~ ZHPDiag v2016.2.11.28 Par Nicolas Coolman (2016/02/11)
~ Démarré par dfp (Administrator) (2016/02/14 08:19:07)
~ Site: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Documents and Settings\dfp\Bureau\ZHPDiag.txt
~ Rapport: C:\Documents and Settings\dfp\Application Data\ZHP\ZHPDiag.txt
~ UAC: Deactivate
~ Démarrage du système: Normal (Normal boot)
Windows XP, 32-bit Service Pack 3 (Build 2600)

---\\ Navigateurs Internet (1) - 0s
MSIE: Internet Explorer v8.0.6001.18702

---\\ Informations sur les produits Windows (3) - 0s
Windows Automatic Updates : KO
Windows Activation Technologies : KO
Windows Genuine Advantage : KO

---\\ Logiciels de protection (1) - 2s
SMADAV version 10.5.1 v10.5.1

---\\ Surveillance de Logiciels (2) - 3s
Adobe Flash Player 20 ActiveX
Adobe Reader 9

---\\ Informations sur le système (6) - 0s
~ Operating System: x86 Family 15 Model 6 Stepping 5, GenuineIntel
~ Operating System: 32-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 2087.148 MB (44% free)
System Restore: Activé (Enable)
System drive C: has 1 GB () free of 12 GB =>Alerte espace disque inférieur à 20 Go

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: MSILA-A0C4356E6
~ User Name: dfp
~ Logged in as Administrator

---\\ Enumération des unités disques (3) - 0s
~ Drive C: has 1 GB free of 12 GB (System)
~ Drive D: has 5 GB free of 6 GB
~ Drive G: has 5 GB free of 14 GB

---\\ Etat du Centre de Sécurité Windows (9) - 0s
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

---\\ Recherche particulière de fichiers génériques (23) - 2s
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - 14/04/2008 - (.Microsoft Corporation - Explorateur Windows.) -- C:\WINDOWS\Explorer.exe [1037824] =>.Microsoft Corporation
[MD5.93AD0B78C7357A05F50E594EC7C22300] - 14/04/2008 - (.Microsoft Corporation - Exécuter une DLL en tant qu'application.) -- C:\WINDOWS\System32\rundll32.exe [33792] =>.Microsoft Corporation
[MD5.2988BFF8257A55EA8AFD038F49F81A34] - 06/02/2014 - (.Microsoft Corporation - Internet Extensions for Win32.) -- C:\WINDOWS\System32\wininet.dll [920064] =>.Microsoft Corporation
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - 14/04/2008 - (.Microsoft Corporation - Application d'ouverture de session Windows.) -- C:\WINDOWS\System32\Winlogon.exe [512000] =>.Microsoft Corporation
[MD5.D76A076ADB74F8132924E498D63123A2] - 03/03/2011 - (.Microsoft Corporation - DNS Client API DLL.) -- C:\WINDOWS\System32\dnsapi.dll [149504] =>.Microsoft Corporation
[MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - 17/08/2011 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\WINDOWS\System32\drivers\AFD.sys [138496] =>.Microsoft Corporation
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - 13/04/2008 - (.Microsoft Corporation - IDE/ATAPI Port Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [96512] =>.Microsoft Corporation
[MD5.C885B02847F5D2FD45A24E219ED93B32] - 14/04/2008 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\Cdfs.sys [63744] =>.Microsoft Corporation
[MD5.1F4260CC5B42272D71F79E570A27A4FE] - 14/04/2008 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\Cdrom.sys [62976] =>.Microsoft Corporation
[MD5.31F923EB2170FC172C81ABDA0045D18C] - 14/04/2008 - (.Microsoft Corporation - Pilote de cryptographie FIPS.) -- C:\WINDOWS\System32\drivers\Fips.sys [44672] =>.Microsoft Corporation
[MD5.573C7D0A32852B48F3058CFD8026F511] - 14/04/2008 - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\System32\drivers\HDAudBus.sys [144384]
[MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - 14/04/2008 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [54144] =>.Microsoft Corporation
[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - 14/04/2008 - (.Microsoft Corporation - IMAPI Kernel Driver.) -- C:\WINDOWS\System32\drivers\Imapi.sys [42112] =>.Microsoft Corporation
[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - 14/04/2008 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\IpNat.sys [152832] =>.Microsoft Corporation
[MD5.23C74D75E36E7158768DD63D92789A91] - 14/04/2008 - (.Microsoft Corporation - IPSec Driver.) -- C:\WINDOWS\System32\drivers\IPSec.sys [75264] =>.Microsoft Corporation
[MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - 15/07/2011 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\WINDOWS\System32\drivers\MRxSmb.sys [456320] =>.Microsoft Corporation
[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - 14/04/2008 - (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netBT.sys [162816] =>.Microsoft Corporation
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - 14/04/2008 - (.Microsoft Corporation - NT File System Driver.) -- C:\WINDOWS\System32\drivers\ntfs.sys [574976] =>.Microsoft Corporation
[MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - 14/04/2008 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\WINDOWS\System32\drivers\Parport.sys [80384] =>.Microsoft Corporation
[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - 14/04/2008 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [51328] =>.Microsoft Corporation
[MD5.15CABD0F7C00C47C70124907916AF3F1] - 13/04/2008 - (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [196224] =>.Microsoft Corporation
[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - 13/04/2008 - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) -- C:\WINDOWS\System32\drivers\redbook.sys [58752] =>.Microsoft Corporation
[MD5.46DE1126684369BACE4849E4FC8C43CA] - 14/04/2008 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\WINDOWS\System32\drivers\volsnap.sys [53376] =>.Microsoft Corporation

---\\ Liste des services NT non Microsoft et non désactivés (2) - 2s
O23 - Service: MySQL (MySQL) . (...) - C:\SAHL\MySQL\bin\mysqld --defaults-file=C:\SAHL\MySQL\bin\my.ini MySQL (.not file.)
O23 - Service: Baidu Spark Service (SparkSvc) . (.Baidu Inc. - spark.) - C:\Program Files\baidu\Spark\sparkservice.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®

---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (3) - 16s

SS - Demand [11/02/2016] [ 269504] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe =>.Adobe Systems Incorporated®
SR - Auto [24/01/2016] [ 97080] Baidu Spark Service (SparkSvc) . (.Baidu Inc..) - C:\Program Files\baidu\Spark\sparkservice.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®

---\\ Tâches planifiées en automatique (5) - 4s
[MD5.00000000000000000000000000000000] [APT] [COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59}] (...) -- C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [Opera N Saturday] (...) -- C:\Program Files\Opera\launcher.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [Opera N Sunday] (...) -- C:\Program Files\Opera\launcher.exe (.not file.) [0]
O39 - APT: Opera N Saturday - (...) -- C:\WINDOWS\Tasks\Opera N Saturday.job [222] (.Orphean.) =>.Superfluous.Orphean
O39 - APT: Opera N Sunday - (...) -- C:\WINDOWS\Tasks\Opera N Sunday.job [222] (.Orphean.) =>.Superfluous.Orphean

