Rapport de ZHPDiag v1.3.5.60 par Nicolas Coolman, Update du 12/02/2013
Run by HP_Administrateur at 13/02/2013 21:40:44
State : Version à jour.
UAC : Not Found


---\\ Web Browser
MSIE: Internet Explorer v6.0.2900.5512
GCIE: Google Chrome v24.0.1312.57 (Defaut)

---\\ Windows Product Information
~ Langage: Français
Windows XP Professional Service Pack 3 (Build 2600)
Windows Automatic Updates : OK
Windows Genuine Advantage : KO

---\\ System Information
~ Processor: x86 Family 15 Model 6 Stepping 4, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 1022 MB (21% free)
System Restore: Activé (Enable)
System drive C: has 51 GB (28%) free of 179 GB

---\\ Logged in mode
~ Computer Name: NOM-FB9B15D2723
~ User Name: HP_Administrateur
~ All Users Names: SUPPORT_fddfa904, SUPPORT_388945a0, Laurent, Ian & Gaël, HP_Administrateur, HelpAssistant, GAEL, ASPNET, Administrateur, 
~ Unselected Option: O45,O61,O62
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\
~ %Desktop% : C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Bureau\
~ %Favorites% : C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Favoris\
~ %LocalAppData% : C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\
~ %StartMenu% : C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Menu Démarrer\
~ %Windir% : C:\WINDOWS\
~ %System% : C:\WINDOWS\system32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 51 Go of 179 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 1 Go of 7 Go)
E:\ CD-ROM drive (Not Inserted)
G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
I:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
J:\ Floppy drive, Flash card reader, USB Key (Not Inserted)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime :  Out Of Date
~ Scan Security Center in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.14/04/2008 - 03:34:03.) -- C:\WINDOWS\Explorer.exe [1037824]
[MD5.8FCB269A8C810D2CA409A7F71B8253DB] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.31/10/2012 - 12:33:21.) -- C:\WINDOWS\system32\wininet.dll [671232]
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.14/04/2008 - 03:34:28.) -- C:\WINDOWS\system32\Winlogon.exe [512000]
[MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.17/08/2011 - 14:49:54.) -- C:\WINDOWS\system32\Drivers\AFD.sys [138496]
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/04/2008 - 19:40:30.) -- C:\WINDOWS\system32\Drivers\atapi.sys [96512]
[MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/04/2008 - 20:14:21.) -- C:\WINDOWS\system32\Drivers\Cdfs.sys [63744]
[MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.13/04/2008 - 19:40:46.) -- C:\WINDOWS\system32\Drivers\Cdrom.sys [62976]
[MD5.31F923EB2170FC172C81ABDA0045D18C] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) (.14/04/2008 - 02:57:38.) -- C:\WINDOWS\system32\Drivers\Fips.sys [44672]
[MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.13/04/2008 - 17:36:05.) -- C:\WINDOWS\system32\Drivers\HDAudBus.sys [144384]
[MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - (.Microsoft Corporation - Pilote de port i8042.) (.14/04/2008 - 04:00:52.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [54144]
[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.13/04/2008 - 19:40:58.) -- C:\WINDOWS\system32\Drivers\Imapi.sys [42112]
[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.13/04/2008 - 19:57:15.) -- C:\WINDOWS\system32\Drivers\IpNat.sys [152832]
[MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.13/04/2008 - 20:19:42.) -- C:\WINDOWS\system32\Drivers\IPSec.sys [75264]
[MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.15/07/2011 - 14:29:31.) -- C:\WINDOWS\system32\Drivers\MRxSmb.sys [456320]
[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.13/04/2008 - 20:21:00.) -- C:\WINDOWS\system32\Drivers\netBT.sys [162816]
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.13/04/2008 - 20:15:53.) -- C:\WINDOWS\system32\Drivers\ntfs.sys [574976]
[MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/04/2008 - 03:09:40.) -- C:\WINDOWS\system32\Drivers\Parport.sys [80384]
[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.13/04/2008 - 20:19:43.) -- C:\WINDOWS\system32\Drivers\Rasl2tp.sys [51328]
[MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.13/04/2008 - 19:32:51.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [196224]
[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) (.14/04/2008 - 02:57:34.) -- C:\WINDOWS\system32\Drivers\redbook.sys [58752]
[MD5.46DE1126684369BACE4849E4FC8C43CA] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.14/04/2008 - 02:56:04.) -- C:\WINDOWS\system32\Drivers\volsnap.sys [53376]
~ Scan Generic Processes in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/2950
~ Mes musiques (My Musics) : 1/441
~ Mes Videos (My Videos) : 1/36
~ Mes Favoris (My Favorites) : 1/24
~ Mes Documents (My Documents) : 2/4630
~ Mon Bureau (My Desktop) : 0/2320
~ Menu demarrer (Programs) : 1/67
~ Scan Hidden Files in 00mn 29s



---\\ Processus lancés
[MD5.B9B6D1593F1CDE5C886C47EFA6867FAB] - (.Trusteer Ltd. - RapportMgmtService.) -- C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe   [976728] [PID.1508]
[MD5.8FA553E9AE69808D99C164733A0F9590] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe   [44808] [PID.1848]
[MD5.0D27D54D78AE29CCDBC6BAC8C47976BF] - (.Ars Nova Systems - parentsdanslesparages.com agent.) -- C:\Program Files\PDLP\pdlp.exe   [733560] [PID.1908]
[MD5.A5299D04ED225D64CF07A568A3E1BF8C] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe   [55184] [PID.812]
[MD5.DB5BEA73EDAF19AC68B2C0FAD0F92B1A] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe   [390504] [PID.956]
[MD5.0918B0B9E52C86854EA6EC6CBF9A3A7F] - (.Broadcom Corporation. - Bluetooth Support Server.) -- C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe   [254007] [PID.1100]
[MD5.5D1347AA5AE6E2F77D7F4F8372D95AC9] - (.Microsoft Corporation - Media Center Receiver Service.) -- C:\WINDOWS\eHome\ehRecvr.exe   [237568] [PID.1340]
[MD5.980EEEA91776357518892C5544768E2B] - (.Microsoft Corporation - Service de planification Media Center.) -- C:\WINDOWS\eHome\ehSched.exe   [103424] [PID.1400]
[MD5.7477284579CA8971BFA97BD6BDEE912E] - (.Ekomini Inc. - Ekomini IP Service.) -- C:\Program Files\Ekomini\EkominiService.exe   [143360] [PID.1416]
[MD5.F96C429788350DB4BA6771C3034DFD88] - (.Teruten - FsUsbDevice.) -- C:\WINDOWS\system32\FsUsbExService.exe   [217088] [PID.1456]
[MD5.0B66A9A2137213075F753579E7D573A5] - (.Intel Corporation - RAID Monitor.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe   [86140] [PID.1736]
[MD5.A12175F063302CD68F8FC6D572D7E5FD] - (.Oracle Corporation - Java(TM) Quick Starter Service.) -- C:\Program Files\Java\jre7\bin\jqs.exe   [161768] [PID.1984]
[MD5.E0E4A1F81A7D69C595A8A9DDAD084C19] - (.Nero AG - NeroUpdate.) -- C:\Program Files\Nero\Update\NASvc.exe   [769432] [PID.200]
[MD5.CDE37723E151F52F63A76E92BC19780B] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 83.91.) -- C:\WINDOWS\system32\nvsvc32.exe   [143426] [PID.560]
[MD5.388AE59FE75F1B959DFA0900923C61BB] - (.Skype Technologies S.A. - Skype C2C Service.) -- C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe   [3064000] [PID.2356]
[MD5.5A4DA252B2C0550AB83D129C02CF6C19] - (.Microsoft Corporation - Service de cliché instantané de volumes Mic.) -- C:\WINDOWS\System32\vssvc.exe   [295424] [PID.2780]
[MD5.D1DE16926C682DCD3D99AE5500CA5522] - (.Intel Corporation - Pas de description.) -- C:\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology\ELService.exe   [180224] [PID.3068]
[MD5.0DAD93BB0FECF5016AE3C06CBB0A873B] - (.Microsoft Corporation - COM Surrogate.) -- C:\WINDOWS\system32\dllhost.exe   [5120] [PID.316]
[MD5.BBD4574E68AABE57317F378B4E0CBF85] - (.Trusteer Ltd. - RapportService.) -- C:\Program Files\Trusteer\Rapport\bin\RapportService.exe   [1677144] [PID.2768]
[MD5.8561DC9A6C9BDF4BB0E52C689672BE3D] - (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe   [139264] [PID.2540]
[MD5.4EB0C6C3EF4D8885CF2B5D0062F31E44] - (.Pas de propriétaire - DivX Update.) -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe   [1259376] [PID.600]
[MD5.8E53B67FA3816E854B07C5DC66E10730] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\program files\real\realplayer\update\realsched.exe   [296056] [PID.1240]
[MD5.12916E0642E92561C98B18A2A2D01B14] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe   [252848] [PID.2636]
[MD5.F4E7979D8ADEBEEDEAD33019A5BD52BF] - (.Microsoft Corporation - IPoint.exe.) -- C:\Program Files\Microsoft IntelliPoint\ipoint.exe   [849280] [PID.2376]
[MD5.C61D415A171FE01035911DD6ACDDB262] - (.Ars Nova Systems - parentsdanslesparages.com widget.) -- C:\Program Files\PDLP\pdlpicon.exe   [378232] [PID.2692]
[MD5.E4401CF27225C1D6E664E86195978562] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe   [152544] [PID.3108]
[MD5.5DBC85C723E421198FD35C3355EBA996] - (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe   [310280] [PID.2748]
[MD5.083649EF692A066880C9326020915AFE] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe   [4297136] [PID.3416]
[MD5.CFCB4F1C6DBE8A5DC0B8DBF058E2586A] - (.SFR - Propriétés de la connexion SFR.) -- C:\Program Files\SFR\Kit\9props.exe   [976192] [PID.3944]
[MD5.7DFCCC67990B6DE7F30F553A4E4612A4] - (...) -- C:\Program Files\RocketDock\RocketDock.exe   [495616] [PID.3968]
[MD5.0654E4C1F597FC07D6FC7443D4F94840] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe   [1248208] [PID.2232]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] - (.Google Inc. - Programme d'installation de Google.) -- C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\Google\Update\GoogleUpdate.exe   [116648] [PID.3512]
[MD5.8E7AF6DD4E43C14D957C0AD7CA0A7B89] - (.Samsung - Kies.) -- C:\Program Files\Samsung\Kies\Kies.exe   [1476104] [PID.3536]
[MD5.E20433DAC42F0351F237F87D8ADC4E8A] - (.Samsung - KiesPDLR.) -- C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe   [844296] [PID.2628]
[MD5.ECF45E3FC8C63E44ED45D38A8672E7F1] - (.Hewlett-Packard Co. - HP Digital Imaging Monitor.) -- C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe   [275768] [PID.2200]
[MD5.2C5BA148BA7936D9BB6BB1F4945BA469] - (.Dropbox, Inc. - Dropbox.) -- C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Dropbox\bin\Dropbox.exe   [28539272] [PID.3212]
[MD5.E8A39D41474BE42FD8830CED32932D6C] - (.Apple Inc. - iPodService Module (32-bit).) -- C:\Program Files\iPod\bin\iPodService.exe   [553440] [PID.3960]
[MD5.D0D99257DDDCDDBE998AF7CA14E85BD0] - (.Hewlett-Packard Co. - HP CUE Status Root.) -- C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe   [168960] [PID.1312]
[MD5.9843F58DF3E2908D1FED4DF4B8747E51] - (.Hewlett-Packard Co. - HP CUE Alert Popup Window Objects.) -- C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe   [559104] [PID.4112]
[MD5.883008A9B5BFF94A153D99DBA54CB5C1] - (.Hewlett-Packard - GPCore COM object.) -- C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe   [362496] [PID.4216]
[MD5.8906FFADDF99ACCB5C751E75E879481F] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe   [5676032] [PID.5148]
~ Scan Processes Running in 00mn 16s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Mozilla\Firefox\Profiles\6ae2h37i.default\prefs.js
C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Mozilla\Firefox\Profiles\6ae2h37i.default\user.js
M3 - MFPP: Plugins - [HP_Administrateur] -- C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Mozilla\Firefox\Profiles\6ae2h37i.default\searchplugins\BabylonMngr.xml
M3 - MFPP: Plugins - [HP_Administrateur] -- C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Mozilla\Firefox\Profiles\6ae2h37i.default\searchplugins\iMeshWebSearch.xml
M3 - MFPP: Plugins - [HP_Administrateur] -- C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Mozilla\Firefox\Profiles\6ae2h37i.default\searchplugins\sweetim.xml
M3 - MFPP: Plugins - [HP_Administrateur] -- C:\Program Files\Mozilla FireFox\searchplugins\iMeshWebSearch.xml
M0 - MFSP: prefs.js [HP_Administrateur - 6ae2h37i.default] http://home.sweetim.com
M0 - MFSP: prefs.js [HP_Administrateur - 6ae2h37i.default] http://encyclopedie.org
M2 - MFEP: prefs.js [HP_Administrateur - 6ae2h37i.default\crossriderapp5060@crossrider.com] [] Savings Sidekick v (.215 Apps.)
M2 - MFEP: prefs.js [HP_Administrateur - 6ae2h37i.default\engine@conduit.com] [] Conduit Engine  v3.2.5.2 (.Conduit Ltd..)
M2 - MFEP: prefs.js [HP_Administrateur - 6ae2h37i.default\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}] [] FlashGot v1.2.1.15 (.Giorgio Maone.)
M2 - MFEP: prefs.js [HP_Administrateur - 6ae2h37i.default\{20a82645-c095-46ed-80e3-08825760534b}] [MicrosoftCG] Microsoft .NET Framework Assistant v1.1 (.Microsoft.)
M2 - MFEP: prefs.js [HP_Administrateur - 6ae2h37i.default\{635abd67-4fe9-1b23-4f01-e679fa7484c1}] [yahoo.ytff] Yahoo! Toolbar v1.6.6.20090220 (.Yahoo!.)
M2 - MFEP: prefs.js [HP_Administrateur - 6ae2h37i.default\{7b13ec3e-999a-4b70-b9cb-2617b8323822}] [] Zynga Toolbar v2.5.8.6 (.Conduit Ltd..)
M2 - MFEP: prefs.js [HP_Administrateur - 6ae2h37i.default\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}] [] ImTranslator v3.3.3 (.Smart Link Corporation.)
M2 - MFEP: prefs.js [HP_Administrateur - 6ae2h37i.default\{ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}] [] FoxTab v1.3 (.Roi M..)
M2 - MFEP: prefs.js [HP_Administrateur - 6ae2h37i.default\{f4e6547e-325b-403c-a3bb-ad29ed37a92f}] [] SearchElf 1.2 Community Toolbar v3.2.5.2 (.Conduit Ltd..)
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - np-mswmp.) -- C:\Program Files\Mozilla Firefox\Plugins\np-mswmp.dll
P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeployJava1.dll
P2 - FPN:Firefox Plugin Navigator . (.DivX, Inc - npdivxplayerplugin.) -- C:\Program Files\Mozilla Firefox\Plugins\npDivxPlayerPlugin.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (...) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
P2 - FPN: [HKLM] [@divx.com/DivX Browser Plugin,version=1.0.0] - (.DivX, LLC - DivX Plus Web Player version 2.2.0.52.) -- C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
P2 - FPN: [HKLM] [@divx.com/DivX VOD Helper,version=1.0.0] - (.DivX, LLC. - DivX VOD Helper Plug-in.) -- C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll
P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.7.2] - (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\WINDOWS\system32\npDeployJava1.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.7.2] - (.Oracle Corporation - Next Generation Java Plug-in 10.7.2 for Mozilla browsers.) -- C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.10411.0.) -- C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=14.0.8117.0416] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@Nero.com/KM] - (.Nero AG - Plug-in for detecting Nero Kwik Media..) -- C:\Program Files\Fichiers communs\Nero\BrowserPlugin\npBrowserPlugin.dll
P2 - FPN: [HKLM] [@real.com/nppl3260;version=15.0.4.53] - (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- c:\program files\real\realplayer\Netscape6\nppl3260.dll
P2 - FPN: [HKLM] [@real.com/nprjplug;version=15.0.4.53] - (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- c:\program files\real\realplayer\Netscape6\nprjplug.dll
P2 - FPN: [HKLM] [@real.com/nprpchromebrowserrecordext;version=12.0.1.669] - (.RealNetworks, Inc. - RealNetworks(tm) RealPlayer Chrome Background Extension Plug-In.) -- C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlu
P2 - FPN: [HKLM] [@real.com/nprphtml5videoshim;version=15.0.4.53] - (.RealNetworks, Inc. - RealPlayer(tm) HTML5VideoShim Plug-In.) -- C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videosh
P2 - FPN: [HKLM] [@real.com/nprpplugin;version=15.0.4.53] - (.RealPlayer - RealPlayer Download Plugin.) -- c:\program files\real\realplayer\Netscape6\nprpplugin.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@virtools.com/3DviaPlayer] - (.Dassault Systèmes - 3DVIA player(5.0.0.12).  For more information, visit the <a href="http.) -- C:\Program Files\Virtools\3D Life Player\npvirtools.dll
P2 - FPN: [HKCU] [@facebook.com/FBPlugin,version=1.0.1] - (...) -- C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Facebook\npfbplugin_1_0_1.dll (.not file.)
P2 - FPN: [HKCU] [@facebook.com/FBPlugin,version=1.0.3] - (...) -- C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Facebook\npfbplugin_1_0_3.dll (.not file.)
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\Google\Update\1.3.21.124\npGoogleUpdate3.dll
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\Google\Update\1.3.21.124\npGoogleUpdate3.dll
P2 - FPN: [HKCU] [@unity3d.com/UnityPlayer,version=1.0] - (.Unity Technologies ApS - Unity Player 2.6.1f3.) -- C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\Unity\WebPlayer\loader\npUnity3D32.dll
P2 - FPN: [HKCU] [amazon.com/AmazonMP3DownloaderPlugin] - (.Amazon.com, Inc. - Amazon MP3 Downloader Plugin 1.0.17.) -- C:\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101714.dll
~ Scan Firefox Browser in 00mn 02s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,BrowserMngr Start Page = http://search.babylon.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.neuf.fr
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.durable.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} . (.Amazon.com, Inc. - Amazon MP3 Downloader Plugin 1.0.17.) (No version) -- (.not file.)
~ Scan IE Browser in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\WINDOWS\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Scan Keys in 00mn 00s



---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s
~ Nombre de lignes (Lines number): 20



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet E.) -- C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe Acrobat IE Helper Version 7.0 for Act.) -- C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Aide à la navigation SFR - {0F6E720A-1A6B-40E1-A294-1D4D19F156C8} . (.SFR - Aide à la navigation SFR.) -- C:\Program Files\SFR\Kit\SFRNavErrorHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealPlayer - RealPlayer Download and Record Plugin.) -- C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordP
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} . (.DivX, LLC - DivX Plus Web Player HTML5 <video> version.) -- C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Skype Technologies S.A. - Skype Click to Call for Internet Explorer.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} . (.SweetIM Technologies Ltd. - SweetPacks Toolbar module for Internet Expl.) -- C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet E.) -- C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
~ Scan BHO in 00mn 01s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: &Windows Live Toolbar - [HKLM]{21FA44EF-376D-4D53-9B0F-8A89D3229068} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: SweetPacks Toolbar for Internet Explorer - [HKLM]{EEE6C35B-6118-11DC-9C72-001320C79847} . (.SweetIM Technologies Ltd. - SweetPacks Toolbar module for Internet Expl.) -- C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
~ Scan Toolbar in 00mn 00s



---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [IAAnotif] . (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe 
O4 - HKLM\..\Run: [TrayServer] . (.Magix - Trayserver.) -- C:\Program Files\MAGIX\Video_deluxe_16\Trayserver.exe 
O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32\NvCpl.dll 
O4 - HKLM\..\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Fichiers communs\Apple\Apple Application Support\APSDaemon.exe 
O4 - HKLM\..\Run: [DivXUpdate] . (.Pas de propriétaire - DivX Update.) -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe 
O4 - HKLM\..\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\program files\real\realplayer\update\realsched.exe 
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe 
O4 - HKLM\..\Run: [Tutorials] Clé orpheline 
O4 - HKLM\..\Run: [IntelliPoint] . (.Microsoft Corporation - IPoint.exe.) -- c:\Program Files\Microsoft IntelliPoint\ipoint.exe 
O4 - HKLM\..\Run: [PDLPinfo] . (.Ars Nova Systems - parentsdanslesparages.com widget.) -- C:\Program Files\PDLP\pdlpicon.exe 
O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe 
O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe 
O4 - HKLM\..\Run: [KiesTrayAgent] . (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe 
O4 - HKLM\..\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe 
O4 - HKCU\..\Run: [Connexion SFR 9props.exe] . (.SFR - Propriétés de la connexion SFR.) -- C:\Program Files\SFR\Kit\9props.exe 
O4 - HKCU\..\Run: [RocketDock] . (...) -- C:\Program Files\RocketDock\RocketDock.exe 
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_51B973C64B4507AF5312E56FB7C345A3] . (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe 
O4 - HKCU\..\Run: [B2484BC2F5B384995CB461E67BA1FA06FA5A37BC._service_run] . (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe 
O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\Google\Update\GoogleUpdate.exe 
O4 - HKCU\..\Run: [KiesPreload] . (.Samsung - Kies.) -- C:\Program Files\Samsung\Kies\Kies.exe 
O4 - HKCU\..\Run: [KiesAirMessage] C:\Program Files\Samsung\Kies\KiesAirMessage.exe (.not file.) 
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] . (.Microsoft Corporation - Watson Subscriber for SENS Network Notifica.) -- C:\Program Files\Fichiers communs\Microsoft Shared\DW\DWTRIG20.exe 
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe 
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe 
O4 - HKUS\S-1-5-21-3774222849-2177217567-962541664-1007\..\Run: [Connexion SFR 9props.exe] . (.SFR - Propriétés de la connexion SFR.) -- C:\Program Files\SFR\Kit\9props.exe 
O4 - HKUS\S-1-5-21-3774222849-2177217567-962541664-1007\..\Run: [RocketDock] . (...) -- C:\Program Files\RocketDock\RocketDock.exe 
O4 - HKUS\S-1-5-21-3774222849-2177217567-962541664-1007\..\Run: [GoogleChromeAutoLaunch_51B973C64B4507AF5312E56FB7C345A3] . (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe 
O4 - HKUS\S-1-5-21-3774222849-2177217567-962541664-1007\..\Run: [B2484BC2F5B384995CB461E67BA1FA06FA5A37BC._service_run] . (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe 
O4 - HKUS\S-1-5-21-3774222849-2177217567-962541664-1007\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\Google\Update\GoogleUpda
O4 - HKUS\S-1-5-21-3774222849-2177217567-962541664-1007\..\Run: [KiesPreload] . (.Samsung - Kies.) -- C:\Program Files\Samsung\Kies\Kies.exe 
O4 - HKUS\S-1-5-21-3774222849-2177217567-962541664-1007\..\Run: [KiesAirMessage] C:\Program Files\Samsung\Kies\KiesAirMessage.exe (.not file.) 
~ Scan Application in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Acrobat Reader for Palm OS.lnk . (...)  -- C:\Program Files\Adobe\Acrobat Reader for Palm OS\acroDesk.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader 7.0.lnk . (...)  -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A70500000002}\SC_Reader_PM.ico
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Apple Software Update.lnk . (...)  -- C:\WINDOWS\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\AppleSoftwareUpdateIco.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Audacity.lnk . (.The Audacity Team.)  -- C:\Program Files\Audacity\audacity.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\DVD Play.lnk . (.CyberLink Corp..)  -- C:\Program Files\HP\DVDPlay\DVDPlay.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Geonaute KeyMaze 300.lnk . (...)  -- C:\Program Files\Geonaute KeyMaze 300\Geonaute KeyMaze 300.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Lanceur de tâches Microsoft Works.lnk . (.Microsoft® Corporation.)  -- C:\Program Files\Microsoft Works\MSWorks.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Matisseo Studio.lnk . (...)  -- C:\WINDOWS\Installer\{B3B618BE-0D22-4EB1-A30C-5C0B525D1019}\_18130F5F89822885E46FEB.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Media Center.lnk . (.Microsoft Corporation.)  -- C:\WINDOWS\ehome\ehshell.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Access.lnk . (...)  -- C:\WINDOWS\Installer\{0001040C-78E1-11D2-B60F-006097C998E7}\accicons.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Excel.lnk . (...)  -- C:\WINDOWS\Installer\{0001040C-78E1-11D2-B60F-006097C998E7}\xlicons.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Office PowerPoint Viewer 2003.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Microsoft Office\PowerPoint Viewer\PPTVIEW.EXE
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Outlook.lnk . (...)  -- C:\WINDOWS\Installer\{0001040C-78E1-11D2-B60F-006097C998E7}\outicon.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft PowerPoint.lnk . (...)  -- C:\WINDOWS\Installer\{0001040C-78E1-11D2-B60F-006097C998E7}\pptico.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Word.lnk . (...)  -- C:\WINDOWS\Installer\{0001040C-78E1-11D2-B60F-006097C998E7}\wordicon.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\My PC Choice.lnk . (...)  -- C:\hp\VINETLINK\VINETLINK.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Orca.lnk . (...)  -- C:\WINDOWS\Installer\{85F4CBCB-9BBC-4B50-A7D8-E1106771498D}\orca_icon.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Photorécit 3 pour Windows.lnk . (...)  -- C:\Program Files\Photo Story 3 for Windows\PhotoStory3.exe (.not file.)
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\VideoPad Video Editor.lnk . (.NCH Software.)  -- C:\Program Files\NCH Software\VideoPad\videopad.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Live ID.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\SIGNINOPTIONS.EXE
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk . (...)  -- C:\Program Files\Messenger\msmsgs.exe (.not file.)
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Movie Maker\moviemk.exe
O4 - Global Startup: C:\Documents And Settings\Laurent\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.)  -- C:\WINDOWS\system32\rcimlby.exe
O4 - Global Startup: C:\Documents And Settings\Laurent\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Documents And Settings\Laurent\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Outlook Express\msimn.exe
O4 - Global Startup: C:\Documents And Settings\Laurent\Menu Démarrer\Programmes\Windows Media Player.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Documents And Settings\GAEL\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.)  -- C:\WINDOWS\system32\rcimlby.exe
O4 - Global Startup: C:\Documents And Settings\GAEL\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Documents And Settings\GAEL\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Outlook Express\msimn.exe
O4 - Global Startup: C:\Documents And Settings\GAEL\Menu Démarrer\Programmes\Windows Media Player.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Windows Media Player\wmplayer.exe
~ Scan Global Startup in 00mn 03s



