Virus safe finder

Résolu
Bonjour
Infecté par safefinder smartbar j'ai tout essayé adw cleaner suppression sur panneau de configuration et malvarebytes il est toujours dans mes programmes .
merci pour votre aide.
Agnya

14 réponses

  1. Oui resolu avec adwcleaner mais a du chercher la source visiblement bien caché
    merci encore pour ton aide et ta patiente mais pour nous retraité une petite main extérieur qui guide la souris et une aide précieuse. Encore une fois merci a toi continue ton aide sur ce site un peu magique et gratuit ,,, trés rare de nos jours.
    bonne continuation, cordialement Agnya
    1. Modérateur
      J'avais édité ma réponse juste avant que tu ne postes la tienne.

      Ton contact a résolu le problème ?
      1. j'ai windows xp et 32ou 64 je ne sais pas ou trouver, pour ce qui est ordi je suis située tout en bas de l'echelle bien que vos explications soit claires et compréhensibles je crains de faire des bétises.
        Le farbar est en anglais je ne lis pas l'anglais. Je viens de scanner avec Avast qui a supprimer 3 infections mais n'a pas trouver ce monstre.
        Je vais demander de l'aide a distance a mon vendeur pc c'est payant mais tant pis.
        En tout cas je vous remercie pour votre patiente et ce site formidable .
        bonne journée et bonne continuation.
        Agnya
        1. Modérateur
          Safe Finder n'apparaît pas dans le rapport.

          On va utiliser un autre outil de diagnostic du coup :

          --> Télécharge et enregistre OTL sur ton Bureau.

          --> Double-clique sur OTL pour le lancer.
          (Sous Vista/Win7/Win8, il faut cliquer droit sur OTL et choisir Exécuter en tant qu'administrateur)

          --> Clique ici pour voir les réglages que tu dois effectuer.

          --> Copie-colle le texte présent en gras ci-dessous dans la partie inférieure d'OTL "Personnalisation" :

          /md5start
          explorer.exe
          winlogon.exe
          wininit.exe
          /md5stop
          netsvcs
          safebootminimal
          safebootnetwork
          %systemroot%\system32\*.dll /lockedfiles
          %systemroot%\system32\*.ini
          %systemroot%\Tasks\*.*
          %systemroot%\system32\Tasks\*.*
          %systemroot%\system32\drivers\*.sys /lockedfiles
          %systemroot%\system32\config\*.sav
          %systemroot%\system32\config\*.exe /s
          %systemroot%\system32\*.sys
          HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa /s
          HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
          CREATERESTOREPOINT


          --> Clique sur "Analyse".

          --> A la fin du scan, le Bloc-Notes va s'ouvrir avec le rapport (OTL.txt). Il y aura aussi un rapport nommé Extras.txt.

          /!\ Ne les poste pas directement sur le forum (ils sont trop longs) /!\

          --> Héberge OTL.txt et Extras.txt sur pjjoint.malekal.com et poste les liens qui mènent aux rapports dans ton prochain message.
          1. Modérateur
            Plus de souci ?

            Redémarre le PC et génère un nouveau rapport ZHPDiag ;)
            1. Modérateur
              --> Menu Démarrer > Panneau de configuration > Ajout / Suppression de programmes. Désinstalle Spybot, il n'est pas utile.

              --> Copie tout le texte présent en gras ci-dessous (Sélectionne-le, clique droit dessus et choisis "Copier").

              Script ZHPFix
              SysRestore
              O39 - APT: - (..) -- C:\WINDOWS\Tasks\ProgramRefresh-ATFST.job [456]
              O39 - APT: - (..) -- C:\WINDOWS\Tasks\ProgramUpdateCheck.job [400]
              C:\Program Files\File Type Assistant
              O39 - APT: - (..) -- C:\WINDOWS\Tasks\Final Media Player Update Checker.job [392]
              C:\Program Files\FinalMediaPlayer
              O42 - Logiciel: File Type Assistant - (...) [HKLM] -- Trusted Software Assistant_is1
              [HKCU\Software\FileTypeAssistant]
              O42 - Logiciel: Final Media Player 2014 - (.Bitberry Software.) [HKLM] -- FinalMediaPlayer_is1
              [HKCU\Software\33438InstEnd]
              [HKCU\Software\Beamrise]
              O43 - CFD: 08/07/2008 - 15:21:05 - [] ----D C:\Program Files\Multi_Media_France
              O43 - CFD: 07/05/2014 - 09:28:40 - [] ----D C:\Documents and Settings\Pierette\Application Data\1O1L1I1PtF1F1C1N
              [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0C9929B6-0791-4208-B41A-91C6ABFD9027}] =>Adware.IMBooster
              [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0C9929B6-0791-4208-B41A-91C6ABFD9027}] =>Adware.IMBooster
              [HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21111111-1111-1111-1111-110011501160}] =>PUP.SpecialSavings
              [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{346de098-61f9-4b42-89da-6dfba7091bb6}] =>Adware.IMBooster
              [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{346de098-61f9-4b42-89da-6dfba7091bb6}] =>Adware.IMBooster
              [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{76985346-BDA2-4B2E-A727-956D7B8B012E}] =>Adware.IMBooster
              [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{76985346-BDA2-4B2E-A727-956D7B8B012E}] =>Adware.IMBooster
              [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A6E9BAAF-53CD-4575-967B-2AF710A7D21F}] =>Adware.IMBooster
              [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A6E9BAAF-53CD-4575-967B-2AF710A7D21F}] =>Adware.IMBooster
              [HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\Ask Search Assistant] =>Toolbar.Ask
              [HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\Inbox Toolbar] =>Adware.WebAdSystem
              [HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\SpeedMaxPc] =>PUP.SpeedMaxPc
              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\824013852C6ECBB4BAC41F54837AA901] =>Adware.IMBooster
              [HKLM\Software\Classes\IminentLinkToContent.LinkToContent] =>Adware.IMBooster
              [HKLM\Software\Classes\IminentLinkToContent.LinkToContent.1] =>Adware.IMBooster
              [HKLM\Software\Classes\AppID\Iminent.LinkToContent.DLL] =>Adware.IMBooster
              [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011501160}]
              O61 - LFC: 23/08/2014 - 19:25:12 ---A- . (.Bitberry Software.) -- C:\Documents and Settings\Pierette\Mes documents\Downloads\FinalMediaPlayer2014U1Setup.exe [8651384]
              [HKCU\Software\Bitberry Software]
              [HKCU\Software\Bitberry]
              [HKLM\Software\EnigmaSoftwareGroup]
              O43 - CFD: 22/10/2012 - 11:12:00 - [] ----D C:\Program Files\Enigma Software Group
              EmptyFlash
              EmptyTemp


              --> Lance ZHPFix depuis le raccourci situé sur ton Bureau.

              --> Clique sur le bouton IMPORTER. Dans l'encadré principal, tu verras les lignes que tu as copié précédemment apparaître.

              --> Clique sur GO et confirme pour lancer le nettoyage. Laisse l'outil travailler et ne touche à rien.

              --> Accepte la désinstallation des programmes si proposé, mais refuse le redémarrage de ton PC si également proposé, car cela stopperait ZHPFix.

              --> Une fois terminé, héberge le rapport sur pjjoint.malekal.com puis copie-colle le lien dans ton prochain message.
            2. Modérateur
              Le rapport est trop long pour être posté directement, héberge-le sur le site comme indiqué.
              1. merci mais j'ai suivi pas a pas mais pas de résultat peu être destrio peut il m'aider
                Bon w;end a vous agnya
                1. Voici un petit lien qui pourrait vous aider :

                  https://www.commentcamarche.net/faq/2490-supprimer-les-adwares-publicites-intempestives-pop-up-etc

                  Bonne journée
                  1. Modérateur
                    Bonjour,

                    AdwCleaner version 3.308 ?

