Rapport de ZHPDiag v2013.4.25.153 par Nicolas Coolman, Update du 2013-04-25
Run by Sylvain at 2013-05-26 17:06:26
State : Version à jour.
WhiteList : Disable
High Elevated Privileges : OK
UAC : Not Found


---\\ Web Browser
MSIE: Internet Explorer v8.0.6001.18702
MFIE: Mozilla Firefox 20.0.1 (Defaut)

---\\ Windows Product Information
~ Langage: Français
Windows XP Home Edition Service Pack 3 (Build 2600)
Windows Automatic Updates : OK
Windows Genuine Advantage : OK

---\\ System Protection
avast! Premier v8.0.1483.0
Malwarebytes Anti-Malware version 1.75.0.1300

---\\ System Optimizer
CCleaner v3.24

---\\ Software Update
Adobe Flash Player 11 Plugin
Adobe Reader XI
Java 7 Update 9

---\\ System Information
~ Processor: x86 Family 15 Model 31 Stepping 0, AuthenticAMD
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 1023 MB (41% free)
System Restore: Activé (Enable)
System drive C: has 11 GB (18%) free of 62 GB

---\\ Logged in mode
~ Computer Name: PERSONNE-14E7CF
~ User Name: Sylvain
~ All Users Names: UpdatusUser, Sylvain, SUPPORT_388945a0, HelpAssistant, Administrateur, 
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Documents and Settings\Sylvain\Application Data\
~ %Desktop% : C:\Documents and Settings\Sylvain\Bureau\
~ %Favorites% : C:\Documents and Settings\Sylvain\Favoris\
~ %LocalAppData% : C:\Documents and Settings\Sylvain\Local Settings\Application Data\
~ %StartMenu% : C:\Documents and Settings\Sylvain\Menu Démarrer\
~ %Windir% : C:\WINDOWS\
~ %System% : C:\WINDOWS\system32\

---\\ DOS/Devices
A:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
C:\ Hard drive, Flash drive, Thumb drive (Free 11 Go of 62 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 20 Go of 62 Go)
E:\ Hard drive, Flash drive, Thumb drive (Free 49 Go of 62 Go)
F:\ CD-ROM drive (Not Inserted)
G:\ CD-ROM drive (Not Inserted)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime :  OK
~ Security Center:  Scanned in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.2008-04-13 - 18:34:04.) -- C:\WINDOWS\Explorer.exe [1037824]
[MD5.48309E1F5ED8E72783EEFBA04898BDA1] - (.Microsoft Corporation - Internet Extensions for Win32.) (.2013-03-01 - 20:55:11.) -- C:\WINDOWS\system32\wininet.dll [916480]
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.2008-04-13 - 18:34:30.) -- C:\WINDOWS\system32\Winlogon.exe [512000]
[MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.2011-08-17 - 08:49:54.) -- C:\WINDOWS\system32\Drivers\AFD.sys [138496]
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.2008-04-13 - 10:40:32.) -- C:\WINDOWS\system32\Drivers\atapi.sys [96512]
[MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.2008-04-13 - 11:14:22.) -- C:\WINDOWS\system32\Drivers\Cdfs.sys [63744]
[MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.2008-04-13 - 10:40:48.) -- C:\WINDOWS\system32\Drivers\Cdrom.sys [62976]
[MD5.31F923EB2170FC172C81ABDA0045D18C] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) (.2008-04-13 - 17:57:40.) -- C:\WINDOWS\system32\Drivers\Fips.sys [44672]
[MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.2008-04-13 - 08:36:06.) -- C:\WINDOWS\system32\Drivers\HDAudBus.sys [144384]
[MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - (.Microsoft Corporation - Pilote de port i8042.) (.2008-04-13 - 18:00:54.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [54144]
[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.2008-04-13 - 10:41:00.) -- C:\WINDOWS\system32\Drivers\Imapi.sys [42112]
[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.2008-04-13 - 10:57:16.) -- C:\WINDOWS\system32\Drivers\IpNat.sys [152832]
[MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.2008-04-13 - 11:19:44.) -- C:\WINDOWS\system32\Drivers\IPSec.sys [75264]
[MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.2011-07-15 - 08:29:31.) -- C:\WINDOWS\system32\Drivers\MRxSmb.sys [456320]
[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.2008-04-13 - 11:21:02.) -- C:\WINDOWS\system32\Drivers\netBT.sys [162816]
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.2008-04-13 - 11:15:54.) -- C:\WINDOWS\system32\Drivers\ntfs.sys [574976]
[MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - (.Microsoft Corporation - Pilote de port parallèle.) (.2008-04-13 - 18:09:42.) -- C:\WINDOWS\system32\Drivers\Parport.sys [80384]
[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.2008-04-13 - 11:19:44.) -- C:\WINDOWS\system32\Drivers\Rasl2tp.sys [51328]
[MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.2008-04-13 - 10:32:52.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [196224]
[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) (.2008-04-13 - 17:57:36.) -- C:\WINDOWS\system32\Drivers\redbook.sys [58752]
[MD5.46DE1126684369BACE4849E4FC8C43CA] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.2008-04-13 - 17:56:06.) -- C:\WINDOWS\system32\Drivers\volsnap.sys [53376]
~ Generic Processes:  Scanned in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 3/61
~ Mes musiques (My Musics) : 1/459
Mes Videos (My Videos) : 2/2   (Modified) 
~ Mes Favoris (My Favorites) : 1/30
~ Mes Documents (My Documents) : 1/664
~ Mon Bureau (My Desktop) : 1/4789
~ Menu demarrer (Programs) : 1/47
~ Hidden Files:  Scanned in 00mn 11s



---\\ Processus lancés
[MD5.DA387EDDBA421A7A8132E256343C2799] - (.AVAST Software - avast! firewall service.) -- C:\Program Files\AVAST Software\Avast\afwServ.exe   [136912] [PID.220]
[MD5.12FD7C1EADDDA10A67B1D6F905B3CC1E] - (.Sony Corporation - Content Transfer Walkman Detector.) -- C:\Program Files\Sony\Content Transfer\ContentTransferWMDetector.exe   [583016] [PID.1808]
[MD5.148C545849C1379A3D4448F5DE768E86] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe   [4767304] [PID.1916]
[MD5.20F6F19FE9E753F2780DC2FA083AD597] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe   [37664] [PID.1932]
[MD5.B6C6DF3D320D931038C9EE8B12E87D5D] - (.BitTorrent, Inc. - µTorrent.) -- C:\Program Files\uTorrent\uTorrent.exe   [639864] [PID.2044]
[MD5.E8592697D55B515379F781FAF199C73A] - (.Pelmorex Media Inc. - Pas de description.) -- C:\Documents and Settings\Sylvain\Local Settings\Application Data\MétéoMédia\WeatherEye.exe   [310920] [PID.204]
[MD5.F2060A34C8A75BC24A9222EB4F8C07BD] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe   [349472] [PID.360]
[MD5.B591E761161D1EF547D76EF236EAA6A5] - (.Oracle Corporation - Java(TM) Quick Starter Service.) -- C:\Program Files\Java\jre7\bin\jqs.exe   [161768] [PID.1064]
[MD5.F02A533F517EB38333CB12A9E8963773] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files\Google\Update\GoogleUpdate.exe   [136176] [PID.1180]
[MD5.2238B91AC1A12CC6CC4C4FED41258B2A] - (.Hewlett-Packard Company - LightScribe Service.) -- C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe   [73728] [PID.1652]
[MD5.A6A7AD767BF5141665F5C675F671B3E1] - (.Protexis Inc. - PsiService PsiService.) -- c:\Program Files\Fichiers communs\Protexis\License Service\PsiService_2.exe   [185632] [PID.1700]
[MD5.2D84428075CE90F1B8882D54960C7000] - (.Pas de propriétaire - RichVideo Module.) -- C:\Program Files\CyberLink\Shared Files\RichVideo.exe   [243056] [PID.2408]
[MD5.52E954C85AB297C7C14BC6F3EC1F0998] - (.Fengtao Software Inc. - DVD Region-Free Application.) -- C:\Program Files\DVD Region+CSS Free\DVDRegionFree.exe   [259072] [PID.168]
[MD5.41735B82DB57E4EBE9504EC400FD120E] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe   [45248] [PID.3812]
[MD5.B6A87D77CC1E839885EE875A77D89673] - (.Siber Systems - RoboForm TaskBar Icon.) -- C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe   [96056] [PID.3360]
[MD5.6F5386A655598F71BAAB2D6B63A69D6A] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe   [920472] [PID.2968]
[MD5.F834B06933E51E2266DC4858A0E9DD98] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files\Mozilla Firefox\plugin-container.exe   [17304] [PID.844]
[MD5.F20715AC8D4D08D35E71026D104C739D] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe   [7004160] [PID.2008]
[MD5.210EE09CB9C2655E55BD48D851369DC1] - (.NVIDIA Corporation - NVIDIA Settings Update Manager.) -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe   [1258856] [PID.652]
[MD5.5E9A6658A2A69AE7EB195113B7A2E7A9] - (.Microsoft Corporation - Application Layer Gateway Service.) -- C:\WINDOWS\System32\alg.exe   [44544] [PID.2060]
~ Processes Running:  Scanned in 00mn 02s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
C:\Documents and Settings\Sylvain\Application Data\Mozilla\Firefox\Profiles\2yrdsky1.default\prefs.js
C:\Documents and Settings\Sylvain\Application Data\Mozilla\Firefox\Profiles\2yrdsky1.default\user.js
M3 - MFPP: Plugins - [Sylvain] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [Sylvain] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [Sylvain] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [Sylvain] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [Sylvain] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [Sylvain] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [Sylvain] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - Office Plugin for Netscape Navigator.) -- C:\Program Files\Mozilla Firefox\Plugins\NPOFF12.DLL
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 11.0.02.) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin2.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin3.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin4.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin5.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin6.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin7.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_169.dll
P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.5.) -- C:\WINDOWS\system32\Adobe\Director\np32dsw.dll
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (...) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.9.2] - (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\WINDOWS\system32\npDeployJava1.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.9.2] - (.Oracle Corporation - Next Generation Java Plug-in 10.9.2 for Mozilla browsers.) -- C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.20125.0.) -- C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@real.com/nppl3260;version=6.0.11.2571] - (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
P2 - FPN: [HKLM] [@real.com/nprpjplug;version=6.0.12.1739] - (.RealNetworks, Inc. - 6.0.12.1739.) -- C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 11.0.02.) -- C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
P2 - FPN: [HKLM] [yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1] - (.Yahoo! Inc. - Yahoo! activeX Plug-in Bridge.) -- C:\Program Files\Yahoo!\Common\npyaxmpb.dll
~ Firefox Browser: 30 Scanned in 00mn 01s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.costco.ca
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Yahoo! Inc. - Yahoo! activeX Plug-in Bridge.) (No version) -- (.not file.)
R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2
~ IE Browser: 13 Scanned in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management:  Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\WINDOWS\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Keys:  Scanned in 00mn 00s