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- C:\Program Files\Skype\Toolbars\Internet Explorer\icon.ico
O9 - Extra button: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} . (...) -- C:\Program Files\WIDCOMM\Logiciel Bluetooth\bt_hot_icon.ico
O9 - Extra button: Afficher ou masquer l'HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet Explorer.) -- C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} . (...) -- C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\conn_support.ico
O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -- C:\Program Files\Messenger\msmsgs.exe (.not file.)
~ Scan IE Extra Buttons in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - Broken Internet access because of LSP provider (.not file.) -- mswsock.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll
~ Scan Winsock in 00mn 00s



---\\ Piratage de l'Option 'Rétablir les paramètres Web' (O14)
O14 - IERESET.INF: START_PAGE_URL=START_PAGE_URL=http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
~ Scan IE Paramètres WEB in 00mn 00s



---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} ((no name)) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} ((no name)) - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
~ Scan Objets ActiveX in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{1CEDAE29-FA41-4AE6-BD3D-D3CBBA6A701C}: NameServer = 127.0.0.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{37D62C5F-A44B-48A9-9017-E426F9A124D1}: NameServer = 127.0.0.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{508DB681-9ACA-4462-BC63-84F7CFE0FC1F}: NameServer = 127.0.0.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{9F3D87F0-D611-4923-91C3-33442F74B549}: NameServer = 127.0.0.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{EB5D4968-15DC-4FA7-B2A6-CCB51DC73B3F}: NameServer = 127.0.0.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{F00C47CC-DDB9-43B4-BB3E-E0C936BC8AF3}: NameServer = 127.0.0.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{1CEDAE29-FA41-4AE6-BD3D-D3CBBA6A701C}: DhcpNameServer = 16.92.3.242 16.92.3.243 16.81.3.243 16.118.3.243
O17 - HKLM\System\CCS\Services\Tcpip\..\{9F3D87F0-D611-4923-91C3-33442F74B549}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{1CEDAE29-FA41-4AE6-BD3D-D3CBBA6A701C}: DhcpDomain = americas.hpqcorp.net
O17 - HKLM\System\CS1\Services\Tcpip\..\{1CEDAE29-FA41-4AE6-BD3D-D3CBBA6A701C}: NameServer = 127.0.0.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{37D62C5F-A44B-48A9-9017-E426F9A124D1}: NameServer = 127.0.0.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{508DB681-9ACA-4462-BC63-84F7CFE0FC1F}: NameServer = 127.0.0.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{9F3D87F0-D611-4923-91C3-33442F74B549}: NameServer = 127.0.0.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{EB5D4968-15DC-4FA7-B2A6-CCB51DC73B3F}: NameServer = 127.0.0.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{F00C47CC-DDB9-43B4-BB3E-E0C936BC8AF3}: NameServer = 127.0.0.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{1CEDAE29-FA41-4AE6-BD3D-D3CBBA6A701C}: DhcpNameServer = 16.92.3.242 16.92.3.243 16.81.3.243 16.118.3.243
O17 - HKLM\System\CS1\Services\Tcpip\..\{9F3D87F0-D611-4923-91C3-33442F74B549}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{1CEDAE29-FA41-4AE6-BD3D-D3CBBA6A701C}: DhcpDomain = americas.hpqcorp.net
O17 - HKLM\System\CS2\Services\Tcpip\..\{1CEDAE29-FA41-4AE6-BD3D-D3CBBA6A701C}: NameServer = 127.0.0.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{37D62C5F-A44B-48A9-9017-E426F9A124D1}: NameServer = 127.0.0.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{508DB681-9ACA-4462-BC63-84F7CFE0FC1F}: NameServer = 127.0.0.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{9F3D87F0-D611-4923-91C3-33442F74B549}: NameServer = 127.0.0.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{EB5D4968-15DC-4FA7-B2A6-CCB51DC73B3F}: NameServer = 127.0.0.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{F00C47CC-DDB9-43B4-BB3E-E0C936BC8AF3}: NameServer = 127.0.0.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{1CEDAE29-FA41-4AE6-BD3D-D3CBBA6A701C}: DhcpNameServer = 16.92.3.242 16.92.3.243 16.81.3.243 16.118.3.243
O17 - HKLM\System\CS2\Services\Tcpip\..\{9F3D87F0-D611-4923-91C3-33442F74B549}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{1CEDAE29-FA41-4AE6-BD3D-D3CBBA6A701C}: DhcpDomain = americas.hpqcorp.net
~ Scan Domain in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll
O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
~ Scan Protocole Additionnel in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\WINDOWS\system32\cscdll.dll
O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\system32\dimsntfy.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
~ Scan Winlogon in 00mn 00s



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\WINDOWS\system32\webcheck.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll
O21 - SSODL: UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} . (.Microsoft Corporation - Moniteur et dossier UPNP Tray.) -- C:\WINDOWS\system32\upnpui.dll
~ Scan SSODL in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) . (.Broadcom Corporation. - Bluetooth Support Server.) - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: Ekomini IP Service (Ekomini) . (.Ekomini Inc. - Ekomini IP Service.) - C:\Program Files\Ekomini\EkominiService.exe
O23 - Service: Limitation du temps d'utilisation d'inte (eLimit) . (...) - C:\Program Files\eLimit\maeLimit.exe (.not file.)
O23 - Service: Intel® Quick Resume Technology Drivers (ELService) . (.Intel Corporation - Pas de description.) - C:\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology\ELService.exe
O23 - Service: FsUsbExService (FsUsbExService) . (.Teruten - FsUsbDevice.) - C:\WINDOWS\system32\FsUsbExService.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMon) . (.Intel Corporation - RAID Monitor.) - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Oracle Corporation - Java(TM) Quick Starter Service.) - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: MAGIX StartUp Analyze Service (MAGIX StartUp Analyze Service) . (.MAGIX AG - Anwendung MXSAS.) - C:\Program Files\MAGIX\PC_Check_Tuning_2011_Version_a_telecharger\MXSAS.exe
O23 - Service: Nero Update (NAUpdate) . (.Nero AG - NeroUpdate.) - C:\Program Files\Nero\Update\NASvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 83.91.) - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PDLP (PDLP) . (.Ars Nova Systems - parentsdanslesparages.com agent.) - C:\Program Files\PDLP\pdlp.exe
O23 - Service: Rapport Management Service (RapportMgmtService) . (.Trusteer Ltd. - RapportMgmtService.) - C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe
O23 - Service: Skype C2C Service (Skype C2C Service) . (.Skype Technologies S.A. - Skype C2C Service.) - C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files\Skype\Updater\Updater.exe
~ Scan Services in 00mn 07s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) -  (.not file.)
O24 - Desktop General: BackupWallPaper - .(...) - C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop General: WallPaper - .(...) - C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
~ Scan Desktop Component in 00mn 00s



---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ Scan Keys in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\avast! Emergency Update.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\GlaryInitialize.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3735714491-252936903-451520105-1008.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3774222849-2177217567-962541664-1007Core.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\MAGIX Installation de pilote.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\Microsoft Antimalware Scheduled Scan.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\PCCT - MAGIX AG.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-3774222849-2177217567-962541664-1007.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-3774222849-2177217567-962541664-1008.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-3774222849-2177217567-962541664-1009.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-3774222849-2177217567-962541664-1010.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-3774222849-2177217567-962541664-501.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-3774222849-2177217567-962541664-1007.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-3774222849-2177217567-962541664-1008.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-3774222849-2177217567-962541664-1009.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-3774222849-2177217567-962541664-1010.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-3774222849-2177217567-962541664-501.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\ReclaimerResumeInstall_HP_Administrateur.job
[MD5.EC807244904FA170C299AB06D87FBDBE] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
[MD5.7F19838AC317C34FCED020BE529AF71E] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
[MD5.B2F80B1449E63E37F831C0FF1DE8CBCA] [APT] [GlaryInitialize] (.Glarysoft Ltd.) -- C:\Program Files\Glary Utilities\initialize.exe
[MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.00000000000000000000000000000000] [APT] [GoogleUpdateTaskUserS-1-5-21-3735714491-252936903-451520105-1008] (...) -- C:\Documents and Settings\HP_Administrateur\Local Settings\Application Data\Google\Update\GoogleUpdate.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [GoogleUpdateTaskUserS-1-5-21-3774222849-2177217567-962541664-1007Core] (...) -- C:\Documents and Settings\HP_Administrateur\Local Settings\Application Data\Google\Update\GoogleUpdate.exe (.not file.)
[MD5.968BDA9362B4C1684B9E4177675649AD] [APT] [MAGIX Installation de pilote] (.Magix.) -- C:\Program Files\MAGIX\PC_Check_Tuning_2011_Version_a_telecharger\DriverInstaller.exe
[MD5.00000000000000000000000000000000] [APT] [Microsoft Antimalware Scheduled Scan] (...) -- c:\Program Files\Microsoft Security Client\MpCmdRun.exe (.not file.)
[MD5.0DE8E8B26420577858C4E10C10ED3F94] [APT] [PCCT - MAGIX AG] (...) -- C:\Program Files\MAGIX\PC_Check_Tuning_2011_Version_a_telecharger\MxTray.exe
[MD5.D412AC27FE3C9F8BC19741DAC0E0329D] [APT] [RealUpgradeLogonTaskS-1-5-21-3774222849-2177217567-962541664-1007] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\realupgrade.exe
[MD5.D412AC27FE3C9F8BC19741DAC0E0329D] [APT] [RealUpgradeLogonTaskS-1-5-21-3774222849-2177217567-962541664-1008] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\realupgrade.exe
[MD5.D412AC27FE3C9F8BC19741DAC0E0329D] [APT] [RealUpgradeLogonTaskS-1-5-21-3774222849-2177217567-962541664-1009] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\realupgrade.exe
[MD5.D412AC27FE3C9F8BC19741DAC0E0329D] [APT] [RealUpgradeLogonTaskS-1-5-21-3774222849-2177217567-962541664-1010] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\realupgrade.exe
[MD5.D412AC27FE3C9F8BC19741DAC0E0329D] [APT] [RealUpgradeLogonTaskS-1-5-21-3774222849-2177217567-962541664-501] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\realupgrade.exe
[MD5.D412AC27FE3C9F8BC19741DAC0E0329D] [APT] [RealUpgradeScheduledTaskS-1-5-21-3774222849-2177217567-962541664-1007] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\realupgrade.exe
[MD5.D412AC27FE3C9F8BC19741DAC0E0329D] [APT] [RealUpgradeScheduledTaskS-1-5-21-3774222849-2177217567-962541664-1008] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\realupgrade.exe
[MD5.D412AC27FE3C9F8BC19741DAC0E0329D] [APT] [RealUpgradeScheduledTaskS-1-5-21-3774222849-2177217567-962541664-1009] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\realupgrade.exe
[MD5.D412AC27FE3C9F8BC19741DAC0E0329D] [APT] [RealUpgradeScheduledTaskS-1-5-21-3774222849-2177217567-962541664-1010] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\realupgrade.exe
[MD5.D412AC27FE3C9F8BC19741DAC0E0329D] [APT] [RealUpgradeScheduledTaskS-1-5-21-3774222849-2177217567-962541664-501] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\realupgrade.exe
[MD5.00000000000000000000000000000000] [APT] [ReclaimerResumeInstall_HP_Administrateur] (...) -- C:\Documents and Settings\HP_Administrateur\Application Data\Real\Update\UpgradeHelper\RealPlayer\10.30\agent\rnupgagent.exe (.not file.)
~ Scan Scheduled Task in 00mn 02s



---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Utilitaire d'installation du Lecteur Windows Media de Microsoft.) -- C:\WINDOWS\inf\unregmp2.exe
O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Windows NT User Data Migration Tool.) -- C:\WINDOWS\system32\shmgrate.exe
O40 - ASIC: Outlook Express - >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} . (.Microsoft Corporation - Windows NT User Data Migration Tool.) -- C:\WINDOWS\system32\shmgrate.exe
O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: Microsoft Windows Media Player 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: DirectAnimation - {283807B5-2C60-11D0-A31D-00AA00B92C03} . (.Microsoft Corporation - DirectX Media -- DirectAnimation.) -- C:\WINDOWS\system32\danim.dll
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\WINDOWS\system32\themeui.dll
O40 - ASIC: Microsoft Outlook Express 6 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Bibliothèque d'installation Outlook Express.) -- C:\Program Files\Outlook Express\setup50.exe
O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (...) -- C:\WINDOWS\INF\msnetmtg.inf
O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (...) -- C:\WINDOWS\INF\msmsgs.inf
O40 - ASIC: Améliorations pour la navigation - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\WINDOWS\system32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (...) -- C:\WINDOWS\INF\wmp11.inf
O40 - ASIC: Carnet d'adresses 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} . (.Microsoft Corporation - Bibliothèque d'installation Outlook Express.) -- C:\Program Files\Outlook Express\setup50.exe
O40 - ASIC: Mise à jour du Bureau Windows - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O40 - ASIC: Internet Explorer 6 - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'installation individualisée de Internet Explorer.) -- C:\WINDOWS\system32\ie4uinit.exe
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- c:\WINDOWS\system32\mscories.dll
O40 - ASIC: Google Chrome - {8A69D345-D564-463c-AFF1-A69D9E530F96} . (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\24.0.1312.57\Installer\chrmstp.exe
O40 - ASIC: Fax - {8b15971b-5355-4c82-8c07-7e181ea07608} . (...) -- C:\WINDOWS\INF\fxsocm.inf
O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 11.5 r502.) -- C:\WINDOWS\system32\Macromed\Flash\Flash32_11_5_502_149.ocx
~ Scan Active Setup in 00mn 00s