                    --> Télécharge ZHPDiag (de Nicolas Coolman).

                    --> Double-clique sur le fichier d'installation. Installe ZHPDiag avec les paramètres par défaut (laisse "Créer une icône sur le Bureau" coché).

                    --> Lance ZHPDiag en double-cliquant sur le raccourci présent sur ton Bureau.

                    --> Clique sur "Complet".

                    --> Une fois le scan terminé, un rapport est créé sur le Bureau.

                    --> Héberge-le sur pjjoint.malekal.com puis copie-colle le lien donné par le site dans ton prochain message.
                    1. merci pour votre réponse ci joint rapport cleaner et ZHPDiag j'éspere que
                      cela marche suis pas trés douée bon w.end agnya

                      # AdwCleaner v3.308 - Rapport créé le 23/08/2014 à 19:18:45
                      # Mis à jour le 20/08/2014 par Xplode
                      # Système d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits)
                      # Nom d'utilisateur : Pierette - PC-PIERETTE
                      # Exécuté depuis : C:\Documents and Settings\Pierette\Mes documents\Downloads\AdwCleaner-3.308.exe
                      # Option : Nettoyer

                      ***** [ Services ] *****

                      ***** [ Fichiers / Dossiers ] *****

                      ***** [ Tâches planifiées ] *****

                      ***** [ Raccourcis ] *****

                      ***** [ Registre ] *****

                      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A1CCCE0D-AE21-42A2-BE58-8E6109410995}
                      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CD4D7B0F-45C6-4bb2-A1E7-54D1754E7FC5}
                      Clé Supprimée : HKLM\SOFTWARE\VBMZ
                      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\VisualBee for Microsoft PowerPoint
                      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{08CA50B1-98F0-4470-BB6C-B5D0B8C28EFC}
                      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\VisualBee for Microsoft PowerPoint
                      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{08CA50B1-98F0-4470-BB6C-B5D0B8C28EFC}
                      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{BC0BF363-63AB-4FF7-8EF1-AE0D7F711B24}

                      ***** [ Navigateurs ] *****

                      -\\ Internet Explorer v8.0.6001.18702

                      -\\ Mozilla Firefox v

                      [ Fichier : C:\Documents and Settings\Pierette\Application Data\Mozilla\Firefox\Profiles\sj7i4qvm.default\prefs.js ]

                      -\\ Google Chrome v36.0.1985.143

                      [ Fichier : C:\Documents and Settings\Pierette\Local Settings\Application Data\Google\Chrome\User Data\Default\preferences ]

                      *************************

                      AdwCleaner[R0].txt - [5113 octets] - [28/11/2013 17:58:21]
                      AdwCleaner[R1].txt - [4992 octets] - [17/01/2014 09:13:03]
                      AdwCleaner[R2].txt - [1067 octets] - [21/01/2014 10:03:35]
                      AdwCleaner[R3].txt - [9717 octets] - [23/08/2014 16:06:12]
                      AdwCleaner[R4].txt - [1706 octets] - [23/08/2014 16:23:28]
                      AdwCleaner[R5].txt - [2481 octets] - [23/08/2014 19:15:02]
                      AdwCleaner[S0].txt - [4952 octets] - [28/11/2013 17:59:42]
                      AdwCleaner[S1].txt - [4954 octets] - [17/01/2014 09:29:31]
                      AdwCleaner[S2].txt - [9801 octets] - [23/08/2014 16:08:18]
                      AdwCleaner[S3].txt - [1692 octets] - [23/08/2014 16:24:30]
                      AdwCleaner[S4].txt - [2334 octets] - [23/08/2014 19:18:45]

                      ########## EOF - C:\AdwCleaner\AdwCleaner[S4].txt - [2394 octets] ##########

                      ~ Rapport de ZHPDiag v2014.8.23.122 - Nicolas Coolman (23/08/2014)
                      ~ Lancé par Pierette (23/08/2014 19:23:52)
                      ~ Adresse du Site Web https://nicolascoolman.eu
                      ~ Adresse du Forum https://nicolascoolman.eu
                      ~ Traduit par Nicolas Coolman
                      ~ Etat de la version :
                      ~ Liste blanche : Désactivée par l'utilisateur
                      ~ Elévation des Privilèges : OK
                      ~ User Account Control (UAC):

                      ---\\ Navigateurs Internet
                      MSIE: Internet Explorer v8.0.6001.18702 (Defaut)
                      GCIE: Google Chrome v36.0.1985.143

                      ---\\ Informations sur les produits Windows
                      ~ Langage: Français
                      Microsoft Windows XP, 32-bit Service Pack 3 (Build 2600)
                      Windows Automatic Updates : OK
                      Windows Genuine Advantage : OK

                      ---\\ Logiciels de protection du système
                      avast! Internet Security v9.0.2021
                      Malwarebytes Anti-Malware version 2.0.2.1012
                      Spybot - Search & Destroy v1.6.2

                      ---\\ Logiciels d'optimisation du système
                      CCleaner v3.27

                      ---\\ Logiciels de partage PeerToPeer
                      eMule

                      ---\\ Surveillance de Logiciels
                      Adobe Flash Player 14 ActiveX
                      Adobe Reader XI
                      Java 7 Update 51

                      ---\\ Informations sur le système
                      ~ Processor: x86 Family 6 Model 15 Stepping 13, GenuineIntel
                      ~ Operating System: 32 Bits
                      Boot mode: Normal (Normal boot)
                      Total RAM: 2037 MB (63% free)
                      System Restore: Activé (Enable)
                      System drive C: has 81 GB (54%) free of 149 GB

                      ---\\ Mode de connexion au système
                      ~ Computer Name: PC-PIERETTE
                      ~ User Name: Pierette
                      ~ All Users Names: SUPPORT_388945a0, Pierette, HelpAssistant, ASPNET, Administrateur,
                      ~ Unselected Option: None
                      Logged in as Administrator

                      ---\\ Variables d'environnement
                      ~ System Unit : C:\
                      ~ %AppZHP% : C:\Documents and Settings\Pierette\Application Data\ZHP\
                      ~ %AppData% : C:\Documents and Settings\Pierette\Application Data\
                      ~ %Desktop% : C:\Documents and Settings\Pierette\Bureau\
                      ~ %Favorites% : C:\Documents and Settings\Pierette\Favoris\
                      ~ %LocalAppData% : C:\Documents and Settings\Pierette\Local Settings\Application Data\
                      ~ %StartMenu% : C:\Documents and Settings\Pierette\Menu Démarrer\
                      ~ %Windir% : C:\WINDOWS\
                      ~ %System% : C:\WINDOWS\system32\

                      ---\\ Enumération des unités disques
                      A: Floppy drive, Flash card reader, USB Key (Not Inserted)
                      C: Hard drive, Flash drive, Thumb drive (Free 81 Go of 149 Go)
                      D: CD-ROM drive (Not Inserted)
                      F: CD-ROM drive (Not Inserted)

                      ---\\ Etat du Centre de Sécurité Windows
                      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
                      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
                      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
                      [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
                      [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
                      [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
                      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
                      ~ Security Center: 45 Scanned in 00mn 00s

