Scan DD systématique au démarrage.

de **Mathieu5555** » 06 Mai 2011 18:59

Bonsoir,

Depuis quelques temps, je rencontre des difficultés avec mon PC: Lenteur au démarrage associé à un scan systématique des disques durs, ralentissement soudain et nécessiter de redémarrer, rien de très handicapant mais "ça ne sent pas très bon" malgré des rapports d'Avira vierges. Avant que les choses n'empirent, je viens chercher de l'aide sur ce Forum.

Ne souhaitant pas "précipiter" les chose pour mon 1er message sur ce Forum, j'attends d'être guider dans la marche à suivre ...

A savoir qu'un Log HiJackThis est frais dispo et n'attend qu'à être poster et interpréter.

Merci d'avance.

PS: Pour l'anecdote, j'ai connu ce site par l'intermédiaire de "anthony5151del", qui, il y a 2 ans bientôt sur le forum de "Hardware.fr" m'avait aidé à me sortir d'une grosse galère. S'il est dans le coin, MERCI encore à lui.

çi-joint le Log de ZHPDiag:

[b][i]Rapport de ZHPDiag v1.27.200 par Nicolas Coolman, Update du 04/05/2011
Run by Matt at 07/05/2011 15:00:54
Web site : http://www.premiumorange.com/zeb-help-p ... pdiag.html

---\\ Web Browser
MSIE: Internet Explorer v6.0.2900.5512
MFIE: Mozilla Firefox v3.6.8 (fr)
GCIE: Google Chrome v11.0.696.60 (Defaut)

---\\ System Information
Windows XP Home Edition Service Pack 3 (Build 2600)
Processor: x86 Family 6 Model 15 Stepping 11, GenuineIntel
Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3327 MB (72% free)
System Restore: Activé (Enable)
System drive C: has 53 GB (53%) free of 100 GB

---\\ Logged in mode
Computer Name: MATT-Q6600
User Name: Matt
All Users Names: SUPPORT_388945a0, Matt, HelpAssistant, Administrateur,
Unselected Option: O45,O61,O62,O65,O66,O82
Logged in as Administrator

---\\ Environnement Variables
%AppData%=C:\Documents and Settings\Matt\Application Data
%LocalAppData%=C:\Documents and Settings\Matt\Local Settings\Application Data
%StartMenu%=C:\Documents and Settings\Matt\Menu Démarrer

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 53 Go of 100 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 0 Go of 0 Go)
E:\ Hard drive, Flash drive, Thumb drive (Free 55 Go of 200 Go)
F:\ Hard drive, Flash drive, Thumb drive (Free 44 Go of 200 Go)
G:\ Hard drive, Flash drive, Thumb drive (Free 141 Go of 532 Go)
J:\ CD-ROM drive (Not Inserted)
M:\ Hard drive, Flash drive, Thumb drive (Free 58 Go of 233 Go)

---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK

---\\ Recherche particulière de fichiers génériques
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.13/04/2008 19:34:04.) -- C:\WINDOWS\Explorer.exe [1037824]
[MD5.C53F33C81D4070E9E7BAFC57FB356AF8] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.17/02/2011 14:51:59.) -- C:\WINDOWS\system32\wininet.dll [671232]
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.13/04/2008 19:34:30.) -- C:\WINDOWS\system32\Winlogon.exe [512000]
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/04/2008 11:40:32.) -- C:\WINDOWS\system32\drivers\atapi.sys [96512]
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.13/04/2008 12:15:54.) -- C:\WINDOWS\system32\drivers\ntfs.sys [574976]

---\\ Processus lancés
[MD5.86DB8F6EF12B978D64BEC3DF9E565B82] - (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) -- C:\WINDOWS\system32\Ati2evxx.exe [602112]
[MD5.5AA788D5A2C6737BB9C45933985BC1B8] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe [37664]
[MD5.673CF4F6BB1FBE09331B526802FBB892] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [345376]
[MD5.5E06A9D23727DAF96FAA796F1135FDCD] - (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe [153376]
[MD5.013A269E7AF8B01FF20B384FEEBFFDA5] - (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.EXE [16862720]
[MD5.35B236D0A5973CC913990B7E86FF266B] - (...) -- C:\Program Files\ASUS\Six Engine\SixEngine.exe [5964800]
[MD5.29680A793F690EEF4AAA68479D2A6DF8] - (.Avira GmbH - Antivirus System Tray Tool.) -- F:\Antivirus\AntiVir\Installation\Avira\AntiVir Desktop\avgnt.exe [209153]
[MD5.F9932C3C8F1C78738F27EB6360ACF681] - (.Adobe Systems Inc. - AcroTray.) -- F:\ADOBE CS4\Installation\Acrobat 9.0\Acrobat\Acrotray.exe [640440]
[MD5.A5F44E2C209A71BBE413E151379FEBC2] - (.Logitech Inc. - LVCom Server.) -- C:\WINDOWS\system32\LVCOMSX.EXE [221184]
[MD5.E7704CBF568815C1CAA6E513387BD3F2] - (.Advanced Micro Devices Inc. - Catalyst Control Center: Monitoring program.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe [65536]
[MD5.5BE353D1ABEFE236011045787C0768FA] - (.Logitech Inc. - ImageStudio Tray Application.) -- F:\Périphériques\LOGITECH QuickCam\LogiTray.exe [212992]
[MD5.E3A584DFC135C03A232994A765BE85EF] - (.Applian Technologies, Inc. - FLV Service for Freecorder 4.) -- F:\Freecorder\Installation\FLVSrvc.exe [167936]
[MD5.F3DEAA1F2FCF70FAF6DE3757CA343FA5] - (.Apple Inc. - iTunesHelper.) -- F:\iTunes\Installation\iTunesHelper.exe [421160]
[MD5.2E5212A0BFB98FE0167C92C76C87AFE3] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe [249064]
[MD5.86C9088E2DB222E57EE069151FCA84CB] - (...) -- F:\FreePlayer\HomePlayer\Installation\HomePlayer.exe [294912]
[MD5.74EF310FAC89341CE2897B7F2C4A7B0F] - (.ATI Technologies Inc. - Catalyst Control Centre: Host application.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe [65536]
[MD5.435F79D364B796A4EA0B5CAF24CA78BD] - (.DT Soft Ltd - DAEMON Tools Lite.) -- F:\Lecteurs Virtuels\Daemon Tools\Installation\DTLite.exe [369200]
[MD5.3DD25048297A24AB4B3BFC17ABA5D0DB] - (.Valve Corporation - Steam.) -- F:\Steam\Installation\Steam.exe [1242448]
[MD5.D7DDFAB58FC0F49E85EA008FF2A364EE] - (.Logitech Inc. - QuickCam Framework Server.) -- F:\Périphériques\LOGITECH QuickCam\FxSvr2.exe [176128]
[MD5.8E5E5A8CC84DA3F683E3BBC045138D52] - (.Apple Inc. - iPodService Module (32-bit).) -- C:\Program Files\iPod\bin\iPodService.exe [820008]
[MD5.B8720A787C1223492E6F319465E996CE] - (.Avira GmbH - Antivirus On-Access Service.) -- F:\Antivirus\AntiVir\Installation\Avira\AntiVir Desktop\avguard.exe [185089]
[MD5.E8FD16F032B8FA448692EB845768DC83] - (.ILEX - Serveur du Gestionnaire d'Acces au Lecteur.) -- C:\WINDOWS\GALSVW32.EXE [45056]
[MD5.81DF1D2312CE980B844A6BC0863FE40F] - (.Microsoft Corporation - Microsoft Office Word.) -- F:\Office 2007\Installation\Office12\WINWORD.EXE [408936]
[MD5.63D700F14DA977B8DA6D9266B31EB071] - (.Google Inc. - Google Chrome.) -- C:\Documents and Settings\Matt\Local Settings\Application Data\Google\Chrome\Application\chrome.exe [1010232]
[MD5.ADE63CBD832A9BDD96DCF013496312C5] - (.Nicolas Coolman - Diagnostic Tool.) -- F:\ZHPDiag2\Installation\ZHPDiag.exe [645120]

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
M3 - MFPP: Plugins - [Matt] -- C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\trs8ij3i.default\searchplugins\conduit.xml
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Pas de propriétaire - Pas de description.) -- F:\iTunes\Installation\Mozilla Plugins\npitunes.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_24 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.60310.0.) -- C:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Documents and Settings\Matt\Local Settings\Application Data\Google\Update\1.3.21.53\npGoogleUpdate3.dll
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Documents and Settings\Matt\Local Settings\Application Data\Google\Update\1.3.21.53\npGoogleUpdate3.dll
P2 - FPN: [HKCU] [@unity3d.com/UnityPlayer,version=1.0] - (.Unity Technologies ApS - Unity Player 2.6.1f3.) -- C:\Documents and Settings\Matt\Local Settings\Application Data\Unity\WebPlayer\loader\npUnity3D32.dll
M0 - MFSP: prefs.js [Matt - trs8ij3i.default] http://search.conduit.com/?ctid=CT10609 ... hSource=13
M2 - MFEP: prefs.js [Matt - trs8ij3i.default\engine@conduit.com] [] Conduit Engine v3.3.2.1 (.Conduit Ltd..)
M2 - MFEP: prefs.js [Matt - trs8ij3i.default\{1392b8d2-5c05-419f-a8f6-b9f15a596612}] [] Freecorder Community Toolbar v3.3.2.1 (.Conduit Ltd..)
M2 - MFEP: prefs.js [Matt - trs8ij3i.default\{4daac69c-cba7-45e2-9bc8-1044483d3352}] [] Softonic_France Community Toolbar v3.2.5.2 (.Conduit Ltd..)
M2 - MFEP: prefs.js [Matt - trs8ij3i.default\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}] [dwhelper] DownloadHelper v4.8.2 (.Michel Gutierrez.)
M2 - MFEP: prefs.js [Matt - trs8ij3i.default\{ba14329e-9550-4989-b3f2-9732e92d17cc}] [] Vuze Remote Toolbar v2.7.2.0 (.Conduit Ltd..)
M2 - MFEP: prefs.js [Matt - trs8ij3i.default\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}] [adblockplus] Adblock Plus v1.3.3 (.Wladimir Palant.)

---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
G1 - GCS: Preference [User Data\Default] None
G0 - GCSP: Preference [User Data\Default][HomePage] http://www.google.fr

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.easysear.ch/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com
R0 - HKUS\S-1-5-21-1606980848-220523388-682003330-1004\Software\Microsoft\Internet Explorer\Main,Start Page = www.easysear.ch/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com
R1 - HKUS\S-1-5-21-1606980848-220523388-682003330-1004\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Bibliothèque d'objets et de contrôles de do.) (No version) -- %SystemRoot%\system32\shdocvw.dll
R3 - URLSearchHook: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) (6.3.2.0) -- C:\Program Files\Softonic_France\prxtbSof0.dll

---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe Acrobat IE Helper Version 7.0 for Act.) -- F:\ADOBE Acrobat Reader\Installation\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\ConduitEngine\prxConduitEngine.dll
O2 - BHO: Softonic_France - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Softonic_France\prxtbSof0.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java(TM) Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll

---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Softonic_France\prxtbSof0.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\ConduitEngine\prxConduitEngine.dll

---\\ ---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [RTHDCPL] . (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.exe
O4 - HKLM\..\Run: [Alcmtr] . (.Realtek Semiconductor Corp. - Realtek Azalia Audio - Event Monitor.) -- C:\WINDOWS\ALCMTR.exe
O4 - HKLM\..\Run: [Six Engine] . (...) -- C:\Program Files\ASUS\Six Engine\SixEngine.exe
O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- F:\Antivirus\AntiVir\Installation\Avira\AntiVir Desktop\avgnt.exe
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- F:\ADOBE CS4\Installation\Acrobat 9.0\Acrobat\Acrobat_sl.exe
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] . (.Adobe Systems Inc. - AcroTray.) -- F:\ADOBE CS4\Installation\Acrobat 9.0\Acrobat\Acrotray.exe
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe
O4 - HKLM\..\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [LVCOMSX] . (.Logitech Inc. - LVCom Server.) -- C:\WINDOWS\system32\LVCOMSX.exe
O4 - HKLM\..\Run: [LogitechVideoRepair] . (.Logitech Inc. - Logitech QuickCam Startup Application.) -- F:\Périphériques\LOGITECH QuickCam\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] . (.Logitech Inc. - ImageStudio Tray Application.) -- F:\Périphériques\LOGITECH QuickCam\LogiTray.exe
O4 - HKLM\..\Run: [NeroFilterCheck] . (.Ahead Software Gmbh - NeroCheck.) -- C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] . (.Adobe Systems Incorporated - Adobe CS4 Service Manager.) -- C:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe
O4 - HKLM\..\Run: [Freecorder FLV Service] . (.Applian Technologies, Inc. - FLV Service for Freecorder 4.) -- F:\Freecorder\Installation\FLVSrvc.exe
O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe
O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- F:\iTunes\Installation\iTunesHelper.exe
O4 - HKLM\..\Run: [KernelFaultCheck] Clé orpheline
O4 - HKLM\..\Run: [HomePlayer] . (...) -- F:\FreePlayer\HomePlayer\Installation\HomePlayer.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe
O4 - HKCU\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- F:\Lecteurs Virtuels\Daemon Tools\Installation\DTLite.exe
O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Documents and Settings\Matt\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
O4 - HKCU\..\Run: [AdobeBridge] Clé orpheline
O4 - HKCU\..\Run: [Steam] . (.Valve Corporation - Steam.) -- F:\Steam\Installation\Steam.exe
O4 - HKCU\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-21-1606980848-220523388-682003330-1004\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-21-1606980848-220523388-682003330-1004\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- F:\Lecteurs Virtuels\Daemon Tools\Installation\DTLite.exe
O4 - HKUS\S-1-5-21-1606980848-220523388-682003330-1004\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Documents and Settings\Matt\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
O4 - HKUS\S-1-5-21-1606980848-220523388-682003330-1004\..\Run: [AdobeBridge] Clé orpheline
O4 - HKUS\S-1-5-21-1606980848-220523388-682003330-1004\..\Run: [Steam] . (.Valve Corporation - Steam.) -- F:\Steam\Installation\Steam.exe
O4 - HKUS\S-1-5-21-1606980848-220523388-682003330-1004\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Lancement rapide d'Adobe Reader.lnk . (.Adobe Systems Incorporated.) -- F:\ADOBE Acrobat Reader\Installation\Reader\reader_sl.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Windows Search.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Desktop Search\WindowsSearch.exe