---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File:  Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 1



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline
O2 - BHO: RoboForm BHO - {724d43a9-0d85-11d4-9908-00400523e39a} . (.AVAST Software - avast! EasyPass Main Module.) -- C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\jp2ssv.dll
~ BHO: 7 Scanned in 00mn 00s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: avast! EasyPass Toolbar - [HKLM]{724d43a0-0d85-11d4-9908-00400523e39a} . (.AVAST Software - avast! EasyPass Main Module.) -- C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: avast! WebRep - [HKLM]{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
~ Toolbar:  Scanned in 00mn 00s



---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [ContentTransferWMDetector.exe] . (.Sony Corporation - Content Transfer Walkman Detector.) -- C:\Program Files\Sony\Content Transfer\ContentTransferWMDetector.exe 
O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe 
O4 - HKLM\..\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe 
O4 - HKLM\..\Run: [MSConfig] . (.Microsoft Corporation - Utilitaire de configuration système.) -- C:\WINDOWS\pchealth\helpctr\Binaries\MSCONFIG.exe 
O4 - HKLM\..\Run: [DVD43] . (.Fengtao Software Inc. - DVD Region-Free Application.) -- C:\Program Files\DVD Region+CSS Free\DVDRegionFree.exe 
O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe 
O4 - HKCU\..\Run: [uTorrent] . (.BitTorrent, Inc. - µTorrent.) -- C:\Program Files\uTorrent\uTorrent.exe 
O4 - HKCU\..\Run: [WeatherEye] . (.Pelmorex Media Inc. - Pas de description.) -- C:\Documents and Settings\Sylvain\Local Settings\Application Data\MétéoMédia\WeatherEye.exe 
O4 - HKCU\..\RunOnce: [526_1756640189429] . (...) -- C:\Documents and Settings\Sylvain\Local Settings\Application Data\LogMeIn Rescue Applet\LMIR0001.tmp_r.bat 
O4 - HKUS\S-1-5-21-606747145-688789844-725345543-1006\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe 
~ Application:  Scanned in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - GS\Programs: Adobe Bridge CS4.lnk . (.Adobe Systems, Inc. - Adobe Bridge.)  -- C:\Program Files\Adobe\Adobe Bridge CS4\Bridge.exe 
O4 - GS\Programs: Adobe Device Central CS4.lnk . (.Adobe Systems - Adobe Device Central CS4.)  -- C:\Program Files\Adobe\Adobe Device Central CS4\DeviceCentral.exe 
O4 - GS\Programs: Adobe Drive CS4.lnk . (.Adobe Systems Incorporated - Adobe Drive ConnectUI.)  -- C:\Program Files\Fichiers communs\Adobe\Adobe Drive CS4\ConnectUI\Adobe Drive CS4.exe 
O4 - GS\Programs: Adobe ExtendScript Toolkit CS4.lnk . (.Adobe Systems Incorporated - ExtendScript Toolkit CS4 and Debugger (32 b.)  -- C:\Program Files\Adobe\Adobe Utilities\ExtendScript Toolkit CS4\ExtendScript Toolkit.exe 
O4 - GS\Programs: Adobe Extension Manager CS4.lnk . (.Adobe Systems Incorporated - Adobe Extension Manager CS4.)  -- C:\Program Files\Adobe\Adobe Extension Manager CS4\Adobe Extension Manager CS4.exe 
O4 - GS\Programs: Adobe Photoshop CS4.lnk . (.Adobe Systems, Incorporated - Adobe Photoshop CS4.)  -- C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe 
O4 - GS\Programs: Adobe Reader XI.lnk . (...)  -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1033-7B44-AB0000000001}\SC_Reader.ico 
O4 - GS\Programs: Apple Software Update.lnk . (...)  -- C:\WINDOWS\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}\AppleSoftwareUpdateIco.exe
O4 - GS\Programs: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.)  -- C:\Program Files\Mozilla Firefox\firefox.exe 
O4 - GS\Programs: Mozilla Thunderbird.lnk . (.Mozilla Corporation - Thunderbird.)  -- C:\Program Files\Mozilla Thunderbird\thunderbird.exe 
O4 - GS\Programs: Windows Movie Maker.lnk . (.Microsoft Corporation - Windows Movie Maker.)  -- C:\Program Files\Movie Maker\moviemk.exe 
O4 - GS\QuickLaunch: Free FLV Converter.lnk . (...)  -- C:\Program Files\Free FLV Converter\FreeFLVConverter.exe (.not file.)
O4 - GS\Programs: Assistance à distance.lnk . (.Microsoft Corporation - Assistance à distance Microsoft.)  -- C:\WINDOWS\system32\rcimlby.exe 
O4 - GS\Programs: Outlook Express.lnk . (.Microsoft Corporation - Outlook Express.)  -- C:\Program Files\Outlook Express\msimn.exe 
O4 - GS\Programs: Windows Media Player.lnk . (.Microsoft Corporation - Windows Media Player.)  -- C:\Program Files\Windows Media Player\wmplayer.exe 
~ Global Startup:  Scanned in 00mn 02s



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Remplir les formulaires - {320AF880-6646-11D3-ABEE-C5DBF3571F46} . (.AVAST Software - avast! EasyPass Main Module.) -- C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra button: Enregistrer les formulaires - {320AF880-6646-11D3-ABEE-C5DBF3571F49} . (.AVAST Software - avast! EasyPass Main Module.) -- C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra button: Barre avast! EasyPass - {724d43aa-0d85-11d4-9908-00400523e39a} . (.AVAST Software - avast! EasyPass Main Module.) -- C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\Program Files\Microsoft Office\Office12\REFBARH.ICO
O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} -- Clé orpheline
O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
~ IE Extra Buttons:  Scanned in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll
~ Winsock: 4 Scanned in 00mn 00s



---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} ((no name)) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} ((no name)) - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
~ Objets ActiveX:  Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{16E6BFF9-ABBB-4587-9C7C-21B2F6FD6434}: DhcpNameServer = 192.168.2.1 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{16E6BFF9-ABBB-4587-9C7C-21B2F6FD6434}: DhcpDomain = no-domain-set.bellcanada
O17 - HKLM\System\CS1\Services\Tcpip\..\{16E6BFF9-ABBB-4587-9C7C-21B2F6FD6434}: DhcpNameServer = 192.168.2.1 192.168.2.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{16E6BFF9-ABBB-4587-9C7C-21B2F6FD6434}: DhcpDomain = no-domain-set.bellcanada
O17 - HKLM\System\CS2\Services\Tcpip\..\{16E6BFF9-ABBB-4587-9C7C-21B2F6FD6434}: DhcpNameServer = 192.168.2.1 192.168.2.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{16E6BFF9-ABBB-4587-9C7C-21B2F6FD6434}: DhcpDomain = no-domain-set.bellcanada
O17 - HKLM\System\CS3\Services\Tcpip\..\{16E6BFF9-ABBB-4587-9C7C-21B2F6FD6434}: DhcpNameServer = 192.168.2.1 192.168.2.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{16E6BFF9-ABBB-4587-9C7C-21B2F6FD6434}: DhcpDomain = no-domain-set.bellcanada
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 192.168.2.1
~ Domain:  Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\MSOXMLMF.dll
~ Protocole Additionnel:  Scanned in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\WINDOWS\system32\cscdll.dll
O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\system32\dimsntfy.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
~ Winlogon:  Scanned in 00mn 00s