---\\ Processus lancés (18) - 23s
[MD5.8B0DE4B972DB725FB9D591E69CD236FB] - (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe [159744] [PID.152] =>.Intel Corporation
[MD5.CC632EB3A7D106464E933E7D53883550] - (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe [131072] [PID.184] =>.Intel Corporation
[MD5.8C2D549EE5760824DB4837D964B534D0] - (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.EXE [19557480] [PID.192] =>.Realtek Semiconductor Corp®
[MD5.6E0B205042FC3AF5DE84F90F875AFFDA] - (.Intel Corporation - igfxsrvc Module.) -- C:\WINDOWS\system32\igfxsrvc.exe [249856] [PID.424] =>.Intel Corporation
[MD5.286E0970EA8816C5E272677D6273B2C0] - (.CANON INC. - Canon Advanced Printing Technology RPC Serv.) -- C:\WINDOWS\system32\CAP3RSK.EXE [61512] [PID.412] =>.CANON INC.
[MD5.8ACB732001797E42EEBA7CD4E35A423F] - (.CANON INC. - Canon Advanced Printing Technology Printer.) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\CAP3SWK.EXE [135680] [PID.1696] =>.CANON INC.
[MD5.99189BBC6379E5B95789C80ABB2FBEA2] - (.Baidu Inc. - spark.) -- C:\Program Files\baidu\Spark\sparkservice.exe [97080] [PID.1692] =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
[MD5.E1469FC9CB1F513D8FA0AEB65B1277F4] - (.CANON INC. - CAP3 PSW Launcher.) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\CAP3LAK.EXE [30720] [PID.2176] =>.CANON INC.
[MD5.19417C9D32D6A6EE787615A93870A295] - (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\Spark.exe [983352] [PID.496] =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
[MD5.19417C9D32D6A6EE787615A93870A295] - (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\Spark.exe [983352] [PID.2404] =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
[MD5.19417C9D32D6A6EE787615A93870A295] - (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\Spark.exe [983352] [PID.3504] =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
[MD5.19417C9D32D6A6EE787615A93870A295] - (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\Spark.exe [983352] [PID.3588] =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
[MD5.19417C9D32D6A6EE787615A93870A295] - (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\Spark.exe [983352] [PID.3660] =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
[MD5.19417C9D32D6A6EE787615A93870A295] - (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\Spark.exe [983352] [PID.3672] =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
[MD5.19417C9D32D6A6EE787615A93870A295] - (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\Spark.exe [983352] [PID.2740] =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
[MD5.4B8E156A310F35D2E435CF981F7B50B6] - (.Smadsoft - Smadav USB Antivirus & Additional Protectio.) -- C:\Program Files\SMADAV\SMΔRTP.exe [1716224] [PID.2772]
[MD5.4B8E156A310F35D2E435CF981F7B50B6] - (.Smadsoft - Smadav USB Antivirus & Additional Protectio.) -- C:\Program Files\SMADAV\SMΔRTP.exe [1716224] [PID.3264]
[MD5.0399D368D0B6A28221C163DB27CFC38E] - (.Nicolas Coolman - ZHPDiag.) -- C:\Documents and Settings\dfp\Mes documents\ZHPDiag3.exe [2118144] [PID.3260] =>.Nicolas Coolman

---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (12) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.01net.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.01net.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer

---\\ Internet Explorer,Proxy Management (6) - 1s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride =
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

---\\ Etude du fichier hosts (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (28)

---\\ Browser Helper Object de navigateur (BHO) (3) - 3s
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll =>.Adobe Systems, Incorporated®
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation®
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL =>.Microsoft Corporation®