---\\ ---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Photoshop Lightroom 3.3.lnk . (.Adobe Systems.) -- F:\ADOBE LightRoom\Installation\lightroom.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader 7.0.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A70900000002}\SC_Reader_PM.ico
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Apple Software Update.lnk . (...) -- C:\WINDOWS\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}\AppleSoftwareUpdateIco.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Player tuto.com.lnk . (...) -- C:\Program Files\Player tuto.com\Player tuto.com.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Vuze.lnk . (.Vuze Inc..) -- F:\Azureus\Installation\Azureus.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Winamax Poker.lnk . (...) -- E:\POKER\Winamax\Winamax Poker\Winamax Poker.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Movie Maker\moviemk.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Search.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O4 - Global Startup: C:\Documents And Settings\Matt\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe
O4 - Global Startup: C:\Documents And Settings\Matt\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Documents And Settings\Matt\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe
O4 - Global Startup: C:\Documents And Settings\Matt\Menu Démarrer\Programmes\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: Ajouter la cible du lien à un fichier PDF existant . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O8 - Extra context menu item: Ajouter à un fichier PDF existant . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O8 - Extra context menu item: Convertir au format Adobe PDF . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O8 - Extra context menu item: Convertir la cible du lien au format Adobe PDF . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- F:\OFFICE~1\INSTAL~1\Office12\EXCEL.exe

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- F:\OFFICE~1\INSTAL~1\Office12\REFBARH.ICO
O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (...) -- F:\OFFICE~1\INSTAL~1\Office12\REFBARH.ICO
O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe

---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll

---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{6946EA4C-F169-4A39-A1A6-249822219A8B}: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CS1\Services\Tcpip\..\{6946EA4C-F169-4A39-A1A6-249822219A8B}: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CS2\Services\Tcpip\..\{6946EA4C-F169-4A39-A1A6-249822219A8B}: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CS3\Services\Tcpip\..\{6946EA4C-F169-4A39-A1A6-249822219A8B}: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.240 212.27.40.241

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: AtiExtEvent . (.ATI Technologies Inc. - ATI External Event Utility DLL Module.) -- C:\Windows\System32\Ati2evxx.dll
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\Windows\System32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\Windows\System32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\Windows\System32\cscdll.dll
O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\Windows\System32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\WlNotify.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\WINDOWS\system32\webcheck.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: (no name) - {438755C2-A8BA-11D1-B96B-00A0C90312E1} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll

---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - F:\Antivirus\AntiVir\Installation\Avira\AntiVir Desktop\sched.exe
O23 - Service: (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - F:\Antivirus\AntiVir\Installation\Avira\AntiVir Desktop\avguard.exe
O23 - Service: (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: (Ati HotKey Poller) . (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: (dmadmin) . (.Microsoft Corp., Veritas Software - Processus du service Gestionnaire de disque.) - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: (FLEXnet Licensing Service) . (.Acresso Software Inc. - Activation Licensing Service.) - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: (iPod Service) . (.Apple Inc. - iPodService Module (32-bit).) - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: (sdmBackupIP) - Clé orpheline

---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - F:\Office 2007\Installation\Office12\WINWORD.exe

---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1606980848-220523388-682003330-1004Core.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1606980848-220523388-682003330-1004UA.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Orb Index when idle.job

---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
O41 - Driver: (AsIO) . (...) - C:\Windows\System32\drivers\AsIO.sys
O41 - Driver: (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - F:\Antivirus\AntiVir\Installation\Avira\AntiVir Desktop\avgio.sys
O41 - Driver: (avipbb) . (.Avira GmbH - Avira Driver for RootKit Detection.) - C:\Windows\System32\DRIVERS\avipbb.sys
O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\System32\DRIVERS\i8042prt.sys
O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\Windows\System32\DRIVERS\imapi.sys
O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\Windows\System32\DRIVERS\intelppm.sys
O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\Windows\System32\DRIVERS\ipsec.sys
O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\System32\DRIVERS\kbdclass.sys
O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre souris HID.) - C:\Windows\System32\DRIVERS\kbdhid.sys
O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\System32\DRIVERS\mouclass.sys
O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\Windows\System32\DRIVERS\mrxsmb.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\System32\DRIVERS\rasacd.sys
O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\Windows\System32\DRIVERS\redbook.sys
O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\Windows\System32\DRIVERS\serial.sys
O41 - Driver: (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\Windows\System32\DRIVERS\ssmdrv.sys
O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\Windows\System32\DRIVERS\tcpip.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys
O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys

---\\ Logiciels installés (O42)
O42 - Logiciel: 7-Zip 4.65 - (.Pas de propriétaire.) [HKLM] -- 7-Zip
O42 - Logiciel: ATI Display Driver - (.Pas de propriétaire.) [HKLM] -- ATI Display Driver
O42 - Logiciel: AVIcodec (remove only) - (.Pas de propriétaire.) [HKLM] -- AVIcodec
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- Adobe AIR
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- {AFF7E080-1974-45BF-9310-10DE1A1F5ED0}
O42 - Logiciel: Adobe Acrobat 9 Pro - English, Français, Deutsch - (.Adobe Systems.) [HKLM] -- {AC76BA86-1033-F400-7760-000000000004}
O42 - Logiciel: Adobe Acrobat 9.4.1 - CPSID_83708 - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-1033-F400-7760-000000000004}_941
O42 - Logiciel: Adobe After Effects CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {45EC816C-0771-4C14-AE6D-72D1B578F4C8}
O42 - Logiciel: Adobe After Effects CS4 Presets - (.Adobe Systems Incorporated.) [HKLM] -- {44E240EC-2224-4078-A88B-2CEE0D3016EF}
O42 - Logiciel: Adobe After Effects CS4 Third Party Content - (.Adobe Systems Incorporated.) [HKLM] -- {67A9747A-E1F5-4E9A-81CC-12B5D5B81B6E}
O42 - Logiciel: Adobe Anchor Service CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {1618734A-3957-4ADD-8199-F973763109A8}
O42 - Logiciel: Adobe Bridge CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {83877DB1-8B77-45BC-AB43-2BAC22E093E0}
O42 - Logiciel: Adobe CMaps CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {94D398EB-D2FD-4FD1-B8C4-592635E8A191}
O42 - Logiciel: Adobe CSI CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {0F723FC1-7606-4867-866C-CE80AD292DAF}
O42 - Logiciel: Adobe Color - Photoshop Specific CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {3D2C9DE6-9ADE-4252-A241-E43723B0CE02}
O42 - Logiciel: Adobe Color EU Recommended Settings CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {0DC0E85F-36E4-463B-B3EA-4CD8ED2222A1}
O42 - Logiciel: Adobe Color JA Extra Settings CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {0D6013AB-A0C7-41DC-973C-E93129C9A29F}
O42 - Logiciel: Adobe Color NA Extra Settings CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {098A2A49-7CF3-4F08-A38D-FB879117152A}
O42 - Logiciel: Adobe Color Video Profiles AE CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {B15381DD-FF97-4FCD-A881-ED4DB0975500}
O42 - Logiciel: Adobe Color Video Profiles CS CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {63C24A08-70F3-4C8E-B9FB-9F21A903801D}
O42 - Logiciel: Adobe Creative Suite 4 Master Collection - (.Adobe Systems Incorporated.) [HKLM] -- Adobe_b2d6abde968e6f277ddbfd501383e02
O42 - Logiciel: Adobe Creative Suite 4 Master Collection - (.Adobe Systems Incorporated.) [HKLM] -- {61D6891E-E822-4448-9F9A-0AAAAEB6AF6C}
O42 - Logiciel: Adobe Default Language CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {C52E3EC1-048C-45E1-8D53-10B0C6509683}
O42 - Logiciel: Adobe Dynamiclink Support - (.Adobe Systems Incorporated.) [HKLM] -- {60DB5894-B5A1-4B62-B0F3-669A22C0EE5D}
O42 - Logiciel: Adobe Encore CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {5EAD5443-7194-46CC-A055-428E6ABB1BAF}
O42 - Logiciel: Adobe Encore CS4 Codecs - (.Adobe Systems Incorporated.) [HKLM] -- {FB2A5FCC-B81B-48C2-A009-7804694D83E9}
O42 - Logiciel: Adobe ExtendScript Toolkit CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {F8EF2B3F-C345-4F20-8FE4-791A20333CD5}
O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Fonts All - (.Adobe Systems Incorporated.) [HKLM] -- {FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}
O42 - Logiciel: Adobe Linguistics CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {931AB7EA-3656-4BB7-864D-022B09E3DD67}
O42 - Logiciel: Adobe Media Encoder CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {DEB90B8E-0DCB-48CE-B90E-8842A2BD643E}
O42 - Logiciel: Adobe Media Encoder CS4 Additional Exporter - (.Adobe Systems Incorporated.) [HKLM] -- {BE9CEAAA-F069-4331-BF2F-8D350F6504F4}
O42 - Logiciel: Adobe Media Encoder CS4 Dolby - (.Adobe Systems Incorporated.) [HKLM] -- {EE353798-E875-42E0-B58D-7E6696182EA8}
O42 - Logiciel: Adobe Media Encoder CS4 Exporter - (.Adobe Systems Incorporated.) [HKLM] -- {561968FD-56A1-49FD-9ED0-F55482C7C5BC}
O42 - Logiciel: Adobe Media Encoder CS4 Importer - (.Adobe Systems Incorporated.) [HKLM] -- {8186FF34-D389-4B7E-9A2F-C197585BCFBD}
O42 - Logiciel: Adobe MotionPicture Color Files CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {B05DE7B7-0B40-4411-BD4B-222CAE2D8F15}
O42 - Logiciel: Adobe Output Module - (.Adobe Systems Incorporated.) [HKLM] -- {BB4E33EC-8181-4685-96F7-8554293DEC6A}
O42 - Logiciel: Adobe PDF Library Files CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {F93C84A6-0DC6-42AF-89FA-776F7C377353}
O42 - Logiciel: Adobe Photoshop CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}
O42 - Logiciel: Adobe Photoshop CS4 Support - (.Adobe Systems Incorporated.) [HKLM] -- {63E5CDBF-8214-4F03-84F8-CD3CE48639AD}
O42 - Logiciel: Adobe Photoshop Lightroom 3.3 - (.Adobe.) [HKLM] -- {8C1D4735-84E4-41E2-A1DB-70EADE27633C}
O42 - Logiciel: Adobe Premiere Pro CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {D499F8DE-3F31-4900-9157-61061613704B}
O42 - Logiciel: Adobe Premiere Pro CS4 Functional Content - (.Adobe Systems Incorporated.) [HKLM] -- {B169BC97-B8AA-4ACA-9CF2-9D0FF5BABDF7}
O42 - Logiciel: Adobe Premiere Pro CS4 Third Party Content - (.Adobe Systems Incorporated.) [HKLM] -- {C938BE91-3BB5-4B84-9EF6-88F0505D0038}
O42 - Logiciel: Adobe Reader 7.0.9 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A70900000002}
O42 - Logiciel: Adobe Search for Help - (.Adobe Systems Incorporated.) [HKLM] -- {F0E64E2E-3A60-40D8-A55D-92F6831875DA}
O42 - Logiciel: Adobe Service Manager Extension - (.Adobe Systems Incorporated.) [HKLM] -- {4943EFF5-229F-435D-BEA9-BE3CAEA783A7}
O42 - Logiciel: Adobe Setup - (.Adobe Systems Incorporated.) [HKLM] -- {E8EE9410-8AC4-4F43-A626-DDECA75C79F3}
O42 - Logiciel: Adobe Soundbooth CS4 Codecs - (.Adobe Systems Incorporated.) [HKLM] -- {52232EF4-CC12-4C21-ABCF-ADB79618302D}
O42 - Logiciel: Adobe Type Support CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {820D3F45-F6EE-4AAF-81EF-CE21FF21D230}
O42 - Logiciel: Adobe Update Manager CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {05308C4E-7285-4066-BAE3-6B50DA6ED755}
O42 - Logiciel: Adobe WinSoft Linguistics Plugin - (.Adobe Systems Incorporated.) [HKLM] -- {3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}
O42 - Logiciel: Adobe XMP Panels CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {3A4E8896-C2E7-4084-A4A4-B8FD1894E739}
O42 - Logiciel: AdobeColorCommonSetCMYK - (.Adobe Systems Incorporated.) [HKLM] -- {68243FF8-83CA-466B-B2B8-9F99DA5479C4}
O42 - Logiciel: AdobeColorCommonSetRGB - (.Adobe Systems Incorporated.) [HKLM] -- {16E6D2C1-7C90-4309-8EC4-D2212690AAA4}
O42 - Logiciel: Amazon MP3 Downloader 1.0.9 - (.Pas de propriétaire.) [HKLM] -- Amazon MP3 Downloader
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {EE6097DD-05F4-4178-9719-D3170BF098E8}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {5BF5F9C5-E95B-4AFA-94BE-F2A9CA73B61D}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {6956856F-B6B3-4BE0-BA0B-8F495BE32033}
O42 - Logiciel: Archiveur WinRAR - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver
O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
O42 - Logiciel: Atheros Communications Inc.(R) AR8121/AR8113 Gigabit/Fast Ethernet Driver - (.Atheros Communications Inc..) [HKLM] -- {3108C217-BE83-42E4-AE9E-A56A2A92E549}
O42 - Logiciel: AviSynth 2.5 - (.Pas de propriétaire.) [HKLM] -- AviSynth
O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM] -- Avira AntiVir Desktop
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {FF1C31AE-0CDC-40CE-AB85-406F8B70D643}
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
O42 - Logiciel: Call of Duty Black Ops version 1.0 - (.Ozer1.) [HKLM] -- {564A23F6-CAB6-4799-8270-593F8EAF2EF9}_is1
O42 - Logiciel: Call of Duty Modern Warfare 2 - (.Setup by frogs.) [HKLM] -- {3CDF9C0F-6C77-4307-80A6-0A9D47C174D8}_is1
O42 - Logiciel: Call of Duty(R) - World at War(TM) - (.Activision.) [HKLM] -- InstallShield_{D80A6A73-E58A-4673-AFF5-F12D7110661F}
O42 - Logiciel: Canon MP620 series MP Drivers - (.Pas de propriétaire.) [HKLM] -- {1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP620_series
O42 - Logiciel: Catalyst Control Center - Branding - (.ATI.) [HKLM] -- {8D7133DE-27D2-47E5-B248-4180278D32AA}
O42 - Logiciel: Conduit Engine - (.Conduit Ltd..) [HKLM] -- conduitEngine
O42 - Logiciel: Connect - (.Adobe Systems Incorporated.) [HKLM] -- {B29AD377-CC12-490A-A480-1452337C618D}
O42 - Logiciel: DDS Thumbnail Viewer - (.Pas de propriétaire.) [HKLM] -- {2205B8AE-490E-43F2-AB43-C13C2BEC86A7}
O42 - Logiciel: Documents To Go Desktop for iPhone - (.DataViz, Inc..) [HKLM] -- DTGDesktop
O42 - Logiciel: EPU-6 Engine - (.Pas de propriétaire.) [HKLM] -- {56B83336-FBC1-4C46-8613-90A9E3B440D6}
O42 - Logiciel: Enregistrement utilisateur de Canon MP620 series - (.Pas de propriétaire.) [HKLM] -- Enregistrement utilisateur de Canon MP620 series
O42 - Logiciel: Free CD Ripper V1.9 - (.Koyote Soft.) [HKLM] -- Free CD Ripper_is1
O42 - Logiciel: Free iPod Video Converter 1.34 - (.Jodix Technologies Ltd..) [HKLM] -- Free iPod Video Converter_is1
O42 - Logiciel: Freecorder - (.Applian Technologies Inc..) [HKLM] -- Freecorder4.1
O42 - Logiciel: Freeplayer - (.Free.) [HKLM] -- Freeplayer
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU] -- Google Chrome
O42 - Logiciel: High Definition Audio Driver Package - KB888111 - (.Microsoft Corporation.) [HKLM] -- KB888111WXPSP2
O42 - Logiciel: HomePlayer 1.5.9d - (.HomePlayer.) [HKLM] -- HomePlayer
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399
O42 - Logiciel: Hotfix for Windows XP (KB915800-v4) - (.Microsoft Corporation.) [HKLM] -- KB915800-v4
O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5
O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {133742BA-6F46-4D3E-85AF-78631D9AD8B8}
O42 - Logiciel: JDownloader - (.AppWork UG (haftungsbeschränkt).) [HKLM] -- JDownloader
O42 - Logiciel: Jasc Animation Shop 3 - (.Jasc Software Inc.) [HKLM] -- {174D5678-D941-433C-BD23-58A5C7B0D36D}
O42 - Logiciel: Java(TM) 6 Update 24 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216019FF}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {8E5233E1-7495-44FB-8DEB-4BE906D59619}
O42 - Logiciel: K-Lite Codec Pack 5.7.0 (Full) - (.Pas de propriétaire.) [HKLM] -- KLiteCodecPack_is1
O42 - Logiciel: Lecteur Windows Media 11 - (.Pas de propriétaire.) [HKLM] -- Windows Media Player
O42 - Logiciel: Logitech Print Service - (.Pas de propriétaire.) [HKLM] -- Logitech Print Service
O42 - Logiciel: Logitech QuickCam - (.Logitech, Inc..) [HKLM] -- {466B21EE-2858-4845-B2B3-056FC544DAA3}
O42 - Logiciel: MKVtoolnix 4.4.0 - (.Moritz Bunkus.) [HKLM] -- MKVtoolnix
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: MSXML 6.0 Parser - (.Microsoft Corporation.) [HKLM] -- {AEB9948B-4FF2-47C9-990E-47014492A0FE}
O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1
O42 - Logiciel: Microsoft Games for Windows - LIVE - (.Microsoft Corporation.) [HKLM] -- {2C9EE786-1DDB-4C98-8FA4-B1B9B5A66B77}
O42 - Logiciel: Microsoft Games for Windows - LIVE Redistributable - (.Microsoft Corporation.) [HKLM] -- {00C5F4F4-62F9-40D7-8000-AD8A9CD0C669}
O42 - Logiciel: Microsoft National Language Support Downlevel APIs - (.Microsoft Corporation.) [HKLM] -- NLSDownlevelMapping
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}_PROPLUS_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
O42 - Logiciel: Microsoft Office Access MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- PROPLUS
O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}_PROPLUS_{14809F99-C601-4D4A-9391-F1E8FAA964C5}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}_PROPLUS_{A0516415-ED61-419A-981D-93596DA74165}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}_PROPLUS_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}_PROPLUS_{F580DDD5-8D37-4998-968E-EBB76BB86787}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}_PROPLUS_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}_PROPLUS_{187308AB-5FA7-4F14-9AB9-D290383A10D9}
O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- Wudf01000
O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {7299052b-02a4-4627-81f2-1818da5d550d}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - KB2467175 - (.Microsoft Corporation.) [HKLM] -- {a0fe116e-9a8a-466f-aee0-625cb7c207e3}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 - (.Microsoft Corporation.) [HKLM] -- {86CE85E6-DBAC-3FFD-B977-E4B79F83C909}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 - (.Microsoft Corporation.) [HKLM] -- {820B6609-4C97-3A2B-B644-573B06A0F0CC}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: Mozilla Firefox (3.6.8) - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.6.8)
O42 - Logiciel: NVIDIA Photoshop Plug-ins - (.Pas de propriétaire.) [HKLM] -- {23F79416-CAD1-41BF-99A3-040F6C814AAA}
O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM] -- {3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}
O42 - Logiciel: Nero Suite - (.Pas de propriétaire.) [HKLM] -- NeroMultiInstaller!UninstallKey
O42 - Logiciel: OpenAL - (.Pas de propriétaire.) [HKLM] -- OpenAL
O42 - Logiciel: Orb Runtime libraries - (.Orb Networks, Inc..) [HKLM] -- {2133CB3F-F891-4081-8681-FEE2B2419FF4}
O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}
O42 - Logiciel: PDF Settings CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {35D94F92-1D3A-43C5-8605-EA268B1A7BD9}
O42 - Logiciel: PDF-Viewer - (.Tracker Software Products Ltd.) [HKLM] -- {A278382D-4F1B-4D47-9885-8523F7261E8D}_is1
O42 - Logiciel: Photoshop Camera Raw - (.Adobe Systems Incorporated.) [HKLM] -- {CC75AB5C-2110-4A7F-AF52-708680D22FE8}
O42 - Logiciel: Player tuto.com - (.UNKNOWN.) [HKLM] -- WeecastPlayer.A27AB7741756020517D10FDBA9AD7A2F55F5F984.1
O42 - Logiciel: Player tuto.com - (.UNKNOWN.) [HKLM] -- {047400EA-A127-AA7E-5E82-9F9CCD0423B3}
O42 - Logiciel: Programme de gestion Camera de Logitech® - (.Pas de propriétaire.) [HKLM] -- QcDrv
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {57752979-A1C9-4C02-856B-FBB27AC4E02C}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: SHIFT 2 UNLEASHED™ - (.Electronic Arts.) [HKLM] -- {E8C37E27-5205-4C8A-BECB-B00533045AAE}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288621) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5C497F0B-2061-4CC9-A61C-6B45B867354D}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288931) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{CD769337-C8AC-46DB-A7DC-643E50089263}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2345043) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{536FB502-775F-4494-BACE-C02CC90B7A5B}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2466156) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{CEF209AB-F96D-404F-B5CC-44057C057CA3}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2509488) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{AD0DE453-0804-4495-9C91-33D0F9AA5463}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB969559) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB976321) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{7F207DCA-3399-40CB-A968-6E5991B1421A}
O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473
O42 - Logiciel: Security Update for Microsoft Office Access 2007 (KB979440) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{1142CCEC-ACA9-484B-BA90-C3A5CA1988C5}
O42 - Logiciel: Security Update for Microsoft Office Access 2007 (KB979440) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5A4E43D5-858F-49BD-BA72-8F30E1793060}
O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB2464583) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{151E2FEA-C3A6-4CB6-BE6B-16651FDF04BE}
O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB979441) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{1109D0B3-EFA3-4553-AAED-4C3E9AD130E8}
O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB979441) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{8CCB781A-CF6B-4FCB-B6D8-59C64DF5C6DB}
O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB2464594) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{E6B7C11E-21E9-4BA0-9677-29AD603B953C}
O42 - Logiciel: Security Update for Microsoft Office PowerPoint Viewer 2007 (KB2464623) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{D75E6D0C-BADF-4F41-98B2-0C0F02C15062}
O42 - Logiciel: Security Update for Microsoft Office Publisher 2007 (KB2284697) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3A4CDE54-2403-483D-8D9A-15E3264410DF}
O42 - Logiciel: Security Update for Microsoft Office Visio Viewer 2007 (KB973709) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
O42 - Logiciel: Security Update for Microsoft Office Word 2007 (KB2344993) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{7A5B74FA-7A92-4FC9-821A-2DD5D4E73E48}
O42 - Logiciel: Security Update for Microsoft Office system 2007 (972581) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3D019598-7B59-447A-80AE-815B703B84FF}
O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB974234) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{FCD742B9-7A55-44BC-A776-F795F21FEDDC}
O42 - Logiciel: Security Update for Windows Search 4 - KB963093 - (.Microsoft Corporation.) [HKLM] -- KB963093
O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
O42 - Logiciel: Softonic_France Toolbar - (.Softonic_France.) [HKLM] -- Softonic_France Toolbar
O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1
O42 - Logiciel: Steam - (.Valve Corporation.) [HKLM] -- {048298C9-A4D3-490B-9FF9-AB023A9238F3}
O42 - Logiciel: Suite Shared Configuration CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {842B4B72-9E8F-4962-B3C1-1C422A5C4434}
O42 - Logiciel: TmNationsForever - (.Nadeo.) [HKLM] -- TmNationsForever_is1
O42 - Logiciel: TmUnitedForever Update 2010-03-15 - (.Nadeo.) [HKLM] -- TmUnitedForever_is1
O42 - Logiciel: TrackMania United 0.2.0.0 - (.Nadeo.) [HKLM] -- TmUnited_is1
O42 - Logiciel: Trapcode Particular v2 - (.Pas de propriétaire.) [HKLM] -- Trapcode Particular v2
O42 - Logiciel: Uninstall 1.0.0.0 - (.Pas de propriétaire.) [HKLM] -- Uninstall_is1
O42 - Logiciel: Unity Web Player - (.Unity Technologies ApS.) [HKCU] -- UnityWebPlayer
O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}
O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
O42 - Logiciel: Update for Microsoft Office Outlook 2007 (KB2509470) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{EE6BBE8B-DCC9-4A46-BF00-455F3C8ECE69}
O42 - Logiciel: Update for Outlook 2007 Junk Email Filter (KB2522999) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{CC8A81F7-5A36-4DE9-ABB3-5499132062C5}
O42 - Logiciel: VCRedistSetup - (.Nero AG.) [HKLM] -- {3921A67A-5AB1-4E48-9444-C71814CF3027}
O42 - Logiciel: Videora iPhone 3GS Converter 5.04 - (.Red Kawa.) [HKLM] -- Videora iPhone 3GS Converter
O42 - Logiciel: Visual C++ 2008 x86 Runtime - (v9.0.30729) - (.Microsoft Corporation.) [HKLM] -- {F333A33D-125C-32A2-8DCE-5C5D14231E27}
O42 - Logiciel: Visual C++ 2008 x86 Runtime - v9.0.30729.01 - (.Microsoft Corporation.) [HKLM] -- {F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01
O42 - Logiciel: Vuze - (.Vuze Inc..) [HKLM] -- 8461-7759-5462-8226
O42 - Logiciel: WinSCP 4.2.9 - (.Martin Prikryl.) [HKLM] -- winscp3_is1
O42 - Logiciel: Winamax Poker - (.Table 14.) [HKLM] -- wam.04351C371E530C3762CBA45FA283ED972DCDEFB6.1
O42 - Logiciel: Winamax Poker - (.Table 14.) [HKLM] -- {5CD96B12-931C-BA52-5EEE-03EDF7316C89}
O42 - Logiciel: Windows Feature Pack for Storage (32-bit) - IMAPI update for Blu-Ray - (.Microsoft Corporation.) [HKLM] -- KB952011
O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130) - (.Microsoft Corporation.) [HKLM] -- KB892130
O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {B3B487E7-6171-4376-9074-B28082CEB504}
O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3175E049-F9A9-4A3D-8F19-AC9FB04514D1}
O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {5DD76286-9BE7-4894-A990-E905E91AC818}
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {445B183D-F4F1-45C8-B9DB-F11355CA657B}
O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11
O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime
O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11
O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
O42 - Logiciel: Windows Search 4.0 - (.Microsoft Corporation.) [HKLM] -- KB940157
O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service
O42 - Logiciel: XIRING - lecteurs USB - (.XIRING.) [HKLM] -- {954386A2-B999-4314-A2EC-87AF419E8481}
O42 - Logiciel: YouTube Downloader App 2.03 - (.Regensoft.) [HKLM] -- YouTube Downloader App
O42 - Logiciel: adsl TV - (.adsl TV / FM.) [HKLM] -- {3AFDD2C6-8663-46B5-B195-6CEB00D44768}
O42 - Logiciel: eMule - (.Pas de propriétaire.) [HKLM] -- eMule
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {AAD47011-8518-4608-9656-951DA35B587B}
O42 - Logiciel: installer - (.Install Pedia Limited.) [HKLM] -- installer
O42 - Logiciel: kuler - (.Adobe Systems Incorporated.) [HKLM] -- {098727E1-775A-4450-B573-3F441F1CA243}
O42 - Logiciel: marvell 61xx - (.Marvell.) [HKLM] -- mv61xxDriver
O42 - Logiciel: neroxml - (.Nero AG.) [HKLM] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B}