                      ---\\ Recherche particulière de fichiers génériques
                      [MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\Explorer.exe [1037824]
                      [MD5.E1948B1F45A176FB4A0251446A5AE86D] - (.Microsoft Corporation - Internet Extensions for Win32.) (.06/03/2014 - 18:58:52.) -- C:\WINDOWS\system32\wininet.dll [920064]
                      [MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Winlogon.exe [512000]
                      [MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.17/08/2011 - 14:49:54.) -- C:\WINDOWS\system32\Drivers\AFD.sys [138496]
                      [MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/04/2008 - 11:40:32.) -- C:\WINDOWS\system32\Drivers\atapi.sys [96512]
                      [MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\Cdfs.sys [63744]
                      [MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\Cdrom.sys [62976]
                      [MD5.31F923EB2170FC172C81ABDA0045D18C] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\Fips.sys [44672]
                      [MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\HDAudBus.sys [144384]
                      [MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - (.Microsoft Corporation - Pilote de port i8042.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [54144]
                      [MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\Imapi.sys [42112]
                      [MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\IpNat.sys [152832]
                      [MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\IPSec.sys [75264]
                      [MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.15/07/2011 - 14:29:31.) -- C:\WINDOWS\system32\Drivers\MRxSmb.sys [456320]
                      [MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\netBT.sys [162816]
                      [MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\ntfs.sys [574976]
                      [MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\Parport.sys [80384]
                      [MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\Rasl2tp.sys [51328]
                      [MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.13/04/2008 - 11:32:52.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [196224]
                      [MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) (.13/04/2008 - 19:57:36.) -- C:\WINDOWS\system32\Drivers\redbook.sys [58752]
                      [MD5.46DE1126684369BACE4849E4FC8C43CA] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\volsnap.sys [53376]
                      ~ Generic Processes: Scanned in 00mn 00s

                      ---\\ Etat des fichiers cachés (Caché/Total)
                      ~ Mes images (My Pictures) : 2/284
                      ~ Mes musiques (My Musics) : 1/1452
                      ~ Mes Favoris (My Favorites) : 1/6
                      ~ Mes Documents (My Documents) : 2/7896
                      ~ Mon Bureau (My Desktop) : 1/1840
                      ~ Menu demarrer (Programs) : 1/60
                      ~ Hidden Files: Scanned in 00mn 17s

                      ---\\ Processus lancés
                      [MD5.73F5C13B431915BAE35254B4E95DFB71] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344] [PID.1900]
                      [MD5.D386D51B1839E208EF7CCFBFA964638E] - (.AVAST Software - avast! firewall service.) -- C:\Program Files\AVAST Software\Avast\afwServ.exe [106488] [PID.1964]
                      [MD5.93AD0B78C7357A05F50E594EC7C22300] - (...) -- ystem32\rundll32.exe [0] [PID.1572]
                      [MD5.321CD85C4B67CA5AC01546EC336FB61B] - (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.exe [16380416] [PID.1680]
                      [MD5.8C88B9365939B3617786FDB47EC6FDC4] - (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe [166424] [PID.1728]
                      [MD5.84F9A0A4E2C1544A3C473AD6CB7D1533] - (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe [137752] [PID.1736]
                      [MD5.7AF5A466CF4AECA28E3DCBCF5B6FD220] - (.Hewlett-Packard Co. - Hewlett-Packard Product Assistant.) -- C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49152] [PID.1744]
                      [MD5.26B558B2D31C7425B455B00E562EAD93] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896] [PID.1764]
                      [MD5.5B6E8E09BE6401A7E022F52FDFCB2FF8] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe [254336] [PID.1872]
                      [MD5.BC90F2034566DDE57216EF9AFFD12D72] - (.XTRALOG - Agenda de bureau.) -- C:\Program Files\Calendrier\Cld2000.exe [3030528] [PID.1920]
                      [MD5.5D61BE7DB55B026A5D61A3EED09D0EAD] - (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408] [PID.1984]
                      [MD5.02BCA39802E9A97FA42DE70DFA2B1E27] - (.Intel Corporation - igfxsrvc Module.) -- C:\WINDOWS\system32\igfxsrvc.exe [252440] [PID.260]
                      [MD5.A412E8C37BD179AC6B3792E97CDAA214] - (...) -- C:\Documents and Settings\Pierette\Bureau\Ammyy-ACII.exe [733184] [PID.540]
                      [MD5.221564CC7BE37611FE15EACF443E1BF6] - (.Apple Inc. - YSLoader.exe.) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe [43336] [PID.648]
                      [MD5.DB5BEA73EDAF19AC68B2C0FAD0F92B1A] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [390504] [PID.696]
                      [MD5.E2AFD2E1FE8F9360139FA4425EB72136] - (.Executive Software International, Inc. - DKSERVICE.EXE.) -- C:\Program Files\executive Software\Diskeeper\DkService.exe [577644] [PID.1440]
                      [MD5.0796C1E47ADB9825269E64B9DAB4E741] - (.Teruten - FsUsbDevice.) -- C:\WINDOWS\system32\FsUsbExService.exe [233472] [PID.1756]
                      [MD5.B9436A665A8621073A12338B16D7BFD4] - (.Oracle Corporation - Java Quick Starter Service.) -- C:\Program Files\Java\jre7\bin\jqs.exe [182696] [PID.2464]
                      [MD5.11F714F85530A2BD134074DC30E99FCA] - (.Microsoft Corporation - Machine Debug Manager.) -- C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.exe [322120] [PID.2504]
                      [MD5.7F7BC88C8FB6B52989E0E93084B5E678] - (.Microsoft Corporation - Windows® installer.) -- C:\WINDOWS\system32\msiexec.exe [95744] [PID.2604]
                      [MD5.2E0B0A051FFAA86E358465BB0880D453] - (.Microsoft Corporation - Windows Update.) -- C:\WINDOWS\system32\wuauclt.exe [53784] [PID.3128]
                      [MD5.5E9A6658A2A69AE7EB195113B7A2E7A9] - (.Microsoft Corporation - Application Layer Gateway Service.) -- C:\WINDOWS\System32\alg.exe [44544] [PID.2212]
                      [MD5.4B2D5118B141488B6FCFE199DEEC8002] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8096256] [PID.1460]
                      [MD5.82496FC05D85C9C3B9ABBC66B3A97F11] - (.Microsoft Corporation - Microsoft Office Outlook.) -- C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.exe [196440] [PID.2204]
                      [MD5.4ADB31B7C88BBBBB6203968E6C2CBDA1] - (.Microsoft Corporation - Microsoft Office Word.) -- C:\Program Files\Microsoft Office\OFFICE11\WINWORD.exe [12317848] [PID.3380]
                      ~ Processes Running: Scanned in 00mn 02s

                      ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
                      C:\Documents and Settings\Pierette\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

                      ---\\ Liste des dossiers d'extension Google Chrome
                      ~ Google Lines Browser: 0 Scanned in 00mn 00s

                      ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
                      C:\Documents and Settings\Pierette\Application Data\Mozilla\Firefox\Profiles\sj7i4qvm.default\prefs.js
                      P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.51.2] - (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll
                      P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.51.2] - (.Oracle Corporation - Next Generation Java Plug-in 10.51.2 for Mozilla browsers.) -- C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
                      P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.30514.0.) -- c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll
                      P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
                      P2 - FPN: [HKLM] [@SonyCreativeSoftware.com/Media Go,version=1.0] - (.Sony Network Entertainment International LL - 1.7.) -- C:\Program Files\Sony\Media Go\npmediago.dll
                      P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll
                      P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll
                      P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.1.3] - (.VideoLAN - VLC media player Web Plugin 2.1.3.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll =>.VideoLAN
                      P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.1.5] - (.VideoLAN - VLC media player Web Plugin 2.1.3.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll =>.VideoLAN
                      P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 11.0.8.) -- C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
                      ~ Firefox Browser: 10 Scanned in 00mn 00s

                      ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
                      R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.agnya.fr
                      R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
                      R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = www.google.com
                      R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = www.google.com
                      R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/?gws_rd=ssl
                      R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
                      R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
                      R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
                      R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
                      R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = www.google.com
                      R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = www.google.com
                      R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchUrl,Default = www.google.com
                      R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
                      R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 11.0.8.) (No version) -- (.not file.)
                      R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0
                      R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2
                      ~ IE Browser: 17 Scanned in 00mn 00s

                      ---\\ Internet Explorer, Proxy Management (R5)
                      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
                      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
                      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
                      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
                      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
                      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
                      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
                      R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
                      R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
                      ~ Proxy management: Scanned in 00mn 00s