---\\ Applications lancées au démarrage du système (104) - 7s
O4 - HKLM\..\Run: [IMJPMIG8.1] . (.Microsoft Corporation - Microsoft IME.) -- C:\WINDOWS\ime\IMJP8_1\imjpmig.exe =>.Microsoft Corporation
O4 - HKLM\..\Run: [PHIME2002ASync] . (.Microsoft Corporation - 微軟新注音輸入法 2002a.) -- C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE =>.Microsoft Corporation
O4 - HKLM\..\Run: [PHIME2002A] . (.Microsoft Corporation - 微軟新注音輸入法 2002a.) -- C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE =>.Microsoft Corporation
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe =>.Intel Corporation
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe =>.Intel Corporation
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe =>.Intel Corporation
O4 - HKLM\..\Run: [RTHDCPL] . (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.EXE =>.Realtek Semiconductor Corp®
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe =>.Adobe Systems, Incorporated®
O4 - HKLM\..\Run: [CAP3ON] . (.CANON INC. - Canon Advanced Printing Technology Printer.) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\CAP3ONN.EXE =>.CANON INC.
O4 - HKLM\..\Run: [SpyHunter Security Suite] C:\Program Files\SpyHunter\SpyHunter4.exe (.not file.)
O4 - HKLM\..\Run: [SMΔRT-Protection] . (.Smadsoft - Smadav USB Antivirus & Additional Protectio.) -- C:\Program Files\SMADAV\SMΔRTP.exe
O4 - HKCU\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation
O4 - HKCU\..\Run: [USB Safely Remove] C:\Program Files\USB Safely Remove\USBSafelyRemove.exe (.not file.)
O4 - HKCU\..\Run: [wibem613z9a121] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibe3a81211.exe
O4 - HKCU\..\Run: [wibem6za121] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za121.exe
O4 - HKCU\..\Run: [wibem6za] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za.exe
O4 - HKCU\..\Run: [wibem6z9a121] . (.Handle Software - Regshot 2.0 unicode for Windows XP 32 bit/6.) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za8121.exe
O4 - HKCU\..\Run: [wibem63z9a121] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibe3a8121.exe
O4 - HKCU\..\Run: [wibem6za1] . (.Handle Software - Regshot 2.0 unicode for Windows XP 32 bit/6.) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za1.exe
O4 - HKCU\..\Run: [w1ibem6a1] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibe31aaaaq.exe
O4 - HKCU\..\Run: [wibem6a1] . (.Handle Software - Regshot 2.0 unicode for Windows XP 32 bit/6.) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibe3aaaaq.exe
O4 - HKCU\..\Run: [wibem6za12] . (.Handle Software - Regshot 2.0 unicode for Windows XP 32 bit/6.) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za12.exe
O4 - HKCU\..\Run: [w6fnaa71ea] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-186112511\we1ffan1a8ra.exe
O4 - HKCU\..\Run: [w1mz1m6a1] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-187092372\wibemz1aq.exe
O4 - HKCU\..\Run: [w1m1z1m6a1] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1870912372\wibemz1a1q.exe
O4 - HKCU\..\Run: [w1m1z1am6a1] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1870912372\wibemaz1a1q.exe
O4 - HKCU\..\Run: [w1m1z1aam6a1a] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1870912372\wibemaaz1a1qa.exe
O4 - HKCU\..\Run: [w1m331z1aam6a1a] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709312372\wibemaa33z1a1qa.exe
O4 - HKCU\..\Run: [Kdj4SdaS01] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18161771\KdjSaS4d01.exe
O4 - HKCU\..\Run: [Kdj4SdfdaS01] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-183161771\KdjSadfS4d01.exe
O4 - HKCU\..\RunOnce: [w1m1z1am6a1] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1870912372\wibemaz1a1q.exe
O4 - HKCU\..\RunOnce: [wibem63z9a121] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibe3a8121.exe
O4 - HKCU\..\RunOnce: [w1mz1m6a1] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-187092372\wibemz1aq.exe
O4 - HKCU\..\RunOnce: [wibem6za] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za.exe
O4 - HKCU\..\RunOnce: [w1ibem6a1] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibe31aaaaq.exe
O4 - HKCU\..\RunOnce: [wibem6za1] . (.Handle Software - Regshot 2.0 unicode for Windows XP 32 bit/6.) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za1.exe
O4 - HKCU\..\RunOnce: [w6fnaa71ea] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-186112511\we1ffan1a8ra.exe
O4 - HKCU\..\RunOnce: [wibem6z9a121] . (.Handle Software - Regshot 2.0 unicode for Windows XP 32 bit/6.) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za8121.exe
O4 - HKCU\..\RunOnce: [wibem6a1] . (.Handle Software - Regshot 2.0 unicode for Windows XP 32 bit/6.) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibe3aaaaq.exe
O4 - HKCU\..\RunOnce: [wibem6za12] . (.Handle Software - Regshot 2.0 unicode for Windows XP 32 bit/6.) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za12.exe
O4 - HKCU\..\RunOnce: [wibem6za121] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za121.exe
O4 - HKCU\..\RunOnce: [wibem613z9a121] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibe3a81211.exe
O4 - HKCU\..\RunOnce: [w1m1z1m6a1] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1870912372\wibemz1a1q.exe
O4 - HKCU\..\RunOnce: [w1m331z1aam6a1a] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709312372\wibemaa33z1a1qa.exe
O4 - HKCU\..\RunOnce: [w1m1z1aam6a1a] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1870912372\wibemaaz1a1qa.exe
O4 - HKCU\..\RunOnce: [Kdj4SdaS01] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18161771\KdjSaS4d01.exe
O4 - HKCU\..\RunOnce: [Kdj4SdfdaS01] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-183161771\KdjSadfS4d01.exe
O4 - HKLM\..\policies\Explorer\Run: [1157818018] . (...) -- C:\Documents and Settings\All Users\mswoeicnx.exe
O4 - HKLM\..\policies\Explorer\Run: [1073147374] . (...) -- C:\Documents and Settings\All Users\mssgzdrl.exe
O4 - HKLM\..\policies\Explorer\Run: [698768825] . (...) -- C:\Documents and Settings\All Users\msyknfoj.exe
O4 - HKLM\..\policies\Explorer\Run: [1779389244] . (.maymun - hora girls.) -- C:\Documents and Settings\All Users\mscjlqrtg.exe
O4 - HKLM\..\policies\Explorer\Run: [374321595] . (...) -- C:\Documents and Settings\All Users\mscslcz.exe
O4 - HKLM\..\policies\Explorer\Run: [304304468] . (.maymun - hora girls.) -- C:\Documents and Settings\All Users\msmzireh.exe
O4 - HKLM\..\policies\Explorer\Run: [2101253962] . (.maymun - hora girls.) -- C:\Documents and Settings\All Users\msdnm.exe
O4 - HKLM\..\policies\Explorer\Run: [608284566] . (.maymun - hora girls.) -- C:\Documents and Settings\All Users\msrzwjrot.exe
O4 - HKLM\..\policies\Explorer\Run: [1063572649] . (.Ghisler Software GmbH - Total Commander Administrator Tool.) -- C:\Documents and Settings\All Users\mscqlx.exe =>.Ghisler Software GmbH
O4 - HKLM\..\policies\Explorer\Run: [1815424720] . (.Ghisler Software GmbH - Total Commander Administrator Tool.) -- C:\Documents and Settings\All Users\mselrvu.exe =>.Ghisler Software GmbH
O4 - HKLM\..\policies\Explorer\Run: [844423773] . (...) -- C:\Documents and Settings\All Users\msvubjqx.exe
O4 - HKLM\..\policies\Explorer\Run: [337494804] . (...) -- C:\Documents and Settings\All Users\msmpxfnw.exe
O4 - HKLM\..\policies\Explorer\Run: [689473025] . (...) -- C:\Documents and Settings\All Users\msbiffv.exe
O4 - HKLM\..\policies\Explorer\Run: [505003355] . (...) -- C:\Documents and Settings\All Users\msichrb.exe
O4 - HKLM\..\policies\Explorer\Run: [502159806] . (...) -- C:\Documents and Settings\All Users\msxkqobi.exe
O4 - HKLM\..\policies\Explorer\Run: [2006882716] . (...) -- C:\Documents and Settings\All Users\msiumbypi.exe
O4 - HKLM\..\policies\Explorer\Run: [472312406] . (...) -- C:\Documents and Settings\All Users\msyjzyf.exe
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [USB Safely Remove] C:\Program Files\USB Safely Remove\USBSafelyRemove.exe (.not file.)
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [wibem613z9a121] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibe3a81211.exe
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [wibem6za121] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za121.exe
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [wibem6za] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za.exe
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [wibem6z9a121] . (.Handle Software - Regshot 2.0 unicode for Windows XP 32 bit/6.) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za8121.exe
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [wibem63z9a121] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibe3a8121.exe
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [wibem6za1] . (.Handle Software - Regshot 2.0 unicode for Windows XP 32 bit/6.) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za1.exe
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [w1ibem6a1] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibe31aaaaq.exe
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [wibem6a1] . (.Handle Software - Regshot 2.0 unicode for Windows XP 32 bit/6.) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibe3aaaaq.exe
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [wibem6za12] . (.Handle Software - Regshot 2.0 unicode for Windows XP 32 bit/6.) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za12.exe
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [w6fnaa71ea] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-186112511\we1ffan1a8ra.exe
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [w1mz1m6a1] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-187092372\wibemz1aq.exe
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [w1m1z1m6a1] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1870912372\wibemz1a1q.exe
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [w1m1z1am6a1] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1870912372\wibemaz1a1q.exe
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [w1m1z1aam6a1a] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1870912372\wibemaaz1a1qa.exe
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [w1m331z1aam6a1a] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709312372\wibemaa33z1a1qa.exe
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [Kdj4SdaS01] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18161771\KdjSaS4d01.exe
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\Run: [Kdj4SdfdaS01] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-183161771\KdjSadfS4d01.exe
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\RunOnce: [w1m1z1am6a1] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1870912372\wibemaz1a1q.exe
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\RunOnce: [wibem63z9a121] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibe3a8121.exe
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\RunOnce: [w1mz1m6a1] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-187092372\wibemz1aq.exe
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\RunOnce: [wibem6za] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za.exe
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\RunOnce: [w1ibem6a1] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibe31aaaaq.exe
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\RunOnce: [wibem6za1] . (.Handle Software - Regshot 2.0 unicode for Windows XP 32 bit/6.) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za1.exe
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\RunOnce: [w6fnaa71ea] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-186112511\we1ffan1a8ra.exe
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\RunOnce: [wibem6z9a121] . (.Handle Software - Regshot 2.0 unicode for Windows XP 32 bit/6.) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za8121.exe
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\RunOnce: [wibem6a1] . (.Handle Software - Regshot 2.0 unicode for Windows XP 32 bit/6.) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibe3aaaaq.exe
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\RunOnce: [wibem6za12] . (.Handle Software - Regshot 2.0 unicode for Windows XP 32 bit/6.) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za12.exe
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\RunOnce: [wibem6za121] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibem6za121.exe
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\RunOnce: [wibem613z9a121] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709272\wibe3a81211.exe
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\RunOnce: [w1m1z1m6a1] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1870912372\wibemz1a1q.exe
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\RunOnce: [w1m331z1aam6a1a] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18709312372\wibemaa33z1a1qa.exe
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\RunOnce: [w1m1z1aam6a1a] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1870912372\wibemaaz1a1qa.exe
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\RunOnce: [Kdj4SdaS01] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18161771\KdjSaS4d01.exe
O4 - HKUS\S-1-5-21-515967899-308236825-1606980848-1003\..\RunOnce: [Kdj4SdfdaS01] . (...) -- C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-183161771\KdjSadfS4d01.exe

