (.Hewlett-Packard Company.) [HKLM] -- {01161F64-6897-4885-93A0-A9F7BE9A4253}
                              O42 - Logiciel: µTorrent - (.Pas de propriétaire.) [HKLM] -- uTorrent

                              ---\\ HKCU & HKLM Software Keys
                              [HKCU\Software\3M]
                              [HKCU\Software\7-Zip]
                              [HKCU\Software\ALWIL Software]
                              [HKCU\Software\AVAST Software]
                              [HKCU\Software\Ad-Remover]
                              [HKCU\Software\Adobe]
                              [HKCU\Software\Aion]
                              [HKCU\Software\Apple Computer, Inc.]
                              [HKCU\Software\Apple Inc.]
                              [HKCU\Software\BitTorrent]
                              [HKCU\Software\Bugsplat]
                              [HKCU\Software\Canneverbe Limited]
                              [HKCU\Software\CeWe Color]
                              [HKCU\Software\ClassesB]
                              [HKCU\Software\Classes]
                              [HKCU\Software\Clients]
                              [HKCU\Software\CoreVorbis]
                              [HKCU\Software\Cyberlink]
                              [HKCU\Software\Digital River]
                              [HKCU\Software\DivXNetworks]
                              [HKCU\Software\Elaborate Bytes]
                              [HKCU\Software\GNU]
                              [HKCU\Software\GSpot Appliance Corp]
                              [HKCU\Software\Gabest]
                              [HKCU\Software\Genesis Digital Innovations]
                              [HKCU\Software\Google]
                              [HKCU\Software\Haali]
                              [HKCU\Software\Hewlett-Packard]
                              [HKCU\Software\HookNetwork]
                              [HKCU\Software\INCAInternet]
                              [HKCU\Software\Intel]
                              [HKCU\Software\JEDI-VCL]
                              [HKCU\Software\JavaSoft]
                              [HKCU\Software\Jitit Virtual Registry]
                              [HKCU\Software\Lavalys]
                              [HKCU\Software\LightScribe]
                              [HKCU\Software\Local AppWizard-Generated Applications]
                              [HKCU\Software\LogMeIn]
                              [HKCU\Software\Logitech]
                              [HKCU\Software\MUSICMATCH]
                              [HKCU\Software\Macromedia]
                              [HKCU\Software\MediaInfo]
                              [HKCU\Software\Moovida]
                              [HKCU\Software\MozillaPlugins]
                              [HKCU\Software\Mozilla]
                              [HKCU\Software\Mumble]
                              [HKCU\Software\NCsoft]
                              [HKCU\Software\NVIDIA Corporation]
                              [HKCU\Software\Netscape]
                              [HKCU\Software\ODBC]
                              [HKCU\Software\Oak Technology]
                              [HKCU\Software\Pando Networks]
                              [HKCU\Software\Piriform]
                              [HKCU\Software\Policies]
                              [HKCU\Software\Realtek]
                              [HKCU\Software\Revenger inc.]
                              [HKCU\Software\RocketDock]
                              [HKCU\Software\SkypeApps]
                              [HKCU\Software\Skype]
                              [HKCU\Software\SoftVTU]
                              [HKCU\Software\Trolltech]
                              [HKCU\Software\UberIcon-v1.0.0]
                              [HKCU\Software\Unity]
                              [HKCU\Software\Usbfix]
                              [HKCU\Software\VSO]
                              [HKCU\Software\WinRAR SFX]
                              [HKCU\Software\WinRAR]
                              [HKCU\Software\YahooPartnerToolbar]
                              [HKCU\Software\Yahoo]
                              [HKCU\Software\cybelsoft]
                              [HKLM\Software\3M]
                              [HKLM\Software\AGEIA Technologies]
                              [HKLM\Software\ALWIL Software]
                              [HKLM\Software\ATI Technologies Inc.]