                      ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
                      F2 - REG:system.ini: USERINIT=C:\WINDOWS\system32\userinit.exe,
                      F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe
                      F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
                      ~ Keys: Scanned in 00mn 00s

                      ---\\ Hosts file redirection (O1)
                      ~ Le fichier hôte est sain (The hosts file is clean) (15519)
                      ~ Hosts File: Scanned in 00mn 06s

                      ---\\ Browser Helper Objects de navigateur (O2)
                      O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} . (.Safer Networking Limited - SBSD IE Protection.) -- C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                      O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline
                      O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\ssv.dll
                      O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
                      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
                      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll
                      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\jp2ssv.dll
                      ~ BHO: 16 Scanned in 00mn 00s

                      ---\\ Internet Explorer Toolbars (O3)
                      O3 - Toolbar: Google Toolbar - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
                      O3 - Toolbar\WebBrowser: (no name) - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Clé orpheline
                      ~ Toolbar: Scanned in 00mn 00s

                      ---\\ Applications lancées au démarrage du système (O4)
                      O4 - HKLM\..\Run: [DiskeeperSystray] . (.Executive Software International, Inc. - DKICON.EXE.) -- C:\Program Files\executive Software\Diskeeper\DkIcon.exe
                      O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
                      O4 - HKLM\..\Run: [RTHDCPL] . (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.exe =>.Realtek Semiconductor Corp
                      O4 - HKLM\..\Run: [Alcmtr] . (.Realtek Semiconductor Corp. - Realtek Azalia Audio - Event Monitor.) -- C:\WINDOWS\ALCMTR.exe
                      O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe
                      O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe
                      O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe
                      O4 - HKLM\..\Run: [HP Software Update] . (.Hewlett-Packard Co. - Hewlett-Packard Product Assistant.) -- C:\Program Files\HP\HP Software Update\HPWuSchd2.exe =>.Hewlett-Packard Co
                      O4 - HKLM\..\Run: [Nikon Message Center 2] . (.Nikon Corporation - Nikon Message Center 2.) -- C:\Program Files\Nikon\Nikon Message Center 2\NkMC2.exe
                      O4 - HKLM\..\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
                      O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe =>.Oracle Corporation
                      O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated
                      O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
                      O4 - HKCU\..\Run: [Cld2000.exe] . (.XTRALOG - Agenda de bureau.) -- C:\Program Files\Calendrier\Cld2000.exe
                      O4 - HKCU\..\Run: [KiesPreload] C:\Program Files\Samsung\Kies\Kies.exe (.not file.)
                      O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                      O4 - HKCU\..\Run: [ccleaner] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe =>.Piriform Ltd
                      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
                      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
                      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
                      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
                      O4 - HKUS\S-1-5-21-1993962763-602162358-1417001333-1004\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
                      O4 - HKUS\S-1-5-21-1993962763-602162358-1417001333-1004\..\Run: [Cld2000.exe] . (.XTRALOG - Agenda de bureau.) -- C:\Program Files\Calendrier\Cld2000.exe
                      O4 - HKUS\S-1-5-21-1993962763-602162358-1417001333-1004\..\Run: [KiesPreload] C:\Program Files\Samsung\Kies\Kies.exe (.not file.)
                      O4 - HKUS\S-1-5-21-1993962763-602162358-1417001333-1004\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                      O4 - HKUS\S-1-5-21-1993962763-602162358-1417001333-1004\..\Run: [ccleaner] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe =>.Piriform Ltd
                      ~ Application: Scanned in 00mn 00s

                      ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
                      O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\Program Files\Microsoft Office\OFFICE11\REFBARH.ICO
                      O9 - Extra button: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} -- Clé orpheline
                      O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} -- Clé orpheline
                      O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
                      ~ IE Extra Buttons: Scanned in 00mn 00s

                      ---\\ Winsock hijacker (Layered Service Provider) (O10)
                      O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll =>.Microsoft Corporation
                      O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
                      O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll =>.Microsoft Corporation
                      O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\WINDOWS\system32\wshbth.dll
                      O10 - WLSP:\000000000005\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll
                      ~ Winsock: 5 Scanned in 00mn 00s

                      ---\\ Objets ActiveX (Downloaded Program Files)(O16)
                      O16 - DPF: Garmin Communicator Plug-In (Garmin Communicator Plug-In) - https://static.garmincdn.com/gcp/ie/2.9.2.0/GarminAxControl.CAB
                      O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} ((no name)) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
                      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} ((no name)) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                      ~ Objets ActiveX: Scanned in 00mn 00s

                      ---\\ Modification Domaine/Adresses DNS (O17)
                      O17 - HKLM\System\CCS\Services\Tcpip\..\{5A491ADD-8963-4259-BA92-EFD63F0708BA}: NameServer = 8.8.8.8,8.8.4.4 =>.Google DNS Redirections
                      O17 - HKLM\System\CCS\Services\Tcpip\..\{5A491ADD-8963-4259-BA92-EFD63F0708BA}: DhcpNameServer = 192.168.1.1
                      O17 - HKLM\System\CCS\Services\Tcpip\..\{F9BC8DBA-6FE0-476E-B266-5944BD49D0E6}: DhcpNameServer = 192.168.1.1
                      O17 - HKLM\System\CS1\Services\Tcpip\..\{5A491ADD-8963-4259-BA92-EFD63F0708BA}: NameServer = 8.8.8.8,8.8.4.4 =>.Google DNS Redirections
                      O17 - HKLM\System\CS1\Services\Tcpip\..\{5A491ADD-8963-4259-BA92-EFD63F0708BA}: DhcpNameServer = 192.168.1.1
                      O17 - HKLM\System\CS1\Services\Tcpip\..\{F9BC8DBA-6FE0-476E-B266-5944BD49D0E6}: DhcpNameServer = 192.168.1.1
                      O17 - HKLM\System\CS2\Services\Tcpip\..\{5A491ADD-8963-4259-BA92-EFD63F0708BA}: NameServer = 8.8.8.8,8.8.4.4 =>.Google DNS Redirections
                      O17 - HKLM\System\CS2\Services\Tcpip\..\{5A491ADD-8963-4259-BA92-EFD63F0708BA}: DhcpNameServer = 192.168.1.1
                      O17 - HKLM\System\CS2\Services\Tcpip\..\{F9BC8DBA-6FE0-476E-B266-5944BD49D0E6}: DhcpNameServer = 192.168.1.1
                      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
                      ~ Domain: Scanned in 00mn 00s

                      ---\\ Protocole additionnel (O18)
                      O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll =>.Microsoft Corporation
                      O18 - Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSOXMLMF.dll =>.Microsoft Corporation
                      ~ Protocole Additionnel: Scanned in 00mn 00s

                      ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
                      O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll
                      O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll
                      O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\WINDOWS\system32\cscdll.dll
                      O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\system32\dimsntfy.dll
                      O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\WINDOWS\system32\igfxdev.dll
                      O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
                      O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
                      O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll
                      O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll
                      O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
                      O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
                      ~ Winlogon: Scanned in 00mn 00s

                      ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
                      O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
                      O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
                      O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
                      O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
                      O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll
                      ~ SSODL: 5 Scanned in 00mn 00s

                      ---\\ Liste des services NT non Microsoft et non désactivés (O23)
                      O23 - Service: Ammyy Admin (AmmyyAdmin) . (...) - C:\Documents and Settings\Pierette\Bureau\Ammyy-ACII.exe
                      O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - YSLoader.exe.) - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe
                      O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
                      O23 - Service: avast! Firewall (avast! Firewall) . (.AVAST Software - avast! firewall service.) - C:\Program Files\AVAST Software\Avast\afwServ.exe
                      O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
                      O23 - Service: Diskeeper (Diskeeper) . (.Executive Software International, Inc. - DKSERVICE.EXE.) - C:\Program Files\executive Software\Diskeeper\DkService.exe
                      O23 - Service: FsUsbExService (FsUsbExService) . (.Teruten - FsUsbDevice.) - C:\WINDOWS\system32\FsUsbExService.exe
                      O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc
                      O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Oracle Corporation - Java Quick Starter Service.) - C:\Program Files\Java\jre7\bin\jqs.exe
                      ~ Services: 9 Scanned in 00mn 05s