---\\ Pilotes lancés au démarrage (O41)
O41 - Driver:  (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
O41 - Driver:  (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys
O41 - Driver:  (ELhid) . (.Intel Corporation - Pas de description.) - C:\WINDOWS\system32\DRIVERS\ELhid.sys
O41 - Driver:  (ELkbd) . (.Intel Corporation - Pas de description.) - C:\WINDOWS\system32\DRIVERS\ELkbd.sys
O41 - Driver:  (ELmon) . (.Intel Corporation - Pas de description.) - C:\WINDOWS\system32\DRIVERS\ELmon.sys
O41 - Driver:  (ELmou) . (.Intel Corporation - Pas de description.) - C:\WINDOWS\system32\DRIVERS\ELmou.sys
O41 - Driver:  (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
O41 - Driver:  (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys
O41 - Driver:  (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\system32\DRIVERS\intelppm.sys
O41 - Driver:  (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys
O41 - Driver:  (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys
O41 - Driver:  (kbdhid) . (.Microsoft Corporation - Pilote de filtre souris HID.) - C:\WINDOWS\system32\DRIVERS\kbdhid.sys
O41 - Driver:  (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys
O41 - Driver:  (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
O41 - Driver:  (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS\netbios.sys
O41 - Driver:  (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS\netbt.sys
O41 - Driver:  (RapportCerberus_43926) . (...) - C:\Documents and Settings\All Users\Application Data\Trusteer\Rapport\store\exts\RapportCerberus\43926\RapportCerberus32_43926.sys
O41 - Driver:  (RapportEI) . (.Trusteer Ltd. - RapportEI.) - C:\Program Files\Trusteer\Rapport\bin\RapportEI.sys
O41 - Driver:  (RapportPG) . (.Trusteer Ltd. - RapportPG.) - C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys
O41 - Driver:  (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERS\rasacd.sys
O41 - Driver:  (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
O41 - Driver:  (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\system32\DRIVERS\redbook.sys
O41 - Driver:  (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS\tcpip.sys
O41 - Driver:  (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS\termdd.sys
O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
~ Scan Drivers in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: 32 Bit HP CIO Components Installer - (.Hewlett-Packard.) [HKLM] -- {92127AF5-FDD8-4ADF-BC40-C356C9EE0B7D}
O42 - Logiciel: 3DVIA player 5.0 - (.3DVIA.) [HKLM] -- {4E868D3D-6EEB-4273-926C-2287236B5B79}
O42 - Logiciel: 7-Zip 4.65 - (.Pas de propriétaire.) [HKLM] -- 7-Zip
O42 - Logiciel: ALZip - (.ESTsoft Corp..) [HKLM] -- ALZip_is1
O42 - Logiciel: ANT Drivers 0.1.2.0 - (.ANT Drivers.) [HKLM] -- ANT Drivers_is1
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Reader 7.0.5 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A70500000002}
O42 - Logiciel: Amazon MP3 Downloader 1.0.17 - (.Amazon Services LLC.) [HKLM] -- Amazon MP3 Downloader
O42 - Logiciel: AnvSoft Photo Flash Maker Free 5.48 - (.AnvSoft, Inc..) [HKLM] -- AnvSoft Photo Flash Maker Free
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {CCE825DB-347A-4004-A186-5F4A6FDD8547}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {459699C3-9430-4381-964B-4248D87B49F9}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
O42 - Logiciel: AtelierDuLivre - (.e-center.) [HKLM] -- AtelierDuLivre
O42 - Logiciel: Audacity 2.0.2 - (.Audacity Team.) [HKLM] -- Audacity_is1
O42 - Logiciel: Betclic Poker.fr (Remove Only) - (.Pas de propriétaire.) [HKLM] -- Betclic Poker.fr
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {79155F2B-9895-49D7-8612-D92580E0DE5B}
O42 - Logiciel: CCleaner (remove only) - (.Pas de propriétaire.) [HKLM] -- CCleaner
O42 - Logiciel: Compiled Driver Disk (Samsung) 1.0 - (.COMPELSON Labs.) [HKLM] -- {3DCF00F5-04A5-4543-A088-705480811206}_is1
O42 - Logiciel: Configuration DivX - (.DivX, LLC.) [HKLM] -- DivX Setup
O42 - Logiciel: Connexion Facile à Internet - (.Hewlett-Packard.) [HKLM] -- InstallShield_{8105684D-8CA6-440D-8F58-7E5FD67A499D}
O42 - Logiciel: DVD Decoder Pak for Windows XP - (.roddy2000@hotbox.ru.) [HKLM] -- {92C5DB3D-9D6F-4324-BB11-57825F4C2635}
O42 - Logiciel: DivX Converter - (.DivX, Inc..) [HKLM] -- {B13A7C41581B411290FBC0395694E2A9}
O42 - Logiciel: DivX Plus DirectShow Filters - (.DivX, Inc..) [HKLM] -- DivX Plus DirectShow Filters
O42 - Logiciel: Dropbox - (.Dropbox, Inc..) [HKCU] -- Dropbox
O42 - Logiciel: Duplicate Cleaner 2.1b - (.DigitalVolcano.) [HKLM] -- Duplicate Cleaner
O42 - Logiciel: EkominiService 1.5 - (.Ekomini Inc..) [HKLM] -- EkominiService
O42 - Logiciel: Enhanced Multimedia Keyboard Solution - (.Pas de propriétaire.) [HKLM] -- KBD
O42 - Logiciel: File Uploader - (.Nikon.) [HKLM] -- {237CD223-1B9D-47E8-A76C-E478B83CCEA2}
O42 - Logiciel: Geonaute KeyMaze 300 - (.Pas de propriétaire.) [HKLM] -- {35DFE767-D0DB-4228-A64E-7E6D50B6FEA4}
O42 - Logiciel: Geonaute Software - (.Geonaute.) [HKLM] -- {548CBD79-054A-42F1-A1DA-B4F3FEF490ED}_is1
O42 - Logiciel: Glary Utilities 2.50.0.1632 - (.Glarysoft Ltd.) [HKLM] -- Glary Utilities_is1
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome
O42 - Logiciel: Google Drive - (.Google, Inc..) [HKLM] -- {7A21C722-F259-4976-B7AA-6658E5FDEDAF}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}
O42 - Logiciel: HP Appareils photos Photosmart 6.0 - (.HP.) [HKLM] -- {5D61626A-BD55-4e42-82EE-4AE89D8FD050}
O42 - Logiciel: HP Boot Optimizer - (.Hewlett-Packard.) [HKLM] -- {1341D838-719C-4A05-B50F-49420CA1B4BB}
O42 - Logiciel: HP Customer Participation Program 13.0 - (.HP.) [HKLM] -- HPExtendedCapabilities
O42 - Logiciel: HP DVD Play 2.1 - (.Pas de propriétaire.) [HKLM] -- {45D707E9-F3C4-11D9-A373-0050BAE317E1}
O42 - Logiciel: HP Deskjet Printer Preload - (.Hewlett-Packard Company.) [HKLM] -- {2C5D07FB-31A2-4F2D-9FDA-0B24ACD42BD0}
O42 - Logiciel: HP DigitalMedia Archive - (.Hewlett-Packard.) [HKLM] -- {F80239D8-7811-4D5E-B033-0D0BBFE32920}
O42 - Logiciel: HP Document Manager 2.0 - (.HP.) [HKLM] -- HP Document Manager
O42 - Logiciel: HP Document Viewer 6.1 - (.HP.) [HKLM] -- HP Document Viewer
O42 - Logiciel: HP Imaging Device Functions 13.0 - (.HP.) [HKLM] -- HP Imaging Device Functions
O42 - Logiciel: HP Integrated Module with Bluetooth wireless technology - (.WIDCOMM, Inc..) [HKLM] -- {3F4EC965-28EF-45C3-B063-04B25D4E9679}
O42 - Logiciel: HP Officejet 4500 G510n-z - (.HP.) [HKLM] -- {7E0E61CC-1C99-429D-BEA7-C4DD5B898D2A}
O42 - Logiciel: HP PSC & OfficeJet 5.3.B - (.HP.) [HKLM] -- {5B79CFD1-6845-4158-9D7D-6BE89DF2C135}
O42 - Logiciel: HP PSC & OfficeJet 6.1.A - (.HP.) [HKLM] -- {E5A8DDAB-AE80-48C6-A75B-D0FAB83B299D}
O42 - Logiciel: HP Photosmart 330,380,420,470,7800,8000,8200 Series - (.HP.) [HKLM] -- {33D6CC28-9F75-4d1b-A11D-98895B3A3729}
O42 - Logiciel: HP Photosmart Premier Software 6.5 - (.HP.) [HKLM] -- HP Photo & Imaging
O42 - Logiciel: HP Photosmart for Media Center PC - (.Pas de propriétaire.) [HKLM] -- HP Photosmart for Media Center PC
O42 - Logiciel: HP Smart Web Printing 4.5 - (.HP.) [HKLM] -- HP Smart Web Printing
O42 - Logiciel: HP Solution Center 13.0 - (.HP.) [HKLM] -- HP Solution Center & Imaging Support Tools
O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM] -- {818ABC3C-635C-4651-8183-D0E9640B7DD1}
O42 - Logiciel: Hamachi 1.0.3.0 - (.Pas de propriétaire.) [HKLM] -- Hamachi
O42 - Logiciel: Hotfix for Windows Media Player 10 (KB903157) - (.Microsoft Corporation.) [HKLM] -- KB903157
O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5
O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5
O42 - Logiciel: Intel Matrix Storage Manager - (.Pas de propriétaire.) [HKLM] -- {9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}
O42 - Logiciel: Intel(R) PRO Network Connections Drivers - (.Pas de propriétaire.) [HKLM] -- PROSet
O42 - Logiciel: Intel(R) Quick Resume Technology Drivers - (.Intel Corporation.) [HKLM] -- Intel® Quick Resume Technology
O42 - Logiciel: Intel(R) Quick Resume Technology Drivers - (.Intel Corporation.) [HKLM] -- {8C22F265-DE76-44D1-8A79-A71D819137DA}
O42 - Logiciel: Internet Explorer Toolbar 4.6 by SweetPacks - (.SweetIM Technologies Ltd..) [HKLM] -- {C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}
O42 - Logiciel: Java 7 Update 7 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83217007FF}
O42 - Logiciel: JavaFX 2.1.1 - (.Oracle Corporation.) [HKLM] -- {1111706F-666A-4037-7777-211328764D10}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {8E5233E1-7495-44FB-8DEB-4BE906D59619}
O42 - Logiciel: Le logiciel Intel® Viiv™ - (.Intel Corporation.) [HKLM] -- {27E395E5-EB04-4BFD-96C3-C9A102E97E1B}
O42 - Logiciel: Lecteur Windows Media 11 - (.Pas de propriétaire.) [HKLM] -- Windows Media Player
O42 - Logiciel: MAGIX PC Check & Tuning 2010 5.0.107.1006 (F) - (.MAGIX AG.) [HKLM] -- MAGIX PC Check & Tuning 2010 F
O42 - Logiciel: MAGIX PC Check & Tuning 2011 Version à télécharger - (.MAGIX AG.) [HKLM] -- MAGIX_MSI_PC_Check_Tuning_2011
O42 - Logiciel: MAGIX PC Check & Tuning 2011 Version à télécharger - (.MAGIX AG.) [HKLM] -- {FD838817-F231-4962-AE85-B1285B1D3E34}
O42 - Logiciel: MAGIX Screenshare - (.MAGIX AG.) [HKLM] -- MAGIX Screenshare F
O42 - Logiciel: MAGIX Screenshare - (.MAGIX AG.) [HKLM] -- {3B51887C-48FA-41EF-8BFF-23936C716470}
O42 - Logiciel: MAGIX Speed burnR - (.MAGIX AG.) [HKLM] -- MAGIX Speed burnR F
O42 - Logiciel: MAGIX Video deluxe 16 9.0.0.55 (F) - (.MAGIX AG.) [HKLM] -- MAGIX Video deluxe 16 F
O42 - Logiciel: MSN - (.Pas de propriétaire.) [HKLM] -- MSNINST
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: MSXML 6.0 Parser - (.Microsoft Corporation.) [HKLM] -- {EA2D9BC0-75E9-4975-9A0A-DD82198DDC53}
O42 - Logiciel: MainConcept for Software Encoder - (.MainConcept.) [HKLM] -- InstallShield_{E7A02A01-C75A-4490-A168-5CA709A3D862}
O42 - Logiciel: Maison et Intérieur 3D - (.Pas de propriétaire.) [HKLM] -- Maison et Intérieur 3D
O42 - Logiciel: Malwarebytes' RogueRemover 1.21 - (.Malwarebytes.) [HKLM] -- Malwarebytes' RogueRemover FREE_is1
O42 - Logiciel: Matisseo Studio - (.Matisseo.) [HKLM] -- {B3B618BE-0D22-4EB1-A30C-5C0B525D1019}
O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
O42 - Logiciel: Microsoft Games for Windows - LIVE Redistributable - (.Microsoft Corporation.) [HKLM] -- {832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}
O42 - Logiciel: Microsoft Games for Windows Marketplace - (.Microsoft Corporation.) [HKLM] -- {4CB0307C-565E-4441-86BE-0DF2E4FB828C}
O42 - Logiciel: Microsoft Kernel-Mode Driver Framework Feature Pack 1.7 - (.Microsoft Corporation.) [HKLM] -- Wdf01007
O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) [HKLM] -- {4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {8A74E887-8F0F-4017-AF53-CBA42211AAA5}
O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
O42 - Logiciel: Microsoft WinUsb 1.0 - (.Microsoft Corporation.) [HKLM] -- winusb0100
O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {A059DE09-1B49-4450-B340-7AE097EC3F04}
O42 - Logiciel: MiniTool Partition Wizard Home Edition 7.0 - (.MiniTool Solution Ltd..) [HKLM] -- {DE59B901-18EA-4CB9-ADE4-291BF5C1E12E}_is1
O42 - Logiciel: MiniTool Partition Wizard Home Edition 7.7 - (.MiniTool Solution Ltd..) [HKLM] -- {05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1
O42 - Logiciel: Mon Univers Photomoinscher 4.6 - (.Pas de propriétaire.) [HKLM] -- Mon Univers Photomoinscher 4.6
O42 - Logiciel: Music Manager - (.Google, Inc..) [HKCU] -- MusicManager
O42 - Logiciel: MyFreeCodec - (.Pas de propriétaire.) [HKCU] -- MyFreeCodec
O42 - Logiciel: NCH Toolbox - (.NCH Software.) [HKLM] -- ToolBox
O42 - Logiciel: NVIDIA Drivers - (.Pas de propriétaire.) [HKLM] -- NVIDIA Drivers
O42 - Logiciel: Nero Audio Pack 1 - (.Nero AG.) [HKLM] -- {A7A0BF2E-31CC-49E3-9913-52C503EB969D}
O42 - Logiciel: Nero Blu-ray Player - (.Nero AG.) [HKLM] -- {A2FE691E-3F8E-4E30-AA7D-FF17AC77EA87}
O42 - Logiciel: Nero Blu-ray Player Help (CHM) - (.Nero AG.) [HKLM] -- {5B79E730-D897-4B8F-A1AD-7BB2D1F22B96}
O42 - Logiciel: Nero Core Components - (.Nero AG.) [HKLM] -- {BEBEE34D-84A2-4EDD-8BEA-96CC54371263}
O42 - Logiciel: Nero Kwik Media - (.Nero AG.) [HKLM] -- {052A1E34-A54B-458C-A4E3-24C3E054754A}
O42 - Logiciel: Nero Kwik Media - (.Nero AG.) [HKLM] -- {957F91DB-A999-4207-A780-828C857370F4}
O42 - Logiciel: Nero Kwik Media Help (CHM) - (.Nero AG.) [HKLM] -- {1F16820E-D0E7-4636-939E-45CBFEFB06E1}
O42 - Logiciel: Nero Kwik Themes Basic - (.Nero AG.) [HKLM] -- {1B6F5E51-575E-4693-BCA2-7543570D076D}
O42 - Logiciel: Nero SharedVideoCodecs - (.Nero AG.) [HKLM] -- {2432E589-6256-4513-B0BF-EFA8E325D5F0}
O42 - Logiciel: Nero Update - (.Nero AG.) [HKLM] -- {65BB0407-4CC8-4DC7-952E-3EEFDF05602A}
O42 - Logiciel: Nikon Message Center - (.Nikon.) [HKLM] -- {D2FCC1AE-6311-47C5-8130-C6C66D77DD71}
O42 - Logiciel: Nikon Transfer - (.Nikon.) [HKLM] -- {E9757890-7EC5-46C8-99AB-B00F07B6525C}
O42 - Logiciel: OCR Software by I.R.I.S. 13.0 - (.HP.) [HKLM] -- HPOCR
O42 - Logiciel: Orca - (.Microsoft Corporation.) [HKLM] -- {85F4CBCB-9BBC-4B50-A7D8-E1106771498D}
O42 - Logiciel: Otto - (.Pas de propriétaire.) [HKLM] -- 0D20D36D-A11C-444c-9AF7-70CBFED42ECF
O42 - Logiciel: PC Connectivity Solution - (.Nokia.) [HKLM] -- {34610DE0-3C13-42CA-8E32-01FFA38AB6E8}
O42 - Logiciel: PC-Doctor 5 for Windows - (.PC-Doctor, Inc..) [HKLM] -- PC-Doctor 5 for Windows
O42 - Logiciel: PDLP - (.Pas de propriétaire.) [HKLM] -- PDLP
O42 - Logiciel: PHOTOfunSTUDIO 6.0 - (.Panasonic Corporation.) [HKLM] -- {B62A8A6F-5E48-4336-BF13-1632D5921872}
O42 - Logiciel: PL-2303 USB-to-Serial - (.Pas de propriétaire.) [HKLM] -- {ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}
O42 - Logiciel: Package de pilotes Windows - Nokia pccsmcfd  (08/22/2008 7.0.0.0) - (.Nokia.) [HKLM] -- 504244733D18C8F63FF584AEB290E3904E791693
O42 - Logiciel: Photorécit 3 pour Windows - (.Microsoft Corporation.) [HKLM] -- {4F41AD68-89F2-4262-A32C-2F70B01FCE9E}
O42 - Logiciel: Picture Control Utility - (.Nikon.) [HKLM] -- {87441A59-5E64-4096-A170-14EFE67200C3}
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}
O42 - Logiciel: Rapport - (.Trusteer.) [HKLM] -- Rapport_msi
O42 - Logiciel: Rapport - (.Trusteer.) [HKLM] -- {1DD81E7D-0D28-4CEB-87B2-C041A4FCB215}
O42 - Logiciel: RealPlayer - (.RealNetworks.) [HKLM] -- RealPlayer 15.0
O42 - Logiciel: RealUpgrade 1.1 - (.RealNetworks, Inc..) [HKLM] -- {28C2DED6-325B-4CC7-983A-1777C8F7FBAB}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Pas de propriétaire.) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Revo Uninstaller Pro 2.5.9 - (.VS Revo Group, Ltd..) [HKLM] -- {67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1
O42 - Logiciel: RocketDock 1.3.5 - (.Punk Software.) [HKLM] -- RocketDock_is1
O42 - Logiciel: SAMSUNG USB Driver for Mobile Phones - (.SAMSUNG Electronics Co., Ltd..) [HKLM] -- {D0795B21-0CDA-4a92-AB9E-6E92D8111E44}
O42 - Logiciel: SFR - Kit de connexion - (.SFR.) [HKLM] -- SFR_Kit
O42 - Logiciel: Samsung Galaxy Ace - Guide - Cygwin-Odin 1.00 - (.Pas de propriétaire.) [HKLM] -- Samsung Galaxy Ace - Guide - Cygwin-Odin 1.00
O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM] -- InstallShield_{758C8301-2696-4855-AF45-534B1200980A}
O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM] -- {758C8301-2696-4855-AF45-534B1200980A}
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
O42 - Logiciel: Services Internet - (.Hewlett Packard.) [HKLM] -- InstallShield_{5CFD7508-7774-48FE-8280-7A3C0AE71755}
O42 - Logiciel: Skype Click to Call - (.Skype Technologies S.A..) [HKLM] -- {B6CF2967-C81E-40C0-9815-C05774FEF120}
O42 - Logiciel: Skype™ 6.0 - (.Skype Technologies S.A..) [HKLM] -- {EA17F4FC-FDBF-4CF8-A529-2D983132D053}
O42 - Logiciel: Sonic Express Labeler - (.Sonic Solutions.) [HKLM] -- {6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
O42 - Logiciel: Sonic MyDVD Plus - (.Sonic Solutions.) [HKLM] -- {21657574-BD54-48A2-9450-EB03B2C7FC29}
O42 - Logiciel: Sonic RecordNow Audio - (.Sonic Solutions.) [HKLM] -- {AB708C9B-97C8-4AC9-899B-DBF226AC9382}
O42 - Logiciel: Sonic RecordNow Copy - (.Sonic Solutions.) [HKLM] -- {B12665F4-4E93-4AB4-B7FC-37053B524629}
O42 - Logiciel: Sonic RecordNow Data - (.Sonic Solutions.) [HKLM] -- {075473F5-846A-448B-BCB3-104AA1760205}
O42 - Logiciel: Sonic Update Manager - (.Sonic Solutions.) [HKLM] -- {30465B6C-B53F-49A1-9EBA-A3F187AD502E}
O42 - Logiciel: Sony Picture Utility - (.Sony Corporation.) [HKLM] -- {D5068583-D569-468B-9755-5FBF5848F46F}
O42 - Logiciel: Steam - (.Valve Corporation.) [HKLM] -- {048298C9-A4D3-490B-9FF9-AB023A9238F3}
O42 - Logiciel: TomTom HOME 2.8.2.2264 - (.TomTom.) [HKLM] -- TomTom HOME
O42 - Logiciel: TomTom HOME Visual Studio Merge Modules - (.TomTom International B.V..) [HKLM] -- {8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}
O42 - Logiciel: VC80CRTRedist - 8.0.50727.6195 - (.DivX, Inc.) [HKLM] -- {933B4015-4618-4716-A828-5289FC03165F}
O42 - Logiciel: Video Downloader - (.http://www.vgrabber.com.) [HKLM] -- Video Downloader
O42 - Logiciel: VideoPad Video Editor - (.NCH Software.) [HKLM] -- VideoPad
O42 - Logiciel: ViewNX - (.Nikon.) [HKLM] -- {F007CBCE-D714-4C0B-8CE9-9B0D78116468}
O42 - Logiciel: VoiceOver Kit - (.Apple Inc..) [HKLM] -- {6B4AD1A9-E73A-4184-9D6B-072F8A3C5EBA}
O42 - Logiciel: WahOO - (.Pas de propriétaire.) [HKLM] -- {0271A4CB-D48C-4CDF-826F-62EE8D91663F}_is1
O42 - Logiciel: WinDS PRO 2011.5 (HP_Administrateur) - (.WinDS PRO Central.) [HKCU] -- {4237FF56-4BD0-481E-BD44-C1A8DDA9C753}HP_Administrateur_is1
O42 - Logiciel: WinZip 12.1 - (.WinZip Computing, S.L. .) [HKLM] -- {CD95F661-A5C4-44F5-A6AA-ECDD91C240B8}
O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime
O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
O42 - Logiciel: Windows XP Media Center Edition 2005 KB2628259 - (.Microsoft Corporation.) [HKLM] -- KB2628259
O42 - Logiciel: Wizard101(FR) - (.Gameforge 4D GmbH.) [HKCU] -- Wizard101(FR)_is1
O42 - Logiciel: avast! Free Antivirus v7.0.1474.0 - (.AVAST Software.) [HKLM] -- avast
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {B0261E53-B6F1-474A-864B-E7C3CBF468E0}
O42 - Logiciel: muvee autoProducer 5.0 - (.muvee Technologies.) [HKLM] -- {27428D1B-8CBA-4EEA-B9C0-A23CA7B4FCC1}
O42 - Logiciel: muvee autoProducer unPlugged 2.0 - (.muvee Technologies.) [HKLM] -- {5FDD0538-C67A-4F67-B3F8-09D1AAF04D99}
O42 - Logiciel: neroxml - (.Nero AG.) [HKLM] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B}