                              [HKLM\Software\ATI Technologies]
                              [HKLM\Software\AVAST Software]
                              [HKLM\Software\Adobe]
                              [HKLM\Software\Alice ADSL]
                              [HKLM\Software\Apple Computer, Inc.]
                              [HKLM\Software\Apple Inc.]
                              [HKLM\Software\BackWeb]
                              [HKLM\Software\Bricomix.net]
                              [HKLM\Software\C07ft5Y]
                              [HKLM\Software\Classes]
                              [HKLM\Software\Clients]
                              [HKLM\Software\Codec Tweak Tool]
                              [HKLM\Software\CrazyLoader]
                              [HKLM\Software\Cyberlink]
                              [HKLM\Software\DIOC]
                              [HKLM\Software\DivXNetworks]
                              [HKLM\Software\Dofus 2]
                              [HKLM\Software\Elaborate Bytes]
                              [HKLM\Software\GNU]
                              [HKLM\Software\Gabest]
                              [HKLM\Software\GalaNetEu]
                              [HKLM\Software\Gemplus]
                              [HKLM\Software\Google]
                              [HKLM\Software\HPS]
                              [HKLM\Software\HaaliMkx]
                              [HKLM\Software\Hewlett-Packard]
                              [HKLM\Software\Intel]
                              [HKLM\Software\InterVideo]
                              [HKLM\Software\JavaSoft]
                              [HKLM\Software\JreMetrics]
                              [HKLM\Software\KLCodecPack]
                              [HKLM\Software\LanSetup]
                              [HKLM\Software\LightScribe]
                              [HKLM\Software\Macromedia]
                              [HKLM\Software\MimarSinan]
                              [HKLM\Software\Moovida]
                              [HKLM\Software\MozillaPlugins]
                              [HKLM\Software\Mozilla]
                              [HKLM\Software\NCsoft]
                              [HKLM\Software\NVIDIA Corporation]
                              [HKLM\Software\ODBC]
                              [HKLM\Software\Oak Technology]
                              [HKLM\Software\Pando Networks]
                              [HKLM\Software\Policies]
                              [HKLM\Software\Program Groups]
                              [HKLM\Software\REALTEK Semiconductor Corporation]
                              [HKLM\Software\Realtek Semiconductor Corp.]
                              [HKLM\Software\Realtek]
                              [HKLM\Software\RegisteredApplications]
                              [HKLM\Software\Revenger inc.]
                              [HKLM\Software\S3R521]
                              [HKLM\Software\Schlumberger]
                              [HKLM\Software\Secure]
                              [HKLM\Software\Set8168]
                              [HKLM\Software\Skype]
                              [HKLM\Software\Sonic]
                              [HKLM\Software\TechCity]
                              [HKLM\Software\TrendMicro]
                              [HKLM\Software\Uniblue]
                              [HKLM\Software\VSO]
                              [HKLM\Software\Windows 3.1 Migration Status]
                              [HKLM\Software\Windows]
                              [HKLM\Software\XnView]
                              [HKLM\Software\Yahoo]
                              [HKLM\Software\cybelsoft]
                              [HKLM\Software\iColorFolder]
                              [HKLM\Software\knight]
                              [HKLM\Software\logitech]
                              [HKLM\Software\mozilla.org]

                              ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