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll
~ SSODL: 5 Scanned in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall (avast! Firewall) . (.AVAST Software - avast! firewall service.) - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Oracle Corporation - Java(TM) Quick Starter Service.) - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling  (LightScribeService) . (.Hewlett-Packard Company - LightScribe Service.) - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 306.8.) - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) . (.NVIDIA Corporation - NVIDIA Settings Update Manager.) - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) . (.Protexis Inc. - PsiService PsiService.) - c:\Program Files\Fichiers communs\Protexis\License Service\PsiService_2.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) . (.Pas de propriétaire - RichVideo Module.) - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: {95808DC4-FA4A-4C74-92FE-5B863F82066B} ({95808DC4-FA4A-4C74-92FE-5B863F82066B}) . (.Cyberlink Corp. - FCL Driver.) - C:\Program Files\CyberLink\PowerDVD\000.fcl
~ Services: 12 Scanned in 00mn 07s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\Program Files\Microsoft Office\Office12\WINWORD.exe
O24 - Desktop General: BackupWallPaper - .(...) - C:\WINDOWS\Web\Wallpaper\Colline verdoyante.bmp
O24 - Desktop General: WallPaper - .(...) - C:\WINDOWS\Web\Wallpaper\Colline verdoyante.bmp
~ Desktop Component: 4 Scanned in 00mn 00s



---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\Adobe Flash Player Updater.job   [1002]
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\AppleSoftwareUpdate.job   [284]
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\avast! Emergency Update.job   [318]
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\DGChrome2150 Watcher.job   [438]
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1cd921395797e76.job   [1052]
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job   [1058]
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\Microsoft_Hardware_Launch_IPoint_exe.job   [294]
~ Scheduled Task: 7 Scanned in 00mn 00s



---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Mise à jour de la version d’Internet Explorer - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} . (.Microsoft Corporation - IE Per User Active Setup Uninstall Utility.) -- C:\WINDOWS\system32\ieudinit.exe
O40 - ASIC: Lecteur Windows Media - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Utilitaire d'installation du Lecteur Windows Media de Microsoft.) -- C:\WINDOWS\inf\unregmp2.exe
O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d’initialisation d’Internet Explorer par utilisateur.) -- C:\WINDOWS\system32\ie4uinit.exe.mui
O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - IEAK branding.) -- C:\WINDOWS\system32\iedkcs32.dll
O40 - ASIC: Outlook Express - >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} . (.Microsoft Corporation - Windows NT User Data Migration Tool.) -- C:\WINDOWS\system32\shmgrate.exe
O40 - ASIC: Microsoft VM - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Microsoft Corporation - Microsoft® VM.) -- C:\WINDOWS\system32\msjava.dll
O40 - ASIC: LightScribe Control Panel - {10880D85-AAD9-4558-ABDC-2AB1552D831F} . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Fichiers communs\LightScribe\LSRunOnce.exe
O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: Microsoft Windows Media Player 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\WINDOWS\system32\themeui.dll
O40 - ASIC: Microsoft Outlook Express 6 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Bibliothèque d'installation Outlook Express.) -- C:\Program Files\Outlook Express\setup50.exe
O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (...) -- C:\WINDOWS\INF\msnetmtg.inf
O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (...) -- C:\WINDOWS\INF\msmsgs.inf
O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\WINDOWS\system32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (...) -- C:\WINDOWS\INF\wmp11.inf
O40 - ASIC: Carnet d'adresses 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} . (.Microsoft Corporation - Bibliothèque d'installation Outlook Express.) -- C:\Program Files\Outlook Express\setup50.exe
O40 - ASIC: Mise à jour du Bureau Windows - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d’initialisation d’Internet Explorer par utilisateur.) -- C:\WINDOWS\system32\ie4uinit.exe.mui
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\WINDOWS\system32\mscories.dll
O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 10.0 r32.) -- C:\WINDOWS\system32\Macromed\Flash\Flash10c.ocx
~ Active Setup: 20 Scanned in 00mn 00s



---\\ Pilotes lancés au démarrage (O41)
O41 - Driver:  (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
O41 - Driver:  (aswFW) . (.AVAST Software - avast! Filtering TDI driver.) - C:\WINDOWS\system32\drivers\aswFW.sys
O41 - Driver:  (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys
O41 - Driver:  (ElbyCDIO) . (.Elaborate Bytes AG - ElbyCD Windows NT/2000/XP I/O driver.) - C:\WINDOWS\system32\Drivers\ElbyCDIO.sys
O41 - Driver:  (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
O41 - Driver:  (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys
O41 - Driver:  (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys
O41 - Driver:  (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys
O41 - Driver:  (kbdhid) . (.Microsoft Corporation - Pilote de filtre souris HID.) - C:\WINDOWS\system32\DRIVERS\kbdhid.sys
O41 - Driver:  (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys
O41 - Driver:  (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
O41 - Driver:  (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS\netbios.sys
O41 - Driver:  (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS\netbt.sys
O41 - Driver:  (Processor) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\system32\DRIVERS\processr.sys
O41 - Driver:  (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERS\rasacd.sys
O41 - Driver:  (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
O41 - Driver:  (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\system32\DRIVERS\redbook.sys
O41 - Driver:  (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\WINDOWS\system32\DRIVERS\serial.sys
O41 - Driver:  (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS\tcpip.sys
O41 - Driver:  (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS\termdd.sys
O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
O41 - Driver: Windows Socket 2.0 Non-IFS Service Provider Support Environment (WS2IFSL) . (.Microsoft Corporation - Winsock2 IFS Layer.) - C:\WINDOWS\system32\drivers\ws2ifsl.sys
O41 - Driver:  (ssmdrv) . (. - .) - C:\WINDOWS\system32\DRIVERS\ssmdrv.sys (.not file.)
O41 - Driver:  (avgio) . (. - .) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys (.not file.)
O41 - Driver:  (avipbb) . (. - .) - C:\WINDOWS\system32\DRIVERS\avipbb.sys (.not file.)
~ Drivers: 74 Scanned in 00mn 01s