---\\ HKCU & HKLM Software Keys
[HKCU\Software\5fedd8ce56eba41]
[HKCU\Software\7-Zip]
[HKCU\Software\AVAST Software]
[HKCU\Software\AVS4YOU]
[HKCU\Software\Adobe]
[HKCU\Software\Amazon]
[HKCU\Software\Antanda]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\AtelierDuLivre]
[HKCU\Software\Audacity]
[HKCU\Software\Aurigma]
[HKCU\Software\Broderbund Software]
[HKCU\Software\BrowserMngr]
[HKCU\Software\Bugsplat]
[HKCU\Software\CDDB]
[HKCU\Software\CeWe Color]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Crossrider]
[HKCU\Software\Cyberlink]
[HKCU\Software\Cygwin]
[HKCU\Software\DataMngr]
[HKCU\Software\DataMngr_Toolbar]
[HKCU\Software\DivXNetworks]
[HKCU\Software\DivX]
[HKCU\Software\EasyBits]
[HKCU\Software\Emjysoft]
[HKCU\Software\EstSoft]
[HKCU\Software\Freeware]
[HKCU\Software\GNU]
[HKCU\Software\Gabest]
[HKCU\Software\GlarySoft]
[HKCU\Software\Google]
[HKCU\Software\HP]
[HKCU\Software\Haali]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\HookNetwork]
[HKCU\Software\I.R.I.S.]
[HKCU\Software\IM Providers]
[HKCU\Software\IncrediMail]
[HKCU\Software\InstallCore]
[HKCU\Software\Intel]
[HKCU\Software\Iris]
[HKCU\Software\JEDI-VCL]
[HKCU\Software\JavaSoft]
[HKCU\Software\JetCar]
[HKCU\Software\KingsIsle]
[HKCU\Software\KowMedia]
[HKCU\Software\Leadertech]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\Macromedia]
[HKCU\Software\Magix]
[HKCU\Software\MainConcept (Nikon)]
[HKCU\Software\MainConcept]
[HKCU\Software\MiniTool Solution Ltd.]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\MultiStageTrayAgent]
[HKCU\Software\Myfree Codec]
[HKCU\Software\NCH Software]
[HKCU\Software\NCH Swift Sound]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Nero]
[HKCU\Software\Netscape]
[HKCU\Software\Neuf]
[HKCU\Software\Nico Mak Computing]
[HKCU\Software\Nikon]
[HKCU\Software\Novell]
[HKCU\Software\ODBC]
[HKCU\Software\ORL]
[HKCU\Software\Pinnacle Systems]
[HKCU\Software\Pipix]
[HKCU\Software\Policies]
[HKCU\Software\RealNetworks]
[HKCU\Software\Realtek]
[HKCU\Software\RocketDock]
[HKCU\Software\SOFT32]
[HKCU\Software\Samsung]
[HKCU\Software\SkypeApps]
[HKCU\Software\Skype]
[HKCU\Software\Softonic]
[HKCU\Software\Sonic]
[HKCU\Software\Sony Corporation]
[HKCU\Software\Sounds]
[HKCU\Software\Sports]
[HKCU\Software\Stardock]
[HKCU\Software\SweetIM]
[HKCU\Software\SyScript]
[HKCU\Software\Symantec]
[HKCU\Software\TeleCharger]
[HKCU\Software\Trolltech]
[HKCU\Software\TutoTag]
[HKCU\Software\Tutorials]
[HKCU\Software\Unity]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\VS Revo Group]
[HKCU\Software\Valve]
[HKCU\Software\Virtools]
[HKCU\Software\WahOO]
[HKCU\Software\Widcomm]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinZip Computing]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\ej-technologies]
[HKCU\Software\iMesh]
[HKLM\Software\5fedd8ce56eba41]
[HKLM\Software\AVAST Software]
[HKLM\Software\AVS4YOU]
[HKLM\Software\Adobe]
[HKLM\Software\AdwCleaner]
[HKLM\Software\Ahead]
[HKLM\Software\Amazon]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\Applied Networking]
[HKLM\Software\Babylon]
[HKLM\Software\Broderbund Software]
[HKLM\Software\BrowserChoice]
[HKLM\Software\BrowserMngr]
[HKLM\Software\C07ft5Y]
[HKLM\Software\CDDB]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Conduit]
[HKLM\Software\CyberLink]
[HKLM\Software\Cygwin]
[HKLM\Software\DataMngr]
[HKLM\Software\Dataviz]
[HKLM\Software\Debug]
[HKLM\Software\DivXNetworks]
[HKLM\Software\DivX]
[HKLM\Software\Dropbox]
[HKLM\Software\EstSoft]
[HKLM\Software\FGUpdate]
[HKLM\Software\GEAR Software]
[HKLM\Software\Gemplus]
[HKLM\Software\Geonaute]
[HKLM\Software\GlarySoft]
[HKLM\Software\Google]
[HKLM\Software\HPQ]
[HKLM\Software\HPS]
[HKLM\Software\HP]
[HKLM\Software\HaaliMkx]
[HKLM\Software\Hewlett-Packard]
[HKLM\Software\I.R.I.S.]
[HKLM\Software\ICE]
[HKLM\Software\IM Providers]
[HKLM\Software\InstallShield]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\LEAD Technologies, Inc.]
[HKLM\Software\LightScribe]
[HKLM\Software\Macromedia]
[HKLM\Software\Magix]
[HKLM\Software\MarkAny]
[HKLM\Software\McAfee.com]
[HKLM\Software\MicroVision]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\MusicNet]
[HKLM\Software\Myfree Codec]
[HKLM\Software\NCH Software]
[HKLM\Software\NCH Swift Sound]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\Nero]
[HKLM\Software\Neuf]
[HKLM\Software\Nico Mak Computing]
[HKLM\Software\Nikon]
[HKLM\Software\Novell]
[HKLM\Software\ODBC]
[HKLM\Software\OdinM]
[HKLM\Software\Oracle]
[HKLM\Software\PC Connectivity Solution]
[HKLM\Software\PC-Doctor]
[HKLM\Software\Panasonic]
[HKLM\Software\PegasusImaging]
[HKLM\Software\PhotoFiltre Studio]
[HKLM\Software\Pinnacle Systems]
[HKLM\Software\PoINT]
[HKLM\Software\Policies]
[HKLM\Software\Program Groups]
[HKLM\Software\Python]
[HKLM\Software\QUAD Registry Cleaner v2]
[HKLM\Software\RealNetworks]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\RichFX]
[HKLM\Software\S3R521]
[HKLM\Software\SAMSUNG]
[HKLM\Software\Schlumberger]
[HKLM\Software\Skype]
[HKLM\Software\Soeperman Enterprises Ltd.]
[HKLM\Software\Sonic]
[HKLM\Software\Sony Corporation]
[HKLM\Software\String Comparison]
[HKLM\Software\SweetIM]
[HKLM\Software\SyScript]
[HKLM\Software\SymNRT]
[HKLM\Software\Symantec]
[HKLM\Software\Sync Services]
[HKLM\Software\TomTom]
[HKLM\Software\Trusteer]
[HKLM\Software\Valve]
[HKLM\Software\Virtools]
[HKLM\Software\VirtualDubMOD 1.5.10.2 b2540 Fr]
[HKLM\Software\Widcomm]
[HKLM\Software\Wilson WindowWare]
[HKLM\Software\Windows 3.1 Migration Status]
[HKLM\Software\Wow6432Node]
[HKLM\Software\Xing Technology Corp.]
[HKLM\Software\ej-technologies]
[HKLM\Software\mozilla.org]
[HKLM\Software\muvee Technologies]
~ Scan Softwares in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 20/01/2013 - 15:14:47 - [2,951] ----D C:\Program Files\7-Zip
O43 - CFD: 24/09/2012 - 21:11:45 - [266,602] ----D C:\Program Files\Adobe
O43 - CFD: 06/10/2012 - 09:02:45 - [4,752] ----D C:\Program Files\Amazon
O43 - CFD: 12/08/2012 - 18:27:46 - [0,862] ----D C:\Program Files\ANT Drivers
O43 - CFD: 03/11/2012 - 13:16:17 - [59,294] ----D C:\Program Files\AnvSoft
O43 - CFD: 28/12/2011 - 18:23:15 - [2,316] ----D C:\Program Files\Apple Software Update
O43 - CFD: 17/03/2012 - 15:29:50 - [138,019] ----D C:\Program Files\AtelierDuLivre
O43 - CFD: 21/10/2012 - 10:39:45 - [43,776] ----D C:\Program Files\Audacity
O43 - CFD: 11/02/2013 - 20:52:48 - [391,945] ----D C:\Program Files\AVAST Software
O43 - CFD: 26/06/2012 - 20:33:53 - [29,763] ----D C:\Program Files\Betclic Poker.fr
O43 - CFD: 28/12/2012 - 17:37:38 - [0,602] ----D C:\Program Files\Bonjour
O43 - CFD: 26/09/2009 - 15:18:59 - [4,030] ----D C:\Program Files\CCleaner
O43 - CFD: 30/09/2010 - 17:46:25 - [6,211] ----D C:\Program Files\Common Files
O43 - CFD: 10/02/2013 - 22:12:23 - [35,038] ----D C:\Program Files\Compiled Driver Disk (Samsung)
O43 - CFD: 21/10/2012 - 09:28:50 - [1,037] ----D C:\Program Files\Covernis
O43 - CFD: 30/09/2010 - 17:50:02 - [0,758] ----D C:\Program Files\DIFX
O43 - CFD: 08/01/2013 - 22:17:41 - [146,802] ----D C:\Program Files\DivX
O43 - CFD: 02/02/2013 - 18:45:17 - [28,604] ----D C:\Program Files\Dropbox
O43 - CFD: 10/06/2012 - 17:27:47 - [1,305] ----D C:\Program Files\Duplicate Cleaner
O43 - CFD: 09/11/2012 - 19:50:04 - [1,821] ----D C:\Program Files\Ekomini
O43 - CFD: 20/12/2012 - 20:29:49 - [0,002] ----D C:\Program Files\eLimit
O43 - CFD: 02/11/2010 - 11:47:58 - [11,754] ----D C:\Program Files\ESTsoft
O43 - CFD: 29/11/2012 - 18:57:30 - [694,961] R---D C:\Program Files\Fichiers communs
O43 - CFD: 28/04/2007 - 16:46:23 - [5,272] ----D C:\Program Files\Flash Disk Manager
O43 - CFD: 08/01/2013 - 22:17:44 - [1,493] ----D C:\Program Files\FlashGet
O43 - CFD: 20/03/2011 - 19:20:21 - [0,000] ----D C:\Program Files\FreeTime
O43 - CFD: 08/01/2013 - 22:17:44 - [12,759] ----D C:\Program Files\FrenchOtto
O43 - CFD: 09/08/2012 - 18:50:45 - [0,326] ----D C:\Program Files\Geonaute KeyMaze 300
O43 - CFD: 12/08/2012 - 18:41:57 - [11,729] ----D C:\Program Files\Geonaute Software
O43 - CFD: 03/09/2011 - 10:50:36 - [14,149] ----D C:\Program Files\GFP
O43 - CFD: 08/11/2012 - 20:51:47 - [21,211] ----D C:\Program Files\Glary Utilities
O43 - CFD: 11/02/2013 - 20:54:34 - [550,187] ----D C:\Program Files\Google
O43 - CFD: 26/09/2007 - 15:44:14 - [750,370] ----D C:\Program Files\Grisoft
O43 - CFD: 07/06/2012 - 18:09:03 - [0,825] ----D C:\Program Files\Hamachi
O43 - CFD: 02/12/2009 - 19:56:08 - [47,363] ----D C:\Program Files\Hewlett-Packard
O43 - CFD: 10/06/2012 - 21:43:35 - [927,644] ----D C:\Program Files\HP
O43 - CFD: 02/01/2006 - 17:04:03 - [3,935] ----D C:\Program Files\HP DigitalMedia Archive
O43 - CFD: 10/02/2013 - 10:20:21 - [244,937] --H-D C:\Program Files\InstallShield Installation Information
O43 - CFD: 02/01/2006 - 16:45:14 - [9,325] ----D C:\Program Files\Intel
O43 - CFD: 04/06/2007 - 16:33:14 - [6,965] ----D C:\Program Files\InterActual
O43 - CFD: 08/01/2013 - 22:17:44 - [3,435] ----D C:\Program Files\Internet Explorer
O43 - CFD: 28/12/2012 - 17:46:36 - [1,770] ----D C:\Program Files\iPod
O43 - CFD: 28/12/2012 - 17:47:35 - [196,455] ----D C:\Program Files\iTunes
O43 - CFD: 07/10/2012 - 15:30:41 - [778,212] ----D C:\Program Files\Java
O43 - CFD: 18/03/2012 - 18:16:41 - [0,000] ----D C:\Program Files\JPEG Compression
O43 - CFD: 12/08/2012 - 18:19:35 - [0,326] ----D C:\Program Files\Keymaze
O43 - CFD: 21/09/2008 - 17:44:34 - [6,498] ----D C:\Program Files\Lavalys
O43 - CFD: 27/09/2008 - 14:08:41 - [3,209] ----D C:\Program Files\ma-config.com
O43 - CFD: 14/08/2011 - 15:24:14 - [760,192] ----D C:\Program Files\MAGIX
O43 - CFD: 02/01/2006 - 16:47:49 - [3,416] ----D C:\Program Files\MainConcept
O43 - CFD: 20/01/2013 - 22:35:55 - [0] ----D C:\Program Files\MarkAny
O43 - CFD: 01/04/2012 - 16:31:07 - [11,988] ----D C:\Program Files\Matisseo
O43 - CFD: 16/01/2010 - 00:08:56 - [0,994] ----D C:\Program Files\Microsoft
O43 - CFD: 19/12/2007 - 03:00:24 - [0,764] ----D C:\Program Files\Microsoft CAPICOM 2.1.0.2
O43 - CFD: 20/06/2009 - 09:18:45 - [0] ----D C:\Program Files\microsoft frontpage
O43 - CFD: 11/11/2012 - 17:21:25 - [8,929] ----D C:\Program Files\Microsoft Games for Windows - LIVE
O43 - CFD: 01/12/2012 - 20:14:27 - [11,646] ----D C:\Program Files\Microsoft IntelliPoint
O43 - CFD: 02/01/2006 - 17:08:20 - [122,669] ----D C:\Program Files\Microsoft Office
O43 - CFD: 13/05/2012 - 10:10:46 - [40,838] ----D C:\Program Files\Microsoft Silverlight
O43 - CFD: 29/07/2012 - 14:12:22 - [4,837] ----D C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD: 16/01/2010 - 00:13:19 - [2,087] ----D C:\Program Files\Microsoft Sync Framework
O43 - CFD: 29/07/2012 - 14:12:22 - [0,327] ----D C:\Program Files\Microsoft Synchronization Services
O43 - CFD: 08/01/2013 - 22:17:45 - [142,728] ----D C:\Program Files\Microsoft Works
O43 - CFD: 29/07/2012 - 14:07:28 - [0,023] ----D C:\Program Files\Microsoft.NET
O43 - CFD: 09/02/2013 - 18:40:33 - [21,650] ----D C:\Program Files\MiniTool Partition Wizard Home Edition 7.0
O43 - CFD: 09/02/2013 - 18:45:10 - [41,730] ----D C:\Program Files\MiniTool Partition Wizard Home Edition 7.7
O43 - CFD: 20/03/2012 - 19:17:32 - [10,436] ----D C:\Program Files\Movie Maker
O43 - CFD: 12/01/2011 - 20:15:22 - [0,798] ----D C:\Program Files\Mozilla Firefox
O43 - CFD: 27/10/2009 - 18:10:59 - [0,025] ----D C:\Program Files\MSBuild
O43 - CFD: 15/11/2005 - 03:24:52 - [20,477] ----D C:\Program Files\MSN
O43 - CFD: 15/11/2005 - 03:25:02 - [8,341] ----D C:\Program Files\MSN Gaming Zone
O43 - CFD: 05/07/2007 - 16:43:53 - [2,883] ----D C:\Program Files\Music Manager
O43 - CFD: 02/01/2006 - 17:10:00 - [86,666] ----D C:\Program Files\muvee Technologies
O43 - CFD: 22/10/2010 - 17:29:21 - [10,585] ----D C:\Program Files\MyFree Codec
O43 - CFD: 19/06/2009 - 11:33:20 - [83,051] ----D C:\Program Files\Navilog1
O43 - CFD: 28/03/2010 - 13:11:47 - [11,733] ----D C:\Program Files\NCH Software
O43 - CFD: 28/03/2010 - 15:43:21 - [0,462] ----D C:\Program Files\NCH Swift Sound
O43 - CFD: 30/09/2012 - 19:10:57 - [347,016] ----D C:\Program Files\Nero
O43 - CFD: 24/10/2009 - 12:28:09 - [3,133] ----D C:\Program Files\NetMeeting
O43 - CFD: 18/09/2006 - 16:53:52 - [0] ----D C:\Program Files\neuf telecom
O43 - CFD: 03/06/2011 - 20:36:48 - [53,520] ----D C:\Program Files\Nikon
O43 - CFD: 17/06/2012 - 19:33:56 - [33,205] ----D C:\Program Files\Oracle
O43 - CFD: 02/02/2013 - 18:13:43 - [2,879] ----D C:\Program Files\Orca
O43 - CFD: 16/12/2010 - 22:47:59 - [4,176] ----D C:\Program Files\Outlook Express
O43 - CFD: 14/03/2009 - 10:22:38 - [0,064] ----D C:\Program Files\Pack Securite
O43 - CFD: 29/07/2012 - 14:13:17 - [76,311] ----D C:\Program Files\Panasonic
O43 - CFD: 18/10/2012 - 18:08:03 - [11,074] ----D C:\Program Files\PC Connectivity Solution
O43 - CFD: 08/01/2013 - 22:17:45 - [60,371] ----D C:\Program Files\PC-Doctor 5 for Windows
O43 - CFD: 13/02/2013 - 20:43:28 - [1,520] ----D C:\Program Files\PDLP
O43 - CFD: 09/02/2007 - 22:47:26 - [4,915] ----D C:\Program Files\PhotoFiltre Studio
O43 - CFD: 06/11/2011 - 15:07:23 - [143,971] ----D C:\Program Files\photomoinscher 4.6
O43 - CFD: 27/03/2010 - 22:18:00 - [0] ----D C:\Program Files\Pinnacle
O43 - CFD: 25/08/2009 - 20:25:25 - [0,215] ----D C:\Program Files\QUAD Utilities
O43 - CFD: 28/12/2012 - 17:34:49 - [74,048] ----D C:\Program Files\QuickTime
O43 - CFD: 27/05/2012 - 21:36:08 - [138,846] ----D C:\Program Files\Real
O43 - CFD: 27/10/2009 - 18:10:51 - [35,671] ----D C:\Program Files\Reference Assemblies
O43 - CFD: 30/01/2009 - 17:42:30 - [43,275] ----D C:\Program Files\ReportOne
O43 - CFD: 10/06/2012 - 18:09:05 - [10,946] ----D C:\Program Files\RocketDock
O43 - CFD: 01/11/2010 - 10:39:09 - [3,287] ----D C:\Program Files\RogueRemover FREE
O43 - CFD: 10/02/2013 - 10:19:43 - [211,277] ----D C:\Program Files\Samsung
O43 - CFD: 02/01/2006 - 17:19:00 - [93,860] ----D C:\Program Files\Services en ligne
O43 - CFD: 22/06/2011 - 17:17:21 - [14,221] ----D C:\Program Files\SFR
O43 - CFD: 10/02/2007 - 21:35:37 - [0,704] ----D C:\Program Files\Siber Systems
O43 - CFD: 29/11/2012 - 18:57:30 - [37,540] R---D C:\Program Files\Skype
O43 - CFD: 27/01/2009 - 18:12:27 - [9,260] ----D C:\Program Files\Smart Projects
O43 - CFD: 25/09/2008 - 19:43:31 - [55,001] ----D C:\Program Files\Songbird
O43 - CFD: 02/01/2006 - 17:05:16 - [147,444] ----D C:\Program Files\Sonic
O43 - CFD: 07/02/2010 - 08:36:30 - [243,453] ----D C:\Program Files\Sony
O43 - CFD: 05/04/2007 - 17:21:03 - [13,046] ----D C:\Program Files\Stardock
O43 - CFD: 20/12/2012 - 19:00:25 - [422,804] ----D C:\Program Files\Steam
O43 - CFD: 31/10/2012 - 21:43:18 - [4,093] ----D C:\Program Files\SweetIM
O43 - CFD: 09/05/2009 - 17:36:43 - [50,433] ----D C:\Program Files\TomTom HOME 2
O43 - CFD: 09/05/2009 - 17:37:19 - [0,021] ----D C:\Program Files\TomTom International B.V
O43 - CFD: 19/05/2012 - 15:55:48 - [34,116] ----D C:\Program Files\Trusteer
O43 - CFD: 08/01/2013 - 21:59:55 - [0] ----D C:\Program Files\TUTO4PC
O43 - CFD: 12/11/2005 - 01:09:06 - [0] --H-D C:\Program Files\Uninstall Information
O43 - CFD: 25/08/2009 - 20:41:01 - [0,014] ----D C:\Program Files\Unlocker
O43 - CFD: 05/08/2012 - 15:37:02 - [50,495] ----D C:\Program Files\vGrabber-software
O43 - CFD: 05/11/2010 - 17:57:37 - [14,615] ----D C:\Program Files\Virtools
O43 - CFD: 20/12/2012 - 18:02:44 - [22,475] ----D C:\Program Files\VS Revo Group
O43 - CFD: 25/10/2009 - 17:47:58 - [10,487] ----D C:\Program Files\WIDCOMM
O43 - CFD: 13/06/2009 - 17:15:37 - [33,931] ----D C:\Program Files\WinamaxPoker
O43 - CFD: 05/02/2011 - 23:28:31 - [143,509] ----D C:\Program Files\Windows Live
O43 - CFD: 11/10/2008 - 16:29:21 - [33,548] ----D C:\Program Files\Windows Live Safety Center
O43 - CFD: 30/06/2009 - 17:07:49 - [0,234] ----D C:\Program Files\Windows Live SkyDrive
O43 - CFD: 04/04/2007 - 08:46:13 - [3,415] ----D C:\Program Files\Windows Media Connect 2
O43 - CFD: 18/03/2012 - 20:57:35 - [10,231] ----D C:\Program Files\Windows Media Player
O43 - CFD: 24/10/2009 - 12:28:04 - [3,760] ----D C:\Program Files\Windows NT
O43 - CFD: 15/11/2005 - 03:25:58 - [56,600] ----D C:\Program Files\Windows Plus
O43 - CFD: 20/12/2009 - 12:04:17 - [0] ----D C:\Program Files\Windows Sidebar
O43 - CFD: 12/11/2005 - 01:09:02 - [0] --H-D C:\Program Files\WindowsUpdate
O43 - CFD: 25/10/2009 - 14:58:39 - [15,721] ----D C:\Program Files\WinZip
O43 - CFD: 15/11/2005 - 03:26:08 - [0] ----D C:\Program Files\xerox
O43 - CFD: 13/02/2013 - 21:41:35 - [11,466] ----D C:\Program Files\ZHPDiag
O43 - CFD: 02/01/2006 - 17:07:02 - [10,384] ----D C:\Program Files\Fichiers communs\Adobe
O43 - CFD: 17/12/2006 - 16:31:02 - [6,150] ----D C:\Program Files\Fichiers communs\Ahead
O43 - CFD: 30/04/2007 - 12:51:30 - [0,785] ----D C:\Program Files\Fichiers communs\AOL
O43 - CFD: 28/12/2012 - 17:46:34 - [112,416] ----D C:\Program Files\Fichiers communs\Apple
O43 - CFD: 17/12/2010 - 18:37:58 - [157,784] ----D C:\Program Files\Fichiers communs\AVSMedia
O43 - CFD: 29/09/2007 - 11:50:25 - [13,679] ----D C:\Program Files\Fichiers communs\BitDefender
O43 - CFD: 03/04/2008 - 23:00:30 - [0,305] ----D C:\Program Files\Fichiers communs\DataViz
O43 - CFD: 07/01/2007 - 17:39:36 - [0,082] ----D C:\Program Files\Fichiers communs\Designer
O43 - CFD: 20/01/2012 - 19:53:27 - [28,865] ----D C:\Program Files\Fichiers communs\DivX Shared
O43 - CFD: 20/12/2012 - 17:08:07 - [0,029] ----D C:\Program Files\Fichiers communs\eLimit
O43 - CFD: 01/03/2007 - 14:52:51 - [25,786] ----D C:\Program Files\Fichiers communs\GTK
O43 - CFD: 02/01/2006 - 16:54:24 - [0,507] ----D C:\Program Files\Fichiers communs\Hewlett-Packard
O43 - CFD: 02/01/2006 - 16:52:28 - [6,830] ----D C:\Program Files\Fichiers communs\HP
O43 - CFD: 02/01/2006 - 17:09:13 - [15,121] ----D C:\Program Files\Fichiers communs\InstallShield
O43 - CFD: 07/10/2012 - 15:32:17 - [66,442] ----D C:\Program Files\Fichiers communs\Java
O43 - CFD: 02/01/2006 - 17:05:56 - [4,235] ---AD C:\Program Files\Fichiers communs\LightScribe
O43 - CFD: 06/06/2010 - 15:13:22 - [0,855] ----D C:\Program Files\Fichiers communs\MAGIX Services
O43 - CFD: 14/08/2011 - 14:28:30 - [6,089] ----D C:\Program Files\Fichiers communs\MAGIX Shared
O43 - CFD: 02/02/2013 - 18:13:42 - [90,886] ----D C:\Program Files\Fichiers communs\Microsoft Shared
O43 - CFD: 15/11/2005 - 03:24:18 - [0,271] ----D C:\Program Files\Fichiers communs\MSSoap
O43 - CFD: 02/01/2006 - 17:09:22 - [36,806] ----D C:\Program Files\Fichiers communs\muvee Technologies
O43 - CFD: 30/09/2012 - 19:09:49 - [23,132] ----D C:\Program Files\Fichiers communs\Nero
O43 - CFD: 03/06/2011 - 20:39:05 - [28,343] ----D C:\Program Files\Fichiers communs\Nikon
O43 - CFD: 15/11/2005 - 03:24:20 - [0] ----D C:\Program Files\Fichiers communs\ODBC
O43 - CFD: 29/07/2012 - 14:13:29 - [0,194] ----D C:\Program Files\Fichiers communs\Panasonic
O43 - CFD: 26/06/2011 - 15:15:57 - [0,198] ----D C:\Program Files\Fichiers communs\Real
O43 - CFD: 30/09/2010 - 17:45:53 - [0,060] ----D C:\Program Files\Fichiers communs\Samsung
O43 - CFD: 15/11/2005 - 03:24:20 - [0,014] ----D C:\Program Files\Fichiers communs\Services
O43 - CFD: 29/11/2012 - 18:57:30 - [2,056] ----D C:\Program Files\Fichiers communs\Skype
O43 - CFD: 02/01/2006 - 17:04:41 - [15,768] ----D C:\Program Files\Fichiers communs\Sonic Shared
O43 - CFD: 15/11/2005 - 03:24:20 - [3,612] ----D C:\Program Files\Fichiers communs\SpeechEngines
O43 - CFD: 05/04/2007 - 17:21:03 - [0,133] ----D C:\Program Files\Fichiers communs\Stardock
O43 - CFD: 11/11/2012 - 12:21:25 - [0,388] ----D C:\Program Files\Fichiers communs\Steam
O43 - CFD: 02/01/2006 - 17:04:48 - [0,453] ----D C:\Program Files\Fichiers communs\SureThing Shared
O43 - CFD: 07/02/2011 - 08:49:06 - [0,487] ----D C:\Program Files\Fichiers communs\Symantec Shared
O43 - CFD: 24/10/2009 - 12:28:02 - [15,829] ----D C:\Program Files\Fichiers communs\System
O43 - CFD: 02/01/2006 - 17:05:17 - [0,339] ----D C:\Program Files\Fichiers communs\TiVo Shared
O43 - CFD: 30/06/2009 - 17:01:32 - [0] ----D C:\Program Files\Fichiers communs\Windows Live
O43 - CFD: 17/12/2007 - 18:25:23 - [19,311] -SH-D C:\Program Files\Fichiers communs\WindowsLiveInstaller
O43 - CFD: 27/05/2012 - 21:36:03 - [0,336] ----D C:\Program Files\Fichiers communs\xing shared
O43 - CFD: 11/02/2013 - 20:52:48 - [2024,236] R-H-D C:\Documents and Settings\All Users\Application Data
O43 - CFD: 13/02/2013 - 21:18:09 - [0,013] ----D C:\Documents and Settings\All Users\Bureau
O43 - CFD: 10/02/2013 - 10:36:28 - [-1890,503] R---D C:\Documents and Settings\All Users\Documents
O43 - CFD: 20/01/2013 - 15:14:43 - [3,788] -SH-D C:\Documents and Settings\All Users\DRM
O43 - CFD: 20/01/2013 - 15:15:50 - [0] ----D C:\Documents and Settings\All Users\Favoris
O43 - CFD: 20/01/2013 - 15:15:51 - [0] ----D C:\Documents and Settings\All Users\Menu Dmarrer
O43 - CFD: 20/01/2013 - 15:15:51 - [0,494] R---D C:\Documents and Settings\All Users\Menu Démarrer
O43 - CFD: 20/01/2013 - 15:15:51 - [0,426] --H-D C:\Documents and Settings\All Users\Modèles
O43 - CFD: 12/12/2012 - 16:16:10 - [83,775] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\.minecraft
O43 - CFD: 06/10/2012 - 11:03:33 - [0] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\.pixelife
O43 - CFD: 29/03/2010 - 19:41:25 - [7,226] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Adobe
O43 - CFD: 30/06/2009 - 21:01:11 - [0] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\AdobeUM
O43 - CFD: 06/10/2012 - 09:04:13 - [0,061] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Amazon
O43 - CFD: 29/02/2012 - 17:56:31 - [1642,432] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Apple Computer
O43 - CFD: 02/02/2013 - 16:47:23 - [0,004] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Audacity
O43 - CFD: 17/12/2010 - 18:33:58 - [0,000] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\AVS4YOU
O43 - CFD: 19/05/2012 - 10:42:21 - [0,017] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Babylon
O43 - CFD: 01/09/2009 - 00:10:32 - [0] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\CyberLink
O43 - CFD: 20/01/2012 - 20:10:55 - [0,000] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\DDMSettings
O43 - CFD: 18/07/2010 - 18:44:53 - [0,246] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\DivX
O43 - CFD: 13/02/2013 - 20:45:51 - [31,809] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Dropbox
O43 - CFD: 20/09/2012 - 17:58:38 - [5,051] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Emjysoft
O43 - CFD: 02/02/2013 - 17:25:52 - [0,904] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Epsitec Cache
O43 - CFD: 02/11/2010 - 11:48:21 - [0,001] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\ESTsoft
O43 - CFD: 12/05/2012 - 08:43:34 - [0] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\GetRightToGo
O43 - CFD: 08/11/2012 - 20:51:37 - [0,024] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\GlarySoft
O43 - CFD: 11/12/2011 - 18:54:07 - [0,022] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Google
O43 - CFD: 11/06/2012 - 18:37:32 - [0,003] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Hamachi
O43 - CFD: 19/06/2009 - 14:05:10 - [0] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Help
O43 - CFD: 25/10/2009 - 15:44:57 - [0,132] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\HP
O43 - CFD: 09/12/2012 - 09:36:06 - [0,222] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\HPAppData
O43 - CFD: 26/09/2009 - 15:05:31 - [0] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\HPQ
O43 - CFD: 17/10/2010 - 11:35:20 - [0,013] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\HpUpdate
O43 - CFD: 19/06/2009 - 13:38:53 - [0] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Identities
O43 - CFD: 11/10/2009 - 10:49:15 - [0,047] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Leadertech
O43 - CFD: 17/06/2009 - 19:32:18 - [0,001] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Macromedia
O43 - CFD: 14/08/2011 - 15:25:46 - [0,001] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\MAGIX
O43 - CFD: 20/12/2012 - 20:46:12 - [0] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Malwarebytes
O43 - CFD: 16/09/2011 - 20:41:53 - [15,295] -S--D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Microsoft
O43 - CFD: 25/12/2010 - 18:04:57 - [17,948] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Mozilla
O43 - CFD: 30/06/2009 - 16:30:17 - [0,814] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\MSNInstaller
O43 - CFD: 28/03/2010 - 13:11:41 - [0,037] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\NCH Software
O43 - CFD: 30/09/2012 - 19:29:25 - [0,033] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Nero
O43 - CFD: 31/07/2012 - 19:16:02 - [7,828] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Nikon
O43 - CFD: 01/04/2012 - 16:32:19 - [0,000] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\OPaC bright ideas
O43 - CFD: 17/06/2012 - 19:33:19 - [0] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Oracle
O43 - CFD: 30/09/2010 - 17:51:44 - [0,000] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\PC Suite
O43 - CFD: 27/05/2012 - 21:37:06 - [25,401] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Real
O43 - CFD: 10/02/2013 - 10:23:39 - [0,067] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Samsung
O43 - CFD: 21/10/2012 - 09:29:25 - [0] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\SiNETiS
O43 - CFD: 27/01/2013 - 00:24:03 - [9,226] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Skype
O43 - CFD: 23/06/2011 - 17:40:30 - [0,026] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\skypePM
O43 - CFD: 11/10/2009 - 17:17:06 - [0] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Sonic
O43 - CFD: 27/03/2010 - 19:07:24 - [1,076] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Sony Corporation
O43 - CFD: 05/08/2009 - 20:37:03 - [8,920] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Sun
O43 - CFD: 21/10/2012 - 11:00:34 - [0] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Temp
O43 - CFD: 22/02/2010 - 19:18:00 - [0,031] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Tific
O43 - CFD: 07/11/2009 - 17:29:17 - [0,002] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\UseNeXT
O43 - CFD: 20/12/2012 - 19:02:02 - [0,002] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\VS Revo Group
O43 - CFD: 05/11/2010 - 17:58:20 - [0] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\3DVIA
O43 - CFD: 18/06/2010 - 20:24:16 - [0,150] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\Adobe
O43 - CFD: 05/07/2009 - 19:33:18 - [0] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\Apple
O43 - CFD: 29/02/2012 - 17:56:31 - [144,362] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\Apple Computer
O43 - CFD: 19/01/2013 - 17:12:22 - [0,046] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\ApplicationHistory
O43 - CFD: 01/11/2010 - 10:28:58 - [0,064] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\Cooliris
O43 - CFD: 26/12/2012 - 20:40:04 - [518,951] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\Downloaded Installations
O43 - CFD: 10/06/2012 - 21:06:24 - [0,005] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\DuplicateCleaner
O43 - CFD: 01/09/2009 - 00:27:22 - [0,008] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\DVDPlay
O43 - CFD: 11/02/2013 - 20:54:34 - [787,230] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\Google
O43 - CFD: 19/06/2009 - 14:05:10 - [0] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\Help
O43 - CFD: 18/05/2012 - 15:46:16 - [0,035] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\HP
O43 - CFD: 19/06/2009 - 13:38:53 - [370,322] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\Identities
O43 - CFD: 12/05/2012 - 08:48:51 - [0,014] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\Ilivid Player
O43 - CFD: 01/12/2009 - 19:34:26 - [40,334] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\IM
O43 - CFD: 14/04/2012 - 16:05:30 - [68,652] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\iMesh
O43 - CFD: 28/12/2012 - 18:34:36 - [0,001] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\IsolatedStorage
O43 - CFD: 22/01/2012 - 09:57:13 - [0,005] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\libimobiledevice
O43 - CFD: 21/10/2012 - 18:27:11 - [0,276] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\lupc4
O43 - CFD: 06/12/2009 - 16:26:48 - [0] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\Magentic
O43 - CFD: 20/12/2012 - 21:51:48 - [382,696] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\Microsoft
O43 - CFD: 26/06/2009 - 17:05:33 - [53,380] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\Mozilla
O43 - CFD: 06/10/2012 - 09:46:03 - [83,134] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\Nero
O43 - CFD: 30/09/2012 - 19:13:11 - [0,006] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\Nero_AG
O43 - CFD: 01/04/2012 - 16:32:26 - [37,896] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\OPaC bright ideas
O43 - CFD: 25/12/2010 - 18:00:35 - [0] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\PackageAware
O43 - CFD: 04/08/2012 - 08:39:02 - [0,001] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\Panasonic
O43 - CFD: 28/12/2012 - 18:54:05 - [34,849] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\Programs
O43 - CFD: 26/12/2012 - 20:49:52 - [0,014] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\Samsung
O43 - CFD: 23/06/2009 - 18:13:55 - [0,013] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\Stardock
O43 - CFD: 24/06/2012 - 14:29:29 - [0,000] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\Sun
O43 - CFD: 22/02/2010 - 19:17:58 - [0,003] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\Symantec
O43 - CFD: 29/04/2011 - 02:50:20 - [0] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\Temp
O43 - CFD: 20/05/2012 - 19:25:09 - [6,766] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\Trusteer
O43 - CFD: 08/01/2013 - 21:57:47 - [2,915] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\tuto4pc_fr_15
O43 - CFD: 31/07/2010 - 13:30:13 - [25,312] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\Unity
O43 - CFD: 20/12/2012 - 18:04:26 - [63,697] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\VS Revo Group
O43 - CFD: 09/05/2012 - 18:33:34 - [50,403] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\WahOO
O43 - CFD: 03/11/2012 - 21:41:31 - [0,017] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\WMTools Downloaded Files
O43 - CFD: 02/01/2006 - 16:31:44 - [11,284] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\{3248F0A6-6813-11D6-A77B-00B0D0150050}
O43 - CFD: 30/10/2012 - 20:47:20 - [12,648] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\{DEEF5E96-9F3B-4037-84BB-D3EFE20006DD}
O43 - CFD: 18/06/2009 - 02:55:21 - [0,014] R---D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Menu Démarrer\Programmes\Accessoires
O43 - CFD: 17/03/2012 - 15:29:51 - [0,002] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Menu Démarrer\Programmes\AtelierDuLivre
O43 - CFD: 27/01/2008 - 20:41:44 - [0,002] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Menu Démarrer\Programmes\Audiograbber
O43 - CFD: 14/08/2011 - 14:08:26 - [0] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Menu Démarrer\Programmes\AVS4YOU
O43 - CFD: 14/03/2009 - 12:32:07 - [0,003] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Menu Démarrer\Programmes\Blue Coat K9 Web Protection
O43 - CFD: 26/09/2009 - 15:18:59 - [0,003] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Menu Démarrer\Programmes\CCleaner
O43 - CFD: 14/08/2011 - 14:08:26 - [0] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Menu Démarrer\Programmes\Cooliris
O43 - CFD: 02/02/2013 - 18:44:57 - [0,002] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Menu Démarrer\Programmes\Dropbox
O43 - CFD: 10/06/2012 - 17:27:47 - [0,002] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Menu Démarrer\Programmes\Duplicate Cleaner
O43 - CFD: 02/02/2013 - 18:45:28 - [0,001] R---D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Menu Démarrer\Programmes\Démarrage
O43 - CFD: 28/04/2007 - 16:46:23 - [0,001] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Menu Démarrer\Programmes\Flash Disk Manager
O43 - CFD: 03/07/2007 - 21:21:20 - [0,002] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Menu Démarrer\Programmes\Gmail Notifier
O43 - CFD: 16/06/2009 - 20:30:46 - [0,004] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Menu Démarrer\Programmes\Google Chrome
O43 - CFD: 28/12/2012 - 18:54:17 - [0,001] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Menu Démarrer\Programmes\Music Manager
O43 - CFD: 26/09/2009 - 16:33:12 - [0,000] R---D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Menu Démarrer\Programmes\Outils d'administration
O43 - CFD: 14/01/2013 - 19:30:39 - [0,004] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Menu Démarrer\Programmes\Parents dans les parages
O43 - CFD: 10/02/2013 - 13:49:08 - [0,003] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Menu Démarrer\Programmes\Samsung Galaxy Ace - Guide - Cygwin-Odin
O43 - CFD: 02/01/2006 - 17:16:57 - [0,004] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Menu Démarrer\Programmes\Services en ligne
O43 - CFD: 26/04/2009 - 17:50:24 - [0,003] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Menu Démarrer\Programmes\Unlocker
O43 - CFD: 30/08/2007 - 17:35:11 - [0,005] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Menu Démarrer\Programmes\WebMediaPlayer
O43 - CFD: 16/08/2011 - 09:10:23 - [0,002] ----D C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Menu Démarrer\Programmes\WinDS PRO
~ Scan Program Folder in 01mn 39s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.E08E76347422CD14E19A9E67EC7EDA3A] - 13/02/2013 - 20:46:49 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log   [1787343]
O44 - LFC:[MD5.A0A040B5E0963FD279F1CF0450FBF082] - 13/02/2013 - 20:43:54 ---A- . (...) -- C:\WINDOWS\system32\nvapps.xml   [45378]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 13/02/2013 - 20:43:09 ---A- . (...) -- C:\WINDOWS\0.log   [0]
O44 - LFC:[MD5.213A8ED154DE26E2FC652EC77F9ABD1A] - 13/02/2013 - 20:42:37 ---A- . (...) -- C:\WINDOWS\wiadebug.log   [157]
O44 - LFC:[MD5.DA9DD48C79C09FB04946AEC88C7FA0E8] - 13/02/2013 - 20:42:34 ---A- . (...) -- C:\WINDOWS\wiaservc.log   [50]
O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 13/02/2013 - 20:42:08 -S-A- . (...) -- C:\WINDOWS\bootstat.dat   [2048]
O44 - LFC:[MD5.DF028FA5E7880A1C2125EF58E9243040] - 13/02/2013 - 18:38:59 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt   [32460]
O44 - LFC:[MD5.89ACA87706CF6609E05FDD5F96C70FA3] - 13/02/2013 - 18:17:23 ---A- . (...) -- C:\TDSSKiller.2.8.16.0_13.02.2013_18.10.18_log.txt   [337304]
O44 - LFC:[MD5.9DAF4B007EB798DA4D7DC25418ECCCEA] - 13/02/2013 - 18:08:02 ---A- . (...) -- C:\TDSSKiller.2.8.16.0_13.02.2013_18.07.35_log.txt   [3778]
O44 - LFC:[MD5.BA4B9BEC8B700726289881F42FEA6532] - 12/02/2013 - 18:26:30 ---A- . (...) -- C:\TDSSKiller.2.8.16.0_12.02.2013_18.25.21_log.txt   [101168]
O44 - LFC:[MD5.FA2C5C3FF07E3B84750DD89D380E61B7] - 12/02/2013 - 18:24:08 ---A- . (...) -- C:\WINDOWS\setupapi.log   [405541]
O44 - LFC:[MD5.E185BDA84E5F03F4E1D8DCA30E209277] - 11/02/2013 - 23:12:18 ---A- . (...) -- C:\WINDOWS\epplauncher.mif   [1912]
O44 - LFC:[MD5.149A8F7ADF9742554DC323E290551E3E] - 11/02/2013 - 20:53:43 ---A- . (.AVAST Software - avast! Base Kernel-Mode Device Driver for W.) -- C:\WINDOWS\system32\Drivers\aavmker4.sys   [25256]
O44 - LFC:[MD5.74D55DED81C61871F0DB7F3A63A4D312] - 11/02/2013 - 20:53:15 ---A- . (.AVAST Software - avast! Screen Saver stub.) -- C:\WINDOWS\avastSS.scr   [41224]
O44 - LFC:[MD5.A4B4FE50CCA23B38688003EA85A30EF6] - 11/02/2013 - 20:53:14 ---A- . (.AVAST Software - avast! start-up scanner.) -- C:\WINDOWS\system32\aswBoot.exe   [227648]
O44 - LFC:[MD5.BB91DDECEA38062283159783E16F63EB] - 10/02/2013 - 23:10:05 ---A- . (...) -- C:\Uninstall.exe   [94540]
O44 - LFC:[MD5.0BA7A0DD128D727E24239F5207061DD7] - 10/02/2013 - 23:10:05 ---A- . (...) -- C:\Uninstall.ini   [325099]
O44 - LFC:[MD5.E3D493BFB7CD108EC50B2F560C96367C] - 10/02/2013 - 22:58:10 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ve.) -- C:\WINDOWS\system32\Drivers\ssudmdm.sys   [181432]
O44 - LFC:[MD5.73FC5BC52572084EC1241514CF6230A0] - 10/02/2013 - 22:58:09 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ve.) -- C:\WINDOWS\system32\Drivers\ssudbus.sys   [80824]
O44 - LFC:[MD5.B19DB63504B8A0E723D06A312A8FEF7E] - 10/02/2013 - 11:37:07 ---A- . (...) -- C:\WINDOWS\setupact.log   [5584]
O44 - LFC:[MD5.55B55595B0943DD763D15736B2A3D1F4] - 10/02/2013 - 11:36:07 ---A- . (...) -- C:\WINDOWS\Wdf01007Inst.log   [8294]
O44 - LFC:[MD5.6216FD7FD227DE454238A702B218CEC7] - 10/02/2013 - 10:20:24 ---A- . (.Devguru Co., Ltd - Device Error Recovery SDK(x86).) -- C:\WINDOWS\system32\Drivers\dgderdrv.sys   [20032]
O44 - LFC:[MD5.37655385D1CF8560A52027B8008FAE0E] - 10/02/2013 - 10:20:23 ---A- . (.Devguru Co., Ltd. - Device Error Recovery SDK(x86).) -- C:\WINDOWS\system32\dgderapi.dll   [821824]
O44 - LFC:[MD5.BB811E6ABC3C94B715DB1DCF6AE1E67E] - 10/02/2013 - 02:26:45 ---A- . (...) -- C:\WINDOWS\FaxSetup.log   [86558]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 10/02/2013 - 02:26:45 --HA- . (...) -- C:\WINDOWS\system32\Drivers\Msft_Kernel_WinUSB_01007.Wdf   [0]
O44 - LFC:[MD5.70F1C34A9487140AF480C58C466F4EFE] - 10/02/2013 - 02:26:44 ---A- . (...) -- C:\WINDOWS\ocgen.log   [38684]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 10/02/2013 - 02:25:44 --HA- . (...) -- C:\WINDOWS\system32\Drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf   [0]
O44 - LFC:[MD5.6280A479148CAEAD59E17A0CC3789161] - 10/02/2013 - 00:30:17 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\WINDOWS\system32\FlashPlayerApp.exe   [697712]
O44 - LFC:[MD5.3E5633C0E3B4FE04E6EBFFA597227617] - 10/02/2013 - 00:30:17 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\WINDOWS\system32\FlashPlayerCPLApp.cpl   [74096]
O44 - LFC:[MD5.916DB7C07727B3E985A1E1A85F1160FB] - 09/02/2013 - 20:50:37 -SH-- . (...) -- C:\boot.ini   [289]
O44 - LFC:[MD5.F48A8D71F2897D094DA66F037A9AFE66] - 09/02/2013 - 15:37:01 ---A- . (...) -- C:\WINDOWS\system32\d3d9caps.dat   [664]
O44 - LFC:[MD5.38A8521D4825706F4F747E538A98031B] - 09/02/2013 - 08:38:53 ---A- . (...) -- C:\WINDOWS\system32\wpa.dbl   [1158]
O44 - LFC:[MD5.99E237588708BACEA3BEF6D615C088A5] - 02/02/2013 - 17:49:20 ---A- . (...) -- C:\WINDOWS\system32\PerfStringBackup.INI   [1246056]
O44 - LFC:[MD5.0EBC744203F554C03151C33B8B298E17] - 02/02/2013 - 17:49:20 ---A- . (...) -- C:\WINDOWS\system32\perfc009.dat   [88968]
O44 - LFC:[MD5.91EFEAD16475C5D9D624B3150E1EFAAF] - 02/02/2013 - 17:49:20 ---A- . (...) -- C:\WINDOWS\system32\perfc00C.dat   [105612]
O44 - LFC:[MD5.98E2DCB926E64901F5D2EB2F48FAD8BD] - 02/02/2013 - 17:49:20 ---A- . (...) -- C:\WINDOWS\system32\perfh009.dat   [504114]
O44 - LFC:[MD5.EC66FA44678104F958A537CCD0F2335C] - 02/02/2013 - 17:49:20 ---A- . (...) -- C:\WINDOWS\system32\perfh00C.dat   [577688]
O44 - LFC:[MD5.9B8495B1A99EBFA20294234F8A15FA80] - 18/01/2013 - 22:27:07 ---A- . (...) -- C:\WINDOWS\EventSystem.log   [11482]
O44 - LFC:[MD5.09B7911BFF66C34B0DD18B3AEF24D3AB] - 16/01/2013 - 13:57:35 ---A- . (...) -- C:\WINDOWS\debug.log   [1507]
O44 - LFC:[MD5.4DBC0B22E7D67D7FDD0370FA4E0B137F] - 11/01/2013 - 11:52:52 ----- . (...) -- C:\WINDOWS\system32\pwdrvio.sys   [15576]
O44 - LFC:[MD5.A6D9B1A05E489B271D867B1D2A1243E1] - 11/01/2013 - 11:52:52 ---A- . (...) -- C:\WINDOWS\system32\pwNative.exe   [2822336]
O44 - LFC:[MD5.2255C579414FF9564EC5255D539D2903] - 11/01/2013 - 11:52:50 ----- . (...) -- C:\WINDOWS\system32\pwdspio.sys   [10200]
~ Scan Files in 00mn 12s