                              O43 - CFD: 12/01/2010 - 18:49:14 - [3274392] ----D- C:\Program Files\3M
                              O43 - CFD: 20/08/2009 - 14:15:10 - [3094515] ----D- C:\Program Files\7-Zip
                              O43 - CFD: 06/07/2011 - 19:32:40 - [279505046] ----D- C:\Program Files\Ad-Remover
                              O43 - CFD: 30/10/2010 - 19:06:48 - [163076362] ----D- C:\Program Files\Adobe
                              O43 - CFD: 12/01/2010 - 16:37:40 - [123222710] ----D- C:\Program Files\AGEIA Technologies
                              O43 - CFD: 01/07/2010 - 00:08:48 - [0] ----D- C:\Program Files\ALDI
                              O43 - CFD: 20/08/2009 - 14:07:44 - [1994042] ----D- C:\Program Files\Alice
                              O43 - CFD: 29/07/2010 - 11:23:30 - [211950609] ----D- C:\Program Files\Alwil Software
                              O43 - CFD: 08/07/2011 - 16:38:44 - [2428606] ----D- C:\Program Files\Apple Software Update
                              O43 - CFD: 07/11/2009 - 17:15:44 - [139264] ----D- C:\Program Files\ATI Technologies
                              O43 - CFD: 16/07/2009 - 17:39:42 - [2355410] ----D- C:\Program Files\CCleaner
                              O43 - CFD: 09/06/2011 - 22:22:52 - [17887826] ----D- C:\Program Files\CDBurnerXP
                              O43 - CFD: 16/07/2009 - 22:00:02 - [24619792] ----D- C:\Program Files\Common Files
                              O43 - CFD: 16/07/2009 - 16:21:36 - [0] ----D- C:\Program Files\ComPlus Applications
                              O43 - CFD: 01/07/2010 - 00:06:54 - [0] ----D- C:\Program Files\Dofus
                              O43 - CFD: 21/10/2010 - 18:34:28 - [971232969] ----D- C:\Program Files\Dofus 2
                              O43 - CFD: 16/07/2009 - 17:40:58 - [1955543] ----D- C:\Program Files\Elaborate Bytes
                              O43 - CFD: 24/06/2011 - 16:09:56 - [422983495] ----D- C:\Program Files\Fichiers communs
                              O43 - CFD: 29/01/2010 - 06:47:40 - [96166707] ----D- C:\Program Files\Google
                              O43 - CFD: 27/07/2009 - 14:42:32 - [2902968620] ----D- C:\Program Files\gPotato.eu
                              O43 - CFD: 16/09/2009 - 16:04:34 - [383066236] ----D- C:\Program Files\Hewlett-Packard
                              O43 - CFD: 12/07/2011 - 23:37:00 - [20538172] --H-D- C:\Program Files\InstallShield Installation Information
                              O43 - CFD: 07/11/2009 - 17:29:00 - [96701] ----D- C:\Program Files\Intel
                              O43 - CFD: 16/06/2011 - 20:00:08 - [4673988] ----D- C:\Program Files\Internet Explorer
                              O43 - CFD: 24/06/2011 - 16:09:42 - [81314702] ----D- C:\Program Files\Java
                              O43 - CFD: 16/07/2009 - 17:42:16 - [37506493] ----D- C:\Program Files\K-Lite Codec Pack
                              O43 - CFD: 27/07/2009 - 10:31:42 - [40218858] ----D- C:\Program Files\Logitech
                              O43 - CFD: 07/11/2009 - 17:26:14 - [4935959] ----D- C:\Program Files\ma-config.com
                              O43 - CFD: 12/07/2011 - 23:36:48 - [838644] ----D- C:\Program Files\Malwarebytes' Anti-Malware
                              O43 - CFD: 14/01/2010 - 04:54:30 - [2152579] ----D- C:\Program Files\Messenger
                              O43 - CFD: 16/07/2009 - 16:25:42 - [0] ----D- C:\Program Files\microsoft frontpage
                              O43 - CFD: 16/07/2009 - 17:47:22 - [551059659] ----D- C:\Program Files\Microsoft Office
                              O43 - CFD: 16/07/2009 - 17:47:20 - [14904] ----D- C:\Program Files\Microsoft Visual Studio
                              O43 - CFD: 16/07/2009 - 17:47:34 - [3178824] ----D- C:\Program Files\Microsoft Works
                              O43 - CFD: 16/07/2009 - 17:46:54 - [8152064] ----D- C:\Program Files\Microsoft.NET
                              O43 - CFD: 12/08/2010 - 14:18:58 - [10949041] ----D- C:\Program Files\Movie Maker