                      ---\\ Enumération Active Desktop & MHTML Editor (O24)
                      O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Open XML Converter.) - C:\Program Files\MICROS~2\Office12\Moc.exe
                      O24 - Desktop General: BackupWallPaper - .(...) - C:\Documents and Settings\Pierette\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
                      O24 - Desktop General: WallPaper - .(...) - C:\Documents and Settings\Pierette\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
                      ~ Desktop Component: 4 Scanned in 00mn 00s

                      ---\\ Enumère les données de BootExecute (BEX) (O34)
                      O34 - HKLM BootExecute: (autocheck autochk *) - File not found
                      ~ BEX: 1 Scanned in 00mn 00s

                      ---\\ Tâches planifiées en automatique (O39)
                      O39 - APT: - (..) -- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job [1002]
                      O39 - APT: - (..) -- C:\WINDOWS\Tasks\AppleSoftwareUpdate.job [284]
                      O39 - APT: - (..) -- C:\WINDOWS\Tasks\At1.job [416]
                      O39 - APT: - (..) -- C:\WINDOWS\Tasks\avast! Emergency Update.job [364]
                      O39 - APT: - (..) -- C:\WINDOWS\Tasks\Final Media Player Update Checker.job [392]
                      O39 - APT: - (..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job [1056]
                      O39 - APT: - (..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job [1060]
                      O39 - APT: - (..) -- C:\WINDOWS\Tasks\Notification de fin de service de Microsoft Windows XP - à la connexion.job [228]
                      O39 - APT: - (..) -- C:\WINDOWS\Tasks\Notification de fin de service de Microsoft Windows XP -mensuellement.job [222]
                      O39 - APT: - (..) -- C:\WINDOWS\Tasks\ProgramRefresh-ATFST.job [456]
                      O39 - APT: - (..) -- C:\WINDOWS\Tasks\ProgramUpdateCheck.job [400]
                      O39 - APT: - (..) -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{20D513F3-A4C0-4771-A231-D58A027DB09E}.job [428]
                      ~ Scheduled Task: 12 Scanned in 00mn 00s

                      ---\\ Composants installés (ActiveSetup Installed Components) (O40)
                      O40 - ASIC: Mise à jour de la version d'Internet Explorer - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} . (.Microsoft Corporation - IE Per User Active Setup Uninstall Utility.) -- C:\WINDOWS\system32\ieudinit.exe
                      O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Utilitaire d'installation du Lecteur Windows Media de Microsoft.) -- C:\WINDOWS\inf\unregmp2.exe =>.Microsoft Corporation
                      O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\WINDOWS\system32\ie4uinit.exe.mui
                      O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - IEAK branding.) -- C:\WINDOWS\system32\iedkcs32.dll
                      O40 - ASIC: Outlook Express - >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} . (.Microsoft Corporation - Windows NT User Data Migration Tool.) -- C:\WINDOWS\system32\shmgrate.exe =>.Microsoft Corporation
                      O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\WINDOWS\system32\wmpdxm.dll =>.Microsoft Corporation
                      O40 - ASIC: Microsoft Windows Media Player 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\WINDOWS\system32\wmpdxm.dll =>.Microsoft Corporation
                      O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\WINDOWS\system32\themeui.dll
                      O40 - ASIC: Microsoft Outlook Express 6 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Bibliothèque d'installation Outlook Express.) -- C:\Program Files\Outlook Express\setup50.exe =>.Microsoft Corporation
                      O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (...) -- C:\WINDOWS\INF\msnetmtg.inf
                      O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (...) -- C:\WINDOWS\INF\msmsgs.inf
                      O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\WINDOWS\system32\msieftp.dll
                      O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (...) -- C:\WINDOWS\INF\wmp11.inf =>.Microsoft Corporation
                      O40 - ASIC: Carnet d'adresses 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} . (.Microsoft Corporation - Bibliothèque d'installation Outlook Express.) -- C:\Program Files\Outlook Express\setup50.exe =>.Microsoft Corporation
                      O40 - ASIC: Mise à jour du Bureau Windows - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
                      O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\WINDOWS\system32\ie4uinit.exe.mui
                      O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- c:\WINDOWS\system32\mscories.dll
                      O40 - ASIC: Google Chrome - {8A69D345-D564-463c-AFF1-A69D9E530F96} . (.Google Inc. - Google Chrome Installer.) -- C:\Program Files\Google\Chrome\Application\36.0.1985.143\Installer\chrmstp.exe
                      O40 - ASIC: Macromedia Shockwave Flash - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 14.0 r0.) -- C:\WINDOWS\system32\Macromed\Flash\Flash32_14_0_0_176.ocx
                      O40 - ASIC: Installed Component - S-1-5-21-1993962763-602162358-1417001333-1004 - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} -- Not Hexadécimal CLSID
                      O40 - ASIC: Installed Component - S-1-5-21-1993962763-602162358-1417001333-1004 - >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS -- Not Hexadécimal CLSID
                      ~ Active Setup: 21 Scanned in 00mn 00s

                      ---\\ Pilotes lancés au démarrage du système (O41)
                      O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
                      O41 - Driver: (aswKbd) . (.AVAST Software - avast! Keyboard Filter Driver.) - C:\WINDOWS\system32\drivers\aswKbd.sys
                      O41 - Driver: (AswRdr) . (.AVAST Software - avast! TDI Redirect Driver.) - C:\WINDOWS\system32\drivers\aswRdr.sys
                      O41 - Driver: (aswSnx) . (.AVAST Software - avast! Virtualization Driver.) - C:\WINDOWS\system32\drivers\aswSnx.sys
                      O41 - Driver: (aswSP) . (.AVAST Software - avast! self protection module.) - C:\WINDOWS\system32\drivers\aswSP.sys
                      O41 - Driver: (aswTdi) . (.AVAST Software - avast! TDI Filter Driver.) - C:\WINDOWS\system32\drivers\aswTdi.sys
                      O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys
                      O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
                      O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys
                      O41 - Driver: (InCDPass) . (. - .) - C:\WINDOWS\system32\drivers\InCDPass.sys (.not file.)
                      O41 - Driver: (InCDRm) . (. - .) - C:\WINDOWS\system32\drivers\InCDRm.sys (.not file.)
                      O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\system32\DRIVERS\intelppm.sys
                      O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys
                      O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys
                      O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre souris HID.) - C:\WINDOWS\system32\DRIVERS\kbdhid.sys
                      O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys
                      O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
                      O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS\netbios.sys
                      O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS\netbt.sys
                      O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERS\rasacd.sys
                      O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERS\rdbss.sys
                      O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
                      O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\system32\DRIVERS\redbook.sys
                      O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\WINDOWS\system32\DRIVERS\serial.sys
                      O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS\tcpip.sys
                      O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS\termdd.sys
                      O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
                      ~ Drivers: 81 Scanned in 00mn 00s