---\\ Raccourcis Global Startup (35) - 8s
O4 - GS\Desktop [Administrateur]: QQPlayer.lnk . (.Tencent Inc - QQ Player.) C:\Program Files\Tencent\QQPlayer\QQPlayer.exe =>.Superfluous.Tencent
O4 - GS\Desktop [Administrateur]: Microsoft Word 2010.lnk . (...) C:\WINDOWS\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe =>.Microsoft Corporation®
O4 - GS\Desktop [Administrateur]: Microsoft Excel 2010.lnk . (...) C:\WINDOWS\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe =>.Microsoft Corporation®
O4 - GS\Desktop [Administrateur]: Atlantis Quest.lnk . (...) C:\Program Files\GameTop.com\Atlantis Quest\Atlantis.exe
O4 - GS\Desktop [Administrateur]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\dfp\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Administrateur]: QQPlayer.lnk . (.Tencent Inc - QQ Player.) C:\Program Files\Tencent\QQPlayer\QQPlayer.exe =>.Superfluous.Tencent
O4 - GS\Quicklaunch [Administrateur]: Baidu Spark Browser.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files\baidu\Spark\Spark.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
O4 - GS\Desktop [dfp]: QQPlayer.lnk . (.Tencent Inc - QQ Player.) C:\Program Files\Tencent\QQPlayer\QQPlayer.exe =>.Superfluous.Tencent
O4 - GS\Desktop [dfp]: Microsoft Word 2010.lnk . (...) C:\WINDOWS\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe =>.Microsoft Corporation®
O4 - GS\Desktop [dfp]: Microsoft Excel 2010.lnk . (...) C:\WINDOWS\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe =>.Microsoft Corporation®
O4 - GS\Desktop [dfp]: Atlantis Quest.lnk . (...) C:\Program Files\GameTop.com\Atlantis Quest\Atlantis.exe
O4 - GS\Desktop [dfp]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\dfp\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [dfp]: QQPlayer.lnk . (.Tencent Inc - QQ Player.) C:\Program Files\Tencent\QQPlayer\QQPlayer.exe =>.Superfluous.Tencent
O4 - GS\Quicklaunch [dfp]: Baidu Spark Browser.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files\baidu\Spark\Spark.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
O4 - GS\Desktop [HelpAssistant]: QQPlayer.lnk . (.Tencent Inc - QQ Player.) C:\Program Files\Tencent\QQPlayer\QQPlayer.exe =>.Superfluous.Tencent
O4 - GS\Desktop [HelpAssistant]: Microsoft Word 2010.lnk . (...) C:\WINDOWS\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe =>.Microsoft Corporation®
O4 - GS\Desktop [HelpAssistant]: Microsoft Excel 2010.lnk . (...) C:\WINDOWS\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe =>.Microsoft Corporation®
O4 - GS\Desktop [HelpAssistant]: Atlantis Quest.lnk . (...) C:\Program Files\GameTop.com\Atlantis Quest\Atlantis.exe
O4 - GS\Desktop [HelpAssistant]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\dfp\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [HelpAssistant]: QQPlayer.lnk . (.Tencent Inc - QQ Player.) C:\Program Files\Tencent\QQPlayer\QQPlayer.exe =>.Superfluous.Tencent
O4 - GS\Quicklaunch [HelpAssistant]: Baidu Spark Browser.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files\baidu\Spark\Spark.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
O4 - GS\Desktop [SUPPORT_388945a0]: QQPlayer.lnk . (.Tencent Inc - QQ Player.) C:\Program Files\Tencent\QQPlayer\QQPlayer.exe =>.Superfluous.Tencent
O4 - GS\Desktop [SUPPORT_388945a0]: Microsoft Word 2010.lnk . (...) C:\WINDOWS\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe =>.Microsoft Corporation®
O4 - GS\Desktop [SUPPORT_388945a0]: Microsoft Excel 2010.lnk . (...) C:\WINDOWS\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe =>.Microsoft Corporation®
O4 - GS\Desktop [SUPPORT_388945a0]: Atlantis Quest.lnk . (...) C:\Program Files\GameTop.com\Atlantis Quest\Atlantis.exe
O4 - GS\Desktop [SUPPORT_388945a0]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\dfp\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [SUPPORT_388945a0]: QQPlayer.lnk . (.Tencent Inc - QQ Player.) C:\Program Files\Tencent\QQPlayer\QQPlayer.exe =>.Superfluous.Tencent
O4 - GS\Quicklaunch [SUPPORT_388945a0]: Baidu Spark Browser.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files\baidu\Spark\Spark.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
O4 - GS\CommonDesktop [Public]: Adobe Reader 9.lnk . (.Adobe Systems Incorporated - Adobe Reader 9.0.) C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe =>.Adobe Systems, Incorporated®
O4 - GS\CommonDesktop [Public]: Acrobat.com.lnk . (...) C:\Program Files\Adobe\Acrobat.com\Acrobat.com.exe
O4 - GS\CommonDesktop [Public]: Canon LASER SHOT LBP-1120.LNK . (...) C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Canon LASER SHOT LBP-1120
O4 - GS\CommonDesktop [Public]: Facebook.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files\baidu\Spark\Spark.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
O4 - GS\CommonDesktop [Public]: Google.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files\baidu\Spark\Spark.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
O4 - GS\CommonDesktop [Public]: Baidu Browser.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files\baidu\Spark\Spark.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
O4 - GS\CommonDesktop [Public]: SMADΔV.lnk . (.Smadsoft - Smadav USB Antivirus & Additional Protectio.) C:\Program Files\SMADAV\SMΔRTP.exe