                              O43 - CFD: 25/06/2011 - 09:01:24 - [30507528] ----D- C:\Program Files\Mozilla Firefox
                              O43 - CFD: 15/08/2009 - 03:06:32 - [26521] ----D- C:\Program Files\MSBuild
                              O43 - CFD: 04/08/2009 - 21:40:18 - [21471461] ----D- C:\Program Files\MSN
                              O43 - CFD: 16/07/2009 - 16:19:44 - [8745735] ----D- C:\Program Files\MSN Gaming Zone
                              O43 - CFD: 15/08/2009 - 03:01:26 - [6849] ----D- C:\Program Files\MSXML 6.0
                              O43 - CFD: 06/04/2010 - 15:48:22 - [37973809] ----D- C:\Program Files\Mumble
                              O43 - CFD: 16/08/2009 - 13:35:50 - [378999] ----D- C:\Program Files\MUSICMATCH
                              O43 - CFD: 18/07/2009 - 01:33:22 - [48822055834] ----D- C:\Program Files\NCSoft
                              O43 - CFD: 14/01/2010 - 04:40:46 - [3285523] ----D- C:\Program Files\NetMeeting
                              O43 - CFD: 09/08/2009 - 20:33:06 - [0] ----D- C:\Program Files\NOS
                              O43 - CFD: 16/07/2009 - 16:21:26 - [1804] ----D- C:\Program Files\Online Services
                              O43 - CFD: 16/12/2010 - 04:00:36 - [4379321] ----D- C:\Program Files\Outlook Express
                              O43 - CFD: 27/10/2010 - 18:20:58 - [7367542] ----D- C:\Program Files\Pando Networks
                              O43 - CFD: 12/07/2011 - 23:37:00 - [48346159] ----D- C:\Program Files\Realtek
                              O43 - CFD: 15/08/2009 - 03:06:22 - [36400897] ----D- C:\Program Files\Reference Assemblies
                              O43 - CFD: 08/07/2011 - 16:38:22 - [42293002] ----D- C:\Program Files\Safari
                              O43 - CFD: 16/07/2009 - 16:24:00 - [1025] ----D- C:\Program Files\Services en ligne
                              O43 - CFD: 12/12/2010 - 17:14:14 - [19057007] R---D- C:\Program Files\Skype
                              O43 - CFD: 20/08/2009 - 14:07:52 - [393007] ----D- C:\Program Files\TechCity Solutions
                              O43 - CFD: 12/07/2011 - 23:36:56 - [4129440] ----D- C:\Program Files\Uniblue
                              O43 - CFD: 16/07/2009 - 16:32:20 - [0] --H-D- C:\Program Files\Uninstall Information
                              O43 - CFD: 01/01/2011 - 16:11:36 - [399736] ----D- C:\Program Files\uTorrent
                              O43 - CFD: 12/01/2010 - 16:36:38 - [17098024] ----D- C:\Program Files\VLCPortable
                              O43 - CFD: 12/07/2011 - 23:36:30 - [117177722] ----D- C:\Program Files\VSO
                              O43 - CFD: 15/12/2009 - 05:29:52 - [3581070] ----D- C:\Program Files\Windows Media Connect 2
                              O43 - CFD: 15/12/2009 - 05:29:50 - [9600055] ----D- C:\Program Files\Windows Media Player
                              O43 - CFD: 14/01/2010 - 04:40:44 - [3942655] ----D- C:\Program Files\Windows NT
                              O43 - CFD: 16/07/2009 - 16:21:02 - [41055406] ----D- C:\Program Files\Windows Plus
                              O43 - CFD: 16/07/2009 - 16:24:02 - [0] --H-D- C:\Program Files\WindowsUpdate
                              O43 - CFD: 16/07/2009 - 17:40:12 - [3892521] ----D- C:\Program Files\WinRAR
                              O43 - CFD: 16/07/2009 - 16:25:42 - [0] ----D- C:\Program Files\xerox
                              O43 - CFD: 28/09/2010 - 18:40:14 - [8605678] ----D- C:\Program Files\XnView
                              O43 - CFD: 13/07/2011 - 18:25:28 - [8756578] ----D- C:\Program Files\ZHPDiag
                              O43 - CFD: 16/07/2009 - 22:00:02 - [24619792] ----D- C:\Program Files\Common Files\INCA Shared
                              O43 - CFD: 12/01/2010 - 18:49:28 - [6656] ----D- C:\Documents and Settings\Laeti\Application Data\3M
                              O43 - CFD: 16/12/2009 - 22:27:54 - [3111875] ----D- C:\Documents and Settings\Laeti\Application Data\Adobe