                      ---\\ Logiciels installés (O42)
                      O42 - Logiciel: 32 Bit HP CIO Components Installer - (.Hewlett-Packard.) [HKLM] -- {A80FA752-C491-4ED9-ABF0-4278563160B2}
                      O42 - Logiciel: 7-Zip 4.62 - (...) [HKLM] -- 7-Zip
                      O42 - Logiciel: AVS Audio Converter 7 - (.Online Media Technologies Ltd..) [HKLM] -- AVS Audio Converter_is1
                      O42 - Logiciel: Adobe Flash Player 14 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
                      O42 - Logiciel: Adobe Reader XI (11.0.08) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AB0000000001}
                      O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {D9DAD0FF-495A-472B-9F10-BAE430A26682}
                      O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {18D47FA1-0440-48D3-A7E0-DA09537FF471}
                      O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} =>.Apple Inc
                      O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {79155F2B-9895-49D7-8612-D92580E0DE5B}
                      O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
                      O42 - Logiciel: Calendrier Xtra v12.010 - (.XTRALOG.) [HKLM] -- Calendrier 2000_is1
                      O42 - Logiciel: Diskeeper Professional Edition - (.Executive Software.) [HKLM] -- {E87BE7F8-3077-40C1-8592-956F649A2781}
                      O42 - Logiciel: Dream Aquarium - (...) [HKLM] -- DreamAqua
                      O42 - Logiciel: File Type Assistant - (...) [HKLM] -- Trusted Software Assistant_is1
                      O42 - Logiciel: Final Media Player 2014 - (.Bitberry Software.) [HKLM] -- FinalMediaPlayer_is1
                      O42 - Logiciel: Free MP4 Player 2 - (.Youtube Music Downloader.) [HKLM] -- Free MP4 Player_is1
                      O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome
                      O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
                      O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
                      O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
                      O42 - Logiciel: HPDiagnosticAlert - (.Microsoft.) [HKLM] -- {846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE}
                      O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399
                      O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5
                      O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5
                      O42 - Logiciel: InfraRecorder - (...) [HKLM] -- InfraRecorder
                      O42 - Logiciel: InstantShareAlert - (.HP.) [HKLM] -- {069730C2-755A-485B-A205-27A1AAFA836A}
                      O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (...) [HKLM] -- HDMI
                      O42 - Logiciel: IrfanView (remove only) - (.Irfan Skiljan.) [HKLM] -- IrfanView
                      O42 - Logiciel: Java 7 Update 51 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83217045FF}
                      O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {8E5233E1-7495-44FB-8DEB-4BE906D59619}
                      O42 - Logiciel: Lecteur Windows Media 11 - (...) [HKLM] -- Windows Media Player =>.Microsoft Corporation
                      O42 - Logiciel: MSVC80_x86 - (.Nokia.) [HKLM] -- {212748BB-0DA5-46DE-82A1-403736DC9F27}
                      O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
                      O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
                      O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
                      O42 - Logiciel: Malwarebytes Anti-Malware version 2.0.2.1012 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes Anti-Malware_is1
                      O42 - Logiciel: Media Go - (.Sony.) [HKLM] -- {0F895695-33CC-4203-9C47-25EF2AC9441C}
                      O42 - Logiciel: Media Go Video Playback Engine 1.64.103.02270 - (.Sony.) [HKLM] -- {7D62ABA3-35EC-623E-2C5F-1B3332CB705B}
                      O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
                      O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1
                      O42 - Logiciel: Microsoft Internationalized Domain Names Mitigation APIs - (.Microsoft Corporation.) [HKLM] -- IDNMitigationAPIs
                      O42 - Logiciel: Microsoft Kernel-Mode Driver Framework Feature Pack 1.5 - (.Microsoft Corporation.) [HKLM] -- Wdf01005
                      O42 - Logiciel: Microsoft Kernel-Mode Driver Framework Feature Pack 1.7 - (.Microsoft Corporation.) [HKLM] -- Wdf01007
                      O42 - Logiciel: Microsoft National Language Support Downlevel APIs - (.Microsoft Corporation.) [HKLM] -- NLSDownlevelMapping
                      O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
                      O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- Wudf01000
                      O42 - Logiciel: Multimedia Tools - Audacity - (...) [HKLM] -- Multimedia Tools - Audacity
                      O42 - Logiciel: MuseScore 1.3 - (.Werner Schweer and Others.) [HKLM] -- MuseScore
                      O42 - Logiciel: Netpass XP - (...) [HKLM] -- Netpass XP
                      O42 - Logiciel: Nikon Message Center 2 - (.Nikon.) [HKLM] -- {B014EE44-9197-4513-9613-71E6EB1B514E}
                      O42 - Logiciel: OVH MoM - (...) [HKLM] -- OVH MoM
                      O42 - Logiciel: Olympus Digital Wave Player - (...) [HKLM] -- {FB91E774-867B-4567-ACE7-8144EF036068}
                      O42 - Logiciel: PDFCreator - (.pdfforge.) [HKLM] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}
                      O42 - Logiciel: Package de base Microsoft de service de chiffrement pour cartes à puce - (.Microsoft Corporation.) [HKLM] -- KB909520
                      O42 - Logiciel: Picture Control Utility - (.Nikon.) [HKLM] -- {87441A59-5E64-4096-A170-14EFE67200C3}
                      O42 - Logiciel: PrintMusic! 2001 Fr - (...) [HKLM] -- PrintMusic! 2001 Fr
                      O42 - Logiciel: REALTEK GbE & FE Ethernet PCI-E NIC Driver - (.Realtek.) [HKLM] -- {C9BED750-1211-4480-B1A5-718A3BE15525}
                      O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
                      O42 - Logiciel: SFR - Kit de connexion - (.SFR.) [HKLM] -- SFR_Kit
                      O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
                      O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1
                      O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM] -- VLC media player =>.VideoLAN
                      O42 - Logiciel: ViewNX 2 - (.Nikon.) [HKLM] -- {DDD62492-32A7-412B-8AF1-2CF032AD42E3}
                      O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130) - (.Microsoft Corporation.) [HKLM] -- KB892130
                      O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8
                      O42 - Logiciel: Windows Media Format 11 runtime - (...) [HKLM] -- Windows Media Format Runtime
                      O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11
                      O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11 =>.Microsoft Corporation
                      O42 - Logiciel: Windows PowerShell(TM) 1.0 - (.Microsoft Corporation.) [HKLM] -- KB926139-v2
                      O42 - Logiciel: XML Paper Specification Shared Components Language Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- XPSEPSCLP
                      O42 - Logiciel: XML Paper Specification Shared Components Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- XpsEPSC
                      O42 - Logiciel: avast! Internet Security v9.0.2021 - (.AVAST Software.) [HKLM] -- avast
                      O42 - Logiciel: eMule - (...) [HKLM] -- eMule
                      ~ Logic: 73 Scanned in 00mn 00s