---\\ Modification Domaine/Adresses DNS (5) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpDomain = domain.name
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EE525C89-82C7-4FDC-888B-AE077F8A7BD1}: NameServer = 8.8.8.8,8.8.4.4 =>.Google Public DNS
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EE525C89-82C7-4FDC-888B-AE077F8A7BD1}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EE525C89-82C7-4FDC-888B-AE077F8A7BD1}: DhcpDomain = domain.name

---\\ Protocole additionnel (30) - 2s
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll =>.Microsoft Corporation
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll =>.Microsoft Corporation
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- C:\WINDOWS\system32\inetcomm.dll =>.Microsoft Corporation
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll =>.Microsoft Corporation®
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll =>.Microsoft Corporation
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll =>.Microsoft Corporation
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll =>.Microsoft Corporation
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Filter: lzdhtml - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation
O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll =>.Microsoft Corporation
O18 - Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE14\MSOXMLMF.DLL =>.Microsoft Corporation®

---\\ Logiciels installés (19) - 43s
O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM] -- {77DCDCE3-2DED-62F3-8154-05E745472D07} =>.Adobe Systems Incorporated
O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM] -- com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {00203668-8170-44A0-BE44-B632FA4D780F} =>.Adobe Systems Inc.
O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe Flash Player 20 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe Reader 9 - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1033-7B44-A90000000001} =>.Adobe Systems Incorporated
O42 - Logiciel: Atlantis Quest - (.Media Contact LLC.) [HKLM] -- Atlantis Quest_is1
O42 - Logiciel: Baidu Browser - (.Baidu Inc..) [HKLM] -- Spark =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
O42 - Logiciel: Canon LASER SHOT LBP-1120 - (...) [HKLM] -- Canon LASER SHOT LBP-1120
O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (...) [HKLM] -- HDMI =>.Intel Corporation®
O42 - Logiciel: Internet Explorer - (.Microsoft Corporation.) [HKLM] -- {4E414048-A9DD-4F60-AA1D-018E716C88C9} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Software Update for Web Folders (French) 14 - (.Microsoft Corporation.) [HKLM] -- {90140000-0010-040C-0000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: QQ??3.7 - (.????(??)????.) [HKCU] -- QQPlayer
O42 - Logiciel: REALTEK GbE & FE Ethernet PCI-E NIC Driver - (.Realtek.) [HKLM] -- {C9BED750-1211-4480-B1A5-718A3BE15525} =>.Realtek Semiconductor Corp®
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} =>.Realtek Semiconductor Corp.
O42 - Logiciel: SMADAV version 10.5.1 - (.SmadSoft.) [HKLM] -- {8B9FA5FF-3E61-4658-B0DA-E6DDB46D6BAD}_is1
O42 - Logiciel: WebFldrs XP - (.Microsoft Corporation.) [HKLM] -- {350C940c-3D7C-4EE8-BAA9-00BCB3D54227} =>.Microsoft Corporation
O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8 =>.Microsoft Corporation®
O42 - Logiciel: WinRAR 5.20 beta 1 (32-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver =>.win.rar GmbH®

---\\ HKCU & HKLM Software Keys (55) - 43s
HKLM\SOFTWARE\Adobe
HKLM\SOFTWARE\Baidu
HKLM\SOFTWARE\Boonty
HKLM\SOFTWARE\C07ft5Y
HKLM\SOFTWARE\Canon
HKLM\SOFTWARE\CloudOPTInfo
HKLM\SOFTWARE\COMODO
HKLM\SOFTWARE\ComodoGroup
HKLM\SOFTWARE\Creative Tech
HKLM\SOFTWARE\CyberLink
HKLM\SOFTWARE\Gemplus
HKLM\SOFTWARE\GiliSoft
HKLM\SOFTWARE\GSLLC
HKLM\SOFTWARE\HaaliMkx
HKLM\SOFTWARE\Intel
HKLM\SOFTWARE\Macromedia
HKLM\SOFTWARE\MozillaPlugins
HKLM\SOFTWARE\MSI
HKLM\SOFTWARE\ODBC
HKLM\SOFTWARE\Program Groups
HKLM\SOFTWARE\Realtek
HKLM\SOFTWARE\Realtek Semiconductor Corp.
HKLM\SOFTWARE\RegisteredApplications
HKLM\SOFTWARE\Rocket Division Software
HKLM\SOFTWARE\RTLSetup
HKLM\SOFTWARE\Schlumberger
HKLM\SOFTWARE\Secure
HKLM\SOFTWARE\Tencent =>.Superfluous.Tencent
HKLM\SOFTWARE\Windows 3.1 Migration Status
HKLM\SOFTWARE\WinRAR
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\Baidu
HKCU\SOFTWARE\Boonty
HKCU\SOFTWARE\Canon
HKCU\SOFTWARE\ComodoGroup
HKCU\SOFTWARE\CoreAAC
HKCU\SOFTWARE\CyberLink
HKCU\SOFTWARE\Gabest
HKCU\SOFTWARE\Haali
HKCU\SOFTWARE\HelloMovie
HKCU\SOFTWARE\Hetman Software
HKCU\SOFTWARE\HookNetwork
HKCU\SOFTWARE\Intel
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\Realtek
HKCU\SOFTWARE\RegisteredApplications
HKCU\SOFTWARE\SMADΔV
HKCU\SOFTWARE\Tencent =>.Superfluous.Tencent
HKCU\SOFTWARE\Wallpapers Bot
HKCU\SOFTWARE\WinRAR
HKCU\SOFTWARE\WinRAR SFX
HKCU\SOFTWARE\ZebHelpProcess Helper