---\\ HKCU & HKLM Software Keys
[HKCU\Software\7-Zip]
[HKCU\Software\ASUS]
[HKCU\Software\ATI Technologies Inc.]
[HKCU\Software\ATI]
[HKCU\Software\Adobe Lightroom]
[HKCU\Software\Adobe]
[HKCU\Software\Ahead]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\ApplianTechnologies]
[HKCU\Software\Ask&Record]
[HKCU\Software\Audacity]
[HKCU\Software\Autodesk]
[HKCU\Software\Avira]
[HKCU\Software\Azureus]
[HKCU\Software\Binary Noise]
[HKCU\Software\BlueRippleSound]
[HKCU\Software\CDDB]
[HKCU\Software\Canon]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Conduit]
[HKCU\Software\CoreVorbis]
[HKCU\Software\Cyberlink]
[HKCU\Software\Cycore]
[HKCU\Software\DScaler5]
[HKCU\Software\DT Soft]
[HKCU\Software\DVDVideoSoft]
[HKCU\Software\DataViz]
[HKCU\Software\DivXNetworks]
[HKCU\Software\Electronic Arts]
[HKCU\Software\FotoWire]
[HKCU\Software\FreeCDRIP]
[HKCU\Software\Freeplayer]
[HKCU\Software\GNU]
[HKCU\Software\Gabest]
[HKCU\Software\Google]
[HKCU\Software\Haali]
[HKCU\Software\IM Providers]
[HKCU\Software\Intel]
[HKCU\Software\JASC]
[HKCU\Software\JavaSoft]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\Logitech]
[HKCU\Software\MONOGRAM]
[HKCU\Software\MWSetup]
[HKCU\Software\MW]
[HKCU\Software\Macromedia]
[HKCU\Software\MainConcept (Adobe2)]
[HKCU\Software\MainConcept]
[HKCU\Software\Martin Prikryl]
[HKCU\Software\MediaInfo]
[HKCU\Software\Minnetonka Audio Software]
[HKCU\Software\Monitored]
[HKCU\Software\Mootools]
[HKCU\Software\Motion Analysis]
[HKCU\Software\MouseIndustries]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Nadeo]
[HKCU\Software\Nero]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\ORL]
[HKCU\Software\PhotoFiltre Studio X]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\PriceGong]
[HKCU\Software\RealVNC]
[HKCU\Software\Realtek]
[HKCU\Software\Safer Networking Limited]
[HKCU\Software\Softonic]
[HKCU\Software\Softonic_France]
[HKCU\Software\SplashData]
[HKCU\Software\Total Audio MP3 Converter]
[HKCU\Software\Tracker Software]
[HKCU\Software\Trolltech]
[HKCU\Software\Unity]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\Valve]
[HKCU\Software\VirtualDub.org]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\Xobni]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\conduitEngine]
[HKCU\Software\eMule]
[HKCU\Software\ej-technologies]
[HKCU\Software\i-FunBox.com]
[HKCU\Software\madFlac]
[HKCU\Software\mkvmergeGUI]
[HKCU\Software\settings]
[HKLM\Software\14919ea49a8f3b4aa3cf1058d9a64cec]
[HKLM\Software\8ec]
[HKLM\Software\ACE Compression Software]
[HKLM\Software\AGEIA Technologies]
[HKLM\Software\ASUS]
[HKLM\Software\ATI Technologies Inc.]
[HKLM\Software\ATI Technologies]
[HKLM\Software\ATI]
[HKLM\Software\Act-3D]
[HKLM\Software\Activision]
[HKLM\Software\Adobe]
[HKLM\Software\Ahead]
[HKLM\Software\Amazon]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\Applian Technologies]
[HKLM\Software\Atheros Communications Inc.]
[HKLM\Software\Audible]
[HKLM\Software\Autodesk]
[HKLM\Software\Avira]
[HKLM\Software\Azureus]
[HKLM\Software\BlueRippleSound]
[HKLM\Software\C07ft5Y]
[HKLM\Software\CLSYSTEM]
[HKLM\Software\Canon]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Codec Tweak Tool]
[HKLM\Software\Conduit]
[HKLM\Software\Cyberlink]
[HKLM\Software\DT Soft]
[HKLM\Software\DVDVideoSoft]
[HKLM\Software\DivXNetworks]
[HKLM\Software\DivX]
[HKLM\Software\Electronic Arts]
[HKLM\Software\FLEXlm License Manager]
[HKLM\Software\FotoWire]
[HKLM\Software\GEAR Software]
[HKLM\Software\GNU]
[HKLM\Software\Gabest]
[HKLM\Software\Gemplus]
[HKLM\Software\Google]
[HKLM\Software\HaaliMkx]
[HKLM\Software\Imagineer Systems Ltd]
[HKLM\Software\Install Pedia Limited]
[HKLM\Software\InstallShield]
[HKLM\Software\Installer]
[HKLM\Software\Intel]
[HKLM\Software\InterVideo]
[HKLM\Software\JavaSoft]
[HKLM\Software\Jodix]
[HKLM\Software\JreMetrics]
[HKLM\Software\KLCodecPack]
[HKLM\Software\Kaydara]
[HKLM\Software\Lavasoft]
[HKLM\Software\Logitech]
[HKLM\Software\MAXSOFT-OCRON]
[HKLM\Software\Macromedia]
[HKLM\Software\Macrovision]
[HKLM\Software\Martin Prikryl]
[HKLM\Software\Marvell]
[HKLM\Software\MimarSinan]
[HKLM\Software\Minnetonka Audio Software]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\Nero]
[HKLM\Software\Ntpad]
[HKLM\Software\ODBC]
[HKLM\Software\ORL]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\Program Groups]
[HKLM\Software\Rainbow Technologies]
[HKLM\Software\RealVNC]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\Red Giant Software]
[HKLM\Software\RedKawa]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Safer Networking Limited]
[HKLM\Software\Schlumberger]
[HKLM\Software\Secure]
[HKLM\Software\Softonic_France]
[HKLM\Software\Synthetic Aperture]
[HKLM\Software\Tracker Software]
[HKLM\Software\TrendMicro]
[HKLM\Software\Trolltech]
[HKLM\Software\Valve]
[HKLM\Software\VideoLAN]
[HKLM\Software\Windows 3.1 Migration Status]
[HKLM\Software\Windows]
[HKLM\Software\X-AVCSD]
[HKLM\Software\ej-technologies]
[HKLM\Software\magnet]
[HKLM\Software\mkvmergeGUI]
[HKLM\Software\mozilla.org]