---\\ Logiciels installés (O42)
O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR
O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {197A3012-8C85-4FD3-AB66-9EC7E13DB92E}
O42 - Logiciel: Adobe Anchor Service CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {1618734A-3957-4ADD-8199-F973763109A8}
O42 - Logiciel: Adobe Bridge CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {83877DB1-8B77-45BC-AB43-2BAC22E093E0}
O42 - Logiciel: Adobe CMaps CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {94D398EB-D2FD-4FD1-B8C4-592635E8A191}
O42 - Logiciel: Adobe CSI CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {0F723FC1-7606-4867-866C-CE80AD292DAF}
O42 - Logiciel: Adobe Color - Photoshop Specific CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {3D2C9DE6-9ADE-4252-A241-E43723B0CE02}
O42 - Logiciel: Adobe Color EU Recommended Settings CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {0DC0E85F-36E4-463B-B3EA-4CD8ED2222A1}
O42 - Logiciel: Adobe Color JA Extra Settings CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {0D6013AB-A0C7-41DC-973C-E93129C9A29F}
O42 - Logiciel: Adobe Color NA Extra Settings CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {098A2A49-7CF3-4F08-A38D-FB879117152A}
O42 - Logiciel: Adobe Color Video Profiles CS CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {63C24A08-70F3-4C8E-B9FB-9F21A903801D}
O42 - Logiciel: Adobe Default Language CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {C52E3EC1-048C-45E1-8D53-10B0C6509683}
O42 - Logiciel: Adobe Device Central CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {67F0E67A-8E93-4C2C-B29D-47C48262738A}
O42 - Logiciel: Adobe Drive CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {16E16F01-2E2D-4248-A42F-76261C147B6C}
O42 - Logiciel: Adobe ExtendScript Toolkit CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {F8EF2B3F-C345-4F20-8FE4-791A20333CD5}
O42 - Logiciel: Adobe Extension Manager CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {054EFA56-2AC1-48F4-A883-0AB89874B972}
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Fonts All - (.Adobe Systems Incorporated.) [HKLM] -- {FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}
O42 - Logiciel: Adobe Linguistics CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {931AB7EA-3656-4BB7-864D-022B09E3DD67}
O42 - Logiciel: Adobe Output Module - (.Adobe Systems Incorporated.) [HKLM] -- {BB4E33EC-8181-4685-96F7-8554293DEC6A}
O42 - Logiciel: Adobe PDF Library Files CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {F93C84A6-0DC6-42AF-89FA-776F7C377353}
O42 - Logiciel: Adobe Photoshop CS4 - (.Adobe Systems Incorporated.) [HKLM] -- Adobe_faf656ef605427ee2f42989c3ad31b8
O42 - Logiciel: Adobe Photoshop CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}
O42 - Logiciel: Adobe Photoshop CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {E4848436-0345-47E2-B648-8B522FCDA623}
O42 - Logiciel: Adobe Photoshop CS4 Support - (.Adobe Systems Incorporated.) [HKLM] -- {63E5CDBF-8214-4F03-84F8-CD3CE48639AD}
O42 - Logiciel: Adobe Reader XI (11.0.02) - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1033-7B44-AB0000000001}
O42 - Logiciel: Adobe Search for Help - (.Adobe Systems Incorporated.) [HKLM] -- {F0E64E2E-3A60-40D8-A55D-92F6831875DA}
O42 - Logiciel: Adobe Service Manager Extension - (.Adobe Systems Incorporated.) [HKLM] -- {4943EFF5-229F-435D-BEA9-BE3CAEA783A7}
O42 - Logiciel: Adobe Setup - (.Adobe Systems Incorporated.) [HKLM] -- {0D67A4E4-5BE0-4C9A-8AD8-AB552B433F23}
O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player
O42 - Logiciel: Adobe Type Support CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {820D3F45-F6EE-4AAF-81EF-CE21FF21D230}
O42 - Logiciel: Adobe Update Manager CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {05308C4E-7285-4066-BAE3-6B50DA6ED755}
O42 - Logiciel: Adobe WinSoft Linguistics Plugin - (.Adobe Systems Incorporated.) [HKLM] -- {3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}
O42 - Logiciel: Adobe XMP Panels CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {3A4E8896-C2E7-4084-A4A4-B8FD1894E739}
O42 - Logiciel: AdobeColorCommonSetCMYK - (.Adobe Systems Incorporated.) [HKLM] -- {68243FF8-83CA-466B-B2B8-9F99DA5479C4}
O42 - Logiciel: AdobeColorCommonSetRGB - (.Adobe Systems Incorporated.) [HKLM] -- {16E6D2C1-7C90-4309-8EC4-D2212690AAA4}
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {853A4763-6643-4604-8D64-28BDD8925F4C}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {CACAEB5F-174D-4C7C-AC56-A33289A807CA}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {6956856F-B6B3-4BE0-BA0B-8F495BE32033}
O42 - Logiciel: Avast License by ZeNiX [2012-06-29] - (...) [HKLM] -- Avast_2050_ZeNiX [2012-06-29]_is1
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {C2E4B5BD-32DB-4817-A060-341AB17C3F90}
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
O42 - Logiciel: Canon Camera Support Core Library - (.Canon.) [HKLM] -- InstallShield_{91F1A0D6-23AD-49FE-8D4E-379485652214}
O42 - Logiciel: Canon Camera Window DS for ZoomBrowser EX - (.Canon.) [HKLM] -- InstallShield_{91203BD3-6C3E-472F-ADBD-F60FDC7C4010}
O42 - Logiciel: Canon Camera Window DVC for ZoomBrowser EX - (.Canon.) [HKLM] -- InstallShield_{4C96958A-6562-4143-B820-FF4890D3B734}
O42 - Logiciel: Canon Camera Window for ZoomBrowser EX - (.Canon.) [HKLM] -- InstallShield_{C7281207-4AA4-425E-B57A-0E9EF8445635}
O42 - Logiciel: Canon PhotoRecord - (.Cisra.) [HKLM] -- {0878E100-C0BB-41E8-B4C6-C486B61FDA7B}
O42 - Logiciel: Canon RemoteCapture Task for ZoomBrowser EX - (.Canon.) [HKLM] -- InstallShield_{28291BD5-92D2-4685-82DC-CCA925C53CCA}
O42 - Logiciel: Canon ZoomBrowser EX - (.Canon.) [HKLM] -- {C1D76D7A-F3BB-47EA-A746-5B1E2FFC1DF2}
O42 - Logiciel: CloneDVD 4.5.0.0 - (.Copyright (C) 2003-2009 DVD X Studios..) [HKLM] -- MainApp.exe_is1
O42 - Logiciel: CloneDVD2 - (.Elaborate Bytes.) [HKLM] -- CloneDVD2
O42 - Logiciel: Connect - (.Adobe Systems Incorporated.) [HKLM] -- {B29AD377-CC12-490A-A480-1452337C618D}
O42 - Logiciel: Content Transfer - (.Sony Corporation.) [HKLM] -- {CFADE4AF-C0CF-4A04-A776-741318F1658F}
O42 - Logiciel: ConvertXtoDVD 3.0.0.1 - (...) [HKLM] -- {76C24F39-B161-498F-BD8B-C64789812D13}_is1
O42 - Logiciel: Corel WordPerfect Office - iFilter - (.Corel Corporation.) [HKLM] -- {1DF03ECE-6AF4-414E-B118-C316F151A9A2}
O42 - Logiciel: DVD Region+CSS Free 5.9.8.3 - (.Fengtao Software Inc..) [HKLM] -- DVD Region+CSS Free_is1
O42 - Logiciel: DVD Suite - (...) [HKLM] -- {1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}
O42 - Logiciel: Efficient Networks SpeedStream DSL - (...) [HKLM] -- EfntSSDSL
O42 - Logiciel: FileHippo.com Update Checker - (...) [HKLM] -- FileHippo.com
O42 - Logiciel: First Step Guide - (...) [HKLM] -- {5EC786D5-C0CA-42E0-AF88-5379EF9D91EC}
O42 - Logiciel: Garmin USB Drivers - (.Garmin Ltd or its subsidiaries.) [HKLM] -- {65F9E1F3-A2C1-4AA9-9F33-A3AEB0255F0E}
O42 - Logiciel: Google Earth Plug-in - (.Google.) [HKLM] -- {34B32B70-8081-11E2-89AF-B8AC6F98CCE3}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399
O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5
O42 - Logiciel: ImageMixer VCD2 - (...) [HKLM] -- {F8C6BABF-0837-4EA0-AD6C-8E5A392A7538}
O42 - Logiciel: Java 7 Update 9 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83217009FF}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {8E5233E1-7495-44FB-8DEB-4BE906D59619}
O42 - Logiciel: K-Lite Mega Codec Pack 1.70 - (...) [HKLM] -- KLiteCodecPack_is1
O42 - Logiciel: L&H TTS3000 Français - (...) [HKLM] -- LHTTSFRF
O42 - Logiciel: LG CyberLink PowerDVD - (.CyberLink Corp..) [HKLM] -- InstallShield_{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}