---\\ Contenu des dossiers Programmes (91) - 48s
O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Fichiers communs =>.Adobe Systems Incorporated®
O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Windows NT
O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\MSN
O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\MSN Gaming Zone
O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Messenger
O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Windows Media Player
O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Online Services
O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Internet Explorer
O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Outlook Express
O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\NetMeeting
O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Movie Maker
O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Services en ligne
O43 - CFD: 18/01/2016 - [0] HD -- C:\Program Files\WindowsUpdate
O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\microsoft frontpage
O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\xerox
O43 - CFD: 18/01/2016 - [0] HD -- C:\Program Files\Uninstall Information
O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Intel
O43 - CFD: 18/01/2016 - [] HD -- C:\Program Files\InstallShield Installation Information =>.Macrovision Corporation®
O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Realtek =>.Realtek Semiconductor Corp®
O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\baidu =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\WinRAR =>.win.rar GmbH®
O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Tencent =>.Superfluous.Tencent
O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Adobe
O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Microsoft Office =>.Microsoft Corporation®
O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Microsoft Analysis Services
O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Microsoft Sync Framework
O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\MSBuild
O43 - CFD: 20/01/2016 - [] D -- C:\Program Files\USB Safely Remove {077EBA83916E963439554F9098F40B15}
O43 - CFD: 24/01/2016 - [] D -- C:\Program Files\Boonty
O43 - CFD: 24/01/2016 - [] D -- C:\Program Files\BoontyGames {4A45221856AA4882682A7CBA2E2BE051}
O43 - CFD: 26/01/2016 - [] D -- C:\Program Files\GameTop.com
O43 - CFD: 27/01/2016 - [] D -- C:\Program Files\Microsoft.NET
O43 - CFD: 08/02/2016 - [] D -- C:\Program Files\Win32_ComputerSystemProduct-1454915344---
O43 - CFD: 08/02/2016 - [] D -- C:\Program Files\REACHit
O43 - CFD: 10/02/2016 - [] D -- C:\Program Files\Minaret Computers L.L.C
O43 - CFD: 11/02/2016 - [] D -- C:\Program Files\NSIS
O43 - CFD: 11/02/2016 - [0] D -- C:\Program Files\ComPlus Applications
O43 - CFD: 11/02/2016 - [] D -- C:\Program Files\GiliSoft
O43 - CFD: 11/02/2016 - [] D -- C:\Program Files\Comodo
O43 - CFD: 14/02/2016 - [] D -- C:\Program Files\SMADAV
O43 - CFD: 18/01/2016 - [] RD -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
O43 - CFD: 18/01/2016 - [] RD -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires
O43 - CFD: 18/01/2016 - [] RD -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Outils d'administration
O43 - CFD: 18/01/2016 - [] RD -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Jeux
O43 - CFD: 18/01/2016 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\WinRAR
O43 - CFD: 18/01/2016 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Microsoft Office
O43 - CFD: 18/01/2016 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\SharePoint
O43 - CFD: 18/01/2016 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Canon LASER SHOT LBP-1120
O43 - CFD: 21/01/2016 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Baidu Browser
O43 - CFD: 26/01/2016 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\GameTop.com
O43 - CFD: 14/02/2016 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\SMADAV Antivirus
O43 - CFD: 18/01/2016 - [] SD -- C:\Documents and Settings\All Users\Application Data\Microsoft
O43 - CFD: 18/01/2016 - [] D -- C:\Documents and Settings\All Users\Application Data\Baidu
O43 - CFD: 18/01/2016 - [] D -- C:\Documents and Settings\All Users\Application Data\Adobe
O43 - CFD: 18/01/2016 - [] D -- C:\Documents and Settings\All Users\Application Data\Microsoft Help
O43 - CFD: 25/01/2016 - [] D -- C:\Documents and Settings\All Users\Application Data\BOONTY
O43 - CFD: 03/02/2016 - [] D -- C:\Documents and Settings\All Users\Application Data\Comodo
O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Fichiers communs\Microsoft Shared
O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Fichiers communs\SpeechEngines
O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Fichiers communs\ODBC
O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Fichiers communs\System
O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Fichiers communs\MSSoap
O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Fichiers communs\Services
O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Fichiers communs\InstallShield
O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Fichiers communs\Adobe
O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Fichiers communs\Adobe AIR
O43 - CFD: 18/01/2016 - [] D -- C:\Program Files\Fichiers communs\DESIGNER
O43 - CFD: 24/01/2016 - [] D -- C:\Program Files\Fichiers communs\BOONTY Shared
O43 - CFD: 18/01/2016 - [] SD -- C:\Documents and Settings\dfp\Application Data\Microsoft
O43 - CFD: 18/01/2016 - [] D -- C:\Documents and Settings\dfp\Application Data\Identities
O43 - CFD: 18/01/2016 - [] D -- C:\Documents and Settings\dfp\Application Data\Baidu
O43 - CFD: 18/01/2016 - [] D -- C:\Documents and Settings\dfp\Application Data\Tencent =>.Superfluous.Tencent
O43 - CFD: 18/01/2016 - [] D -- C:\Documents and Settings\dfp\Application Data\Adobe
O43 - CFD: 18/01/2016 - [] D -- C:\Documents and Settings\dfp\Application Data\Macromedia
O43 - CFD: 19/01/2016 - [] D -- C:\Documents and Settings\dfp\Application Data\WinRAR
O43 - CFD: 20/01/2016 - [] D -- C:\Documents and Settings\dfp\Application Data\USBSRService
O43 - CFD: 20/01/2016 - [] D -- C:\Documents and Settings\dfp\Application Data\USBSafelyRemove
O43 - CFD: 10/02/2016 - [] D -- C:\Documents and Settings\dfp\Application Data\UniformSoft.com
O43 - CFD: 10/02/2016 - [] D -- C:\Documents and Settings\dfp\Application Data\Opera Software
O43 - CFD: 14/02/2016 - [0] D -- C:\Documents and Settings\dfp\Application Data\Smadav
O43 - CFD: 14/02/2016 - [] D -- C:\Documents and Settings\dfp\Application Data\ZHP
O43 - CFD: 18/01/2016 - [] D -- C:\Documents and Settings\dfp\Local Settings\Application Data\Microsoft
O43 - CFD: 18/01/2016 - [0] D -- C:\Documents and Settings\dfp\Local Settings\Application Data\Microsoft Help
O43 - CFD: 21/01/2016 - [] D -- C:\Documents and Settings\dfp\Local Settings\Application Data\Adobe
O43 - CFD: 04/02/2016 - [] D -- C:\Documents and Settings\dfp\Local Settings\Application Data\JustAgain.com
O43 - CFD: 08/02/2016 - [] D -- C:\Documents and Settings\dfp\Local Settings\Application Data\00000000-1454919197-0000-0000-002421E3819B
O43 - CFD: 10/02/2016 - [] D -- C:\Documents and Settings\dfp\Local Settings\Application Data\Opera Software
O43 - CFD: 18/01/2016 - [] RD -- C:\Documents and Settings\dfp\Menu Démarrer\Programmes\Accessoires
O43 - CFD: 18/01/2016 - [] RD -- C:\Documents and Settings\dfp\Menu Démarrer\Programmes\Démarrage
O43 - CFD: 18/01/2016 - [] D -- C:\Documents and Settings\dfp\Menu Démarrer\Programmes\WinRAR
O43 - CFD: 18/01/2016 - [] D -- C:\Documents and Settings\dfp\Menu Démarrer\Programmes\Tencent =>.Superfluous.Tencent