---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)
O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll
~ Scan ShellExecuteHooks in 00mn 00s



---\\ Déni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\WINDOWS\system32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Kerberos Security Package.) -- C:\WINDOWS\system32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\WINDOWS\system32\wdigest.dll
~ Scan Keys in 00mn 00s



---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\71347516.sys . (...) -- C:\WINDOWS\system32\Drivers\71347516.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\Wdf01000.sys . (.Microsoft Corporation - WDF Dynamic.) -- C:\WINDOWS\system32\Drivers\Wdf01000.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\71347516.sys . (...) -- C:\WINDOWS\system32\Drivers\71347516.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys . (.Microsoft Corporation - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\system32\Drivers\ip6fw.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\system32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\system32\Drivers\rdpcdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys . (...) -- C:\WINDOWS\system32\Drivers\rdpdd.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOWS\system32\Drivers\rdpwd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\Wdf01000.sys . (.Microsoft Corporation - WDF Dynamic.) -- C:\WINDOWS\system32\Drivers\Wdf01000.sys
~ Scan CSB in 00mn 00s



---\\ Image File Execution Options (IFEO) (O50)
O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d
~ Scan IFEO in 00mn 00s



---\\ MountPoints2 Shell Key (O51)
O51 - MPSK:{5e09a63c-bb29-11de-a5a1-001731f09913}\AutoRun\command - Clé orpheline
O51 - MPSK:{e4607aa8-698a-11de-a57b-001731f09913}\AutoRun\command - Clé orpheline
O51 - MPSK:{fa90c26d-b578-11de-a59a-001731f09913}\AutoRun\command - Clé orpheline
~ Scan Keys in 00mn 00s



---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech(TM) DSP Group pour MSACM V3.50.) -- C:\WINDOWS\system32\tssoft32.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\system32\iccvid.dll
O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\system32\ir41_32.ax
O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm
O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\system32\ir50_32.dll
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
O52 - TDSD: \Drivers32\"vidc.LEAD"="LCODCCMP.DLL" . (.LEAD Technologies, Inc. - LEAD MCMP/MJPEG Codec.) -- C:\WINDOWS\system32\LCODCCMP.dll
O52 - TDSD: \Drivers32\"vidc.DIVX"="DivX.dll" . (.DivX, Inc. - DivX.) -- C:\WINDOWS\system32\DivX.dll
O52 - TDSD: \Drivers32\"vidc.yv12"="DivX.dll" . (.DivX, Inc. - DivX.) -- C:\WINDOWS\system32\DivX.dll
O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
O52 - TDSD: \drivers.desc\"LCODCCMP.DLL"="LEAD MCMP/MJPEG Codec (VFW)" . (.LEAD Technologies, Inc. - LEAD MCMP/MJPEG Codec.) -- C:\WINDOWS\system32\LCODCCMP.dll
O52 - TDSD: \drivers.desc\"tssoft32.acm"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech(TM) DSP Group pour MSACM V3.50.) -- C:\WINDOWS\system32\tssoft32.acm
O52 - TDSD: \drivers.desc\"iccvid.dll"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\system32\iccvid.dll
O52 - TDSD: \drivers.desc\"ir32_32.dll"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll
O52 - TDSD: \drivers.desc\"ir41_32.ax"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\system32\ir41_32.ax
~ Scan Keys in 00mn 00s



---\\ ShareTools MSconfig StartupReg (O53) (None)

---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll
~ Scan Keys in 00mn 00s



---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "InstallVisualStyle"=1
O55 - MWPS:[HKLM\...\Policies\System] - "InstallTheme"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=2
~ Scan Keys in 00mn 00s