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 05/07/2010 - 14:25:56 - [367210428] ----D- C:\Program Files\Adobe
O43 - CFD: 14/02/2010 - 23:01:26 - [2221118] ----D- C:\Program Files\Apple Software Update
O43 - CFD: 01/02/2010 - 12:40:52 - [7559338] ----D- C:\Program Files\ASUS
O43 - CFD: 09/02/2010 - 10:16:46 - [17063060] ----D- C:\Program Files\ATI
O43 - CFD: 09/02/2010 - 10:14:52 - [49564232] ----D- C:\Program Files\ATI Technologies
O43 - CFD: 29/03/2011 - 15:59:04 - [15994138] ----D- C:\Program Files\Autodesk
O43 - CFD: 26/05/2010 - 15:12:36 - [4859926] ----D- C:\Program Files\AviSynth 2.5
O43 - CFD: 10/10/2010 - 14:19:18 - [599837] ----D- C:\Program Files\Bonjour
O43 - CFD: 29/05/2010 - 16:54:38 - [21148190] ----D- C:\Program Files\Canon
O43 - CFD: 29/05/2010 - 15:54:44 - [28697986] --H-D- C:\Program Files\CanonBJ
O43 - CFD: 14/11/2010 - 19:49:40 - [3206848] ----D- C:\Program Files\CCleaner
O43 - CFD: 31/01/2010 - 00:40:52 - [0] ----D- C:\Program Files\ComPlus Applications
O43 - CFD: 05/03/2010 - 12:40:14 - [532064] ----D- C:\Program Files\Conduit
O43 - CFD: 15/03/2011 - 15:24:48 - [4164954] ----D- C:\Program Files\ConduitEngine
O43 - CFD: 02/03/2011 - 17:19:54 - [8577024] ----D- C:\Program Files\Digieffects
O43 - CFD: 06/09/2010 - 16:43:52 - [4788939] ----D- C:\Program Files\Documents To Go Desktop
O43 - CFD: 29/03/2011 - 15:58:00 - [1329190084] ----D- C:\Program Files\Fichiers communs
O43 - CFD: 11/09/2010 - 10:38:56 - [19374725] ----D- C:\Program Files\Free Audio Pack
O43 - CFD: 23/07/2010 - 18:59:44 - [0] ----D- C:\Program Files\Google
O43 - CFD: 26/01/2011 - 21:27:10 - [752889] ----D- C:\Program Files\Installer
O43 - CFD: 01/08/2010 - 13:45:26 - [50445390] --H-D- C:\Program Files\InstallShield Installation Information
O43 - CFD: 01/02/2010 - 12:20:28 - [64868] ----D- C:\Program Files\Intel
O43 - CFD: 12/02/2010 - 21:37:46 - [2389551] ----D- C:\Program Files\Internet Explorer
O43 - CFD: 16/02/2011 - 12:07:00 - [1856115] ----D- C:\Program Files\iPod
O43 - CFD: 14/03/2011 - 12:01:22 - [81843763] ----D- C:\Program Files\Java
O43 - CFD: 24/02/2010 - 20:56:34 - [2962311] ----D- C:\Program Files\Logitech
O43 - CFD: 01/02/2010 - 12:38:38 - [288808] ----D- C:\Program Files\Marvell
O43 - CFD: 05/02/2010 - 22:05:20 - [2152579] ----D- C:\Program Files\Messenger
O43 - CFD: 09/03/2010 - 15:44:56 - [226432] ----D- C:\Program Files\Microsoft
O43 - CFD: 31/01/2010 - 00:44:18 - [0] ----D- C:\Program Files\microsoft frontpage
O43 - CFD: 21/02/2010 - 15:11:28 - [11785929] ----D- C:\Program Files\Microsoft Games for Windows - LIVE
O43 - CFD: 28/04/2011 - 14:44:22 - [38388859] ----D- C:\Program Files\Microsoft Silverlight
O43 - CFD: 08/03/2010 - 22:39:00 - [14904] ----D- C:\Program Files\Microsoft Visual Studio
O43 - CFD: 09/03/2010 - 07:54:48 - [3726168] ----D- C:\Program Files\Microsoft Works
O43 - CFD: 08/03/2010 - 22:38:30 - [8152064] ----D- C:\Program Files\Microsoft.NET
O43 - CFD: 11/08/2010 - 21:24:42 - [10374874] ----D- C:\Program Files\Movie Maker
O43 - CFD: 12/02/2010 - 21:39:26 - [25757] ----D- C:\Program Files\MSBuild
O43 - CFD: 31/01/2010 - 00:39:16 - [0] ----D- C:\Program Files\MSN
O43 - CFD: 31/01/2010 - 00:40:14 - [8745735] ----D- C:\Program Files\MSN Gaming Zone
O43 - CFD: 25/02/2010 - 04:00:28 - [0] ----D- C:\Program Files\MSXML 4.0
O43 - CFD: 05/02/2010 - 20:59:38 - [3285523] ----D- C:\Program Files\NetMeeting
O43 - CFD: 02/09/2010 - 10:09:00 - [78589354] ----D- C:\Program Files\NVIDIA Corporation
O43 - CFD: 21/02/2010 - 15:11:08 - [809560] ----D- C:\Program Files\OpenAL
O43 - CFD: 16/12/2010 - 04:00:44 - [4379321] ----D- C:\Program Files\Outlook Express
O43 - CFD: 10/07/2010 - 18:05:12 - [1672158] ----D- C:\Program Files\Player tuto.com
O43 - CFD: 16/02/2011 - 12:02:08 - [76322555] ----D- C:\Program Files\QuickTime
O43 - CFD: 01/02/2010 - 12:35:32 - [52259734] ----D- C:\Program Files\Realtek
O43 - CFD: 12/02/2010 - 21:39:18 - [36400897] ----D- C:\Program Files\Reference Assemblies
O43 - CFD: 26/05/2010 - 15:12:40 - [25015822] ----D- C:\Program Files\Regensoft
O43 - CFD: 31/01/2010 - 00:43:14 - [1025] ----D- C:\Program Files\Services en ligne
O43 - CFD: 19/10/2010 - 10:47:38 - [3856851] ----D- C:\Program Files\sesam
O43 - CFD: 15/03/2011 - 15:24:50 - [11964791] ----D- C:\Program Files\Softonic_France
O43 - CFD: 06/05/2011 - 18:14:46 - [406299] ----D- C:\Program Files\Trend Micro
O43 - CFD: 31/01/2010 - 00:50:58 - [0] --H-D- C:\Program Files\Uninstall Information
O43 - CFD: 20/04/2010 - 03:17:04 - [5418300] ----D- C:\Program Files\Windows Desktop Search
O43 - CFD: 29/01/2011 - 01:15:40 - [81920207] ----D- C:\Program Files\Windows Live
O43 - CFD: 09/03/2010 - 15:44:40 - [245112] ----D- C:\Program Files\Windows Live SkyDrive
O43 - CFD: 21/02/2011 - 15:44:32 - [3581070] ----D- C:\Program Files\Windows Media Connect 2
O43 - CFD: 21/02/2011 - 15:44:32 - [8621274] ----D- C:\Program Files\Windows Media Player
O43 - CFD: 05/02/2010 - 20:59:36 - [3942655] ----D- C:\Program Files\Windows NT
O43 - CFD: 31/01/2010 - 00:43:18 - [0] --H-D- C:\Program Files\WindowsUpdate
O43 - CFD: 31/01/2010 - 00:44:18 - [0] ----D- C:\Program Files\xerox
O43 - CFD: 18/10/2010 - 11:06:24 - [28099] ----D- C:\Program Files\xiring
O43 - CFD: 27/02/2011 - 18:38:02 - [587579429] ----D- C:\Program Files\Fichiers Communs\Adobe
O43 - CFD: 25/03/2011 - 22:14:02 - [31116170] ----D- C:\Program Files\Fichiers Communs\Adobe AIR
O43 - CFD: 09/05/2010 - 11:00:52 - [26545092] ----D- C:\Program Files\Fichiers Communs\Ahead
O43 - CFD: 16/02/2011 - 12:07:00 - [94753968] ----D- C:\Program Files\Fichiers Communs\Apple
O43 - CFD: 08/03/2010 - 22:39:00 - [92976] ----D- C:\Program Files\Fichiers Communs\DESIGNER
O43 - CFD: 28/08/2010 - 08:08:14 - [6179397] ----D- C:\Program Files\Fichiers Communs\DVDVideoSoft
O43 - CFD: 24/02/2010 - 20:56:34 - [86016] ----D- C:\Program Files\Fichiers Communs\FotoWire
O43 - CFD: 05/03/2010 - 12:40:18 - [88861526] ----D- C:\Program Files\Fichiers Communs\i4j_jres
O43 - CFD: 06/09/2010 - 16:41:10 - [10578455] ----D- C:\Program Files\Fichiers Communs\InstallShield
O43 - CFD: 14/03/2011 - 12:01:38 - [1247175] ----D- C:\Program Files\Fichiers Communs\Java
O43 - CFD: 24/02/2010 - 20:54:36 - [22259177] ----D- C:\Program Files\Fichiers Communs\Logitech
O43 - CFD: 05/02/2010 - 22:21:44 - [655959] ----D- C:\Program Files\Fichiers Communs\Macrovision Shared
O43 - CFD: 09/03/2010 - 15:44:46 - [221070753] ----D- C:\Program Files\Fichiers Communs\Microsoft Shared
O43 - CFD: 31/01/2010 - 00:42:00 - [284160] ----D- C:\Program Files\Fichiers Communs\MSSoap
O43 - CFD: 09/05/2010 - 11:02:54 - [2282421] ----D- C:\Program Files\Fichiers Communs\Nero
O43 - CFD: 30/01/2010 - 18:12:30 - [0] ----D- C:\Program Files\Fichiers Communs\ODBC
O43 - CFD: 31/01/2010 - 00:42:06 - [8106] ----D- C:\Program Files\Fichiers Communs\Services
O43 - CFD: 30/01/2010 - 18:12:24 - [3787229] ----D- C:\Program Files\Fichiers Communs\SpeechEngines
O43 - CFD: 09/03/2010 - 07:53:48 - [41360161] ----D- C:\Program Files\Fichiers Communs\System
O43 - CFD: 09/03/2010 - 15:39:34 - [163428282] ----D- C:\Program Files\Fichiers Communs\Windows Live
O43 - CFD: 02/09/2010 - 10:08:44 - [27013632] ----D- C:\Program Files\Fichiers Communs\Wise Installation Wizard
O43 - CFD: 27/02/2011 - 18:36:10 - [3735635018] ----D- C:\Documents and Settings\Matt\Application Data\Adobe
O43 - CFD: 22/02/2010 - 21:31:16 - [0] ----D- C:\Documents and Settings\Matt\Application Data\AdobeUM
O43 - CFD: 07/04/2011 - 16:57:40 - [10090] ----D- C:\Documents and Settings\Matt\Application Data\Amazon
O43 - CFD: 20/05/2010 - 11:45:56 - [1944280376] ----D- C:\Documents and Settings\Matt\Application Data\Apple Computer
O43 - CFD: 09/02/2010 - 10:23:18 - [0] ----D- C:\Documents and Settings\Matt\Application Data\ATI
O43 - CFD: 11/02/2010 - 02:05:46 - [1525] ----D- C:\Documents and Settings\Matt\Application Data\Audacity
O43 - CFD: 24/07/2010 - 18:22:56 - [6165] ----D- C:\Documents and Settings\Matt\Application Data\Autodesk
O43 - CFD: 21/03/2011 - 15:34:38 - [488625] ----D- C:\Documents and Settings\Matt\Application Data\Azureus
O43 - CFD: 25/12/2010 - 19:48:50 - [0] ----D- C:\Documents and Settings\Matt\Application Data\Broad Intelligence
O43 - CFD: 16/07/2010 - 11:06:12 - [0] ----D- C:\Documents and Settings\Matt\Application Data\Canon
O43 - CFD: 05/02/2010 - 20:10:12 - [4052] ----D- C:\Documents and Settings\Matt\Application Data\DAEMON Tools Lite
O43 - CFD: 03/12/2010 - 01:21:14 - [174080] ----D- C:\Documents and Settings\Matt\Application Data\DivX
O43 - CFD: 06/09/2010 - 16:45:10 - [137692] ----D- C:\Documents and Settings\Matt\Application Data\DocumentsToGoDesktop
O43 - CFD: 28/07/2010 - 13:30:06 - [0] ----D- C:\Documents and Settings\Matt\Application Data\FastStone
O43 - CFD: 24/02/2010 - 21:10:14 - [0] ----D- C:\Documents and Settings\Matt\Application Data\Fit3DLive
O43 - CFD: 24/02/2010 - 20:56:34 - [0] ----D- C:\Documents and Settings\Matt\Application Data\FotoWire
O43 - CFD: 11/09/2010 - 10:39:06 - [1666] ----D- C:\Documents and Settings\Matt\Application Data\FreeCDRipper
O43 - CFD: 22/12/2010 - 14:44:22 - [45] ----D- C:\Documents and Settings\Matt\Application Data\Identities
O43 - CFD: 28/07/2010 - 13:39:00 - [28] ----D- C:\Documents and Settings\Matt\Application Data\iPhoneRingToneMaker
O43 - CFD: 11/03/2010 - 23:33:38 - [0] ----D- C:\Documents and Settings\Matt\Application Data\Jasc
O43 - CFD: 06/02/2010 - 00:08:52 - [68846] ----D- C:\Documents and Settings\Matt\Application Data\Macromedia
O43 - CFD: 04/05/2011 - 15:57:40 - [87] ----D- C:\Documents and Settings\Matt\Application Data\Media Player Classic
O43 - CFD: 29/07/2010 - 21:13:18 - [4772978] -S--D- C:\Documents and Settings\Matt\Application Data\Microsoft
O43 - CFD: 19/12/2010 - 08:51:52 - [0] ----D- C:\Documents and Settings\Matt\Application Data\mkvtoolnix
O43 - CFD: 05/02/2010 - 12:56:54 - [12909621] ----D- C:\Documents and Settings\Matt\Application Data\Mozilla
O43 - CFD: 11/07/2010 - 16:07:08 - [60] ----D- C:\Documents and Settings\Matt\Application Data\MPEG Streamclip
O43 - CFD: 08/05/2010 - 14:38:20 - [339810] ----D- C:\Documents and Settings\Matt\Application Data\Nero
O43 - CFD: 22/12/2010 - 23:14:52 - [661] ----D- C:\Documents and Settings\Matt\Application Data\PhotoFiltre Studio X
O43 - CFD: 03/04/2011 - 19:08:24 - [1754360] ----D- C:\Documents and Settings\Matt\Application Data\PriceGong
O43 - CFD: 26/05/2010 - 16:24:50 - [180653] ----D- C:\Documents and Settings\Matt\Application Data\Red Kawa
O43 - CFD: 26/05/2010 - 16:24:44 - [686] ----D- C:\Documents and Settings\Matt\Application Data\Regensoft
O43 - CFD: 27/12/2010 - 20:14:54 - [14009] ----D- C:\Documents and Settings\Matt\Application Data\Subversion
O43 - CFD: 14/04/2010 - 21:24:20 - [33818804] ----D- C:\Documents and Settings\Matt\Application Data\Sun
O43 - CFD: 06/02/2011 - 13:44:36 - [110592] ----D- C:\Documents and Settings\Matt\Application Data\U3
O43 - CFD: 03/03/2010 - 22:48:56 - [420] ----D- C:\Documents and Settings\Matt\Application Data\Unity
O43 - CFD: 24/11/2010 - 17:10:26 - [424906] ----D- C:\Documents and Settings\Matt\Application Data\vlc
O43 - CFD: 25/03/2011 - 22:03:06 - [1320532] ----D- C:\Documents and Settings\Matt\Application Data\wam.04351C371E530C3762CBA45FA283ED972DCDEFB6.1
O43 - CFD: 24/02/2010 - 18:43:16 - [137499672] ----D- C:\Documents and Settings\Matt\Application Data\WeecastPlayer.A27AB7741756020517D10FDBA9AD7A2F55F5F984.1
O43 - CFD: 19/04/2010 - 18:32:08 - [196] ----D- C:\Documents and Settings\Matt\Application Data\Windows Desktop Search
O43 - CFD: 19/04/2010 - 18:32:18 - [0] ----D- C:\Documents and Settings\Matt\Application Data\Windows Search
O43 - CFD: 16/12/2010 - 12:51:28 - [0] ----D- C:\Documents and Settings\Matt\Application Data\WinRAR
O43 - CFD: 02/09/2010 - 14:30:28 - [2093526] ----D- C:\Documents and Settings\Matt\Local Settings\Application Data\2K Games
O43 - CFD: 17/12/2010 - 20:37:54 - [23706257] ----D- C:\Documents and Settings\Matt\Local Settings\Application Data\Activision
O43 - CFD: 05/07/2010 - 14:25:46 - [887339] ----D- C:\Documents and Settings\Matt\Local Settings\Application Data\Adobe
O43 - CFD: 15/05/2010 - 22:36:46 - [1973619] ----D- C:\Documents and Settings\Matt\Local Settings\Application Data\Ahead
O43 - CFD: 14/02/2010 - 23:01:26 - [0] ----D- C:\Documents and Settings\Matt\Local Settings\Application Data\Apple
O43 - CFD: 16/04/2010 - 23:04:10 - [183268165] ----D- C:\Documents and Settings\Matt\Local Settings\Application Data\Apple Computer
O43 - CFD: 01/12/2010 - 21:53:10 - [69144] ----D- C:\Documents and Settings\Matt\Local Settings\Application Data\assembly
O43 - CFD: 09/02/2010 - 10:23:18 - [94968] ----D- C:\Documents and Settings\Matt\Local Settings\Application Data\ATI
O43 - CFD: 22/07/2010 - 18:48:42 - [10386907] ----D- C:\Documents and Settings\Matt\Local Settings\Application Data\Autodesk
O43 - CFD: 15/03/2011 - 15:24:40 - [3140811] ----D- C:\Documents and Settings\Matt\Local Settings\Application Data\Conduit
O43 - CFD: 03/04/2011 - 19:08:26 - [4573830] ----D- C:\Documents and Settings\Matt\Local Settings\Application Data\ConduitEngine
O43 - CFD: 07/05/2011 - 14:55:14 - [523857044] ----D- C:\Documents and Settings\Matt\Local Settings\Application Data\FLVService
O43 - CFD: 26/05/2010 - 15:12:58 - [2459643] ----D- C:\Documents and Settings\Matt\Local Settings\Application Data\Geckofx
O43 - CFD: 28/07/2010 - 13:39:22 - [816996405] ----D- C:\Documents and Settings\Matt\Local Settings\Application Data\Google
O43 - CFD: 06/02/2010 - 19:19:02 - [127033928] ----D- C:\Documents and Settings\Matt\Local Settings\Application Data\Identities
O43 - CFD: 28/05/2010 - 22:56:26 - [0] ----D- C:\Documents and Settings\Matt\Local Settings\Application Data\iRinger
O43 - CFD: 30/04/2011 - 16:19:00 - [1296117801] ----D- C:\Documents and Settings\Matt\Local Settings\Application Data\Microsoft
O43 - CFD: 08/03/2010 - 22:32:42 - [0] ----D- C:\Documents and Settings\Matt\Local Settings\Application Data\Microsoft Help
O43 - CFD: 05/02/2010 - 12:56:48 - [51081788] ----D- C:\Documents and Settings\Matt\Local Settings\Application Data\Mozilla
O43 - CFD: 09/05/2010 - 10:54:02 - [63488] ----D- C:\Documents and Settings\Matt\Local Settings\Application Data\Nero
O43 - CFD: 01/12/2010 - 21:54:44 - [830] ----D- C:\Documents and Settings\Matt\Local Settings\Application Data\networker
O43 - CFD: 04/07/2010 - 12:02:32 - [2546] ----D- C:\Documents and Settings\Matt\Local Settings\Application Data\Sidhe
O43 - CFD: 03/04/2011 - 19:08:26 - [6832456] ----D- C:\Documents and Settings\Matt\Local Settings\Application Data\Softonic_France
O43 - CFD: 31/12/2010 - 16:58:20 - [0] ----D- C:\Documents and Settings\Matt\Local Settings\Application Data\Sunbelt Software
O43 - CFD: 27/04/2011 - 02:39:14 - [0] ----D- C:\Documents and Settings\Matt\Local Settings\Application Data\Temp
O43 - CFD: 21/03/2010 - 14:57:18 - [11490308] ----D- C:\Documents and Settings\Matt\Local Settings\Application Data\Unity

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.5866F5AC5FA90002CC1275789B715A60] - 07/05/2011 - 12:50:52 ---A- . (...) -- C:\WINDOWS\NeroDigital.ini [116]
O44 - LFC:[MD5.7CEE1300F915817C00ECFD7F50EF1300] - 07/05/2011 - 08:39:36 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log [2071929]
O44 - LFC:[MD5.7C01D94C1A6C5B0BF24B79BC1DFA6D7E] - 07/05/2011 - 08:39:31 ---A- . (...) -- C:\WINDOWS\wmsetup.log [1616]
O44 - LFC:[MD5.7CEE1300F915817C00ECFD7F50EF1300] - 07/05/2011 - 04:42:08 ---A- . (...) -- C:\WINDOWS\wiadebug.log [211]
O44 - LFC:[MD5.6F73E5AE6116F9F62811EA3FCEFBE794] - 06/05/2011 - 20:00:54 ---A- . (...) -- C:\WINDOWS\System32\LVCOMSX.LOG [33406]
O44 - LFC:[MD5.7CEE1300F915817C00ECFD7F50EF1300] - 06/05/2011 - 16:33:28 ---A- . (...) -- C:\WINDOWS\wiaservc.log [50]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 06/05/2011 - 16:33:23 ---A- . (...) -- C:\WINDOWS\0.log [0]
O44 - LFC:[MD5.4A988C5BB37176862177E7F69915C68A] - 06/05/2011 - 16:32:34 ---A- . (...) -- C:\WINDOWS\System32\wpa.dbl [13646]
O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 06/05/2011 - 16:32:24 -S-A- . (...) -- C:\WINDOWS\bootstat.dat [2048]
O44 - LFC:[MD5.7CEE1300F915817C00ECFD7F50EF1300] - 06/05/2011 - 16:30:03 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt [32422]
O44 - LFC:[MD5.7F53B91F1E1765F9C5C50F40B2CBF792] - 06/05/2011 - 13:36:08 ---A- . (...) -- C:\WINDOWS\SurCode.INI [21]
O44 - LFC:[MD5.CF896141D3E24BB40B22752220D5B1B8] - 06/05/2011 - 13:36:08 ---A- . (...) -- C:\WINDOWS\System32\lsprst7.dll [205]
O44 - LFC:[MD5.F71718080D441946942F5D6C43AA397C] - 06/05/2011 - 13:36:08 ---A- . (...) -- C:\WINDOWS\System32\lsprst7.tgz [219]
O44 - LFC:[MD5.4AA1108231E158A00AFBDE5C719E54EE] - 06/05/2011 - 13:36:08 ---A- . (...) -- C:\WINDOWS\System32\ssprs.dll [73]
O44 - LFC:[MD5.144F47D8B1212E66FD359039CFC6932B] - 06/05/2011 - 13:36:08 ---A- . (...) -- C:\WINDOWS\System32\ssprs.tgz [87]
O44 - LFC:[MD5.CB4528323B2237E5F592785C1043E810] - 13/04/2011 - 13:50:37 ---A- . (...) -- C:\WINDOWS\System32\FNTCACHE.DAT [2432296]
O44 - LFC:[MD5.04B5E451B61857E1FF3B9E89822D2103] - 13/04/2011 - 12:42:25 ---A- . (...) -- C:\WINDOWS\System32\PerfStringBackup.INI [1090596]
O44 - LFC:[MD5.EC3329D725F14BFED5B3C55035377F7E] - 13/04/2011 - 12:42:25 ---A- . (...) -- C:\WINDOWS\System32\perfc009.dat [68292]
O44 - LFC:[MD5.1234E4491A6F82904CEF6C5541B726F4] - 13/04/2011 - 12:42:25 ---A- . (...) -- C:\WINDOWS\System32\perfc00C.dat [90508]
O44 - LFC:[MD5.BE62CB5BE753D8BB0CE155D07AB83350] - 13/04/2011 - 12:42:25 ---A- . (...) -- C:\WINDOWS\System32\perfh009.dat [435396]
O44 - LFC:[MD5.E084FD605E93B656A98750462E40B6EB] - 13/04/2011 - 12:42:25 ---A- . (...) -- C:\WINDOWS\System32\perfh00C.dat [526160]
O44 - LFC:[MD5.F5CEA48F351C2D4F280827BC7ADE5FDE] - 12/04/2011 - 20:22:00 --HA- . (...) -- C:\WINDOWS\System32\mlfcache.dat [120024]