                              O43 - CFD: 16/12/2009 - 22:59:34 - [4650] ----D- C:\Documents and Settings\Laeti\Application Data\app
                              O43 - CFD: 26/03/2011 - 11:37:58 - [11631171] ----D- C:\Documents and Settings\Laeti\Application Data\Apple Computer
                              O43 - CFD: 18/07/2009 - 18:06:24 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\ATI
                              O43 - CFD: 08/06/2011 - 22:45:08 - [1695] ----D- C:\Documents and Settings\Laeti\Application Data\Canneverbe Limited
                              O43 - CFD: 25/06/2011 - 09:51:50 - [82185567] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus 2
                              O43 - CFD: 12/04/2010 - 10:25:18 - [6896] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus-2.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
                              O43 - CFD: 12/04/2010 - 11:36:52 - [9402] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus-3.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
                              O43 - CFD: 12/04/2010 - 20:06:10 - [30] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus-4.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
                              O43 - CFD: 23/12/2010 - 00:45:14 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus-5.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
                              O43 - CFD: 27/02/2011 - 10:22:50 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus-6.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
                              O43 - CFD: 11/04/2010 - 21:10:36 - [16911] ----D- C:\Documents and Settings\Laeti\Application Data\Dofus.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
                              O43 - CFD: 20/07/2009 - 12:10:56 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Droppix
                              O43 - CFD: 27/03/2011 - 00:52:52 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\dvdcss
                              O43 - CFD: 30/06/2010 - 23:43:02 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\FOG Downloader
                              O43 - CFD: 18/07/2009 - 01:33:08 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\GetRightToGo
                              O43 - CFD: 09/08/2009 - 14:56:24 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Google
                              O43 - CFD: 16/01/2011 - 13:38:04 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Help
                              O43 - CFD: 16/09/2009 - 16:07:08 - [2828] ----D- C:\Documents and Settings\Laeti\Application Data\Hewlett-Packard
                              O43 - CFD: 19/12/2009 - 23:45:56 - [3638] ----D- C:\Documents and Settings\Laeti\Application Data\Icones
                              O43 - CFD: 16/07/2009 - 16:32:26 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Identities
                              O43 - CFD: 17/07/2009 - 17:34:44 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\InstallShield
                              O43 - CFD: 27/07/2009 - 10:36:56 - [10767] ----D- C:\Documents and Settings\Laeti\Application Data\Logitech
                              O43 - CFD: 16/07/2009 - 18:43:14 - [58357] ----D- C:\Documents and Settings\Laeti\Application Data\Macromedia
                              O43 - CFD: 10/07/2011 - 22:00:38 - [9451243] ----D- C:\Documents and Settings\Laeti\Application Data\Malwarebytes
                              O43 - CFD: 08/06/2011 - 22:15:28 - [16] ----D- C:\Documents and Settings\Laeti\Application Data\Media Player Classic
                              O43 - CFD: 24/06/2011 - 16:35:40 - [14881541] -S--D- C:\Documents and Settings\Laeti\Application Data\Microsoft
                              O43 - CFD: 12/07/2011 - 23:36:54 - [21950] ----D- C:\Documents and Settings\Laeti\Application Data\moovida-1
                              O43 - CFD: 30/10/2010 - 19:11:46 - [3258327] ----D- C:\Documents and Settings\Laeti\Application Data\Mozilla