O42 - Logiciel: LG CyberLink PowerDVD - (.CyberLink Corp..) [HKLM] -- {2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}
O42 - Logiciel: Lecteur Windows Media 11 - (...) [HKLM] -- Windows Media Player
O42 - Logiciel: LightScribe System Software - (.LightScribe.) [HKLM] -- {CC8E94A2-55C7-4460-953C-2A790180578C}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: MSXML 6.0 Parser (KB925673) - (.Microsoft Corporation.) [HKLM] -- {FE9126DB-5F84-495A-BB46-3C724F1C2D08}
O42 - Logiciel: Malwarebytes Anti-Malware version 1.75.0.1300 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1
O42 - Logiciel: Microsoft Kernel-Mode Driver Framework Feature Pack 1.9 - (.Microsoft Corporation.) [HKLM] -- Wdf01009
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- Wudf01000
O42 - Logiciel: Microsoft WSE 3.0 Runtime - (.Microsoft Corp..) [HKLM] -- {E3E71D07-CD27-46CB-8448-16D4FB29AA13}
O42 - Logiciel: Mises à jour NVIDIA 1.10.8 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update
O42 - Logiciel: Mozilla Firefox 20.0.1 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 20.0.1 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService
O42 - Logiciel: Mozilla Thunderbird 17.0.5 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Thunderbird 17.0.5 (x86 fr)
O42 - Logiciel: MétéoÉclair - (.MétéoMédia.) [HKCU] -- MétéoÉclair
O42 - Logiciel: NVIDIA Drivers - (.NVIDIA Corporation.) [HKLM] -- NVIDIA Drivers
O42 - Logiciel: NVIDIA Pilote graphique 306.81 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver
O42 - Logiciel: NVIDIA nView 136.28 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView
O42 - Logiciel: NVIDIA nView Desktop Manager - (.NVIDIA Corporation.) [HKLM] -- NVIDIA nView Desktop Manager
O42 - Logiciel: NWZ-E350 WALKMAN Guide - (.Sony Corporation.) [HKLM] -- {9D7E5329-5751-435B-B585-0EFF51783A20}
O42 - Logiciel: Nero 7 Essentials - (.Nero AG.) [HKLM] -- {AAB93551-3FFE-42B2-8315-96252BBC1033}
O42 - Logiciel: Outlook Express Launcher 2.2 - (...) [HKLM] -- OELauncher
O42 - Logiciel: PDF Settings CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {35D94F92-1D3A-43C5-8605-EA268B1A7BD9}
O42 - Logiciel: Photoshop Camera Raw - (.Adobe Systems Incorporated.) [HKLM] -- {CC75AB5C-2110-4A7F-AF52-708680D22FE8}
O42 - Logiciel: Picture Package - (...) [HKLM] -- {1E2F8AE3-3437-44E6-BB75-E95751D6B83F}
O42 - Logiciel: PowerDVD Ultra - (.CyberLink Corporation.) [HKLM] -- InstallShield_{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}
O42 - Logiciel: PowerISO - (...) [HKLM] -- PowerISO
O42 - Logiciel: PowerProducer - (...) [HKLM] -- {B7A0CE06-068E-11D6-97FD-0050BACBF861}
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {57752979-A1C9-4C02-856B-FBB27AC4E02C}
O42 - Logiciel: Realtek AC'97 Audio - (.Realtek Semiconductor Corp..) [HKLM] -- {FB08F381-6533-4108-B7DD-039E11FBC27E}
O42 - Logiciel: Revo Uninstaller 1.93 - (.VS Revo Group.) [HKLM] -- Revo Uninstaller
O42 - Logiciel: SIW version 2010.07.14 - (.Topala Software Solutions.) [HKLM] -- {AB67580-257C-45FF-B8F4-C8C30682091A}_is1
O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
O42 - Logiciel: Sony USB Driver - (...) [HKLM] -- {5C29CB8B-AC1E-4114-8D68-9CD080140D4A}
O42 - Logiciel: Suite Shared Configuration CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {842B4B72-9E8F-4962-B3C1-1C422A5C4434}
O42 - Logiciel: TeamViewer 4 - (.TeamViewer GmbH.) [HKLM] -- TeamViewer 4
O42 - Logiciel: VLC media player 1.0.2 - (.VideoLAN Team.) [HKLM] -- VLC media player
O42 - Logiciel: WinRAR 4.00 (32-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver
O42 - Logiciel: Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (06/03/2009 2.3.0 - (.Garmin.) [HKLM] -- 49CF605F02C7954F4E139D18828DE298CD59217C
O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130) - (.Microsoft Corporation.) [HKLM] -- KB892130
O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8
O42 - Logiciel: Windows Media Format 11 runtime - (...) [HKLM] -- Windows Media Format Runtime
O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11
O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11
O42 - Logiciel: Windows Presentation Foundation - (.Microsoft Corporation.) [HKLM] -- {BAF78226-3200-4DB4-BE33-4D922A799840}
O42 - Logiciel: Windows Presentation Foundation Language Pack (FRA) - (.Microsoft Corporation.) [HKLM] -- {6901DD22-527A-41EF-9059-E81FEDE9E494}
O42 - Logiciel: Windows Workflow Foundation FR Language Pack - (.Microsoft Corporation.) [HKLM] -- {B84C141C-9A13-44BE-9A69-301D7B11D836}
O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service
O42 - Logiciel: WordPerfect Lightning - (.Corel Corporation.) [HKLM] -- {67ED9603-CB76-4338-B7B0-690FE144C4DA}
O42 - Logiciel: WordPerfect Lightning - IPM - (.Corel Corporation.) [HKLM] -- {4873CC58-69D8-490D-9E5C-001DC2EE2020}
O42 - Logiciel: WordPerfect Lightning - MSOM - (.Corel Corporation.) [HKLM] -- {F6EE49FD-B736-4888-A05A-115F3B1160FA}
O42 - Logiciel: WordPerfect Lightning - Messages - (.Corel Corporation.) [HKLM] -- {4873CC58-69D8-490D-9E5C-001DC2EE2010}
O42 - Logiciel: WordPerfect Office X5 - (.Corel Corporation.) [HKLM] -- _{DE6DE4A1-0343-4DBE-9DC2-E667AA03F579}
O42 - Logiciel: WordPerfect Office X5 - (.Corel Corporation.) [HKLM] -- {B62C4524-41B5-4E65-952B-36AEC51E3F55}
O42 - Logiciel: WordPerfect Office X5 - Common - (.Corel Corporation.) [HKLM] -- {17C5A285-F7B6-492B-8F3B-343D02B84D75}
O42 - Logiciel: WordPerfect Office X5 - Filters - (.Corel Corporation.) [HKLM] -- {E67732DE-3387-4F1E-BDDA-2D0C08BC025B}
O42 - Logiciel: WordPerfect Office X5 - Graphics - (.Corel Corporation.) [HKLM] -- {6E4B1E42-A831-44B4-A705-D006F68560EC}
O42 - Logiciel: WordPerfect Office X5 - IPM - (.Corel Corporation.) [HKLM] -- {19B4CD07-1919-4002-B28F-A5D2027026E0}
O42 - Logiciel: WordPerfect Office X5 - LegalTools - (.Corel Corporation.) [HKLM] -- {D7643510-C1AE-44AD-B0F9-0665C4D73BFD}
O42 - Logiciel: WordPerfect Office X5 - Migration Manager - (.Corel Corporation.) [HKLM] -- {1F0D7D15-8A36-4AE4-8573-70BEA7DF379D}
O42 - Logiciel: WordPerfect Office X5 - Oxford - (.Corel Corporation.) [HKLM] -- {6C13C708-FF28-4991-84E6-5526A0EE677B}
O42 - Logiciel: WordPerfect Office X5 - PR - (.Corel Corporation.) [HKLM] -- {378BAC91-3AE8-45F0-90E4-4F81E3EAEBC5}
O42 - Logiciel: WordPerfect Office X5 - PerfectExperts EN - (.Corel Corporation.) [HKLM] -- {64459BD5-3AE8-4689-B7B0-D57B667D8399}
O42 - Logiciel: WordPerfect Office X5 - QP - (.Corel Corporation.) [HKLM] -- {DAEDCD3D-B981-4F10-B17B-764753EDAF9F}
O42 - Logiciel: WordPerfect Office X5 - Setup Files - (.Corel Corporation.) [HKLM] -- {DE6DE4A1-0343-4DBE-9DC2-E667AA03F579}
O42 - Logiciel: WordPerfect Office X5 - Sharepoint - (.Corel Corporation.) [HKLM] -- {A6FD1334-FD75-4951-935D-08F8C7E4C6B0}
O42 - Logiciel: WordPerfect Office X5 - Skins - (.Corel Corporation.) [HKLM] -- {D4167D08-0F61-4F44-BC3F-26B4960745C4}
O42 - Logiciel: WordPerfect Office X5 - System EN - (.Corel Corporation.) [HKLM] -- {71D2F8EE-9D45-4D95-A6F6-F6433C2B94B5}
O42 - Logiciel: WordPerfect Office X5 - Templates - (.Corel Corporation.) [HKLM] -- {CD5C6C29-E6CB-4DF3-B45F-A04087B1C294}
O42 - Logiciel: WordPerfect Office X5 - WP - (.Corel Corporation.) [HKLM] -- {EC61C6D9-159B-4B14-AAF3-AF33FCFA50DD}
O42 - Logiciel: WordPerfect Office X5 - WT - (. Corel Corporation.) [HKLM] -- {13EBF9E8-82FF-47D0-A324-534B79EF7F71}
O42 - Logiciel: Wordperfect Office X5 - EN - (.Corel Corporation.) [HKLM] -- {E539B721-4458-4EFC-8BD0-04D4842051AE}
O42 - Logiciel: XML Paper Specification Shared Components Language Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- XPSEPSCLP
O42 - Logiciel: XML Paper Specification Shared Components Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- XpsEPSC