---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=149
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveAutoRun"=67108863
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoRecentDocsHistory"=1
O56 - MWPE:[HKCU\...\policies\Explorer] - "ClearRecentDocsOnExit"=1
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoRecentDocsMenu"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoCDBurning"=0
~ Scan Keys in 00mn 00s



---\\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.2CCBCEE5C351A1CEE31A086E8E3F9D74] - 15/02/2006 - 03:07:24 ---A- . (.ASUSTek - 3xHybrid.) -- C:\WINDOWS\system32\Drivers\3xHybrid.sys   [2825088]
O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 10/08/2004 - 05:00:00 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys   [9037]
~ Scan Drivers in 00mn 00s



---\\ Liste des outils de nettoyage (O63)
O63 - Logiciel: ZHPDiag 1.3.5 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
~ Scan ADS in 00mn 00s



---\\ Liste des services Legacy (O64)
O64 - Services: CurCS - ??\??\???? - C:\WINDOWS\system32\Drivers\Aavmker4.sys (Aavmker4)  .(.AVAST Software - avast! Base Kernel-Mode Device Driver for W.) - LEGACY_AAVMKER4
O64 - Services: CurCS - 11/08/2012 - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Mobile Device)  .(.Apple Inc. - MobileDeviceService.) - LEGACY_APPLE_MOBILE_DEVICE
O64 - Services: CurCS - 30/10/2012 - C:\Program Files\AVAST Software\Avast\AvastSvc.exe (avast! Antivirus)  .(.AVAST Software - avast! Service.) - LEGACY_AVAST!_ANTIVIRUS
O64 - Services: CurCS - 05/11/2003 - C:\WINDOWS\system32\DRIVERS\bb-run.sys (bb-run)  .(.Promise Technology, Inc. - Promise Disk Accelerator.) - LEGACY_BB-RUN
O64 - Services: CurCS - 30/08/2011 - C:\Program Files\Bonjour\mDNSResponder.exe (Bonjour Service)  .(.Apple Inc. - Bonjour Service.) - LEGACY_BONJOUR_SERVICE
O64 - Services: CurCS - 16/10/2012 - C:\Documents and Settings\All Users\Application Data\Browser Manager\2.3.811.154\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\browsermngr.exe - Browser Manager (Browser Manager)  .(...) - LEGACY_BROWSER_MANAGER
O64 - Services: CurCS - 23/12/2004 - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe (btwdins)  .(.Broadcom Corporation. - Bluetooth Support Server.) - LEGACY_BTWDINS
O64 - Services: CurCS - ??\??\???? -  (DcomLaunch)  .(. - .) - LEGACY_DCOMLAUNCH
O64 - Services: CurCS - 18/12/2012 - C:\WINDOWS\system32\drivers\dgderdrv.sys (dgderdrv)  .(.Devguru Co., Ltd - Device Error Recovery SDK(x86).) - LEGACY_DGDERDRV
O64 - Services: CurCS - ??\??\???? - C:\WINDOWS\system32\Drivers\DiskSec.sys (DiskSec)  .(.MAGIX - Pas de description.) - LEGACY_DISKSEC
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\dmadmin.exe (dmadmin)  .(.Microsoft Corp., Veritas Software - Processus du service Gestionnaire de disque.) - LEGACY_DMADMIN
O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\drivers\dmboot.sys (dmboot)  .(.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) - LEGACY_DMBOOT
O64 - Services: CurCS - 10/08/2004 - C:\WINDOWS\system32\drivers\dmload.sys (dmload)  .(.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) - LEGACY_DMLOAD
O64 - Services: CurCS - 15/10/2011 - C:\Program Files\Ekomini\EkominiService.exe (Ekomini)  .(.Ekomini Inc. - Ekomini IP Service.) - LEGACY_EKOMINI
O64 - Services: CurCS - 08/11/2005 - C:\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology\ELService.exe (ELService)  .(.Intel Corporation - Pas de description.) - LEGACY_ELSERVICE
O64 - Services: CurCS - 22/12/2009 - C:\WINDOWS\system32\FsUsbExDisk.sys - FsUsbExDisk (FsUsbExDisk)  .(...) - LEGACY_FSUSBEXDISK
O64 - Services: CurCS - 22/12/2009 - C:\WINDOWS\system32\FsUsbExService.exe (FsUsbExService)  .(.Teruten - FsUsbDevice.) - LEGACY_FSUSBEXSERVICE
O64 - Services: CurCS - 29/06/2005 - C:\WINDOWS\system32\DRIVERS\ftsata2.sys (ftsata2)  .(.Promise Technology, Inc. - Promise Driver for Windows Server 2003.) - LEGACY_FTSATA2
O64 - Services: CurCS - 03/02/2010 - C:\Program Files\Google\Update\GoogleUpdate.exe (gupdate)  .(.Google Inc. - Programme d'installation de Google.) - LEGACY_GUPDATE
O64 - Services: CurCS - 03/02/2010 - C:\Program Files\Google\Update\GoogleUpdate.exe (gupdatem)  .(.Google Inc. - Programme d'installation de Google.) - LEGACY_GUPDATEM
O64 - Services: CurCS - 12/10/2005 - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe (IAANTMON)  .(.Intel Corporation - RAID Monitor.) - LEGACY_IAANTMON
O64 - Services: CurCS - 03/04/2005 - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe (IDriverT)  .(.Macrovision Corporation - IDriverT Module.) - LEGACY_IDRIVERT
O64 - Services: CurCS - 29/07/2008 - c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe (idsvc)  .(.Microsoft Corporation - Windows CardSpace.) - LEGACY_IDSVC
O64 - Services: CurCS - 12/12/2012 - C:\Program Files\iPod\bin\iPodService.exe (iPod Service)  .(.Apple Inc. - iPodService Module (32-bit).) - LEGACY_IPOD_SERVICE
O64 - Services: CurCS - 07/10/2012 - C:\Program Files\Java\jre7\bin\jqs.exe (JavaQuickStarterService)  .(.Oracle Corporation - Java(TM) Quick Starter Service.) - LEGACY_JAVAQUICKSTARTERSERVICE
O64 - Services: CurCS - 24/03/2006 - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe (LightScribeService)  .(.Hewlett-Packard Company - Pas de description.) - LEGACY_LIGHTSCRIBESERVICE
O64 - Services: CurCS - 12/10/2010 - C:\Program Files\MAGIX\PC_Check_Tuning_2011_Version_a_telecharger\MXSAS.exe (MAGIX StartUp Analyze Service)  .(.MAGIX AG - Anwendung MXSAS.) - LEGACY_MAGIX_STARTUP_ANALYZE_SERVICE
O64 - Services: CurCS - 20/12/2012 - C:\WINDOWS\system32\drivers\mbamswissarmy.sys (MBAMSwissArmy)  .(.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) - LEGACY_MBAMSWISSARMY
O64 - Services: CurCS - ??\??\???? - C:\WINDOWS\system32\Drivers\mountmgr.sys (mountmgr)  .(.Microsoft Corporation - Mount Manager.) - LEGACY_MOUNTMGR
O64 - Services: CurCS - 13/07/2012 - C:\Program Files\Nero\Update\NASvc.exe (NAUpdate)  .(.Nero AG - NeroUpdate.) - LEGACY_NAUPDATE
O64 - Services: CurCS - 14/01/2009 - C:\WINDOWS\system32\DRIVERS\aztech_npf32.sys (NPF)  .(.CACE Technologies - npf.sys (NT5/6 x86) Kernel Driver.) - LEGACY_NPF
O64 - Services: CurCS - 14/02/2006 - C:\WINDOWS\system32\nvsvc32.exe (NVSvc)  .(.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 83.91.) - LEGACY_NVSVC
O64 - Services: CurCS - 14/01/2013 - C:\Program Files\PDLP\pdlp.exe (PDLP)  .(.Ars Nova Systems - parentsdanslesparages.com agent.) - LEGACY_PDLP
O64 - Services: CurCS - ??\??\???? -  (Planificateur LiveUpdate automatique)  .(. - .) - LEGACY_PLANIFICATEUR_LIVEUPDATE_AUTOMATIQUE
O64 - Services: CurCS - 11/01/2013 - C:\WINDOWS\system32\pwdrvio.sys - pwdrvio (pwdrvio)  .(...) - LEGACY_PWDRVIO
O64 - Services: CurCS - 11/01/2013 - C:\WINDOWS\system32\pwdspio.sys - pwdspio (pwdspio)  .(...) - LEGACY_PWDSPIO
O64 - Services: CurCS - 30/10/2012 - C:\Documents and Settings\All Users\Application Data\Trusteer\Rapport\store\exts\RapportCerberus\43926\RapportCerberus32_43926.sys - RapportCerberus_43926 (RapportCerberus_43926)  .(...) - LEGACY_RAPPORTCERBERUS_43926
O64 - Services: CurCS - 07/09/2012 - C:\Program Files\Trusteer\Rapport\bin\RapportEI.sys (RapportEI)  .(.Trusteer Ltd. - RapportEI.) - LEGACY_RAPPORTEI
O64 - Services: CurCS - 28/05/2012 - c:\documents and settings\all users\application data\trusteer\rapport\store\exts\rapportms\39624\rapportiaso.sys (RapportIaso)  .(.Trusteer Ltd. - RapportIaso.) - LEGACY_RAPPORTIASO
O64 - Services: CurCS - 07/09/2012 - C:\WINDOWS\system32\Drivers\RapportKELL.sys (RapportKELL)  .(.Trusteer Ltd. - RapportKE.) - LEGACY_RAPPORTKELL
O64 - Services: CurCS - 07/09/2012 - C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe (RapportMgmtService)  .(.Trusteer Ltd. - RapportMgmtService.) - LEGACY_RAPPORTMGMTSERVICE
O64 - Services: CurCS - 07/09/2012 - C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys (RapportPG)  .(.Trusteer Ltd. - RapportPG.) - LEGACY_RAPPORTPG
O64 - Services: CurCS - ??\??\???? -  (RpcSs)  .(. - .) - LEGACY_RPCSS
O64 - Services: CurCS - 11/11/2008 - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe (ServiceLayer)  .(.Nokia. - ServiceLayer Module.) - LEGACY_SERVICELAYER
O64 - Services: CurCS - 09/11/2012 - C:\Program Files\Skype\Updater\Updater.exe (SkypeUpdate)  .(.Skype Technologies - Skype Updater Service.) - LEGACY_SKYPEUPDATE
O64 - Services: CurCS - 02/10/2012 - C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype C2C Service)  .(.Skype Technologies S.A. - Skype C2C Service.) - LEGACY_SKYPE_C2C_SERVICE
O64 - Services: CurCS - ??\??\???? -  (TermService)  .(. - .) - LEGACY_TERMSERVICE
~ Scan Services in 00mn 01s



---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <ChromeHTML>[HKLM\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe
O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <ChromeHTML>[HKCR\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe
~ Scan Keys in 00mn 00s



---\\ Start Menu Internet (O68)
O68 - StartMenuInternet: <chrome.exe> <>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
~ Scan Keys in 00mn 00s



---\\ Search Browser Infection (O69)
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("browser.search.defaultthis.engineName", "SearchElf 1.2 Customized Web Search");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("browser.search.selectedEngine", "SweetIM Search");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("browser.startup.homepage", "http://home.sweetim.com/?crg=3.1010000.10016&barid={C178B2AD-AA4E-4549-95AF-FB42CAC33721}")[...]
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Tue Jan 04 2011 20:53:13 GMT+0100");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.alert.clientsServerUrl", "http://alert.client.conduit.com");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.alert.locale", "en");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.alert.loginLastCheckTime", "Tue Jan 04 2011 20:53:13 GMT+0100");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1291052234");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.alert.servicesServerUrl", "http://alert.services.conduit.com");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.alert.showTrayIcon", false);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.alert.userId", "{6edd7602-3da5-4baa-a3e8-40002ab5baef}");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.EngineOwner", "CT2769726");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.EngineOwnerGuid", "{f4e6547e-325b-403c-a3bb-ad29ed37a92f}");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.EngineOwnerToolbarId", "searchelf_1.2");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.ETag.http://alerts.conduit-services.com/root/1161838/1157525/FR", "\"0\"");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.ETag.http://alerts.conduit-services.com/root/832836/828639/FR", "\"0\"");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.ETag.http://alerts.conduit-services.com/root/909619/905414/FR", "\"0\"");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.ETag.http://appsmetadata.toolbar.conduit-services.com/?ctid=CT2438727", "\"0\"");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.ETag.http://appsmetadata.toolbar.conduit-services.com/?ctid=CT2769726", "\"0\"");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=en", "Zee/agZSWJctT5JcsQK[...]
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en", "ZF/VZo7UyQBp8ghNNzhn[...]
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=en", "+RsYuZ9IN1smka6Zugg[...]
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=en", "t6SQZ7j9WsBHhE8zC0kAEQ[...]
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.ETag.http://servicemap.conduit-services.com/toolbar/", "\"634279343103930000\"");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.ETag.http://settings.engine.conduit-services.com/?browser=FF&lut=0", "634248284990000000");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.ETag.http://settings.toolbar.search.conduit.com/root/CT2438727/CT2438727", "\"1287517459\"");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.ETag.http://settings.toolbar.search.conduit.com/root/CT2769726/CT2769726", "\"1292454734\"");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.ETag.http://translation.toolbar.conduit-services.com/?locale=en", "\"634292354593700000\"");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2769726");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.OriginalEngineOwner", "CT2769726");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{f4e6547e-325b-403c-a3bb-ad29ed37a92f}");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "searchelf_1.2");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.properties");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.ToolbarsList", "CT2438727,ConduitEngine,CT2769726");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CommunityToolbar.ToolbarsList2", "CT2438727,CT2769726");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("ConduitEngine.engineLocale", "fr");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Fri Dec 17 2010 17:20:22 GMT+0100");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("ConduitEngine.FirstTime", true);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("ConduitEngine.FirstTimeFF3", true);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("ConduitEngine.HasUserGlobalKeys", true);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("ConduitEngine.initDone", true);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("ConduitEngine.Initialize", true);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("ConduitEngine.InitializeCommonPrefs", true);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("ConduitEngine.InstalledDate", "Fri Dec 17 2010 17:20:22 GMT+0100");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("ConduitEngine.IsMulticommunity", false);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("ConduitEngine.IsOpenThankYouPage", false);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("ConduitEngine.IsOpenUninstallPage", true);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("ConduitEngine.LanguagePackLastCheckTime", "Fri Dec 17 2010 17:20:22 GMT+0100");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("ConduitEngine.LastLogin_3.2.5.2", "Fri Dec 17 2010 17:20:22 GMT+0100");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("ConduitEngine.PublisherContainerWidth", 0);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("ConduitEngine.SearchFromAddressBarIsInit", true);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("ConduitEngine.SettingsLastCheckTime", "Fri Dec 17 2010 17:20:20 GMT+0100");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("ConduitEngine.UserID", "UN68419779460840788");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727..clientLogIsEnabled", true);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727..clientLogServiceUrl", "http://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727..uninstallLogServiceUrl", "http://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.AboutPrivacyUrl", "http://www.conduit.com/privacy/Default.aspx");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.alertChannelId", "832836");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.backendstorage.currentgame", "706F6B6572");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.clientLogIsEnabled", false);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.clientLogServiceUrl", "http://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.CommunitiesChangesLastCheckTime", "0");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.CTID", "CT2438727");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.CurrentServerDate", "4-1-2011");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.DialogsAlignMode", "LTR");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.DownloadReferralCookieData", "");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.FirstServerDate", "1-11-2010");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.FirstTime", true);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.FirstTimeFF3", true);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.GroupingInvalidateCache", false);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.GroupingLastCheckTime", "0");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.GroupingLastServerUpdateTime", "0");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.GroupingServerCheckInterval", 1440);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.GroupingServiceUrl", "http://grouping.services.conduit.com/");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.Initialize", true);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.InitializeCommonPrefs", true);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.InstallationAndCookieDataSentCount", 3);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.InstalledDate", "Mon Nov 01 2010 10:29:05 GMT+0100");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.InvalidateCache", false);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.IsGrouping", false);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.IsMulticommunity", false);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.IsOpenThankYouPage", true);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.IsOpenUninstallPage", true);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.LanguagePackLastCheckTime", "Tue Jan 04 2011 20:53:14 GMT+0100");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.LanguagePackReloadIntervalMM", 1440);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.LanguagePackServiceUrl", "http://translation.users.conduit.com/Translation.ashx");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.LastLogin_2.5.8.6", "Fri Dec 17 2010 13:30:46 GMT+0100");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.LastLogin_3.2.5.2", "Tue Jan 04 2011 20:53:14 GMT+0100");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.LatestVersion", "2.7.1.3");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.Locale", "en");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.LoginCache", 4);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.MCDetectTooltipHeight", "83");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.MCDetectTooltipUrl", "http://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.MCDetectTooltipWidth", "295");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.myStuffEnabled", true);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.myStuffPublihserMinWidth", 400);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.myStuffSearchUrl", "http://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&oct[...]
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.myStuffServiceIntervalMM", 1440);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.myStuffServiceUrl", "http://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE[...]
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.RadioLastCheckTime", "0");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.RadioLastUpdateIPServer", "0");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.RadioLastUpdateServer", "0");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.SearchEngine", "Search||http://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT2438727&octid=EB_ORIG[...]
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.SearchFromAddressBarIsInit", true);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2438727&q=");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.SearchInNewTabEnabled", true);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.SearchInNewTabIntervalMM", 1440);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.SearchInNewTabLastCheckTime", "Tue Jan 04 2011 20:53:13 GMT+0100");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.SearchInNewTabServiceUrl", "http://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.SearchInNewTabUsageUrl", "http://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_T[...]
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.ServiceMapLastCheckTime", "Fri Dec 17 2010 17:20:20 GMT+0100");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.SettingsCheckIntervalMin", 120);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.SettingsLastCheckTime", "Tue Jan 04 2011 20:53:13 GMT+0100");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.SettingsLastUpdate", "1287517459");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.SHRINK_TOOLBAR", 1);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.ThirdPartyComponentsInterval", 504);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.ThirdPartyComponentsLastCheck", "Tue Jan 04 2011 20:53:13 GMT+0100");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.ThirdPartyComponentsLastUpdate", "1246790578");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.toolbarAppMetaDataLastCheckTime", "Tue Jan 04 2011 20:53:14 GMT+0100");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.toolbarContextMenuLastCheckTime", "Fri Dec 17 2010 17:20:24 GMT+0100");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.TrusteLinkUrl", "http://www.truste.org/pvr.php?page=validate&softwareProgramId=101&sealid=112");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.uninstallLogServiceUrl", "http://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.UserID", "UN81565488874790486");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.ValidationData_Search", 2);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2438727.ValidationData_Toolbar", 2);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726..clientLogIsEnabled", true);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726..clientLogServiceUrl", "http://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726..uninstallLogServiceUrl", "http://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.AboutPrivacyUrl", "http://www.conduit.com/privacy/Default.aspx");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.alertChannelId", "1161838");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.CTID", "CT2769726");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.CurrentServerDate", "17-12-2010");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.DialogsAlignMode", "LTR");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.DownloadReferralCookieData", "{\"BannerName\":\"\",\"BannerTypeId\":\"\",\"BannerCulture\":\"\",\"DownloadTim[...]
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.FirstServerDate", "17-12-2010");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.FirstTime", true);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.FirstTimeFF3", true);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.FixPageNotFoundErrors", true);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.GroupingServerCheckInterval", 1440);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.GroupingServiceUrl", "http://grouping.services.conduit.com/");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.HasUserGlobalKeys", true);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.Initialize", true);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.InitializeCommonPrefs", true);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.InstallationAndCookieDataSentCount", 1);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.InstalledDate", "Fri Dec 17 2010 17:20:26 GMT+0100");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.InvalidateCache", false);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.IsGrouping", false);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.IsMulticommunity", false);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.IsOpenThankYouPage", true);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.IsOpenUninstallPage", true);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.LanguagePackLastCheckTime", "Fri Dec 17 2010 17:20:26 GMT+0100");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.LanguagePackReloadIntervalMM", 1440);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.LanguagePackServiceUrl", "http://translation.users.conduit.com/Translation.ashx");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.LastLogin_3.2.5.2", "Fri Dec 17 2010 17:20:23 GMT+0100");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.LatestVersion", "3.2.5.2");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.Locale", "en");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.MCDetectTooltipHeight", "83");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.MCDetectTooltipUrl", "http://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.MCDetectTooltipWidth", "295");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.myStuffEnabled", true);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.myStuffPublihserMinWidth", 400);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.myStuffSearchUrl", "http://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&oct[...]
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.myStuffServiceIntervalMM", 1440);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.myStuffServiceUrl", "http://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE[...]
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.RadioIsPodcast", false);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.RadioLastCheckTime", "Fri Dec 17 2010 17:20:41 GMT+0100");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.RadioLastUpdateIPServer", "3");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.RadioLastUpdateServer", "129362291739470000");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.RadioMediaID", "21624141");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.RadioMediaType", "Media Player");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.RadioMenuSelectedID", "EBRadioMenu_CT276972621624141");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.RadioStationName", "BBC%20World%20Today");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.RadioStationURL", "http://http-ws.bbc.co.uk.edgesuite.net/asx.esi?worldservice/tx/nb/twt2300.wma");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.SavedHomepage", "http://mail.google.com/mail/#inbox");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.SearchFromAddressBarIsInit", true);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2769726&q=");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.SearchInNewTabEnabled", true);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.SearchInNewTabIntervalMM", 1440);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.SearchInNewTabLastCheckTime", "Fri Dec 17 2010 17:20:25 GMT+0100");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.SearchInNewTabServiceUrl", "http://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.SearchInNewTabUsageUrl", "http://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_T[...]
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.ServiceMapLastCheckTime", "Fri Dec 17 2010 17:20:20 GMT+0100");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.SettingsLastCheckTime", "Fri Dec 17 2010 17:20:22 GMT+0100");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.SettingsLastUpdate", "1292454734");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.testingCtid", "");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.ThirdPartyComponentsInterval", 504);
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.ThirdPartyComponentsLastCheck", "Fri Dec 17 2010 17:20:20 GMT+0100");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.ThirdPartyComponentsLastUpdate", "1246790578");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.toolbarAppMetaDataLastCheckTime", "Fri Dec 17 2010 17:20:23 GMT+0100");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.toolbarContextMenuLastCheckTime", "Fri Dec 17 2010 17:20:26 GMT+0100");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.TrusteLinkUrl", "http://www.truste.org/pvr.php?page=validate&softwareProgramId=101&sealid=112");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.UserID", "UN84242073434476259");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.WeatherNetwork", "");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.WeatherPollDate", "Fri Dec 17 2010 17:20:25 GMT+0100");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("CT2769726.WeatherUnit", "C");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("sweetim.toolbar.previous.browser.startup.homepage", "http://mail.google.com/mail/#inbox");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("sweetim.toolbar.urls.homepage", "http://home.sweetim.com/?crg=3.1010000.10016&barid={C178B2AD-AA4E-4549-95AF-FB42CAC337[...]
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "AVG Secure Search");
O69 - SBI: prefs.js [HP_Administrateur - 6ae2h37i.default] user_pref("sweetim.toolbar.previous.browser.search.defaulturl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2769726&SearchSo[...]
O69 - SBI: SearchScopes [HKCU] {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} - (Search the web (Babylon)) - http://search.babylon.com
O69 - SBI: SearchScopes [HKCU] {2B7B7EFC-C234-4532-822B-A8D74D7EF7EB} - (Durable.com) - http://www.durable.com
O69 - SBI: SearchScopes [HKCU] {692B3D87-E9E1-4ABD-88FD-AEE5AA9D1B3C} - (Yahoo! Search) - http://www.ask.com
O69 - SBI: SearchScopes [HKCU] {CD10120B-C165-4f8d-8C74-639629E238FF} - (MyStart Rechercher) - http://mystart.magentic.com
O69 - SBI: SearchScopes [HKCU] {EEE6C360-6118-11DC-9C72-001320C79847} [DefaultScope] - (SweetIM Search) - http://search.sweetim.com
~ Scan Keys in 00mn 00s