---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)
O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll
O46 - SEH:ShellExecuteHooks - URL Exec Hook - {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll

---\\ Export de clé d'application autorisée (O47)
O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [Enabled] .(.Adobe Systems Incorporated.) -- C:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe
O47 - AAKE:Key Export SP - "E:\TrackMania\TMUF\TmForever.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) -- E:\TrackMania\TMUF\TmForever.exe
O47 - AAKE:Key Export SP - "F:\ADSL TV\Installation\vlc.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) -- F:\ADSL TV\Installation\vlc.exe (.not file.)
O47 - AAKE:Key Export SP - "C:\Program Files\Messenger\msmsgs.exe" [Enabled] .(.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
O47 - AAKE:Key Export SP - "F:\[eMule]\eMule 0.49c\emule.exe" [Enabled] .(.http://www.emule-project.net - eMule.) -- F:\[eMule]\eMule 0.49c\emule.exe
O47 - AAKE:Key Export SP - "F:\Azureus\Installation\Azureus.exe" [Enabled] .(.Vuze Inc. - Pas de description.) -- F:\Azureus\Installation\Azureus.exe
O47 - AAKE:Key Export SP - "F:\Office 2007\Installation\Office12\OUTLOOK.EXE" [Enabled] .(.Microsoft Corporation - Microsoft Office Outlook.) -- F:\Office 2007\Installation\Office12\OUTLOOK.exe
O47 - AAKE:Key Export SP - "F:\VNC\Real VNC 4.1.3\vncviewer.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) -- F:\VNC\Real VNC 4.1.3\vncviewer.exe (.not file.)
O47 - AAKE:Key Export SP - "F:\VNC\Tight VNC\WinVNC.exe" [Disabled] .(.Pas de propriétaire - Pas de description.) -- F:\VNC\Tight VNC\WinVNC.exe (.not file.)
O47 - AAKE:Key Export SP - "F:\ADSL TV\Installation\adsltv.exe" [Enabled] .(.adsl TV / FM - Pas de description.) -- F:\ADSL TV\Installation\adsltv.exe
O47 - AAKE:Key Export SP - "F:\ADSL TV\Installation\VLC\vlc.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) -- F:\ADSL TV\Installation\VLC\vlc.exe
O47 - AAKE:Key Export SP - "F:\Steam\Installation\Steam.exe" [Enabled] .(.Valve Corporation - Steam.) -- F:\Steam\Installation\Steam.exe
O47 - AAKE:Key Export SP - "F:\Steam\Installation\steamapps\common\alien swarm\srcds.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) -- F:\Steam\Installation\steamapps\common\alien swarm\srcds.exe (.not file.)
O47 - AAKE:Key Export SP - "E:\COD - World at War\Installation\CoDWaWmp.exe" [Enabled] .(.Activision Blizzard, Inc. - Call of Duty(R): World at War Multiplayer.) -- E:\COD - World at War\Installation\CoDWaWmp.exe
O47 - AAKE:Key Export SP - "E:\COD - World at War\Installation\CoDWaW.exe" [Enabled] .(.Activision Blizzard, Inc. - Call of Duty(R): World at War Campaign/Coop.) -- E:\COD - World at War\Installation\CoDWaW.exe
O47 - AAKE:Key Export SP - "F:\[iPhone]\File Magic\Installation\File Magic.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) -- F:\[iPhone]\File Magic\Installation\File Magic.exe (.not file.)
O47 - AAKE:Key Export SP - "F:\[iPhone]\Orb\Installation\bin\OrbjetManager.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) -- F:\[iPhone]\Orb\Installation\bin\OrbjetManager.exe (.not file.)
O47 - AAKE:Key Export SP - "F:\[iPhone]\Orb\Installation\bin\Orb.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) -- F:\[iPhone]\Orb\Installation\bin\Orb.exe (.not file.)
O47 - AAKE:Key Export SP - "F:\[iPhone]\Orb\Installation\bin\OrbLauncher.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) -- F:\[iPhone]\Orb\Installation\bin\OrbLauncher.exe (.not file.)
O47 - AAKE:Key Export SP - "F:\[iPhone]\Orb\Installation\bin\OrbSetupWizard.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) -- F:\[iPhone]\Orb\Installation\bin\OrbSetupWizard.exe (.not file.)
O47 - AAKE:Key Export SP - "F:\[iPhone]\Orb\Installation\bin\OrbControlPanel.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) -- F:\[iPhone]\Orb\Installation\bin\OrbControlPanel.exe (.not file.)
O47 - AAKE:Key Export SP - "F:\[iPhone]\Orb\Installation\bin\OrbStreamerClient.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) -- F:\[iPhone]\Orb\Installation\bin\OrbStreamerClient.exe (.not file.)
O47 - AAKE:Key Export SP - "F:\ADOBE CS4\Installation\Adobe After Effects CS4\Support Files\AfterFX.exe" [Enabled] .(.Adobe Systems Incorporated.) -- F:\ADOBE CS4\Installation\Adobe After Effects CS4\Support Files\AfterFX.exe
O47 - AAKE:Key Export SP - "E:\Virtual Skipper 5\Installation\Vsk5Online.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) -- E:\Virtual Skipper 5\Installation\Vsk5Online.exe (.not file.)
O47 - AAKE:Key Export SP - "C:\Program Files\Bonjour\mDNSResponder.exe" [Enabled] .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe
O47 - AAKE:Key Export SP - "E:\Need for Speed - Hot Pursuit\Installation\Launcher.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) -- E:\Need for Speed - Hot Pursuit\Installation\Launcher.exe (.not file.)
O47 - AAKE:Key Export SP - "F:\FreePlayer\Installation\vlc\vlc.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) -- F:\FreePlayer\Installation\vlc\vlc.exe
O47 - AAKE:Key Export SP - "E:\Need for Speed - Hot Pursuit\Installation\NFS11.exe" [Disabled] .(.Pas de propriétaire - Pas de description.) -- E:\Need for Speed - Hot Pursuit\Installation\NFS11.exe (.not file.)
O47 - AAKE:Key Export SP - "C:\Program Files\Java\jre6\bin\java.exe" [Enabled] .(.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\java.exe
O47 - AAKE:Key Export SP - "F:\JDownloader\Installation\downloads\Call_of_Duty_Black_Ops\Call_of_Duty_Black_Ops_French_up_by_Urukubarr_Team-Cx\BlackOps.exe" [Enabled] .(.Pas de propriétaireF:\JDownloader\Installation\downloads\Call_of_Duty_Black_Ops\Call
O47 - AAKE:Key Export SP - "C:\Program Files\Java\jre6\bin\javaw.exe" [Enabled] .(.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\javaw.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O47 - AAKE:Key Export SP - "F:\iTunes\Installation\iTunes.exe" [Enabled] .(.Apple Inc. - iTunes.) -- F:\iTunes\Installation\iTunes.exe
O47 - AAKE:Key Export SP - "F:\FreePlayer\HomePlayer\Installation\HomePlayer.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) -- F:\FreePlayer\HomePlayer\Installation\HomePlayer.exe
O47 - AAKE:Key Export SP - "F:\FreePlayer\HomePlayer\Installation\VLC\vlc.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) -- F:\FreePlayer\HomePlayer\Installation\VLC\vlc.exe
O47 - AAKE:Key Export SP - "E:\COD - Black Ops\COD - Black Ops\BlackOps.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) -- E:\COD - Black Ops\COD - Black Ops\BlackOps.exe (.not file.)
O47 - AAKE:Key Export SP - "E:\Shift 2.Unleashed\Installation\shift2u.exe" [Disabled] .(.Electronic Arts Inc. - SHIFT 2 UNLEASHED™.) -- E:\Shift 2.Unleashed\Installation\shift2u.exe
O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe

---\\ Image File Execution Options (IFEO) (O50)
O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d

---\\ MountPoints2 Shell Key (O51)
O51 - MPSK:{8071e789-2d6c-11e0-99fc-0022155a6764}\AutoRun\command. (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\launcher.exe (.not file.)
O51 - MPSK:{e8f02ee2-da31-11df-99b3-0022155a6764}\AutoRun\command. (.Pas de propriétaire - Pas de description.) -- I:\LaunchU3.exe (.not file.)

---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech(TM) DSP Group pour MSACM V3.50.) -- C:\WINDOWS\System32\tssoft32.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\System32\iccvid.dll
O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\System32\ir41_32.ax
O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm
O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\System32\ir50_32.dll
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
O52 - TDSD: \Drivers32\"VIDC.XVID"="xvidvfw.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\xvidvfw.dll
O52 - TDSD: \Drivers32\"msacm.ac3acm"="ac3acm.acm" . (.fccHandler - AC-3 ACM Codec.) -- C:\WINDOWS\System32\ac3acm.acm
O52 - TDSD: \Drivers32\"msacm.lameacm"="lameACM.acm" . (.http://www.mp3dev.org/ - Lame MP3 codec engine.) -- C:\WINDOWS\System32\lameACM.acm
O52 - TDSD: \Drivers32\"VIDC.FFDS"="ff_vfw.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ff_vfw.dll
O52 - TDSD: \Drivers32\"msacm.enc"="ITIG726.acm" . (.Ingenient Technologies, Inc. - Ingenient Technologies, Inc. G.726 CODEC.) -- C:\WINDOWS\System32\ITIG726.acm
O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo® video 5.10" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
O52 - TDSD: \drivers.desc\"xvidvfw.dll"="Xvid MPEG-4 Video Codec 1.2.2" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O52 - TDSD: \drivers.desc\"lameACM.acm"="Lame ACM MP3 CODEC v3.98.2" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O52 - TDSD: \drivers.desc\"ac3acm.acm"="AC-3 ACM Codec" . (.fccHandler - AC-3 ACM Codec.) -- C:\WINDOWS\System32\ac3acm.acm
O52 - TDSD: \drivers.desc\"ff_vfw.dll"="ffdshow video encoder" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ff_vfw.dll
O52 - TDSD: \drivers.desc\"ITIG726.acm"="ITI G.726 Audio Codec" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O52 - TDSD: \drivers.desc\"ir32_32.dll"="Indeo® video R3.2 by Intel" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O52 - TDSD: \drivers.desc\"ir41_32.ax"="Indeo® video interactive R4.3 by Intel" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O52 - TDSD: \drivers.desc\"iyvu9_32.dll"="Indeo® video Raw YVU9 by Intel" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\iyvu9_32.dll

---\\ ShareTools MSconfig StartupReg (O53)
O53 - SMSR:HKLM\...\startupreg\installer [Key] . (.Pas de propriétaire - launch_networker.) -- C:\Program Files\Installer\lnetworker.exe

---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll

---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1

---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145
O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1