                              O43 - CFD: 04/08/2009 - 21:40:40 - [853608] ----D- C:\Documents and Settings\Laeti\Application Data\MSNInstaller
                              O43 - CFD: 13/11/2010 - 03:41:02 - [435490] ----D- C:\Documents and Settings\Laeti\Application Data\Mumble
                              O43 - CFD: 16/12/2009 - 22:59:34 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Reg.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
                              O43 - CFD: 21/05/2011 - 22:22:28 - [6627640] ----D- C:\Documents and Settings\Laeti\Application Data\Skype
                              O43 - CFD: 21/05/2011 - 22:11:50 - [5544] ----D- C:\Documents and Settings\Laeti\Application Data\skypePM
                              O43 - CFD: 12/01/2010 - 17:54:34 - [31965402] ----D- C:\Documents and Settings\Laeti\Application Data\Sun
                              O43 - CFD: 25/04/2010 - 01:23:42 - [38815] ----D- C:\Documents and Settings\Laeti\Application Data\teamspeak2
                              O43 - CFD: 09/02/2010 - 04:42:32 - [187849] ----D- C:\Documents and Settings\Laeti\Application Data\TS3Client
                              O43 - CFD: 12/07/2011 - 23:36:58 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Uniblue
                              O43 - CFD: 19/05/2011 - 23:24:58 - [44] ----D- C:\Documents and Settings\Laeti\Application Data\Unity
                              O43 - CFD: 14/06/2011 - 03:14:34 - [2913304] ----D- C:\Documents and Settings\Laeti\Application Data\uTorrent
                              O43 - CFD: 19/10/2010 - 00:51:44 - [475423] ----D- C:\Documents and Settings\Laeti\Application Data\vlc
                              O43 - CFD: 11/07/2011 - 13:32:48 - [5890] ----D- C:\Documents and Settings\Laeti\Application Data\Vso
                              O43 - CFD: 28/09/2010 - 18:45:16 - [601052] ----D- C:\Documents and Settings\Laeti\Application Data\XnView
                              O43 - CFD: 15/08/2009 - 18:04:12 - [0] ----D- C:\Documents and Settings\Laeti\Application Data\Yahoo!
                              O43 - CFD: 30/10/2010 - 19:06:26 - [116670] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Adobe
                              O43 - CFD: 12/01/2010 - 17:03:58 - [0] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Apple
                              O43 - CFD: 12/01/2010 - 17:04:42 - [803755031] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\Apple Computer
                              O43 - CFD: 24/06/2011 - 16:36:10 - [11125] ----D- C:\Documents and Settings\Laeti\Local Settings\Application Data\ApplicationHistory
                              O43 - CFD: 07/09/2010 - 23:06:32 - [36388416] ----D- C:\Docume
                              1. jacques.gache Contributeur sécurité
                                ou la tu te reconcentre SVP , car la c'est pas zhpfix mais zhpdiag tu suis bien ce qui est demandé dans le message 30 car même si tu as bien fais la mises à jour le rapport de zhpdiag était en 5) j'attends le zhpfix , et ad-remover , et usbfix , et malwarebytes et seulement après le nouveau zhpdiag !! lol ,!!

                                donc tu fais comme edemander dans l'ordre , merci https://forums.commentcamarche.net/forum/affich-22563640-virus#30
                            • 1
                            • 2

                            Discussions similaires

                            Softonic,est-ce un virus ?
                            techmel1

                            6 réponses
                            Chrome://newtab
                            Nova

                            14 réponses
                            Désinstaller Softonic
                            Diguimette

                            5 réponses
                            Supprimer New Tab
                            tysaozon

                            8 réponses
                            Bouton pause/break
                            frans003

                            3 réponses