                      ---\\ HKCU & HKLM Software Keys
                      [HKCU\Software\33438InstEnd]
                      [HKCU\Software\7-Zip]
                      [HKCU\Software\ALWIL Software]
                      [HKCU\Software\AVAST Software]
                      [HKCU\Software\AVS4YOU]
                      [HKCU\Software\Adobe]
                      [HKCU\Software\Ahead]
                      [HKCU\Software\Ammyy]
                      [HKCU\Software\AppDataLow\Software\Macromedia]
                      [HKCU\Software\AppDataLow]
                      [HKCU\Software\Apple Computer, Inc.]
                      [HKCU\Software\Apple Inc.]
                      [HKCU\Software\Audacity]
                      [HKCU\Software\Beamrise] =>Hijacker.Beamrise
                      [HKCU\Software\Bitberry Software]
                      [HKCU\Software\Bitberry]
                      [HKCU\Software\CDDB]
                      [HKCU\Software\CDIP]
                      [HKCU\Software\Classes]
                      [HKCU\Software\Clients]
                      [HKCU\Software\CodaMusic]
                      [HKCU\Software\CyberLink]
                      [HKCU\Software\Cygnus Solutions]
                      [HKCU\Software\D'Accord]
                      [HKCU\Software\DacIChobr_YY]
                      [HKCU\Software\DownloadCenter]
                      [HKCU\Software\EleFun Desktops]
                      [HKCU\Software\EleFun Multimedia]
                      [HKCU\Software\Equalizer]
                      [HKCU\Software\External Build System]
                      [HKCU\Software\FileTypeAssistant]
                      [HKCU\Software\Filter]
                      [HKCU\Software\Garmin]
                      [HKCU\Software\Google]
                      [HKCU\Software\Hewlett-Packard]
                      [HKCU\Software\HookNetwork]
                      [HKCU\Software\IM Providers]
                      [HKCU\Software\InfraRecorder]
                      [HKCU\Software\Intel]
                      [HKCU\Software\JEDI-VCL]
                      [HKCU\Software\JavaSoft]
                      [HKCU\Software\LeaderTech]
                      [HKCU\Software\Local AppWizard-Generated Applications]
                      [HKCU\Software\Macromedia]
                      [HKCU\Software\Malwarebytes' Anti-Malware]
                      [HKCU\Software\Monitored]
                      [HKCU\Software\MozillaPlugins]
                      [HKCU\Software\Netscape]
                      [HKCU\Software\Nikon]
                      [HKCU\Software\Nokia]
                      [HKCU\Software\ODBC]
                      [HKCU\Software\ORL]
                      [HKCU\Software\OVH]
                      [HKCU\Software\Olympus]
                      [HKCU\Software\PDF Architect 2]
                      [HKCU\Software\PDFCreator]
                      [HKCU\Software\PEiD]
                      [HKCU\Software\Piriform]
                      [HKCU\Software\Policies]
                      [HKCU\Software\Realtek]
                      [HKCU\Software\Redemption]
                      [HKCU\Software\SAMSUNG]
                      [HKCU\Software\SFR]
                      [HKCU\Software\Safer Networking Limited]
                      [HKCU\Software\SaveMoney]
                      [HKCU\Software\Screen Saver(s)]
                      [HKCU\Software\Screensavers]
                      [HKCU\Software\SoftwareNetz]
                      [HKCU\Software\Software]
                      [HKCU\Software\Sony Corporation]
                      [HKCU\Software\Spiral Monkey]
                      [HKCU\Software\Tracker Software]
                      [HKCU\Software\Trolltech]
                      [HKCU\Software\UniExtract]
                      [HKCU\Software\VB and VBA Program Settings]
                      [HKCU\Software\WinRAR SFX]
                      [HKCU\Software\Xtralog]
                      [HKCU\Software\eMule]
                      [HKCU\Software\file.org]
                      [HKCU\Software\kde.org]
                      [HKCU\Software\mozilla]
                      [HKCU\Software\settings]
                      [HKCU\Software\yahoo]
                      [HKLM\Software\ALWIL Software]
                      [HKLM\Software\AVAST Software]
                      [HKLM\Software\AVS4YOU]
                      [HKLM\Software\Adobe]
                      [HKLM\Software\AdwCleaner]
                      [HKLM\Software\Ahead]
                      [HKLM\Software\America Online]
                      [HKLM\Software\Ammyy]
                      [HKLM\Software\AppDataLow]
                      [HKLM\Software\Apple Computer, Inc.]
                      [HKLM\Software\Apple Inc.]
                      [HKLM\Software\Archibel S.A.]
                      [HKLM\Software\Bio-Health]
                      [HKLM\Software\BrowserChoice]
                      [HKLM\Software\C07ft5Y]
                      [HKLM\Software\Classes]
                      [HKLM\Software\Clients]
                      [HKLM\Software\CodaMusic]
                      [HKLM\Software\CyberLink]
                      [HKLM\Software\Cygnus Solutions]
                      [HKLM\Software\Dropbox]
                      [HKLM\Software\EnigmaSoftwareGroup]
                      [HKLM\Software\Executive Software]
                      [HKLM\Software\Folder Actions]
                      [HKLM\Software\Framework]
                      [HKLM\Software\FreeCDRIP]
                      [HKLM\Software\Funk Animals]
                      [HKLM\Software\GEAR Software]
                      [HKLM\Software\Garmin]
                      [HKLM\Software\Gemplus]
                      [HKLM\Software\Google]
                      [HKLM\Software\HP]
                      [HKLM\Software\Hewlett-Packard]
                      [HKLM\Software\HighCriteria]
                      [HKLM\Software\InstallShield]
                      [HKLM\Software\Intel]
                      [HKLM\Software\JavaSoft]
                      [HKLM\Software\JreMetrics]
                      [HKLM\Software\Licenses]
                      [HKLM\Software\MCCI]
                      [HKLM\Software\Macromedia]
                      [HKLM\Software\Malwarebytes' Anti-Malware]
                      [HKLM\Software\MarkAny]
                      [HKLM\Software\MfgCtxInfoFile]
                      [HKLM\Software\MimarSinan]
                      [HKLM\Software\MozillaPlugins]
                      [HKLM\Software\Mozilla]
                      [HKLM\Software\Myriad Software]
                      [HKLM\Software\Neuf]
                      [HKLM\Software\Nikon]
                      [HKLM\Software\Nokia]
                      [HKLM\Software\ODBC]
                      [HKLM\Software\OVH]
                      [HKLM\Software\Olympus]
                      [HKLM\Software\PCSuite]
                      [HKLM\Software\PDF Architect 2]
                      [HKLM\Software\PDFCreator]
                      [HKLM\Software\Piriform]
                      [HKLM\Software\Policies]
                      [HKLM\Software\Program Groups]
                      [HKLM\Software\RTLSetup]
                      [HKLM\Software\Realtek Semiconductor Corp.]
                      [HKLM\Software\Realtek]
                      [HKLM\Software\Redemption]
                      [HKLM\Software\RegisteredApplications]
                      [HKLM\Software\SAMSUNG]
                      [HKLM\Software\Safer Networking Limited]
                      [HKLM\Software\Schlumberger]
                      [HKLM\Software\Secure]
                      [HKLM\Software\Sony Corporation]
                      [HKLM\Software\Spiral Monkey]
                      [HKLM\Software\Tracker Software]
                      [HKLM\Software\VideoLAN]
                      [HKLM\Software\Werner Schweer and Others]
                      [HKLM\Software\Windows 3.1 Migration Status]
                      [HKLM\Software\Windows]
                      [HKLM\Software\Wow6432Node]
                      [HKLM\Software\Yahoo]
                      [HKLM\Software\mozilla.org]
                      ~ Key Software: 311 Scanned in 00mn 00s