---\\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.D48659BB24C48345D926ECB45C1EBDF5] - 13/08/2004 - 11:56:20 R--A- . (.Pas de propriétaire - ATK0110 ACPI Utility.) -- C:\WINDOWS\system32\drivers\ASACPI.sys [5810]
O58 - SDL:[MD5.ADAA34740E9F6AFF94CC75D5CF8ED7E2] - 04/01/2008 - 13:34:42 ---A- . (...) -- C:\WINDOWS\system32\drivers\AsInsHelp32.sys [10216]
O58 - SDL:[MD5.EDAA17CE771C696655B6585F7CAD2100] - 04/01/2008 - 13:34:48 ---A- . (...) -- C:\WINDOWS\system32\drivers\AsInsHelp64.sys [11832]
O58 - SDL:[MD5.2B4E66FAC6503494A2C6F32BB6AB3826] - 17/12/2007 - 10:14:06 R--A- . (...) -- C:\WINDOWS\system32\drivers\AsIO.sys [12400]
O58 - SDL:[MD5.19166026A93206F9C6A8CD3A1F010AE4] - 28/12/2007 - 16:22:02 ---A- . (...) -- C:\WINDOWS\system32\drivers\ASUSHWIO.SYS [10296]
O58 - SDL:[MD5.323B30FAAE1F544A549EBBBD837ED625] - 11/12/2009 - 22:02:42 ---A- . (.ATI Technologies Inc. - ATI Radeon WindowsNT Miniport Driver.) -- C:\WINDOWS\system32\drivers\ati2mtag.sys [4525056]
O58 - SDL:[MD5.41C8F0EDA10DA14378D304C20BA6E558] - 21/05/2008 - 00:53:36 R--A- . (.ATI Research Inc. - Ati High Definition Audio Function Driver.) -- C:\WINDOWS\system32\drivers\AtiHdmi.sys [93696]
O58 - SDL:[MD5.5B44C214F9CD9F590BE9125347610380] - 13/02/2009 - 12:17:49 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver.) -- C:\WINDOWS\system32\drivers\avgntdd.sys [45416]
O58 - SDL:[MD5.14FE36D8F2C6A2435275338D061A0B66] - 05/02/2010 - 11:54:01 ---A- . (.Avira GmbH - Avira Minifilter Driver.) -- C:\WINDOWS\system32\drivers\avgntflt.sys [56816]
O58 - SDL:[MD5.2DAA8CC2670720DEDDCC74A20EDE2EE9] - 13/02/2009 - 12:28:39 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver Manager.) -- C:\WINDOWS\system32\drivers\avgntmgr.sys [22360]
O58 - SDL:[MD5.AD9BD66A862116E79CB45BB6BE46055F] - 30/03/2009 - 10:32:47 ---A- . (.Avira GmbH - Avira Driver for RootKit Detection.) -- C:\WINDOWS\system32\drivers\avipbb.sys [96104]
O58 - SDL:[MD5.15670C1686C51B68E58B8E31569F524F] - 14/02/2004 - 05:09:20 ---A- . (.Logitech Inc. - Universal Serial Bus Camera Driver.) -- C:\WINDOWS\system32\drivers\CamDrL21.sys [244096]
O58 - SDL:[MD5.9714B7C918C6543D69074EC101F86AC4] - 12/03/2008 - 03:00:00 ---A- . (.Sonic Solutions - CDR4 CD and DVD Place Holder Driver (see PxHelp).) -- C:\WINDOWS\system32\drivers\cdr4_xp.sys [9072]
O58 - SDL:[MD5.0D856D16C08440BFB566D6CDD9948D4E] - 12/03/2008 - 03:00:00 ---A- . (.Sonic Solutions - CDRAL Place Holder Driver (see PxHelp).) -- C:\WINDOWS\system32\drivers\cdralw2k.sys [9200]
O58 - SDL:[MD5.C9B25AE9B8ABD983C5AD3F8CBFAB0F9C] - 05/08/2004 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\drivers\cinemst2.sys [262528]
O58 - SDL:[MD5.9624293E55AD405415862B504CA95B73] - 05/08/2004 - 13:00:00 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\drivers\cpqdap01.sys [11776]
O58 - SDL:[MD5.8182FF89C65E4D38B2DE4BB0FB18564E] - 18/05/2009 - 14:17:00 ---A- . (.GEAR Software Inc. - CD DVD Filter.) -- C:\WINDOWS\system32\drivers\GEARAspiWDM.sys [26600]
O58 - SDL:[MD5.B3A21F963BF315A29E1D5EB376A51078] - 02/02/2008 - 16:54:00 R--A- . (.Atheros Communications, Inc. - Atheros AR8121/AR8113 PCI-E Ethernet Controller ndis miniport d.) -- C:\WINDOWS\system32\drivers\l1e51x86.sys [36864]
O58 - SDL:[MD5.B7C19EC8B0DD7EFA58AD41FFEB8B8CDA] - 22/11/2010 - 09:50:19 ---A- . (.Lavasoft AB - Boot Driver.) -- C:\WINDOWS\system32\drivers\Lbd.sys [64288]
O58 - SDL:[MD5.D6F5E3202062C26BAD5C246993C89B6F] - 14/02/2004 - 05:01:00 ---A- . (.Logitech Inc. - SmoothVision filter.) -- C:\WINDOWS\system32\drivers\LVSVF2.sys [1038848]
O58 - SDL:[MD5.383AD59EF9AADFC4BAB5F376FD57EACE] - 14/02/2004 - 05:03:24 ---A- . (...) -- C:\WINDOWS\system32\drivers\LVUSBSta.sys [19968]
O58 - SDL:[MD5.4AA57E716B83C70BED43B1DC30B9FF72] - 10/06/2008 - 11:33:10 ---A- . (.Marvell Semiconductor, Inc. - Marvell Thor Windows Driver.) -- C:\WINDOWS\system32\drivers\mv61xx.sys [150568]
O58 - SDL:[MD5.BE984D604D91C217355CDD3737AAD25D] - 05/08/2004 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\nikedrv.sys [12032]
O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 05/08/2004 - 13:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\drivers\ptilink.sys [17792]
O58 - SDL:[MD5.A56FE08EC7473E8580A390BB1081CDD7] - 05/08/2004 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\drivers\rio8drv.sys [12032]
O58 - SDL:[MD5.0A854DF84C77A0BE205BFEAB2AE4F0EC] - 05/08/2004 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\riodrv.sys [12032]
O58 - SDL:[MD5.19AFBB8427CE65042599555E578170DF] - 20/05/2008 - 10:53:00 R---- . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function Driver.) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys [4800000]
O58 - SDL:[MD5.C1AE5D1F53285D79A0B73A62AF20734F] - 31/12/2010 - 15:59:48 ---A- . (.Sunbelt Software - Anti-Rootkit Engine.) -- C:\WINDOWS\system32\drivers\SBREDrv.sys [98392]
O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 13/04/2008 - 09:39:16 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\drivers\secdrv.sys [20480]
O58 - SDL:[MD5.7CEE1300F915817C00ECFD7F50EF1300] - 05/02/2010 - 00:00:00 ---A- . (...) -- C:\WINDOWS\system32\drivers\sptd.sys [691696]
O58 - SDL:[MD5.3AD0362CF68DE3AC500E981700242CCA] - 05/02/2010 - 11:54:01 ---A- . (.Avira GmbH - AVIRA SnapShot Driver.) -- C:\WINDOWS\system32\drivers\ssmdrv.sys [28520]
O58 - SDL:[MD5.D74A8EC75305F1D3CFDE7C7FC1BD62A9] - 05/08/2004 - 13:00:00 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\drivers\tsbvcap.sys [21376]
O58 - SDL:[MD5.5C2BDC152BBAB34F36473DEAF7713F22] - 28/09/2010 - 15:44:52 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\WINDOWS\system32\drivers\usbaapl.sys [41984]
O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 05/08/2004 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\drivers\vdmindvd.sys [58112]
O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys [9037]
O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\country.sys [27097]
O58 - SDL:[MD5.C6D29F29DE7427B1B0775E53E577B623] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\himem.sys [4912]
O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\key01.sys [42809]
O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\keyboard.sys [42537]
O58 - SDL:[MD5.7D30A74B5FB9FE3B245A6CE5FBCD71D5] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos.sys [27916]
O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos404.sys [29146]
O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos411.sys [29370]
O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos412.sys [29274]
O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos804.sys [29146]
O58 - SDL:[MD5.CAAA108FD7BF71989946B39704323455] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio.sys [34000]
O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio404.sys [34560]
O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio411.sys [35648]
O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio412.sys [35424]
O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio804.sys [34560]

---\\ Liste des outils de nettoyage (O63)
O63 - Logiciel: HijackThis 2.0.2 - (.TrendMicro.) [HKLM] -- HijackThis
O63 - Logiciel: ZHPDiag 1.27 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1

---\\ Liste des services Legacy (O64)
O64 - Services: CurCS - 05/02/2010 - F:\Antivirus\AntiVir\Installation\Avira\AntiVir Desktop\sched.exe - Avira AntiVir Planificateur(AntiVirSchedulerService) .(.Avira GmbH - Antivirus Scheduler.) - LEGACY_ANTIVIRSCHEDULERSERVICE
O64 - Services: CurCS - 05/02/2010 - F:\Antivirus\AntiVir\Installation\Avira\AntiVir Desktop\avguard.exe - Avira AntiVir Guard(AntiVirService) .(.Avira GmbH - Antivirus On-Access Service.) - LEGACY_ANTIVIRSERVICE
O64 - Services: CurCS - 05/01/2011 - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe - Apple Mobile Device(Apple Mobile Device) .(.Apple Inc. - MobileDeviceService.) - LEGACY_APPLE_MOBILE_DEVICE
O64 - Services: CurCS - C:\Windows\System32\drivers\AsIO.sys - AsIO (AsIO) .(...) - LEGACY_ASIO
O64 - Services: CurCS - 11/12/2009 - C:\WINDOWS\system32\Ati2evxx.exe - Ati HotKey Poller(Ati HotKey Poller) .(.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - LEGACY_ATI_HOTKEY_POLLER
O64 - Services: CurCS - (.not file.) - ATI Smart (ATI Smart) .(...) - LEGACY_ATI_SMART
O64 - Services: CurCS - 13/02/2009 - F:\Antivirus\AntiVir\Installation\Avira\AntiVir Desktop\avgio.sys - avgio(avgio) .(.Avira GmbH - Avira AntiVir Support for Minifilter.) - LEGACY_AVGIO
O64 - Services: CurCS - 05/02/2010 - C:\Windows\System32\DRIVERS\avgntflt.sys - avgntflt(avgntflt) .(.Avira GmbH - Avira Minifilter Driver.) - LEGACY_AVGNTFLT
O64 - Services: CurCS - 30/03/2009 - C:\Windows\System32\DRIVERS\avipbb.sys - avipbb(avipbb) .(.Avira GmbH - Avira Driver for RootKit Detection.) - LEGACY_AVIPBB
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\BEEP.sys - Beep (Beep) .(...) - LEGACY_BEEP
O64 - Services: CurCS - 27/07/2010 - C:\Program Files\Bonjour\mDNSResponder.exe - Service Bonjour(Bonjour Service) .(.Apple Inc. - Bonjour Service.) - LEGACY_BONJOUR_SERVICE
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\CDFS.sys - cdfs (cdfs) .(...) - LEGACY_CDFS
O64 - Services: CurCS - (.not file.) - (.not file.) - Application système COM+ (COMSysApp) .(...) - LEGACY_COMSYSAPP
O64 - Services: CurCS - F:\Convertisseurs\Audio\MediaCoder\Installation\sysInfo.sys (.not file.) - CrystalSysInfo (CrystalSysInfo) .(...) - LEGACY_CRYSTALSYSINFO
O64 - Services: CurCS - (.not file.) - (.not file.) - Lanceur de processus serveur DCOM (DcomLaunch) .(...) - LEGACY_DCOMLAUNCH
O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\System32\dmadmin.exe - Service d'administration du Gestionnaire de disque logique(dmadmin) .(.Microsoft Corp., Veritas Software - Processus du service Gestionnaire de disque.) - LEGACY_DMADMIN
O64 - Services: CurCS - 13/04/2008 - C:\Windows\System32\drivers\dmboot.sys - dmboot(dmboot) .(.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) - LEGACY_DMBOOT
O64 - Services: CurCS - 05/08/2004 - C:\Windows\System32\drivers\dmload.sys - dmload(dmload) .(.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) - LEGACY_DMLOAD
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FASTFAT.sys - fastfat (fastfat) .(...) - LEGACY_FASTFAT
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FIPS.sys - Fips (Fips) .(...) - LEGACY_FIPS
O64 - Services: CurCS - 05/02/2010 - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe - FLEXnet Licensing Service(FLEXnet Licensing Service) .(.Acresso Software Inc. - Activation Licensing Service.) - LEGACY
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FS_REC.sys - Fs_Rec (Fs_Rec) .(...) - LEGACY_FS_REC
O64 - Services: CurCS - 25/01/2011 - C:\Program Files\iPod\bin\iPodService.exe - Service de l’iPod(iPod Service) .(.Apple Inc. - iPodService Module (32-bit).) - LEGACY_IPOD_SERVICE
O64 - Services: CurCS - 02/02/2011 - C:\Program Files\Java\jre6\bin\jqs.exe - Java Quick Starter(JavaQuickStarterService) .(.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) - LEGACY_JAVAQUICKSTARTERSERVICE
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\KSECDD.sys - ksecdd (ksecdd) .(...) - LEGACY_KSECDD
O64 - Services: CurCS - 22/11/2010 - C:\Windows\System32\DRIVERS\Lbd.sys - Lbd(Lbd) .(.Lavasoft AB - Boot Driver.) - LEGACY_LBD
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MNMDD.sys - mnmdd (mnmdd) .(...) - LEGACY_MNMDD
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MOUNTMGR.sys - (.not file.) - mountmgr (mountmgr) .(...) - LEGACY_MOUNTMGR
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MSFS.sys - Msfs (Msfs) .(...) - LEGACY_MSFS
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MUP.sys - (.not file.) - Mup (Mup) .(...) - LEGACY_MUP
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NDIS.sys - (.not file.) - Pilote système NDIS (NDIS) .(...) - LEGACY_NDIS
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NDPROXY.sys - NDProxy (NDProxy) .(...) - LEGACY_NDPROXY
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NPFS.sys - Npfs (Npfs) .(...) - LEGACY_NPFS
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NTFS.sys - ntfs (ntfs) .(...) - LEGACY_NTFS
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NULL.sys - Null (Null) .(...) - LEGACY_NULL
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\PARTMGR.sys - (.not file.) - PartMgr (PartMgr) .(...) - LEGACY_PARTMGR
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\PARVDM.sys - ParVdm (ParVdm) .(...) - LEGACY_PARVDM
O64 - Services: CurCS - (.not file.) - RDPNP (RDPNP) .(...) - LEGACY_RDPNP
O64 - Services: CurCS - (.not file.) - (.not file.) - Appel de procédure distante (RPC) (RpcSs) .(...) - LEGACY_RPCSS
O64 - Services: CurCS - C:\WINDOWS\BackupIP\service.exe (.not file.) - Backup IP Network (sdmBackupIP) .(...) - LEGACY_SDMBACKUPIP
O64 - Services: CurCS - C:\Windows\System32\Drivers\sptd.sys - sptd (sptd) .(...) - LEGACY_SPTD
O64 - Services: CurCS - 05/02/2010 - C:\Windows\System32\DRIVERS\ssmdrv.sys - ssmdrv(ssmdrv) .(.Avira GmbH - AVIRA SnapShot Driver.) - LEGACY_SSMDRV
O64 - Services: CurCS - (.not file.) - (.not file.) - Services Terminal Server (TermService) .(...) - LEGACY_TERMSERVICE
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\UDFS.sys - Udfs (Udfs) .(...) - LEGACY_UDFS
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\VGA.sys - vga (vga) .(...) - LEGACY_VGA
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\VOLSNAP.sys - VolSnap (VolSnap) .(...) - LEGACY_VOLSNAP