---\\ Internet Feature Controls (O81)
O81 - IFC: Internet Feature Controls [HKUS\.DEFAULT] [FEATURE_BROWSER_EMULATION] -- svchost.exe
O81 - IFC: Internet Feature Controls [HKUS\S-1-5-18] [FEATURE_BROWSER_EMULATION] -- svchost.exe
~ Scan Keys in 00mn 00s



---\\ Recherche des services démarrés par Svchost (O83)
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\WINDOWS\system32\appmgmts.dll   [176640]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS\system32\audiosrv.dll   [42496]
O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\system32\browser.dll   [78336]
O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS\system32\cryptsvc.dll   [62464]
O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - DLL Service gestionnaire de disque logique.) -- C:\WINDOWS\system32\dmserver.dll   [24576]
O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - Service client DHCP.) -- C:\WINDOWS\system32\dhcpcsvc.dll   [127488]
O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS\system32\ersvc.dll   [23040]
O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\es.dll   [253952]
O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll   [135680]
O83 - Search Svchost Services: HidServ (HidServ) . (.Microsoft Corporation - HID Audio Service.) -- C:\WINDOWS\system32\hidserv.dll   [21504]
O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\system32\srvsvc.dll   [99840]
O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS\system32\wkssvc.dll   [132096]
O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS\system32\msgsvc.dll   [33792]
O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Gestionnaire de connexions réseau.) -- C:\WINDOWS\system32\netman.dll   [198144]
O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll   [247808]
O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Gestionnaire de stockage amovible.) -- C:\WINDOWS\system32\ntmssvc.dll   [438272]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\system32\rasauto.dll   [88576]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\system32\rasmans.dll   [186368]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS\system32\mprdim.dll   [53248]
O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll   [194560]
O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secondaire.) -- C:\WINDOWS\system32\seclogon.dll   [18944]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll   [39424]
O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - Service de restauration du système.) -- C:\WINDOWS\system32\srsvc.dll   [171520]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\WINDOWS\system32\tapisrv.dll   [249856]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll   [135680]
O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll   [90112]
O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Service de temps Windows.) -- C:\WINDOWS\system32\w32time.dll   [178176]
O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Service configuration automatique sans fil.) -- C:\WINDOWS\system32\wzcsvc.dll   [483840]
O83 - Search Svchost Services: Wmi (Wmi) . (.Microsoft Corporation - API avancées Windows 32.) -- C:\WINDOWS\system32\advapi32.dll   [685568]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll   [145408]
O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS\system32\xmlprov.dll   [129024]
O83 - Search Svchost Services: MHN (MHN) . (.Microsoft Corporation - Windows NT.) -- C:\WINDOWS\system32\mhn.dll   [85504]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll   [135680]
O83 - Search Svchost Services: helpsvc (helpsvc) . (.Microsoft Corporation - Microsoft PCHealth Service Holder.) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll   [38400]
O83 - Search Svchost Services: WmdmPmSN (WmdmPmSN) . (.Microsoft Corporation - Microsoft Media Device Service Provider.) -- C:\WINDOWS\system32\MsPMSNSv.dll   [27136]
O83 - Search Svchost Services: napagent (napagent) . (.Microsoft Corporation - Exécution du service Agent de quarantaine.) -- C:\WINDOWS\system32\qagentrt.dll   [293376]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\WINDOWS\system32\kmsvc.dll   [61440]
~ Scan Services in 00mn 02s



---\\ Recherche particuliere à la racine de certains dossiers (O84)
[MD5.4D4C8F8AB9070B65DCB75008E7B3B2F4] [SPRF][11/10/2009] (...) -- C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\fusioncache.dat   [156]
[MD5.E3B22F5B75B4006B3BB3D5F5D3D71821] [SPRF][13/02/2013] (...) -- C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Bureau\RogueKiller.exe   [798208]
[MD5.EF5621A1AF6B62218AA0EFF41A28851C] [SPRF][10/02/2013] (.TeAm DiGiT - Samsung Galaxy Ace - Guide - Cygwin-Odin 1.00 Installation.) -- C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Bureau\Samsung Galaxy Ace - Guide - Cygwin-Odin.exe   [50
[MD5.178A34E5554DCE485E1262DDF027960C] [SPRF][11/02/2013] (.Kaspersky Lab ZAO - TDSS rootkit removing tool.) -- C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Bureau\TDSSKiller.exe   [2237968]
[MD5.2A9A453201A27ECB6D366900501A91EC] [SPRF][13/02/2013] (.Nicolas Coolman - ZHPDiag.) -- C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Bureau\ZHPDiag2.exe   [3728968]
[MD5.1BB8D0A91FD683E48A8A8733C56BD447] [SPRF][02/09/2007] (.Emsi Software GmbH - a-squared Free Setup.) -- C:\Program Files\a2FreeSetup.exe   [17219376]
[MD5.6958101AE0FF42DAE652B7C708DDA4AD] [SPRF][03/04/2008] (.Adobe - Pas de description.) -- C:\Program Files\accrreadpalmosv11.exe   [6659734]
[MD5.65F83F4BE6D76D32B90B1957FAD1ED35] [SPRF][27/01/2008] (...) -- C:\Program Files\agsetup.exe   [1665325]
[MD5.A3016220180EAD19379BD997008FF3E4] [SPRF][27/01/2009] (.ESTsoft Crop. - ALZip Setup.) -- C:\Program Files\ALZipv6.7.exe   [5754977]
[MD5.E1D62248EF5F76DE6E3645EBCA5CED0B] [SPRF][11/10/2008] (...) -- C:\Program Files\antivir_workstation_winu_en_hp.exe   [25740800]
[MD5.14EF5650B2733A105C81FB4B1BDF129B] [SPRF][06/09/2009] (.Artweaver - Artweaver Setup.) -- C:\Program Files\Artweaver.exe   [9276316]
[MD5.717F4FE2F0A759765D8629D9380D2E72] [SPRF][26/09/2007] (...) -- C:\Program Files\avgas-setup-7.5.1.43.exe   [12413440]
[MD5.BBC680D8B2475A95AAC389A80FAF8EA9] [SPRF][23/09/2007] (.F-Secure Corporation - F-Secure Installer.) -- C:\Program Files\cp_neuf_v1.2.exe   [86674776]
[MD5.59C9A8F5AC8962710B12D26FC35EFA0D] [SPRF][22/11/2006] (...) -- C:\Program Files\DeepBurner1.exe   [2863832]
[MD5.2C432441E829BE582A68A12CDC8D2FEF] [SPRF][18/10/2009] (.DivX, Inc. - DivX for Windows Installer, L:EN;ES;DE;FR;JA;PT;ZH-CN;ZH-TW, DivX Codec 6.8.5, DivX Converter 7.1.0, DivX Player 7.2.0, DivX H.264 Decoder 1.1.0, DivX AAC Decoder 7.1.0, DivX MKV Sp
[MD5.2FCDB5562C8017FF658CC38C532600B1] [SPRF][11/10/2008] (.Digital River - Download Manager.) -- C:\Program Files\Download_SDAV6.0.0.362i-sdregnow-sdasetup-AVP.exe   [128376]
[MD5.CFE340BAB437D912A7FC7DB1A545DCE0] [SPRF][19/12/2008] (...) -- C:\Program Files\eMule0.49b-Installer1.exe   [3231826]
[MD5.329C2307685A8D97E2B3D35DDD39EFBE] [SPRF][21/09/2008] (.Lavalys, Inc. - EVEREST Home Edition.) -- C:\Program Files\everest_everest_2.20_francais_12281.exe   [4179293]
[MD5.3F84517C7EAD959A8CFFD9AE79D54406] [SPRF][26/06/2009] (.Mozilla - Firefox.) -- C:\Program Files\Firefox Setup 3.0.11.exe   [7645176]
[MD5.094B49A902B4C9AC736487BA0925E2A5] [SPRF][16/05/2009] (.Google Inc. - Setup.) -- C:\Program Files\GoogleEarthSetup.exe   [556184]
[MD5.14B2BE9BF3C38555E805E9F79C75C207] [SPRF][13/11/2006] (.Macrovision Corporation - Setup.exe.) -- C:\Program Files\GoogleEarthWin.exe   [14879120]
[MD5.5474EF5DC2844B2945911AB1354FDE65] [SPRF][13/01/2007] (.Macrovision Corporation - Setup.exe.) -- C:\Program Files\GoogleSketchUpWEN.exe   [33318216]
[MD5.A25D737ABDB29DFD3ABC349B347F3584] [SPRF][11/12/2011] (.Google Inc. - Google SketchUp Installer, Version 8.0.) -- C:\Program Files\GoogleSketchUpWFR.exe   [40549144]
[MD5.B9A6296D49A9BE5019E1A2044483721A] [SPRF][04/01/2007] (...) -- C:\Program Files\Google_Updater.exe   [511784]
[MD5.8BA08D8549BDB91DAD981C294E6FAC89] [SPRF][27/01/2009] (.Smart Projects - IsoBuster Setup.) -- C:\Program Files\isobuster_all_lang.exe   [4965200]
[MD5.7771D4E03BBB6A2F2175030DDA97128E] [SPRF][19/06/2009] (...) -- C:\Program Files\k9-webprotection.exe   [635424]
[MD5.4A5B6E42BF1298E6C06908C5926AF558] [SPRF][27/01/2008] (...) -- C:\Program Files\lame-3.93.1.exe   [839680]
[MD5.FCA50E293227FD6A4E90FDF03BEE7A00] [SPRF][27/02/2007] (.Juanjo - lphant : P2P client.) -- C:\Program Files\Lphant-v2.01-Installer.exe   [1505581]
[MD5.D6EDA4BFD998BCBD7B97562727744475] [SPRF][09/05/2008] (.Malwarebytes - Malwarebytes' Anti-Malware Setup.) -- C:\Program Files\mbam-setup.exe   [1649976]
[MD5.08D2E96CAB9F97B08170E0FDEBFAA72D] [SPRF][05/11/2006] (...) -- C:\Program Files\Nero-7.5.7.0_fra.exe   [203597664]
[MD5.3F926C788CEEC919D4FB7A7B6A6DD351] [SPRF][01/04/2007] (...) -- C:\Program Files\objectdock_freeware.exe   [9046288]
[MD5.1027DF7F909776789D9D1C2C30410166] [SPRF][18/03/2012] (...) -- C:\Program Files\OOo_3.3.0_Win_x86_install-wJRE_fr.exe   [152474936]
[MD5.2D2A2CCBD1E9141766E9B67805E8D30D] [SPRF][09/02/2007] (...) -- C:\Program Files\pfs-setup.exe   [2835800]
[MD5.946A097C3EE574A8CE5276075CC0B3A4] [SPRF][20/10/2006] (.Google Inc. - Picasa setup.) -- C:\Program Files\picasa2-current.exe   [4789792]
[MD5.E832058EFB2DD0F01D4CB206CFC77C58] [SPRF][21/09/2008] (.Realtek Semiconductor Corp. - Pas de description.) -- C:\Program Files\pilote_audio_realtek_a4.01_970.exe   [18481257]
[MD5.D8CF8A3B6C2B9B518DC8C9AB1D450438] [SPRF][26/04/2009] (.Apple Inc. - QuickTime Installer.) -- C:\Program Files\QuickTimeInstaller.exe   [21878064]
[MD5.50E97285B3C55EC23B95B2D888BCC7D8] [SPRF][10/10/2008] (...) -- C:\Program Files\setup-adsltv.exe   [37657184]
[MD5.C99F18F54B0BAFE113116E7507CB75EE] [SPRF][18/03/2012] (...) -- C:\Program Files\setup-contenta-nefconverter-en.exe   [42997400]
[MD5.7CCA4AB96B87CDE972AC6726997B1A38] [SPRF][09/05/2008] (.Pas de propriétaire - ALWIL Software Setup Engine.) -- C:\Program Files\setupfre.exe   [22625616]
[MD5.DFAC4CE87D42848B6006C7D95256C4E1] [SPRF][30/01/2009] (.ReportOne - MyReport 5 Setup.) -- C:\Program Files\SetupMyReport5.5.0.4.exe   [41175478]
[MD5.39A2A496F82108991B4710AE407809E9] [SPRF][09/02/2008] (.POTI, Inc. - Songbird Installer.) -- C:\Program Files\Songbird_0.4_windows-i686.exe   [13747629]
[MD5.A91FCEBD454C1180D8BCBEB154B715CD] [SPRF][28/02/2010] (...) -- C:\Program Files\UsenetNLSetup_417361f.exe   [2981608]
[MD5.1648B8B0AF4F3A0EFA60BC72793D0E4D] [SPRF][08/02/2007] (.VSO-Software - VSO Image Resizer Setup.) -- C:\Program Files\vso_image_resizer_setup.exe   [2981630]
[MD5.B5BD34D25FA87923DFBB056946A129A7] [SPRF][26/09/2007] (.Atribune.org - VundoFix.exe.) -- C:\Program Files\VundoFix.exe   [116224]
[MD5.FCA6E3E3B71650DF3F2394DE5D662441] [SPRF][23/06/2009] (.Microsoft Corporation - Windows DDU.) -- C:\Program Files\wddu.exe   [254680]
[MD5.DC5684CD7A31D964FE75D07263CB2C07] [SPRF][24/03/2008] (.Microsoft Corporation - Fichier exécutable du programme d'installation client Windows Live.) -- C:\Program Files\WLinstaller.exe   [2402832]
[MD5.C796FFE6E484CCCBA46F323D5E3DC051] [SPRF][02/06/2008] (.Microsoft Corporation - Windows Media Component Setup Application.) -- C:\Program Files\wmp11-windowsxp-x86-FR-FR.exe   [25839688]
[MD5.18075B2C9F0F300BEE209744A8BEC353] [SPRF][07/12/2004] (...) -- C:\WINDOWS\Downloaded Program Files\bdcore.dll   [32]
[MD5.298068536300DA6DC163E394797A7C50] [SPRF][25/05/2006] (...) -- C:\WINDOWS\Downloaded Program Files\bdupd.dll   [118784]
[MD5.3FEA9D2EDF23B0283C7A66C8DEA380BD] [SPRF][26/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player Module.) -- C:\WINDOWS\Downloaded Program Files\dwusplay.dll   [24576]
[MD5.CDBE35EA59BC9223E4F800BD1DB82D27] [SPRF][26/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player.) -- C:\WINDOWS\Downloaded Program Files\dwusplay.exe   [196608]
[MD5.A2B9047463F1297403DEC0DE4DF2298A] [SPRF][26/09/2008] (.eBay, Inc. - EPUWALControl Module.) -- C:\WINDOWS\Downloaded Program Files\EPUWALcontrol.dll   [3204368]
[MD5.1CAB87DE6638846FBF51F32B5D95E482] [SPRF][25/05/2006] (...) -- C:\WINDOWS\Downloaded Program Files\ipsupd.dll   [53248]
[MD5.6F88F1DE97B7BA6E2BE4DC29AEEACF0D] [SPRF][27/07/2004] (.InstallShield Software Corporation - InstallShield Update Service Web Agent.) -- C:\WINDOWS\Downloaded Program Files\isusweb.dll   [323584]
[MD5.18075B2C9F0F300BEE209744A8BEC353] [SPRF][07/12/2004] (...) -- C:\WINDOWS\Downloaded Program Files\libfn.dll   [32]
[MD5.4314A3B6073BDB452725F8EFD4B77C34] [SPRF][18/09/2007] (.Pas de propriétaire - PicasaWeb ActiveX Uploader.) -- C:\WINDOWS\Downloaded Program Files\UploaderX.dll   [878072]
[MD5.17536C890DF63AB4644EB111C28128F5] [SPRF][24/06/2008] (.Microsoft Corporation - Windows Live OneCare Safety Scanner Base Module.) -- C:\WINDOWS\Downloaded Program Files\wlscBase.dll   [455744]
~ Scan Files in 02mn 12s



---\\ Scan Additionnel (O88)
Database Version : v2.10682 - (12/02/2013)
Clés trouvées (Keys found) : 82
Valeurs trouvées (Values found) : 0
Dossiers trouvés  (Folders found) : 8
Fichiers trouvés  (Files found) : 3

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}]   =>Toolbar.Babylon
[HKLM\Software\Classes\CLSID\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8}]   =>Toolbar.Agent
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8}]   =>Toolbar.Agent
[HKLM\Software\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}]   =>Toolbar.Agent
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21111111-1111-1111-1111-110011501160}]   =>PUP.SpecialSavings
[HKLM\Software\Classes\AppID\{5e50ae1d-bc76-418b-94c4-efeac0cef80c}]   =>Toolbar.Kiwee
[HKLM\Software\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}]   =>PUP.Whitesmoke
[HKLM\Software\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}]   =>PUP.Whitesmoke
[HKLM\Software\Classes\AppID\{69E54DE2-C4ED-4BEC-8046-E3F9AC74B4B0}]   =>PUP.iMesh
[HKLM\Software\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}]   =>Toolbar.Babylon
[HKLM\Software\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}]   =>Toolbar.Agent
[HKLM\Software\Microsoft\Internet Explorer\extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}]   =>Toolbar.Agent
[HKLM\Software\Classes\AppID\{969D2C61-9B16-407c-86B7-397BF4579BE6}]   =>PUP.iMesh
[HKLM\Software\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]   =>Toolbar.Agent
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]   =>Toolbar.Agent
[HKLM\Software\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}]   =>Adware.CDNHelper
[HKLM\Software\Classes\AppID\{BDB69379-802F-4eaf-B541-F8DE92DD98DB}]   =>Toolbar.Babylon
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635]   =>PUP.SweetIM
[HKLM\Software\Classes\AppID\{F54A0D21-6A53-460C-8301-C694EC9E1033}]   =>PUP.iMesh
[HKLM\Software\Classes\AppID\{F7BCCFD4-2FA6-477D-A1B0-EF7500B3C49E}]   =>PUP.iMesh
[HKLM\Software\Classes\AppID\iMesh.exe]   =>PUP.iMesh
[HKLM\Software\Classes\AppID\Launcher.EXE]   =>PUP.BearShare
[HKLM\Software\Classes\AppID\NCTAudioCDGrabber2.DLL]   =>PUP.BearShare
[HKLM\Software\Classes\AppID\NCTAudioCompress3.DLL]   =>PUP.BearShare
[HKLM\Software\Classes\AppID\NCTAudioFile3.DLL]   =>PUP.BearShare
[HKLM\Software\Classes\AppID\NCTAudioFileWMA3.DLL]   =>PUP.BearShare
[HKLM\Software\Classes\AppID\NCTAudioFormatSettings3.DLL]   =>PUP.BearShare
[HKLM\Software\Classes\nctaudiocdwriter2.audiocdwriter2]   =>Adware.RecordNRip
[HKLM\Software\Classes\nctaudiocdwriter2.audiocdwriter2.1]   =>Adware.RecordNRip
[HKLM\Software\Google\Chrome\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj]   =>PUP.SweetIM
[HKLM\Software\Google\Chrome\Extensions\pgafcinpmmpklohkojmllohdhomoefph]   =>PUP.SpecialSavings
[HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SKYPE_C2C_SERVICE]   =>Toolbar.Agent
[HKCU\Software\BrowserMngr]   =>Toolbar.Babylon
[HKLM\Software\BrowserMngr]   =>Toolbar.Babylon
[HKCU\Software\DataMngr]   =>Adware.Bandoo
[HKLM\Software\DataMngr]   =>Adware.Bandoo
[HKCU\Software\iMesh]   =>PUP.iMesh
[HKCU\Software\Softonic]   =>Toolbar.Conduit
[HKCU\Software\SweetIM]   =>PUP.SweetIM
[HKLM\Software\SweetIM]   =>PUP.SweetIM
[HKCU\Software\Tutorials]   =>Spyware.AgenceExclusive
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\WebMediaPlayer]   =>Rogue.Multiple
[HKLM\Software\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}]   =>Toolbar.Babylon
[HKLM\Software\Classes\Prod.cap]   =>Adware.Bandoo
[HKLM\Software\Classes\Installer\Features\9EE58E3C298524145B73CBBED3CAC4D3]   =>PUP.SweetIM
[HKLM\Software\Classes\Installer\Products\9EE58E3C298524145B73CBBED3CAC4D3]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9EE58E3C298524145B73CBBED3CAC4D3]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}]   =>PUP.SweetIM
[HKCU\Software\InstallCore]   =>Adware.InstallCore
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings]   =>PUP.BProtector
[HKLM\Software\Classes\AppID\secman.DLL]   =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\{C3110516-8EFC-49D6-8B72-69354F332062}]   =>PUP.ClaroSearch
[HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MSISERVER]   =>Toolbar.Kiwee
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\521D59DC299285843BFEF5F65BF2AB6D]   =>Toolbar.Skype
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420]   =>PUP.SweetIM
[HKLM\Software\Classes\SWEETIE.IEToolbar]   =>PUP.SweetIM
[HKLM\Software\Classes\SWEETIE.IEToolbar.1]   =>PUP.SweetIM
[HKLM\Software\Classes\SweetIM_URLSearchHook.ToolbarURLSearchHook]   =>PUP.SweetIM
[HKLM\Software\Classes\SweetIM_URLSearchHook.ToolbarURLSearchHook.1]   =>PUP.SweetIM
[HKLM\Software\Classes\Toolbar3.SWEETIE]   =>PUP.SweetIM
[HKLM\Software\Classes\Toolbar3.SWEETIE.1]   =>PUP.SweetIM
[HKLM\Software\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}]   =>PUP.SweetIM^
[HKLM\Software\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}]   =>PUP.SweetIM^
[HKLM\Software\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}]   =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4]   =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2]   =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C]   =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789]   =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399]   =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156]   =>PUP.SweetIM^
C:\Program Files\SweetIM   =>PUP.SweetIM
C:\Program Files\Tuto4PC   =>PUP.Eorezo
C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Babylon   =>Toolbar.Babylon
C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Local Settings\Application Data\iMesh   =>PUP.iMesh
C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Mozilla\Firefox\Profiles\6ae2h37i.default\Conduit   =>Toolbar.Conduit
C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Mozilla\Firefox\Profiles\6ae2h37i.default\ConduitEngine   =>Toolbar.Conduit
C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Mozilla\Firefox\Profiles\6ae2h37i.default\iMeshMediabarTb   =>PUP.iMesh
C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Mozilla\Firefox\Profiles\6ae2h37i.default\Extensions\engine@conduit.com   =>Toolbar.Conduit
C:\Program Files\Mozilla Firefox\searchplugins\iMeshWebSearch.xml   =>PUP.iMesh
C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Mozilla\Firefox\Profiles\6ae2h37i.default\SearchPlugins\iMeshWebSearch.xml   =>PUP.iMesh
C:\Documents and Settings\HP_Administrateur.NOM-FB9B15D2723\Application Data\Mozilla\Firefox\Profiles\6ae2h37i.default\SearchPlugins\sweetim.xml   =>PUP.SweetIM
~ Scan Additionnel in 01mn 56s