---\\ ShellIconOverlayIdentifiers (SIOI) (6) - 0s
O106 - SIOI: Offline Files Menu [Fichiers hors connexion] - {750fdf0e-2a26-11d1-a3ea-080036587f03}. (.Microsoft Corporation - IU de cache côté client.) -- C:\WINDOWS\system32\cscui.dll =>.Microsoft Corporation
O106 - SIOI: Groove Explorer Icon Overlay 1 (GFS Unread Stub) [Groove Explorer Icon Overlay 1 (GFS Unread Stub)] - {99FD978C-D287-4F50-827F-B2C658EDA8E7}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation®
O106 - SIOI: Groove Explorer Icon Overlay 2 (GFS Stub) [Groove Explorer Icon Overlay 2 (GFS Stub)] - {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation®
O106 - SIOI: Groove Explorer Icon Overlay 2.5 (GFS Unread Folder) [Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)] - {920E6DB1-9907-4370-B3A0-BAFC03D81399}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation®
O106 - SIOI: Groove Explorer Icon Overlay 3 (GFS Folder) [Groove Explorer Icon Overlay 3 (GFS Folder)] - {16F3DD56-1AF5-4347-846D-7C10C4192619}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation®
O106 - SIOI: Groove Explorer Icon Overlay 4 (GFS Unread Mark) [Groove Explorer Icon Overlay 4 (GFS Unread Mark)] - {2916C86E-86A6-43FE-8112-43ABE6BF8DCC}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation®

---\\ Liste des pilotes du système (34) - 8s
O58 - SDL:2008/04/14 12:00:00 A . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\System32\drivers\dmload.sys [5888] =>.Microsoft Corp., Veritas Software.
O58 - SDL:2008/04/14 12:00:00 A . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Lib.) -- C:\WINDOWS\System32\drivers\ptilink.sys [17792] =>.Parallel Technologies, Inc.
O58 - SDL:2008/04/14 12:00:00 A . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\System32\drivers\cinemst2.sys [262528] =>.RAVISENT Technologies Inc.
O58 - SDL:2008/04/14 12:00:00 A . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\System32\drivers\cpqdap01.sys [11776] =>.Compaq Computer Corporation
O58 - SDL:2008/04/14 12:00:00 A . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\System32\drivers\nikedrv.sys [12032] =>.S3/Diamond Multimedia Systems
O58 - SDL:2008/04/14 12:00:00 A . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\System32\drivers\rio8drv.sys [12032] =>.S3/Diamond Multimedia Systems
O58 - SDL:2008/04/14 12:00:00 A . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\System32\drivers\riodrv.sys [12032] =>.S3/Diamond Multimedia Systems
O58 - SDL:2008/04/14 12:00:00 A . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\System32\drivers\tsbvcap.sys [21376] =>.Toshiba Corporation
O58 - SDL:2008/04/14 12:00:00 A . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\System32\drivers\vdmindvd.sys [58112] =>.RAVISENT Technologies Inc.
O58 - SDL:2007/12/19 04:32:12 RA . (.Intel Corporation - Intel Graphics Miniport Driver.) -- C:\WINDOWS\System32\drivers\igxpmp32.sys [5854688] =>.Intel Corporation
O58 - SDL:2008/04/14 12:00:00 A . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\System32\drivers\dmio.sys [154496] =>.Microsoft Corp., Veritas Software
O58 - SDL:2008/04/14 12:00:00 A . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) -- C:\WINDOWS\System32\drivers\dmboot.sys [800256] =>.Microsoft Corp., Veritas Software
O58 - SDL:2008/04/14 12:00:00 A . (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\System32\drivers\hdaudbus.sys [144384]
O58 - SDL:2016/02/03 08:26:40 A . (.Gili Soft INC. - USB Stick Encryption Driver.) -- C:\WINDOWS\System32\drivers\usedisk.sys [17408]
O58 - SDL:2008/04/14 12:00:00 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\WINDOWS\System32\drivers\secdrv.sys [20480] =>.Macrovision Corporation, Macrovision Europe Limited,
O58 - SDL:2010/07/06 04:13:10 RA . (.Realtek Semiconductor Corporation - Realtek 10/100/1000 NDIS 5.1 Driver.) -- C:\WINDOWS\System32\drivers\Rtenicxp.sys [234392] =>.Realtek Semiconductor Corp®
O58 - SDL:2010/07/28 11:27:36 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\WINDOWS\System32\drivers\RtkHDAud.sys [6108776] =>.Realtek Semiconductor Corp®
O58 - SDL:2009/11/18 00:17:00 A . (.Creative Technology Ltd. - Creative WDM Audio Driver (32-bit).) -- C:\WINDOWS\System32\drivers\Monfilt.sys [1395800] =>.Creative Labs Inc®
O58 - SDL:2009/11/18 00:16:00 A . (.Creative - Creative WDM 3D Audio Driver.) -- C:\WINDOWS\System32\drivers\Ambfilt.sys [1691480] =>.Creative Labs Inc®
O58 - SDL:2008/04/14 12:00:00 A . (...) -- C:\WINDOWS\System32\ansi.sys [9037]
O58 - SDL:2008/04/14 12:00:00 A . (...) -- C:\WINDOWS\System32\country.sys [27097]
O58 - SDL:2008/04/14 12:00:00 A . (...) -- C:\WINDOWS\System32\himem.sys [4912]
O58 - SDL:2008/04/14 12:00:00 A . (...) -- C:\WINDOWS\System32\key01.sys [42809]
O58 - SDL:2008/04/14 12:00:00 A . (...) -- C:\WINDOWS\System32\ntdos.sys [27916]
O58 - SDL:2008/04/14 12:00:00 A . (...) -- C:\WINDOWS\System32\ntdos411.sys [29370]
O58 - SDL:2008/04/14 12:00:00 A . (...) -- C:\WINDOWS\System32\ntdos412.sys [29274]
O58 - SDL:2008/04/14 12:00:00 A . (...) -- C:\WINDOWS\System32\ntdos404.sys [29146]
O58 - SDL:2008/04/14 12:00:00 A . (...) -- C:\WINDOWS\System32\ntdos804.sys [29146]
O58 - SDL:2008/04/14 12:00:00 A . (...) -- C:\WINDOWS\System32\keyboard.sys [42537]
O58 - SDL:2008/04/14 12:00:00 A . (...) -- C:\WINDOWS\System32\ntio.sys [34000]
O58 - SDL:2008/04/14 12:00:00 A . (...) -- C:\WINDOWS\System32\ntio404.sys [34560]
O58 - SDL:2008/04/14 12:00:00 A . (...) -- C:\WINDOWS\System32\ntio411.sys [35648]
O58 - SDL:2008/04/14 12:00:00 A . (...) -- C:\WINDOWS\System32\ntio412.sys [35424]
O58 - SDL:2008/04/14 12:00:00 A . (...) -- C:\WINDOWS\System32\ntio804.sys [34560]