O42 - Logiciel: avast! EasyPass v7-7-8-128 - (.AVAST Software.) [HKLM] -- AI RoboForm
O42 - Logiciel: avast! Premier v8.0.1483.0 - (.AVAST Software.) [HKLM] -- avast
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {353FE16B-30FE-469A-BF55-B978F4218003}
O42 - Logiciel: kuler - (.Adobe Systems Incorporated.) [HKLM] -- {098727E1-775A-4450-B573-3F441F1CA243}
O42 - Logiciel: µTorrent - (...) [HKLM] -- uTorrent
~ Logic: 241 Scanned in 00mn 01s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\1ClickDownload]
[HKCU\Software\ABBYY]
[HKCU\Software\AC3filter]
[HKCU\Software\ALWIL Software]
[HKCU\Software\ASProtect]
[HKCU\Software\AVS4YOU]
[HKCU\Software\Adobe]
[HKCU\Software\Ahead]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\Applications WinDev]
[HKCU\Software\Avance]
[HKCU\Software\Avast Software]
[HKCU\Software\Binary Noise]
[HKCU\Software\BitTorrent]
[HKCU\Software\CDDB]
[HKCU\Software\CISRA]
[HKCU\Software\Canon]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\CoreVorbis]
[HKCU\Software\Corel]
[HKCU\Software\Cyberlink]
[HKCU\Software\DVD Region-Free]
[HKCU\Software\DVDXStudio]
[HKCU\Software\Digital River]
[HKCU\Software\DivXNetworks]
[HKCU\Software\Elaborate Bytes]
[HKCU\Software\Electronic Arts]
[HKCU\Software\FileHippo.com]
[HKCU\Software\FlashGet Network]
[HKCU\Software\GNU]
[HKCU\Software\GPL Ghostscript]
[HKCU\Software\GSpot Appliance Corp]
[HKCU\Software\Gabest]
[HKCU\Software\Garmin]
[HKCU\Software\Google]
[HKCU\Software\Haali]
[HKCU\Software\Hilgraeve Inc]
[HKCU\Software\IB Updater]
[HKCU\Software\IM Providers]
[HKCU\Software\IM]
[HKCU\Software\Illustrate]
[HKCU\Software\ImInstaller]
[HKCU\Software\Intel]
[HKCU\Software\JavaSoft]
[HKCU\Software\Lake]
[HKCU\Software\LightScribe]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\MGShareware]
[HKCU\Software\MMTWN]
[HKCU\Software\Macromedia]
[HKCU\Software\MainConcept]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\MeeSoft]
[HKCU\Software\Morpheus Software]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\OLab]
[HKCU\Software\Orban]
[HKCU\Software\PIXELA]
[HKCU\Software\PROject MT]
[HKCU\Software\Paessler]
[HKCU\Software\ParetoLogic]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\PowerISO]
[HKCU\Software\RealNetworks]
[HKCU\Software\Realtek]
[HKCU\Software\Research In Motion]
[HKCU\Software\Rob Parker]
[HKCU\Software\Siber Systems]
[HKCU\Software\Sony Corporation]
[HKCU\Software\SpoonInstall]
[HKCU\Software\SweetIM]  =>PUP.SweetIM
[HKCU\Software\Sysinternals]
[HKCU\Software\TeamViewer]
[HKCU\Software\Thunderbird]
[HKCU\Software\Trolltech]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\VSO]
[HKCU\Software\VSRevoGroup]
[HKCU\Software\Ventrilo]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\Yahoo]
[HKLM\Software\781]
[HKLM\Software\ALWIL Software]
[HKLM\Software\AVAST Software]
[HKLM\Software\AVS4YOU]
[HKLM\Software\Act-3D]
[HKLM\Software\Adobe]
[HKLM\Software\AnyDWGSoftware]
[HKLM\Software\AppDataLow]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\Audible]
[HKLM\Software\Borland]
[HKLM\Software\C07ft5Y]
[HKLM\Software\CDDB]
[HKLM\Software\CISRA]
[HKLM\Software\Canon]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Coalesys]
[HKLM\Software\Codec tweak Tool]
[HKLM\Software\Corel]
[HKLM\Software\CyberLink]
[HKLM\Software\DIOC]
[HKLM\Software\DelFix]
[HKLM\Software\DivXNetworks]
[HKLM\Software\DriverTuner]
[HKLM\Software\DriverTuner_Init]
[HKLM\Software\Efficient Networks]
[HKLM\Software\Elaborate Bytes]
[HKLM\Software\Fengtao Software]
[HKLM\Software\FlashGet Network]
[HKLM\Software\GEAR Software]
[HKLM\Software\GNU]
[HKLM\Software\Gabest]
[HKLM\Software\GameHouse]
[HKLM\Software\Garmin]
[HKLM\Software\Gemplus]
[HKLM\Software\Google]
[HKLM\Software\HaaliMkx]
[HKLM\Software\IB Updater]
[HKLM\Software\Iminent]  =>Adware.IMBooster
[HKLM\Software\IncrediMail]
[HKLM\Software\InstallShield]
[HKLM\Software\Intel]
[HKLM\Software\InterVideo]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\KLCodecPack]
[HKLM\Software\Khronos]
[HKLM\Software\L&H]
[HKLM\Software\LG Electronics]
[HKLM\Software\Lake]
[HKLM\Software\Licenses]
[HKLM\Software\LightScribe]
[HKLM\Software\LogMeIn Rescue]
[HKLM\Software\MGShareware]
[HKLM\Software\Macromedia]
[HKLM\Software\Macrovision]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\Morpheus Software]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\Nero]
[HKLM\Software\ODBC]
[HKLM\Software\On2 Technologies]
[HKLM\Software\PIXELA]
[HKLM\Software\Paessler]
[HKLM\Software\ParetoLogic]
[HKLM\Software\Piriform]
[HKLM\Software\Police]
[HKLM\Software\Policies]
[HKLM\Software\Program Groups]
[HKLM\Software\Protexis]
[HKLM\Software\RealNetworks]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Research In Motion]
[HKLM\Software\S3R521]
[HKLM\Software\SONY PVC]
[HKLM\Software\Schlumberger]
[HKLM\Software\Secure]
[HKLM\Software\Siber Systems]
[HKLM\Software\Silicon Graphics]
[HKLM\Software\Sony Corporation]
[HKLM\Software\SweetIM]  =>PUP.SweetIM
[HKLM\Software\Tarma Installer]  =>Toolbar.Tarma
[HKLM\Software\TeamViewer]
[HKLM\Software\Uniblue]
[HKLM\Software\VSO]
[HKLM\Software\VideoLAN]
[HKLM\Software\Voice]
[HKLM\Software\WebSupergoo]
[HKLM\Software\WinRAR]
[HKLM\Software\Windows 3.1 Migration Status]
[HKLM\Software\Windows]
[HKLM\Software\Wow6432Node]
[HKLM\Software\Yahoo]
[HKLM\Software\ahead]
[HKLM\Software\instinno]
[HKLM\Software\krkmehp]
[HKLM\Software\mozilla.org]
[HKLM\Software\muvee Technologies]
~ Key Software: 284 Scanned in 00mn 01s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 2012-11-10 - 20:22:57 - [671,783] ----D C:\Program Files\Adobe
O43 - CFD: 2009-11-24 - 18:58:57 - [2,118] ----D C:\Program Files\Apple Software Update
O43 - CFD: 2013-03-24 - 16:10:17 - [507,196] ----D C:\Program Files\AVAST Software
O43 - CFD: 2009-09-22 - 13:36:13 - [5,228] ----D C:\Program Files\AvRack
O43 - CFD: 2010-12-25 - 10:08:08 - [3,802] ----D C:\Program Files\AVS4YOU
O43 - CFD: 2011-04-18 - 19:21:36 - [0,592] ----D C:\Program Files\Bonjour
O43 - CFD: 2011-01-01 - 16:03:09 - [137,277] ----D C:\Program Files\Canon
O43 - CFD: 2012-11-10 - 20:24:24 - [4,862] ----D C:\Program Files\CCleaner
O43 - CFD: 2010-03-02 - 19:33:17 - [46,276] ----D C:\Program Files\CloneDVD
O43 - CFD: 2009-09-22 - 12:11:47 - [0] ----D C:\Program Files\ComPlus Applications
O43 - CFD: 2012-02-05 - 10:33:51 - [733,135] ----D C:\Program Files\Corel
O43 - CFD: 2011-07-25 - 19:10:38 - [496,677] ----D C:\Program Files\CyberLink
O43 - CFD: 2009-12-30 - 09:23:02 - [0,290] ----D C:\Program Files\DIFX
O43 - CFD: 2012-02-24 - 09:09:50 - [0,063] ----D C:\Program Files\DriverBoost
O43 - CFD: 2009-09-23 - 19:41:14 - [1,854] ----D C:\Program Files\DVD Region+CSS Free
O43 - CFD: 2009-09-23 - 19:01:41 - [5,647] ----D C:\Program Files\Efficient Networks
O43 - CFD: 2009-11-13 - 17:24:35 - [8,598] ----D C:\Program Files\Elaborate Bytes
O43 - CFD: 2012-11-10 - 12:24:04 - [933,170] ----D C:\Program Files\Fichiers communs
O43 - CFD: 2012-11-10 - 18:54:33 - [0,420] ----D C:\Program Files\FileHippo.com
O43 - CFD: 2012-11-30 - 23:20:15 - [0] ----D C:\Program Files\FirstRowSportApp.com
O43 - CFD: 2009-12-04 - 18:41:11 - [0,668] ----D C:\Program Files\FlashGet Network
O43 - CFD: 2010-04-11 - 10:34:43 - [9,789] ----D C:\Program Files\Free FLV Converter
O43 - CFD: 2013-04-10 - 08:52:34 - [0,105] ----D C:\Program Files\FreeSCAN
O43 - CFD: 2011-09-14 - 19:12:15 - [0,117] ----D C:\Program Files\Garmin
O43 - CFD: 2013-04-10 - 10:21:57 - [119,487] ----D C:\Program Files\Google
O43 - CFD: 2009-09-29 - 15:18:52 - [0,098] ----D C:\Program Files\gs
O43 - CFD: 2012-03-05 - 17:39:27 - [-660,002] ----D C:\Program Files\Ibycus Topo