---\\ Recherche détournement de DNS routeur (O89) (None)

---\\ Product Upgrade Codes (O90)
O90 - PUC: "037E97B5798DF8B41ADAB72B1D2FB269" . (.Nero Blu-ray Player Help (CHM).) -- C:\WINDOWS\Installer\{5B79E730-D897-4B8F-A1AD-7BB2D1F22B96}\NeroHelpIcon.8BC7562A_6065_4ED9_8502_C368ECC0724D
O90 - PUC: "0C7EC0FA4E3A37D489B82B1978CEE6A9" . (.QuickTime.) -- C:\WINDOWS\Installer\{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}\Installer.ico
O90 - PUC: "0CB9D2AE9E575794A9A0DD2891D8CD35" . (.MSXML 6.0 Parser.) -- C:\WINDOWS\Installer\{EA2D9BC0-75E9-4975-9A0A-DD82198DDC53}\ARPIco
O90 - PUC: "0ED0164331C3AC24E82310FF3AA86B8E" . (.PC Connectivity Solution.) -- C:\WINDOWS\Installer\{34610DE0-3C13-42CA-8E32-01FFA38AB6E8}\ARPPRODUCTICON.exe
O90 - PUC: "0ED9D238CFA898648991D4BBEDDBE3F4" . (.Microsoft Games for Windows - LIVE Redistributable.) -- C:\WINDOWS\Installer\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}\GameForWindowsLiveRedist.exe
O90 - PUC: "1038C85769625584FA5435B4210089A0" . (.Samsung Kies.) -- C:\WINDOWS\Installer\{758C8301-2696-4855-AF45-534B1200980A}\ARPPRODUCTICON.exe
O90 - PUC: "10A20A7EA57C09441A86C57A903A8D26" . (.MainConcept for Software Encoder.) -- C:\WINDOWS\Installer\{E7A02A01-C75A-4490-A168-5CA709A3D862}\ARPPRODUCTICON.exe
O90 - PUC: "1271C3A5DE8F0E11A8BF8BCAF6798BE8" . (.Google Earth.) -- C:\WINDOWS\Installer\{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}\ARPPRODUCTICON.exe
O90 - PUC: "15E5F6B1E5753964CB2A573475D070D6" . (.Nero Kwik Themes Basic.) -- C:\WINDOWS\Installer\{1B6F5E51-575E-4693-BCA2-7543570D076D}\ARPPRODUCTICON.exe
O90 - PUC: "1D034B0FAA6BD374B960AAD30DF10D8B" . (.Microsoft SQL Server 2005 Compact Edition [ENU].) -- C:\WINDOWS\Installer\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}\ProductIcon
O90 - PUC: "227C12A7952F67947BAA66855EDFDEFA" . (.Google Drive.) -- C:\WINDOWS\Installer\{7A21C722-F259-4976-B7AA-6658E5FDEDAF}\DriveIcon
O90 - PUC: "243493A986A4ABE4586A555B954F7E00" . (.Microsoft .NET Framework 1.1 French Language Pack.) -- C:\WINDOWS\Installer\{9A394342-4A68-4EBA-85A6-55B559F4E700}\ndpsetup.ico
O90 - PUC: "245CB4E0DFC979E45B68F9E155617E9B" . (.Microsoft IntelliPoint 6.1.) -- c:\WINDOWS\Installer\{0E4BC542-9CFD-4E97-B586-9F1E5516E7B9}\ARPPRODUCTICON.exe
O90 - PUC: "35E1620B1F6BA47468B47E3CBC4F860E" . (.iTunes.) -- C:\WINDOWS\Installer\{B0261E53-B6F1-474A-864B-E7C3CBF468E0}\Installer.ico
O90 - PUC: "3A80BAA3921F5DB44B90EA76F43957D9" . (.Prerequisite installer.) -- C:\WINDOWS\Installer\{3AAB08A3-F129-4BD5-B409-AE674F93759D}\ARPPRODUCTICON.exe
O90 - PUC: "3C9969540349183469B424848DB7949F" . (.Apple Mobile Device Support.) -- C:\WINDOWS\Installer\{459699C3-9430-4381-964B-4248D87B49F9}\Installer.ico
O90 - PUC: "43E1A250B45AC8544A3E423C0E4557A4" . (.Nero Kwik Media.) -- C:\WINDOWS\Installer\{052A1E34-A54B-458C-A4E3-24C3E054754A}\NeroKwikMedia._63C8A7B0BBE5459F9AC436392B2FF50D.exe
O90 - PUC: "46B5A9879DD95AB419A50FCFA0B1B7EF" . (.Apple Software Update.) -- C:\WINDOWS\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\Installer.ico
O90 - PUC: "4757561245DB2A844905BE302B7CCF92" . (.Sonic MyDVD Plus.) -- c:\WINDOWS\Installer\{21657574-BD54-48A2-9450-EB03B2C7FC29}\MyDVDRel60.exe
O90 - PUC: "562F22C867ED1D44A8977AD1181973AD" . (.Intel(R) Quick Resume Technology Drivers.) -- C:\WINDOWS\Installer\{8C22F265-DE76-44D1-8A79-A71D819137DA}\ARPPRODUCTICON.exe
O90 - PUC: "569CE4F3FE823C540B36402BD5E46997" . (.HP Integrated Module with Bluetooth wireless technology.) -- C:\WINDOWS\Installer\{3F4EC965-28EF-45C3-B063-04B25D4E9679}\ARPPRODUCTICON.exe
O90 - PUC: "5E593E7240BEDFB4693C9C1A209EE7B1" . (.Le logiciel Intel® Viiv™.) -- C:\WINDOWS\Installer\{27E395E5-EB04-4BFD-96C3-C9A102E97E1B}\ARPPRODUCTICON.exe
O90 - PUC: "68267DD57EB949849A099E509EA18C81" . (.Windows Live Mail.) -- C:\WINDOWS\Installer\{5DD76286-9BE7-4894-A990-E905E91AC818}\wlmail.exe
O90 - PUC: "68AB67CA7DA76301B7447A5000000020" . (.Adobe Reader 7.0.5 - Français.) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A70500000002}\SC_Reader.exe
O90 - PUC: "6D4B04801DD7781458326ECF0070FE7B" . (.Windows Live ID Sign-in Assistant.) -- C:\WINDOWS\Installer\{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}\prodicon.ico
O90 - PUC: "6E4256D9FC512584FB0740EF79A3D31E" . (.Windows Live Toolbar.) -- C:\WINDOWS\Installer\{9D6524E6-15CF-4852-BF70-04FE973A3DE1}\ToolbarIcon
O90 - PUC: "7040BB568CC47CD459E2E3FEFD5006A2" . (.Nero Update.) -- C:\WINDOWS\Installer\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}\ARPPRODUCTICON.exe
O90 - PUC: "7692FC6BE18C0C0489510C7547EF1F02" . (.Skype Click to Call.) -- C:\WINDOWS\Installer\{B6CF2967-C81E-40C0-9815-C05774FEF120}\IconUninstallIco
O90 - PUC: "8057DFC54777EF842808A7C3A07E7155" . (.Internet Services.) -- C:\WINDOWS\Installer\{5CFD7508-7774-48FE-8280-7A3C0AE71755}\ARPPRODUCTICON.exe
O90 - PUC: "86DA14F42F9826243AC2F2070BF1ECE9" . (.Photorécit 3 pour Windows.) -- C:\WINDOWS\Installer\{4F41AD68-89F2-4262-A32C-2F70B01FCE9E}\PhotoStory3_ICON
O90 - PUC: "907018673D7AD86419761A87C0E167C6" . (.Windows Live FolderShare.) -- C:\WINDOWS\Installer\{76810709-A7D3-468D-9167-A1780C1E766C}\FolderShare48x48.ico
O90 - PUC: "90ED950A94B105443B04A70E79CEF340" . (.Microsoft Works.) -- c:\WINDOWS\Installer\{A059DE09-1B49-4450-B340-7AE097EC3F04}\Win2Kico.exe
O90 - PUC: "966FD11503920C03E86B5582782EE98C" . (.Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - FRA.) -- c:\WINDOWS\Installer\{511DF669-2930-30C0-8EB6-552887E29EC8}\Setup.ico
O90 - PUC: "96740EE14C1960A4297BCFFA6EABDB9D" . (.Galerie de photos Windows Live.) -- C:\WINDOWS\Installer\{1EE04769-91C4-4A06-92B7-FCAFE6BABDD9}\WLXPhotoGalleryIcon.exe
O90 - PUC: "985E2342652631540BFBFE8A3E525D0F" . (.Nero SharedVideoCodecs.) -- C:\WINDOWS\Installer\{2432E589-6256-4513-B0BF-EFA8E325D5F0}\ARPPRODUCTICON.exe
O90 - PUC: "9A1DA4B6A37E4814D9B670F2A8C3E5AB" . (.VoiceOver Kit.) -- C:\WINDOWS\Installer\{6B4AD1A9-E73A-4184-9D6B-072F8A3C5EBA}\WinInstall.ico
O90 - PUC: "9D34FBAD4011467429B7B5DE21473A0B" . (.Runtime.) -- C:\WINDOWS\Installer\{DABF43D9-1104-4764-927B-5BED1274A3B0}\ARPPRODUCTICON.exe
O90 - PUC: "9EE58E3C298524145B73CBBED3CAC4D3" . (.Internet Explorer Toolbar 4.6 by SweetPacks.) -- C:\WINDOWS\Installer\{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}\ARPPRODUCTICON.exe
O90 - PUC: "9F2FDFE0D6387BE43AD230B83D1FBFA2" . (.Security Update for CAPICOM (KB931906).) -- C:\WINDOWS\Installer\{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}\folder.ico
O90 - PUC: "A12B436470CC693498C0B2188666F1AE" . (.Windows Live Writer.) -- C:\WINDOWS\Installer\{4634B21A-CC07-4396-890C-2B8168661FEA}\ApplicationIcon.ico
O90 - PUC: "B2F5519759897D9468219D52080EEDB5" . (.Bonjour.) -- C:\WINDOWS\Installer\{79155F2B-9895-49D7-8612-D92580E0DE5B}\Bonjour.ico
O90 - PUC: "BD19F759999A70247A0828C85837074F" . (.Nero Kwik Media.) -- C:\WINDOWS\Installer\{957F91DB-A999-4207-A780-828C857370F4}\ARPPRODUCTICON.exe
O90 - PUC: "BD528ECCA74340041A68F5A4F6DD5874" . (.Apple Application Support.) -- C:\WINDOWS\Installer\{CCE825DB-347A-4004-A186-5F4A6FDD8547}\WinInstall.ico
O90 - PUC: "C7030BC4E565144468EBD02F4EBF28C8" . (.Microsoft Games for Windows Marketplace.) -- C:\WINDOWS\Installer\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}\GameForWindowsLiveDash.exe
O90 - PUC: "C78815B3AF84FE14B8FF3239C6174607" . (.MAGIX Screenshare.) -- C:\WINDOWS\Installer\{3B51887C-48FA-41EF-8BFF-23936C716470}\ProgramIcon.exe
O90 - PUC: "CF4F71AEFBDF8FC45A92D28913230D35" . (.Skype™ 6.0.) -- C:\WINDOWS\Installer\{EA17F4FC-FDBF-4CF8-A529-2D983132D053}\SkypeIcon.exe
O90 - PUC: "D30CF9A3586C138449FCE4FD3D474979" . (.Microsoft SQL Server Compact 3.5 SP2 ENU.) -- C:\WINDOWS\Installer\{3A9FC03D-C685-4831-94CF-4EDFD3749497}\ProductIcon
O90 - PUC: "D381B5441F4F8C549BBD1F3155AC56B7" . (.Windows Live Messenger.) -- C:\WINDOWS\Installer\{445B183D-F4F1-45C8-B9DB-F11355CA657B}\MsblIco.Exe
O90 - PUC: "D48650186AC8D044F885E7F56DA794D9" . (.easy Internet sign-up.) -- C:\WINDOWS\Installer\{8105684D-8CA6-440D-8F58-7E5FD67A499D}\ARPPRODUCTICON.exe
O90 - PUC: "D7314F9862C648A4DB8BE2A5B47BE100" . (.Microsoft Silverlight.) -- c:\WINDOWS\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ARPIcon
O90 - PUC: "D7E18DD182D0BEC4782B0C144ACF2B51" . (.Rapport.) -- C:\WINDOWS\Installer\{1DD81E7D-0D28-4CEB-87B2-C041A4FCB215}\icon.ico
O90 - PUC: "DDB6C50237B7ED245850A990F3532A83" . (.Outil de téléchargement Windows Live.) -- C:\WINDOWS\Installer\{205C6BDD-7B73-42DE-8505-9A093F35A238}\RichUpload.ico
O90 - PUC: "E02861F17E0D636439E954BCEFBF601E" . (.Nero Kwik Media Help (CHM).) -- C:\WINDOWS\Installer\{1F16820E-D0E7-4636-939E-45CBFEFB06E1}\NeroHelpIcon.BBDB24D3_07A5_496B_AA18_6A3ED03D6698
O90 - PUC: "E196EF2AE8F303E4AAD7FF71CA77AE78" . (.Nero Blu-ray Player.) -- C:\WINDOWS\Installer\{A2FE691E-3F8E-4E30-AA7D-FF17AC77EA87}\ARPPRODUCTICON.exe
O90 - PUC: "E2FB0A7ACC133E949931255C30BE69D9" . (.Nero Audio Pack 1.) -- C:\WINDOWS\Installer\{A7A0BF2E-31CC-49E3-9913-52C503EB969D}\ARPPRODUCTICON.exe
O90 - PUC: "EB816B3B22D01BE43AC0C5B025D50191" . (.Matisseo Studio.) -- C:\WINDOWS\Installer\{B3B618BE-0D22-4EB1-A30C-5C0B525D1019}\_112D608FD02CD87FDC7735.exe
O90 - PUC: "F6071111A6667304777712318267D401" . (.JavaFX 2.1.1.) -- C:\WINDOWS\Installer\{1111706F-666A-4037-7777-211328764D10}\javaIcon.ico
~ Scan Files in 00mn 00s



---\\ Random Export Key (O91)
[HKCU\Software\5fedd8ce56eba41\history\{16cdff19-861d-48e3-a751-d99a27784753}2.2.643.41]:dllName="browsemngr.dll"
[HKCU\Software\5fedd8ce56eba41\history\{16cdff19-861d-48e3-a751-d99a27784753}2.2.643.41]:exeName="browsemngr.exe"
[HKCU\Software\5fedd8ce56eba41\history\{16cdff19-861d-48e3-a751-d99a27784753}2.2.643.41]:folderName="Browser Manager"
[HKCU\Software\5fedd8ce56eba41\history\{16cdff19-861d-48e3-a751-d99a27784753}2.2.643.41]:guid="{16cdff19-861d-48e3-a751-d99a27784753}"
[HKCU\Software\5fedd8ce56eba41\history\{16cdff19-861d-48e3-a751-d99a27784753}2.2.643.41]:serviceName="Browser Manager"
[HKCU\Software\5fedd8ce56eba41\history\{16cdff19-861d-48e3-a751-d99a27784753}2.2.643.41]:version="2.2.643.41"
[HKCU\Software\5fedd8ce56eba41\history\{16cdff19-861d-48e3-a751-d99a27784753}2.3.787.43]:dllName="browsemngr.dll"
[HKCU\Software\5fedd8ce56eba41\history\{16cdff19-861d-48e3-a751-d99a27784753}2.3.787.43]:exeName="browsemngr.exe"
[HKCU\Software\5fedd8ce56eba41\history\{16cdff19-861d-48e3-a751-d99a27784753}2.3.787.43]:folderName="Browser Manager"
[HKCU\Software\5fedd8ce56eba41\history\{16cdff19-861d-48e3-a751-d99a27784753}2.3.787.43]:guid="{16cdff19-861d-48e3-a751-d99a27784753}"
[HKCU\Software\5fedd8ce56eba41\history\{16cdff19-861d-48e3-a751-d99a27784753}2.3.787.43]:serviceName="Browser Manager"
[HKCU\Software\5fedd8ce56eba41\history\{16cdff19-861d-48e3-a751-d99a27784753}2.3.787.43]:version="2.3.787.43"
[HKCU\Software\5fedd8ce56eba41]:GUID="{61d8b74e-8d89-46ff-afa6-33382c54ac73}"
[HKCU\Software\5fedd8ce56eba41]:HPCHREGEXP=""
[HKCU\Software\5fedd8ce56eba41]:HPFFREGEXP=""
[HKCU\Software\5fedd8ce56eba41]:HPIEREGEXP=""
[HKCU\Software\5fedd8ce56eba41]:INSTALL_FOLDER_NAME="Browser Manager"
[HKCU\Software\5fedd8ce56eba41]:KWFFREGEXP=""
[HKCU\Software\5fedd8ce56eba41]:PROTECTOR_DLL_NAME="browsermngr.dll"
[HKCU\Software\5fedd8ce56eba41]:PROTECT_EXE_NAME="browsermngr.exe"
[HKCU\Software\5fedd8ce56eba41]:SEIEREGEXP=""
[HKCU\Software\5fedd8ce56eba41]:SERVICE_NAME="Browser Manager"
[HKCU\Software\5fedd8ce56eba41]:version="2.3.811.154"
[HKLM\Software\5fedd8ce56eba41]:GUID="{61d8b74e-8d89-46ff-afa6-33382c54ac73}"
[HKLM\Software\5fedd8ce56eba41]:HPCHREGEXP=""
[HKLM\Software\5fedd8ce56eba41]:HPFFREGEXP=""
[HKLM\Software\5fedd8ce56eba41]:HPIEREGEXP=""
[HKLM\Software\5fedd8ce56eba41]:INSTALL_FOLDER_NAME="Browser Manager"
[HKLM\Software\5fedd8ce56eba41]:KWFFREGEXP=""
[HKLM\Software\5fedd8ce56eba41]:PROTECTOR_DLL_NAME="browsermngr.dll"
[HKLM\Software\5fedd8ce56eba41]:PROTECT_EXE_NAME="browsermngr.exe"
[HKLM\Software\5fedd8ce56eba41]:SEIEREGEXP=""
[HKLM\Software\5fedd8ce56eba41]:SEREGEXP=""
[HKLM\Software\5fedd8ce56eba41]:SERVICE_NAME="Browser Manager"
[HKLM\Software\5fedd8ce56eba41]:version="2.3.811.154"
~ Scan Export Key Software in 00mn 00s



---\\ MyComputer Name Space (O92)
O92 - MNS: Favoris Bluetooth - {6af09eca-b429-11d4-a1fb-0090960218cb}
~ Scan MNS in 00mn 00s



---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Demand 10/02/2013 251248 |  (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
SR - | Auto 11/08/2012 55184 |  (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - | Auto 30/10/2012 44808 |  (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
SR - | Auto 30/08/2011 390504 |  (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SS - | Disabled  2360864 |  (Browser Manager) . (...) - C:\Documents and Settings\All Users\Application Data\Browser Manager\2.3.811.154\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\browsermngr.exe
SR - | Auto 23/12/2004 254007 |  (btwdins) . (.Broadcom Corporation..) - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
SS - | Demand 14/04/2008 225280 |  (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\system32\dmadmin.exe
SR - | Auto 15/10/2011 143360 |  (Ekomini) . (.Ekomini Inc..) - C:\Program Files\Ekomini\EkominiService.exe
SS - | Auto  0 |  (eLimit) . (...) - C:\Program Files\eLimit\maeLimit.exe
SR - | Auto 08/11/2005 180224 |  (ELService) . (.Intel Corporation.) - C:\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology\ELService.exe
SR - | Auto 22/12/2009 217088 |  (FsUsbExService) . (.Teruten.) - C:\WINDOWS\system32\FsUsbExService.exe
SS - | Auto 03/02/2010 135664 |  (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Demand 03/02/2010 135664 |  (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SR - | Demand 14/04/2008 14336 | C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll (hpqcxs08) . (.Hewlett-Packard Co..) - C:\WINDOWS\system32\svchost.exe
SR - | Auto 14/04/2008 14336 | C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll (hpqddsvc) . (.Hewlett-Packard Co..) - C:\WINDOWS\system32\svchost.exe
SR - | Auto 14/04/2008 14336 | C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.dll (HPSLPSVC) . (.Hewlett-Packard Co..) - C:\WINDOWS\system32\svchost.exe
SR - | Auto 12/10/2005 86140 |  (IAANTMon) . (.Intel Corporation.) - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
SS - | Demand 03/04/2005 69632 |  (IDriverT) . (.Macrovision Corporation.) - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
SR - | Demand 12/12/2012 553440 |  (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
SR - | Auto 07/10/2012 161768 |  (JavaQuickStarterService) . (.Oracle Corporation.) - C:\Program Files\Java\jre7\bin\jqs.exe
SS - | Disabled 24/03/2006 73728 |  (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
SS - | Auto 12/10/2010 186368 |  (MAGIX StartUp Analyze Service) . (.MAGIX AG.) - C:\Program Files\MAGIX\PC_Check_Tuning_2011_Version_a_telecharger\MXSAS.exe
SR - | Auto 13/07/2012 769432 |  (NAUpdate) . (.Nero AG.) - C:\Program Files\Nero\Update\NASvc.exe
SR - | Auto 14/04/2008 14336 | C:\WINDOWS\system32\HPZinw12.dll (Net Driver HPZ12) . (.Hewlett-Packard.) - C:\WINDOWS\system32\svchost.exe
SR - | Auto 14/02/2006 143426 |  (NVSvc) . (.NVIDIA Corporation.) - C:\WINDOWS\system32\nvsvc32.exe
SR - | Auto 14/01/2013 733560 |  (PDLP) . (.Ars Nova Systems.) - C:\Program Files\PDLP\pdlp.exe
SR - | Auto 14/04/2008 14336 | C:\WINDOWS\system32\HPZipm12.dll (Pml Driver HPZ12) . (.Hewlett-Packard.) - C:\WINDOWS\system32\svchost.exe
SR - | Auto 07/09/2012 976728 |  (RapportMgmtService) . (.Trusteer Ltd..) - C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe
SR - | Auto 19/05/2009 240512 |  (SeaPort) . (.Microsoft Corporation.) - C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
SS - | Demand 11/11/2008 620544 |  (ServiceLayer) . (.Nokia..) - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
SR - | Auto 02/10/2012 3064000 |  (Skype C2C Service) . (.Skype Technologies S.A..) - C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe
SS - | Auto 09/11/2012 160944 |  (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files\Skype\Updater\Updater.exe
SS - | Demand  957544 |  (SVFlip) . (...) - C:\PROGRAM FILES\COVERNIS\SYSCRIPT\SYSPLUG.exe
~ Scan Services in 00mn 06s



---\\ Recherche Master Boot Record Infection (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Run by HP_Administrateur at 13/02/2013 22:04:44

device: opened successfully
user: MBR read successfully

Disk trace:
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys iaStor.sys hal.dll 
C:\WINDOWS\system32\drivers\iaStor.sys Intel Corporation Intel Matrix Storage Manager driver
1 ntkrnlpa!IofCallDriver[0x804EF1F0] -> \Device\Harddisk0\DR0[0x8664FAB8]
3 CLASSPNP[0xF75B0FD7] -> ntkrnlpa!IofCallDriver[0x804EF1F0] -> \Device\Ide\IAAStorageDevice-0[0x86A58030]
kernel: MBR read successfully
user & kernel MBR OK 
~ Scan MBR in 00mn 02s



---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by HP_Administrateur at 13/02/2013 22:04:46

********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ Scan MBR in 00mn 04s



End of the scan (2137 lines in 24mn 02s)(0)