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (4) - 3s
O61 - LFC: 2016/02/10 09:57:20 A . (..) -- C:\Documents and Settings\dfp\Application Data\Adobe\Acrobat\9.0\UserCache.bin [62747]
O61 - LFC: 2016/02/11 09:14:02 A . (.http://nsis.sf.net/License.) -- C:\Documents and Settings\dfp\Mes documents\nsis-3.0b2-setup.exe [1642658]
O61 - LFC: 2016/02/14 08:12:36 A . (.SmadSoft.) -- C:\Documents and Settings\dfp\Mes documents\smadav105.exe [1392851]
O61 - LFC: 2016/02/10 10:18:16 A . (.Uniform Software.) -- C:\Documents and Settings\dfp\Mes documents\Downloads\excel_invoice_manager_setup.exe [3387392] {3A8FB823D506289924471C31552D1792}

---\\ Associations Shell Spawning (10) - 1s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\Spark.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\wscript.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\Spark.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®

---\\ Menu de démarrage Internet (9) - 0s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\Spark.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O68 - StartMenuInternet: <>[HKLM\..\Shell\open\Command] (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\Spark.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\Spark.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\Spark.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Copyright (C) 2011 - spark.) -- C:\Program Files\baidu\Spark\Spark.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe =>.Microsoft Corporation

---\\ Recherche d'infection sur les navigateurs (6) - 1s
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - () - http://search.live.com/
O69 - SBI: SearchScopes [HKCU] {317A5901-EAD0-4E35-B314-901DDAD6390F} [DefaultScope] - (Live Search) - http://search.live.com/
O69 - SBI: SearchScopes [HKCU] {6F7460F5-8E67-49EB-A8A4-27FA9F8803D3} - (Bing) - http://www.bing.com/
O69 - SBI: SearchScopes [HKCU] {8EEAC88A-079B-4b2c-80C1-7836F79EB40A} - (Yahoo! Search) - http://fr.search.yahoo.com/ =>.Yahoo Search
O69 - SBI: SearchScopes [HKCU] {BB67E4CE-EF0D-41F1-8AE5-9C81853A1405} - (01net) - http://www.01net.com/
O69 - SBI: SearchScopes [HKLM] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (@ieframe.dll,-12512) - http://search.live.com/

---\\ Enumère les services démarrés par Svchost (40) - 1s
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\WINDOWS\system32\appmgmts.dll [176640] =>.Microsoft Corporation
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS\system32\audiosrv.dll [42496] =>.Microsoft Corporation
O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\system32\browser.dll [78336] =>.Microsoft Corporation
O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS\system32\cryptsvc.dll [62464] =>.Microsoft Corporation
O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - DLL Service gestionnaire de disque logique.) -- C:\WINDOWS\system32\dmserver.dll [24576] =>.Microsoft Corp.
O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - Service client DHCP.) -- C:\WINDOWS\system32\dhcpcsvc.dll [127488] =>.Microsoft Corporation
O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS\system32\ersvc.dll [23040] =>.Microsoft Corporation
O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - .) -- C:\WINDOWS\system32\es.dll [253952] =>.Microsoft Corporation
O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680] =>.Microsoft Corporation
O83 - Search Svchost Services: HidServ (HidServ) . (...) -- C:\WINDOWS\System32\hidserv.dll [0]
O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\system32\srvsvc.dll [99840] =>.Microsoft Corporation
O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS\system32\wkssvc.dll [132096] =>.Microsoft Corporation
O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS\system32\msgsvc.dll [33792] =>.Microsoft Corporation
O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Gestionnaire de connexions réseau.) -- C:\WINDOWS\system32\netman.dll [198144] =>.Microsoft Corporation
O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Micro.) -- C:\WINDOWS\system32\mswsock.dll [247808] =>.Microsoft Corporation
O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Gestionnaire de stockage amovible.) -- C:\WINDOWS\system32\ntmssvc.dll [438272] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\system32\rasauto.dll [88576] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\system32\rasmans.dll [186368] =>.Microsoft Corporation
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS\system32\mprdim.dll [53248] =>.Microsoft Corporation
O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll [194560] =>.Microsoft Corporation
O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secon.) -- C:\WINDOWS\system32\seclogon.dll [18944] =>.Microsoft Corporation
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll [39424] =>.Microsoft Corporation
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à.) -- C:\WINDOWS\system32\ipnathlp.dll [332800] =>.Microsoft Corporation
O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - Service de restauration du système.) -- C:\WINDOWS\system32\srsvc.dll [171520] =>.Microsoft Corporation
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\WINDOWS\system32\tapisrv.dll [249856] =>.Microsoft Corporation
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680] =>.Microsoft Corporation
O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll [90112] =>.Microsoft Corporation
O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Service de temps Windows.) -- C:\WINDOWS\system32\w32time.dll [178176] =>.Microsoft Corporation
O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Service configuration automatique sans fil.) -- C:\WINDOWS\system32\wzcsvc.dll [483840] =>.Microsoft Corporation
O83 - Search Svchost Services: Wmi (Wmi) . (.Microsoft Corporation - API avancées Windows 32.) -- C:\WINDOWS\system32\advapi32.dll [685568] =>.Microsoft Corporation
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\wmisvc.dll [145408] =>.Microsoft Corporation
O83 - Search Svchost Services: wscsvc (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) -- C:\WINDOWS\system32\wscsvc.dll [80896] =>.Microsoft Corporation
O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS\system32\xmlprov.dll [129024] =>.Microsoft Corporation
O83 - Search Svchost Services: napagent (napagent) . (.Microsoft Corporation - Exécution du service Agent de quarantaine.) -- C:\WINDOWS\system32\qagentrt.dll [293376] =>.Microsoft Corporation
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\WINDOWS\system32\kmsvc.dll [61440] =>.Microsoft Corporation
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\WINDOWS\system32\qmgr.dll [409088] =>.Microsoft Corporation
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [6656] =>.Microsoft Corporation
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680] =>.Microsoft Corporation
O83 - Search Svchost Services: helpsvc (helpsvc) . (.Microsoft Corporation - Microsoft PCHealth Service Holder.) -- C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll [38400] =>.Microsoft Corporation
O83 - Search Svchost Services: WmdmPmSN (WmdmPmSN) . (.Microsoft Corporation - Fournisseur de services de périphérique mul.) -- C:\WINDOWS\system32\mspmsnsv.dll [52736] =>.Microsoft Corporation

---\\ Scan Additionnel (4) - 0s
HKLM\SOFTWARE\Tencent =>.Superfluous.Tencent
HKCU\SOFTWARE\Tencent =>.Superfluous.Tencent
C:\Documents and Settings\dfp\Application Data\Tencent =>.Superfluous.Tencent
C:\Documents and Settings\dfp\Menu Démarrer\Programmes\Tencent =>.Superfluous.Tencent

---\\ Récapitulatif des éléments trouvés sur votre station (1) - 0s
http://www.nicolascoolman.fr/?p=368 =>.Superfluous.Tencent

~ End of the scan, 27369 items in 00h08mn29s (591)(0)