O43 - CFD: 2011-06-25 - 21:02:05 - [0] ----D C:\Program Files\Illustrate
O43 - CFD: 2012-10-08 - 19:32:16 - [42,764] --H-D C:\Program Files\InstallShield Installation Information
O43 - CFD: 2013-04-10 - 22:09:25 - [5,741] ----D C:\Program Files\Internet Explorer
O43 - CFD: 2011-04-18 - 19:25:07 - [1,771] ----D C:\Program Files\iPod
O43 - CFD: 2011-04-18 - 19:26:01 - [122,653] ----D C:\Program Files\iTunes
O43 - CFD: 2012-11-10 - 12:21:32 - [122,209] ----D C:\Program Files\Java
O43 - CFD: 2009-09-29 - 15:23:28 - [116,259] ----D C:\Program Files\K-Lite Codec Pack
O43 - CFD: 2012-04-09 - 09:02:10 - [7,192] ----D C:\Program Files\lg_fwupdate
O43 - CFD: 2013-04-10 - 08:02:06 - [13,473] ----D C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD: 2010-11-18 - 13:37:58 - [2,058] ----D C:\Program Files\Messenger
O43 - CFD: 2012-02-05 - 10:23:44 - [0] ----D C:\Program Files\Micro Application
O43 - CFD: 2009-11-16 - 12:57:12 - [0,216] ----D C:\Program Files\Microsoft
O43 - CFD: 2009-09-22 - 12:14:03 - [0] ----D C:\Program Files\microsoft frontpage
O43 - CFD: 2012-02-05 - 10:23:12 - [31,041] ----D C:\Program Files\Microsoft IntelliPoint
O43 - CFD: 2011-07-01 - 06:16:19 - [551,073] ----D C:\Program Files\Microsoft Office
O43 - CFD: 2013-03-13 - 22:24:00 - [40,835] ----D C:\Program Files\Microsoft Silverlight
O43 - CFD: 2010-06-05 - 19:58:12 - [0,014] ----D C:\Program Files\Microsoft Visual Studio
O43 - CFD: 2010-06-05 - 19:57:32 - [1,323] ----D C:\Program Files\Microsoft Visual Studio 8
O43 - CFD: 2010-06-05 - 19:58:56 - [3,554] ----D C:\Program Files\Microsoft Works
O43 - CFD: 2010-04-17 - 16:07:28 - [0,934] ----D C:\Program Files\Microsoft WSE
O43 - CFD: 2011-04-23 - 20:58:42 - [7,789] ----D C:\Program Files\Microsoft.NET
O43 - CFD: 2010-08-11 - 03:01:25 - [9,894] ----D C:\Program Files\Movie Maker
O43 - CFD: 2013-04-12 - 07:24:35 - [47,496] ----D C:\Program Files\Mozilla Firefox
O43 - CFD: 2013-04-12 - 22:18:19 - [0,212] ----D C:\Program Files\Mozilla Maintenance Service
O43 - CFD: 2013-04-04 - 23:48:00 - [44,812] ----D C:\Program Files\Mozilla Thunderbird
O43 - CFD: 2010-04-16 - 15:56:35 - [0,025] ----D C:\Program Files\MSBuild
O43 - CFD: 2012-01-12 - 14:25:05 - [38,270] ----D C:\Program Files\MSECache
O43 - CFD: 2009-09-22 - 12:10:48 - [0] ----D C:\Program Files\MSN
O43 - CFD: 2009-09-22 - 12:11:12 - [8,341] ----D C:\Program Files\MSN Gaming Zone
O43 - CFD: 2010-03-20 - 15:17:29 - [0] ----D C:\Program Files\MSXML 4.0
O43 - CFD: 2009-10-28 - 06:32:40 - [0,981] ----D C:\Program Files\MétéoMédia
O43 - CFD: 2009-09-23 - 22:36:06 - [143,728] ----D C:\Program Files\Nero
O43 - CFD: 2009-09-22 - 12:58:34 - [3,133] ----D C:\Program Files\NetMeeting
O43 - CFD: 2013-04-12 - 22:01:20 - [525,469] ----D C:\Program Files\NVIDIA Corporation
O43 - CFD: 2010-12-16 - 04:00:37 - [4,176] ----D C:\Program Files\Outlook Express
O43 - CFD: 2010-11-26 - 22:04:37 - [2,429] ----D C:\Program Files\Outlook Express Launcher
O43 - CFD: 2011-11-22 - 09:41:15 - [0] ----D C:\Program Files\PC Drivers HeadQuarters
O43 - CFD: 2009-10-07 - 18:54:17 - [96,379] ----D C:\Program Files\PIXELA
O43 - CFD: 2013-02-20 - 23:01:11 - [0] ----D C:\Program Files\PokerStars.FR
O43 - CFD: 2009-10-11 - 10:13:03 - [1,833] ----D C:\Program Files\PowerISO
O43 - CFD: 2009-09-22 - 13:36:08 - [39,790] ----D C:\Program Files\Realtek AC97
O43 - CFD: 2009-09-22 - 13:36:13 - [0] ----D C:\Program Files\Realtek Sound Manager
O43 - CFD: 2009-09-23 - 21:28:36 - [35,383] ----D C:\Program Files\Reference Assemblies
O43 - CFD: 2009-09-22 - 12:12:52 - [0,001] ----D C:\Program Files\Services en ligne
O43 - CFD: 2013-03-11 - 08:31:05 - [28,105] ----D C:\Program Files\Siber Systems
O43 - CFD: 2011-04-16 - 13:19:58 - [2,877] ----D C:\Program Files\SIW
O43 - CFD: 2011-04-16 - 13:15:42 - [0] ----D C:\Program Files\SlySoft
O43 - CFD: 2011-06-25 - 17:59:43 - [117,066] ----D C:\Program Files\Sony
O43 - CFD: 2009-10-07 - 17:15:09 - [81,650] ----D C:\Program Files\Sony Corporation
O43 - CFD: 2009-11-12 - 17:15:22 - [5,059] ----D C:\Program Files\TeamViewer
O43 - CFD: 2011-04-06 - 18:19:11 - [0] ----D C:\Program Files\Trend Micro
O43 - CFD: 2011-04-16 - 13:20:09 - [7,353] ----D C:\Program Files\Uniblue
O43 - CFD: 2009-09-22 - 12:46:05 - [0] --H-D C:\Program Files\Uninstall Information
O43 - CFD: 2011-08-08 - 16:07:38 - [0,610] ----D C:\Program Files\uTorrent
O43 - CFD: 2009-09-26 - 13:08:48 - [73,364] ----D C:\Program Files\VideoLAN
O43 - CFD: 2012-02-21 - 16:59:13 - [0,041] ----D C:\Program Files\Virtual Hottie 2
O43 - CFD: 2012-04-10 - 10:34:35 - [6,498] ----D C:\Program Files\VS Revo Group
O43 - CFD: 2009-10-04 - 10:20:10 - [39,283] ----D C:\Program Files\VSO
O43 - CFD: 2010-10-19 - 08:03:03 - [78,125] ----D C:\Program Files\Windows Live
O43 - CFD: 2009-11-16 - 12:56:55 - [0,234] ----D C:\Program Files\Windows Live SkyDrive
O43 - CFD: 2010-11-18 - 13:38:01 - [3,420] ----D C:\Program Files\Windows Media Connect 2
O43 - CFD: 2010-09-05 - 08:41:05 - [8,517] ----D C:\Program Files\Windows Media Player
O43 - CFD: 2009-09-22 - 12:58:32 - [3,760] ----D C:\Program Files\Windows NT
O43 - CFD: 2009-09-22 - 12:12:55 - [0] --H-D C:\Program Files\WindowsUpdate
O43 - CFD: 2011-04-14 - 22:44:23 - [3,810] ----D C:\Program Files\WinRAR
O43 - CFD: 2009-09-22 - 12:14:03 - [0] ----D C:\Program Files\xerox
O43 - CFD: 2011-07-25 - 19:12:23 - [0,365] ----D C:\Program Files\Yahoo!
O43 - CFD: 2013-05-26 - 17:06:46 - [16,410] ----D C:\Program Files\ZHPDiag
O43 - CFD: 2012-11-10 - 20:23:04 - [396,816] ----D C:\Program Files\Fichiers communs\Adobe
O43 - CFD: 2010-04-19 - 13:08:11 - [26,106] ----D C:\Program Files\Fichiers communs\Adobe AIR
O43 - CFD: 2009-09-23 - 22:39:46 - [83,833] ----D C:\Program Files\Fichiers communs\Ahead
O43 - CFD: 2011-06-13 - 19:07:00 - [0,419] ----D C:\Program Files\Fichiers communs\Akamai
O43 - CFD: 2011-04-18 - 19:25:06 - [87,500] ----D C:\Program Files\Fichiers communs\Apple
O43 - CFD: 2010-12-25 - 10:07:58 - [0] ----D C:\Program Files\Fichiers communs\AVSMedia
O43 - CFD: 2012-01-06 - 19:32:02 - [12,023] ----D C:\Program Files\Fichiers communs\Borland Shared
O43 - CFD: 2012-02-05 - 10:33:51 - [0,299] ----D C:\Program Files\Fichiers communs\Corel
O43 - CFD: 2010-09-29 - 17:07:19 - [0,109] ----D C:\Program Files\Fichiers communs\CyberLink
O43 - CFD: 2010-06-05 - 19:58:12 - [0,089] ----D C:\Program Files\Fichiers communs\DESIGNER
O43 - CFD: 2009-09-25 - 17:22:25 - [11,266] ----D C:\Program Files\Fichiers communs\InstallShield
O43 - CFD: 2012-11-10 - 12:24:04 - [1,184] ----D C:\Program Files\Fichiers communs\Java
O43 - CFD: 2010-09-29 - 17:03:57 - [36,045] ----D C:\Program Files\Fichiers communs\LightScribe
O43 - CFD: 2010-04-19 - 13:03:33 - [0,626] ----D C:\Program Files\Fichiers communs\Macrovision Shared
O43 - CFD: 2012-02-21 - 23:07:12 - [224,254] ----D C:\Program Files\Fichiers communs\Microsoft Shared
O43 - CFD: 2009-09-22 - 12:12:17 - [0,271] ----D C:\Program Files\Fichiers communs\MSSoap
O43 - CFD: 2009-10-07 - 17:14:52 - [6,033] ----D C:\Program Files\Fichiers communs\muvee Technologies
O43 - CFD: 2009-09-22 - 07:53:04 - [0] ----D C:\Program Files\Fichiers communs\ODBC
O43 - CFD: 2012-02-05 - 10:33:43 - [1,577] ----D C:\Program Files\Fichiers communs\Protexis
O43 - CFD: 2012-03-28 - 08:01:25 - [1,394] ----D C:\Program Files\Fichiers communs\Research In Motion
O43 - CFD: 2009-09-22 - 12:12:20 - [0,008] ----D C:\Program Files\Fichiers communs\Services
O43 - CFD: 2011-06-25 - 17:59:45 - [0,320] ----D C:\Program Files\Fichiers communs\Sony Shared
O43 - CFD: 2009-09-22 - 07:53:02 - [3,612] ----D C:\Program Files\Fichiers communs\SpeechEngines
O43 - CFD: 2012-02-21 - 23:03:16 - [39,386] ----D C:\Program Files\Fichiers communs\System