---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe
O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.html> <ChromeHTML>[HKCR\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Documents and Settings\Matt\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe

---\\ Start Menu Internet (O68)
O68 - StartMenuInternet: <chrome.exe> <>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Documents and Settings\Matt\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- F:\Navigateurs Web\Mozilla Firefox\Installation\firefox.exe
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Documents and Settings\Matt\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

---\\ Search Browser Infection (O69)
O69 - SBI: C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\trs8ij3i.default\searchplugins\conduit.xml
O69 - SBI: prefs.js [Matt - trs8ij3i.default] user_pref("CT1060933.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT1060933
O69 - SBI: prefs.js [Matt - trs8ij3i.default] user_pref("CT2504091.SearchEngine", "Search||http://search.conduit.com/Results.aspx?
O69 - SBI: prefs.js [Matt - trs8ij3i.default] user_pref("CT2504091.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2504091
O69 - SBI: prefs.js [Matt - trs8ij3i.default] user_pref("CT2504091.myStuffSearchUrl", "http://search.conduit.com/Results.aspx?
O69 - SBI: prefs.js [Matt - trs8ij3i.default] user_pref("CT2542115.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2542115
O69 - SBI: prefs.js [Matt - trs8ij3i.default] user_pref("browser.search.defaulturl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT1060933&SearchSource=
O69 - SBI: prefs.js [Matt - trs8ij3i.default] user_pref("browser.startup.homepage", "http://search.conduit.com/?ctid=CT1060933&SearchSource=13");

---\\ Recherche particuliere à la racine de certains dossiers (O84)
[MD5.69474BFF35EF9AEA2A567A930334F1B9] [SPRF] (.Microsoft Corporation - Windows Media Component Setup Application.) -- C:\Program Files\Windows Media Player11-windowsxp-x86-FR-FR.exe [25769600]

---\\ Scan Additionnel (O88)
Database Version : 6917 - (04/05/2011)
Number of Keys Founds (Clés trouvées) : 25
Number of Directories Founds (Dossiers trouvés) : 8

[HKLM\Software\Applian Technologies\OpenCandy] =>Adware.OpenCandy
[HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine] =>Toolbar.Conduit
[HKLM\Software\Classes\Conduit.Engine] =>Toolbar.Conduit
[HKLM\Software\Classes\Toolbar.ct2504091] =>Adware.Agent
[HKLM\Software\Classes\Toolbar.CT2542115] =>Adware.Hotbar
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}] =>Toolbar.Conduit
[HKCR\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}] =>Toolbar.Conduit
[HKLM\Software\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}] =>Toolbar.Conduit
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}] =>Toolbar.Conduit
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4daac69c-cba7-45e2-9bc8-1044483d3352}] =>Toolbar.Conduit
[HKCR\CLSID\{4daac69c-cba7-45e2-9bc8-1044483d3352}] =>Toolbar.Conduit
[HKLM\Software\Classes\CLSID\{4daac69c-cba7-45e2-9bc8-1044483d3352}] =>Toolbar.Conduit
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4daac69c-cba7-45e2-9bc8-1044483d3352}] =>Toolbar.Conduit
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ba14329e-9550-4989-b3f2-9732e92d17cc}] =>Toolbar.Conduit
[HKCU\Software\Conduit] =>Toolbar.Conduit
[HKLM\Software\Conduit] =>Toolbar.Conduit
[HKCU\Software\conduitEngine] =>Toolbar.Conduit
[HKLM\Software\conduitEngine] =>Toolbar.Conduit
[HKLM\Software\Install Pedia Limited] =>Adware.InstallPedia
[HKLM\Software\Installer] =>Adware.InstallPedia
[HKCU\Software\PriceGong] =>Adware.PriceGong
[HKCU\Software\Softonic_France] =>Toolbar.Conduit
[HKLM\Software\Softonic_France] =>Toolbar.Conduit
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine] =>Toolbar.Conduit
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Softonic_France Toolbar] =>Toolbar.Conduit
C:\Program Files\Conduit =>Toolbar.Conduit
C:\Program Files\ConduitEngine =>Toolbar.Conduit
C:\Program Files\Installer =>Adware.InstallPedia
C:\Program Files\Softonic_France =>Toolbar.Conduit
C:\Documents and Settings\Matt\Application Data\PriceGong =>Adware.PriceGong
C:\Documents and Settings\Matt\Local Settings\Application Data\Conduit =>Toolbar.Conduit
C:\Documents and Settings\Matt\Local Settings\Application Data\ConduitEngine =>Toolbar.Conduit
C:\Documents and Settings\Matt\Local Settings\Application Data\Softonic_France =>Toolbar.Conduit

---\\ Recherche détournement de DNS routeur (O89)
Serveur : dns1.proxad.net
Address: 212.27.40.240
Nom : www.l.google.com
Addresses: 209.85.227.105, 209.85.227.104, 209.85.227.147, 209.85.227.99
209.85.227.103, 209.85.227.106
Aliases: www.google.fr, www.google.com

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Auto 05/02/2010 108289 | (AntiVirSchedulerService) . (.Avira GmbH.) - F:\Antivirus\AntiVir\Installation\Avira\AntiVir Desktop\sched.exe
SR - | Auto 05/02/2010 185089 | (AntiVirService) . (.Avira GmbH.) - F:\Antivirus\AntiVir\Installation\Avira\AntiVir Desktop\avguard.exe
SR - | Auto 05/01/2011 37664 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - | Auto 11/12/2009 602112 | (Ati HotKey Poller) . (.ATI Technologies Inc..) - C:\WINDOWS\system32\Ati2evxx.exe
SR - | Auto 27/07/2010 345376 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SS - | Demand 13/04/2008 225280 | (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\System32\dmadmin.exe
SS - | Demand 05/02/2010 655624 | (FLEXnet Licensing Service) . (.Acresso Software Inc..) - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
SR - | Demand 25/01/2011 820008 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
SR - | Auto 02/02/2011 153376 | (JavaQuickStarterService) . (.Sun Microsystems, Inc..) - C:\Program Files\Java\jre6\bin\jqs.exe
SS - | Auto 02/02/2011 0 | (sdmBackupIP) . (...) - C:\WINDOWS\BackupIP\service.exe

---\\ Recherche Master Boot Record Infection (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Run by Matt at 07/05/2011 15:03:37

device: opened successfully
user: MBR read successfully

Disk trace:
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys spuu.sys >>UNKNOWN [0x8AEB6938]<<
spuu.sys
1 ntkrnlpa!IofCallDriver[0x804EF1A6] -> \Device\Harddisk0\DR0[0x8AE5FAB8]
3 CLASSPNP[0xBA108FD7] -> ntkrnlpa!IofCallDriver[0x804EF1A6] -> \Device\0000006c[0x8AE4D030]
5 ACPI[0xB9E73620] -> ntkrnlpa!IofCallDriver[0x804EF1A6] -> \Device\Ide\IdeDeviceP0T1L0-c[0x8AE63D98]
kernel: MBR read successfully
user & kernel MBR OK

---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by Matt at 07/05/2011 15:03:39

********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin

---\\ Liste des émulateurs de CD/DVD (Hook du MBR)
O58 - SDL:[MD5.7CEE1300F915817C00ECFD7F50EF1300] - 05/02/2010 - 00:00:00 ---A- . (...) -- C:\WINDOWS\system32\drivers\sptd.sys [691696]

End of the scan (1334 lines in 02mn 45s)(0)
[/i][/b]

de **didier68** » 07 Mai 2011 21:49

Je ne suis pas qualifié pour analyser ton log en détail mais je peux te dire qu'il y a beaucoup de chose de néfastes.
Un helper va te prendre en charge d'es que possible.

de **Mathieu5555** » 08 Mai 2011 05:39

Sans rentrer dans les détails, à quoi vois tu cela ?

de **didier68** » 10 Mai 2011 13:59

Re Bjr Mathieu

J'ai passé le mot afin qu'un helper te prenne en charge

En attendant fais ceci stp,je ne pense pas que le helper m'en tiendra rigueur (enfin j'espère

)

Télécharge de AD-Remover sur ton Bureau.

http://www.teamxscript.org/too/AD-R.exe

- Ferme toutes applications en cours

- Désactive provisoirement et seulement le temps de l'utilisation de AD-Remover, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.

AD-Remover : Nettoyage

Relance Ad-remover.exe, par un double-clique sur l'icône Ad-remover située sur ton Bureau.
Sur la page, clique sur le bouton <>
Laisse travailler l'outil
Poste le rapport qui apparait à la fin
(Le rapport est sauvegardé aussi sous C:\Ad-reportClean.Txt)

(CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

Et reposte nous un rapport ZHPDiag.
Utilise le site http://www.uppi.fr

de **91300** » 10 Mai 2011 17:54

bonsoir a vous deux,

je reprend moi le sujet

@ Mathieu5555 fais bien ad-remover comme didier68 te l'a demandé

A oui aussi: le scan a chaque démarrage, tu parle bien de l'écran bleu au démarrage qui analyse tes disque?
dans l'attente du rapport,
bonne soirée.

de **Mathieu5555** » 10 Mai 2011 18:47

@91300: Oui je parle bien de cet écran bleu.

Voici le rapport du scan de Ad-Remover: http://www.uppi.fr/download.php?id=133
Et celui du scan de ZHPDiag: http://www.uppi.fr/download.php?id=133

Merci

Au passage, j'ai quelques questions sur la meilleure marche à suivre concernant les antivurs et autres anti-spywares les plus judicieux à installer.

de **91300** » 11 Mai 2011 11:41

ok... pour l'écran bleu, c'est pas cool, il faudra aller trifouiller le registre ce qui peut s'avérer dangereux... on prendra les mesures nécessaires avant de faire ça

pour ad-remover, passe le en mode NETTOYAGE a présent.
a +++

de **Mathieu5555** » 11 Mai 2011 13:55

çi-joint le rapport du nettoyage avec Ad-Remover:http://www.uppi.fr/download.php?id=135

de **91300** » 11 Mai 2011 14:12

tu m'as donner le clean 2 soit un second rapport de nettoyage. ce qui m’intéressait, c'est le premier

m'enfin, si dans le 2, il n'y plus rien...

refais moi un zhpdiag stp.

de **Mathieu5555** » 11 Mai 2011 14:49

Le 1er nettoyage avait été fait hier avant le scan par Ad-R comme mel'avais préconisé Didier68.
Voici le rapport au cas ou: http://www.uppi.fr/download.php?id=136
Et le NOUVEAU rapport ZHPDiag: http://www.uppi.fr/download.php?id=137

de **91300** » 11 Mai 2011 15:56

ok, la plus part des adwares sont parties, on continu:

Télécharge et installe Malwarebytes' Anti-Malware
• A la fin de l'installation, veille à ce que l'option « mettre a jour Malwarebyte's Anti-Malware » soit cochée
• Lance MBAM et laisse les Mises à jour se télécharger (sinon fais les manuellement au lancement du programme)
• Puis va dans l'onglet "Recherche", coche "Exécuter un examen rapide puis "Rechercher"
• A la fin de l'analyse, clique sur "Afficher les résultats"
• Coche tous les éléments détectés puis clique sur "Supprimer la sélection"
• Enregistre le rapport
• S'il t'est demandé de redémarrer l'ordinateur, clique sur Yes
• Un rapport apparait après la suppression : poste le dans ta prochaine réponse.

Tutoriel pour t'aider.

de **Mathieu5555** » 11 Mai 2011 17:26

çi-joint le rapport de Malwarebytes' Anti-Malware: http://www.uppi.fr/download.php?id=138

de **91300** » 11 Mai 2011 17:52

• Copie les lignes suivantes :

Code: Tout sélectionner: O42 - Logiciel: installer - (.Install Pedia Limited.) [HKLM] -- installer => Infection BT (Adware.InstallPedia) [HKLM\Software\Installer] => Infection BT (Adware.InstallPedia) O44 - LFC:[MD5.7F53B91F1E1765F9C5C50F40B2CBF792] - 09/05/2011 - 22:08:09 ---A- . (...) -- C:\WINDOWS\SurCode.INI [21] O44 - LFC:[MD5.CF896141D3E24BB40B22752220D5B1B8] - 09/05/2011 - 22:08:09 ---A- . (...) -- C:\WINDOWS\System32\lsprst7.dll [205] O44 - LFC:[MD5.F71718080D441946942F5D6C43AA397C] - 09/05/2011 - 22:08:09 ---A- . (...) -- C:\WINDOWS\System32\lsprst7.tgz [219] [HKLM\Software\Installer]

• Lance ZHPFix à partir du raccourci sur ton Bureau (si tu es sous Windows Vista ou Windows 7, fais le par un clic-droit --> Exécuter en temps qu'administrateur)
• Clique sur l'icone représentant la lettre H (« coller les lignes Helper »)
• Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes.
• Clique sur le bouton « GO » pour lancer le nettoyage.
• Copie/colle la totalité du rapport dans ta prochaine réponse.

ensuite:

rend tois sur http://www.virustotal.com/
clic sur parcourir
dans la nouvelle fenêtre, copie colle ceci:

Code: Tout sélectionner: C:\WINDOWS\System32\ssprs.tgz

clic sur ok puis sur Send Files
attend le résultats puis donne les moi via l'adresse URL
----------------------------------------------------------------------
refais la même chose avec ce fichier:

Code: Tout sélectionner: C:\WINDOWS\System32\ssprs.dll

----------------------------------------------------------------------

+++

Scan DD systématique au démarrage.

Scan DD systématique au démarrage.

Publicité

Re: Scan DD systématique au démarrage.

Re: Scan DD systématique au démarrage.

Re: Scan DD systématique au démarrage.

Re: Scan DD systématique au démarrage.

Re: Scan DD systématique au démarrage.

Re: Scan DD systématique au démarrage.

Re: Scan DD systématique au démarrage.

Re: Scan DD systématique au démarrage.

Re: Scan DD systématique au démarrage.

Re: Scan DD systématique au démarrage.

Re: Scan DD systématique au démarrage.

Re: Scan DD systématique au démarrage.

Re: Scan DD systématique au démarrage.

Re: Scan DD systématique au démarrage.

Qui est en ligne

Qui a vu ce sujet