                      ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
                      O43 - CFD: 19/12/2008 - 14:51:24 - [] ----D C:\Program Files\7-Zip
                      O43 - CFD: 15/01/2014 - 10:23:09 - [] ----D C:\Program Files\Adobe
                      O43 - CFD: 04/06/2008 - 18:15:57 - [] ----D C:\Program Files\Alcohol Soft
                      O43 - CFD: 12/02/2010 - 18:07:10 - [] ----D C:\Program Files\Alwil Software
                      O43 - CFD: 02/07/2014 - 15:39:01 - [] ----D C:\Program Files\Apple Software Update =>.Apple Inc
                      O43 - CFD: 21/11/2008 - 14:33:47 - [] ----D C:\Program Files\Atmosphere Deluxe
                      O43 - CFD: 27/10/2010 - 12:07:18 - [] ----D C:\Program Files\Audacity
                      O43 - CFD: 28/02/2012 - 12:13:51 - [] ----D C:\Program Files\AVAST Software
                      O43 - CFD: 05/12/2008 - 12:22:40 - [] ----D C:\Program Files\Avast4
                      O43 - CFD: 16/11/2013 - 15:37:44 - [] ----D C:\Program Files\AVS4YOU
                      O43 - CFD: 02/07/2014 - 15:38:35 - [] ----D C:\Program Files\Bonjour
                      O43 - CFD: 24/10/2012 - 12:48:05 - [] ----D C:\Program Files\Calendrier
                      O43 - CFD: 06/02/2013 - 13:31:15 - [] ----D C:\Program Files\CCleaner
                      O43 - CFD: 06/08/2012 - 10:07:54 - [] ----D C:\Program Files\Common Files
                      O43 - CFD: 18/03/2008 - 18:14:07 - [0] ----D C:\Program Files\ComPlus Applications
                      O43 - CFD: 19/03/2008 - 11:03:44 - [] ----D C:\Program Files\CyberLink
                      O43 - CFD: 19/12/2008 - 14:57:01 - [] ----D C:\Program Files\D'Accord iChords 2.0
                      O43 - CFD: 26/09/2009 - 15:51:28 - [] ----D C:\Program Files\DIFX
                      O43 - CFD: 12/02/2014 - 16:50:22 - [] ----D C:\Program Files\Dream Aquarium
                      O43 - CFD: 26/10/2012 - 17:00:07 - [] ----D C:\Program Files\EleFun Desktops
                      O43 - CFD: 07/05/2010 - 10:00:31 - [] ----D C:\Program Files\eMule
                      O43 - CFD: 22/10/2012 - 11:12:00 - [] ----D C:\Program Files\Enigma Software Group
                      O43 - CFD: 19/03/2008 - 11:53:49 - [] ----D C:\Program Files\Executive Software
                      O43 - CFD: 02/07/2014 - 15:38:13 - [] R---D C:\Program Files\Fichiers communs
                      O43 - CFD: 20/10/2010 - 18:18:31 - [] ----D C:\Program Files\Free Audio Pack
                      O43 - CFD: 05/05/2014 - 11:27:25 - [] ----D C:\Program Files\Free MP4 Player
                      O43 - CFD: 29/03/2014 - 18:51:25 - [] ----D C:\Program Files\Google
                      O43 - CFD: 07/04/2008 - 10:16:54 - [] ----D C:\Program Files\Happy Note
                      O43 - CFD: 07/04/2008 - 10:17:12 - [] ----D C:\Program Files\happynote
                      O43 - CFD: 26/03/2008 - 22:56:01 - [] ----D C:\Program Files\Hercules
                      O43 - CFD: 17/10/2008 - 16:35:20 - [] ----D C:\Program Files\Hewlett-Packard
                      O43 - CFD: 04/12/2013 - 14:14:50 - [] ----D C:\Program Files\HP
                      O43 - CFD: 27/02/2009 - 17:53:46 - [] ----D C:\Program Files\InfraRecorder
                      O43 - CFD: 08/05/2014 - 08:31:35 - [] --H-D C:\Program Files\InstallShield Installation Information
                      O43 - CFD: 18/03/2008 - 18:33:09 - [] ----D C:\Program Files\Intel
                      O43 - CFD: 11/04/2014 - 08:00:23 - [] ----D C:\Program Files\Internet Explorer
                      O43 - CFD: 02/07/2014 - 16:16:25 - [] ----D C:\Program Files\IrfanView
                      O43 - CFD: 21/01/2014 - 12:06:18 - [] ----D C:\Program Files\Java
                      O43 - CFD: 21/11/2008 - 12:22:03 - [] ----D C:\Program Files\Koi Fish 3D Screensaver
                      O43 - CFD: 22/07/2014 - 11:11:45 - [] ----D C:\Program Files\Malwarebytes Anti-Malware
                      O43 - CFD: 10/04/2014 - 14:14:51 - [0] ----D C:\Program Files\Malwarebytes' Anti-Malware
                      O43 - CFD: 06/08/2012 - 10:07:48 - [] ----D C:\Program Files\MarkAny
                      O43 - CFD: 09/12/2008 - 16:31:04 - [] ----D C:\Program Files\Messenger
                      O43 - CFD: 14/11/2008 - 16:10:09 - [0] ----D C:\Program Files\Metronimo
                      O43 - CFD: 30/11/2009 - 09:02:54 - [] ----D C:\Program Files\Microsoft
                      O43 - CFD: 18/03/2008 - 18:15:38 - [] ----D C:\Program Files\microsoft frontpage
                      O43 - CFD: 23/11/2012 - 12:44:27 - [] ----D C:\Program Files\Microsoft Office
                      O43 - CFD: 26/07/2014 - 12:52:39 - [] ----D C:\Program Files\Microsoft Silverlight
                      O43 - CFD: 26/03/2008 - 18:34:21 - [] ----D C:\Program Files\Microsoft Visual Studio
                      O43 - CFD: 12/11/2012 - 12:47:04 - [] ----D C:\Program Files\Microsoft Works
                      O43 - CFD: 21/01/2014 - 10:22:58 - [] ----D C:\Program Files\Microsoft.NET
                      O43 - CFD: 13/08/2010 - 03:01:17 - [] ----D C:\Program Files\Movie Maker
                      O43 - CFD: 27/03/2014 - 18:16:29 - [] ----D C:\Program Files\Mozilla Firefox
                      O43 - CFD: 18/03/2008 - 18:48:06 - [] ----D C:\Program Files\MSBuild
                      O43 - CFD: 23/11/2012 - 12:38:30 - [] ----D C:\Program Files\MSECache
                      O43 - CFD: 18/03/2008 - 18:13:33 - [] ----D C:\Program Files\MSN
                      O43 - CFD: 18/03/2008 - 18:13:38 - [] ----D C:\Program Files\MSN Gaming Zone
                      O43 - CFD: 19/03/2008 - 11:19:20 - [0] ----D C:\Program Files\MSXML 4.0
                      O43 - CFD: 19/03/2008 - 10:54:29 - [] ----D C:\Program Files\MSXML 6.0
                      O43 - CFD: 27/10/2010 - 11:27:17 - [] ----D C:\Program Files\MultimediaTools
                      O43 - CFD: 08/07/2008 - 15:21:05 - [] ----D C:\Program Files\Multi_Media_France
                      O43 - CFD: 06/02/2013 - 15:34:47 - [] ----D C:\Program Files\MuseScore
                      O43 - CFD: 19/12/2008 - 14:28:36 - [] ----D C:\Program Files\Natura Sound Therapy
                      O43 - CFD: 15/01/2014 - 11:35:25 - [] ----D C:\Program Files\Natural Ambience
                      O43 - CFD: 14/08/2013 - 10:01:28 - [] ----D C:\Program Files\NaturalSwiss
                      O43 - CFD: 19/03/2008 - 10:36:02 - [] ----D C:\Program Files\Nero
                      O43 - CFD: 09/12/2008 - 11:58:12 - [] ----D C:\Program Files\NetMeeting
                      O43 - CFD: 21/12/2011 - 09:49:56 - [] ----D C:\Program Files\netpass
                      O43 - CFD: 04/08/2012 - 13:31:11 - [] ----D C:\Program Files\Nikon
                      O43 - CFD: 03/11/2010 - 10:09:29 - [0] ----D C:\Program Files\Nokia
                      O43 - CFD: 09/07/2009 - 14:06:57 - [] ----D C:\Program Files\Olympus
                      O43 - CFD: 18/03/2008 - 18:13:43 - [] ----D C:\Program Files\Online Services
                      O43 - CFD: 12/11/2012 - 16:45:40 - [] ----D C:\Program Files\OpenOffice.org 3
                      O43 - CFD: 15/12/2010 - 18:35:45 - [] ----D C:\Program Files\Outlook Express =>.Microsoft Corporation
                      O43 - CFD: 26/04/2010 - 11:03:23 - [] ----D C:\Program Files\OVH
                      O43 - CFD: 07/05/2014 - 09:51:59 - [] ----D C:\Program Files\PDFCreator
                      O43 - CFD: 04/06/2008 - 18:24:45 - [] ----D C:\Program Files\PowerArchiver
                      O43 - CFD: 25/10/2012 - 11:09:21 - [] ----D C:\Program Files\QuickTime
                      O43 - CFD: 09/12/2008 - 14:27:48 - [] ----D C:\Program Files\Realtek
                      O43 - CFD: 18/03/2008 - 18:45:44 - [] ----D C:\Program Files\Reference Assemblies
                      O43 - CFD: 08/05/2014 - 08:31:36 - [] ----D C:\Progra