O43 - CFD: 2009-11-16 - 12:54:48 - [0] ----D C:\Program Files\Fichiers communs\Windows Live
O43 - CFD: 2013-04-10 - 08:57:22 - [563,758] R-H-D C:\Documents and Settings\All Users\Application Data
O43 - CFD: 2013-05-26 - 06:43:07 - [0,004] ----D C:\Documents and Settings\All Users\Bureau
O43 - CFD: 2012-01-06 - 19:33:50 - [64,405] R---D C:\Documents and Settings\All Users\Documents
O43 - CFD: 2009-09-26 - 09:42:37 - [0,186] -SH-D C:\Documents and Settings\All Users\DRM
O43 - CFD: 2009-09-22 - 07:52:41 - [0] ----D C:\Documents and Settings\All Users\Favoris
O43 - CFD: 2012-03-27 - 19:23:32 - [0,314] R---D C:\Documents and Settings\All Users\Menu Démarrer
O43 - CFD: 2010-04-07 - 12:59:27 - [0] --H-D C:\Documents and Settings\All Users\Modèles
O43 - CFD: 2011-06-25 - 21:02:13 - [0] ----D C:\Documents and Settings\Sylvain\Application Data\AccurateRip
O43 - CFD: 2011-09-09 - 18:18:23 - [29,471] ----D C:\Documents and Settings\Sylvain\Application Data\Adobe
O43 - CFD: 2009-09-23 - 22:44:35 - [0,169] ----D C:\Documents and Settings\Sylvain\Application Data\Ahead
O43 - CFD: 2012-01-15 - 22:14:23 - [0,092] ----D C:\Documents and Settings\Sylvain\Application Data\Alawar
O43 - CFD: 2011-11-14 - 22:11:32 - [21,205] ----D C:\Documents and Settings\Sylvain\Application Data\Apple Computer
O43 - CFD: 2009-09-26 - 09:43:45 - [0] ----D C:\Documents and Settings\Sylvain\Application Data\AVS4YOU
O43 - CFD: 2009-12-04 - 18:43:50 - [0,001] ----D C:\Documents and Settings\Sylvain\Application Data\BITS
O43 - CFD: 2012-02-05 - 10:35:05 - [7,131] ----D C:\Documents and Settings\Sylvain\Application Data\Corel
O43 - CFD: 2011-05-08 - 07:41:17 - [0,024] ----D C:\Documents and Settings\Sylvain\Application Data\CyberLink
O43 - CFD: 2010-06-26 - 13:03:50 - [0,018] ----D C:\Documents and Settings\Sylvain\Application Data\DarkBls
O43 - CFD: 2010-01-04 - 12:23:03 - [0,164] ----D C:\Documents and Settings\Sylvain\Application Data\DriverCure
O43 - CFD: 2012-11-27 - 12:47:19 - [0,000] ----D C:\Documents and Settings\Sylvain\Application Data\dvdcss
O43 - CFD: 2010-02-24 - 20:03:11 - [0,000] ----D C:\Documents and Settings\Sylvain\Application Data\FreeAudioPack
O43 - CFD: 2010-03-19 - 18:06:27 - [0,050] ----D C:\Documents and Settings\Sylvain\Application Data\FreeFLVConverter
O43 - CFD: 2011-04-23 - 20:56:26 - [501,311] ----D C:\Documents and Settings\Sylvain\Application Data\GARMIN
O43 - CFD: 2011-04-17 - 12:57:43 - [0] ----D C:\Documents and Settings\Sylvain\Application Data\Google
O43 - CFD: 2011-09-14 - 05:56:14 - [0] ----D C:\Documents and Settings\Sylvain\Application Data\Help
O43 - CFD: 2010-07-24 - 15:46:45 - [0,036] ----D C:\Documents and Settings\Sylvain\Application Data\HU2011
O43 - CFD: 2009-09-22 - 12:46:06 - [0] ----D C:\Documents and Settings\Sylvain\Application Data\Identities
O43 - CFD: 2010-02-15 - 21:00:14 - [1,160] ----D C:\Documents and Settings\Sylvain\Application Data\LANCITE
O43 - CFD: 2010-06-05 - 19:52:08 - [23,670] ----D C:\Documents and Settings\Sylvain\Application Data\LimeWire
O43 - CFD: 2009-09-22 - 13:43:15 - [2,948] ----D C:\Documents and Settings\Sylvain\Application Data\Macromedia
O43 - CFD: 2010-04-13 - 07:59:14 - [4,200] ----D C:\Documents and Settings\Sylvain\Application Data\Malwarebytes
O43 - CFD: 2009-09-29 - 15:30:20 - [0,000] ----D C:\Documents and Settings\Sylvain\Application Data\Media Player Classic
O43 - CFD: 2012-04-11 - 08:25:47 - [20,207] -S--D C:\Documents and Settings\Sylvain\Application Data\Microsoft
O43 - CFD: 2011-06-16 - 15:14:40 - [0] ----D C:\Documents and Settings\Sylvain\Application Data\Morpheus Software
O43 - CFD: 2009-09-23 - 19:47:55 - [106,469] ----D C:\Documents and Settings\Sylvain\Application Data\Mozilla
O43 - CFD: 2012-11-18 - 13:08:51 - [0] ----D C:\Documents and Settings\Sylvain\Application Data\NVIDIA
O43 - CFD: 2012-07-31 - 15:22:55 - [0] ----D C:\Documents and Settings\Sylvain\Application Data\Obsidium
O43 - CFD: 2010-03-07 - 17:58:46 - [0,002] ----D C:\Documents and Settings\Sylvain\Application Data\PRMT
O43 - CFD: 2010-03-07 - 18:01:59 - [0,003] ----D C:\Documents and Settings\Sylvain\Application Data\PROject MT
O43 - CFD: 2009-09-29 - 15:23:25 - [0] ----D C:\Documents and Settings\Sylvain\Application Data\Real
O43 - CFD: 2013-03-11 - 08:34:00 - [0,009] ----D C:\Documents and Settings\Sylvain\Application Data\RoboForm
O43 - CFD: 2012-01-19 - 22:59:39 - [0,005] ----D C:\Documents and Settings\Sylvain\Application Data\Rovio
O43 - CFD: 2011-06-25 - 18:01:33 - [0,021] ----D C:\Documents and Settings\Sylvain\Application Data\Sony Corporation
O43 - CFD: 2009-11-19 - 22:24:06 - [32,779] ----D C:\Documents and Settings\Sylvain\Application Data\Sun
O43 - CFD: 2009-11-12 - 17:15:26 - [0,021] ----D C:\Documents and Settings\Sylvain\Application Data\TeamViewer
O43 - CFD: 2011-01-13 - 10:31:08 - [1116,233] ----D C:\Documents and Settings\Sylvain\Application Data\Thunderbird
O43 - CFD: 2012-02-29 - 10:39:30 - [3,438] ----D C:\Documents and Settings\Sylvain\Application Data\U3
O43 - CFD: 2011-04-17 - 09:28:19 - [0,954] ----D C:\Documents and Settings\Sylvain\Application Data\Uniblue
O43 - CFD: 2013-05-26 - 17:06:42 - [17,084] ----D C:\Documents and Settings\Sylvain\Application Data\uTorrent
O43 - CFD: 2011-04-17 - 09:30:58 - [0,007] ----D C:\Documents and Settings\Sylvain\Application Data\Ventrilo
O43 - CFD: 2013-04-10 - 13:00:18 - [0,456] ----D C:\Documents and Settings\Sylvain\Application Data\vlc
O43 - CFD: 2013-04-10 - 08:47:44 - [0] ----D C:\Documents and Settings\Sylvain\Application Data\Vso
O43 - CFD: 2011-04-20 - 19:19:40 - [0,000] ----D C:\Documents and Settings\Sylvain\Application Data\WinRAR
O43 - CFD: 2010-03-07 - 17:37:08 - [0] ----D C:\Documents and Settings\Sylvain\Local Settings\Application Data\ABBYY
O43 - CFD: 2013-03-17 - 18:52:06 - [16,225] ----D C:\Documents and Settings\Sylvain\Local Settings\Application Data\Adobe
O43 - CFD: 2009-09-23 - 22:44:22 - [3,731] ----D C:\Documents and Settings\Sylvain\Local Settings\Application Data\Ahead
O43 - CFD: 2009-11-24 - 18:59:03 - [0] ----D C:\Documents and Settings\Sylvain\Local Settings\Application Data\Apple
O43 - CFD: 2009-12-12 - 14:08:30 - [10,491] ----D C:\Documents and Settings\Sylvain\Local Settings\Application Data\Apple Computer
O43 - CFD: 2012-02-10 - 20:38:28 - [65,521] ----D C:\Documents and Settings\Sylvain\Local Settings\Application Data\Downloaded Installations
O43 - CFD: 2013-04-10 - 08:57:35 - [256,421] ----D C:\Documents and Settings\Sylvain\Local Settings\Application Data\Google
O43 - CFD: 2011-09-14 - 05:56:14 - [0] ----D C:\Documents and Settings\Sylvain\Local Settings\Application Data\Help
O43 - CFD: 2009-09-23 - 19:16:12 - [608,496] ----D C:\Documents and Settings\Sylvain\Local Settings\Application Data\Identities
O43 - CFD: 2013-05-26 - 17:02:56 - [2,623] ----D C:\Documents and Settings\Sylvain\Local Settings\Application Data\LogMeIn Rescue Applet
O43 - CFD: 2013-04-21 - 00:22:33 - [606,877] ----D C:\Documents and Settings\Sylvain\Local Settings\Application Data\Microsoft
O43 - CFD: 2009-09-23 - 19:27:21 - [0] ----D C:\Documents and Settings\Sylvain\Local Settings\Application Data\Microsoft Help
O43 - CFD: 2009-09-23 - 19:47:35 - [632,820] ----D C:\Documents and Settings\Sylvain\Local Settings\Application Data\Mozilla
O43 - CFD: 2012-12-09 - 09:00:05 - [21,852] ----D C:\Documents and Settings\Sylvain\Local Settings\Application Data\MétéoMédia
O43 - CFD: 2012-02-29 - 10:35:02 - [0,001] ----D C:\Documents and Settings\Sylvain\Local Settings\Application Data\PC_Drivers_Headquarters
O43 - CFD: 2010-10-05 - 09:05:56 - [0,039] ----D C:\Documents and Settings\Sylvain\Local Settings\Application Data\Power2Go
O43 - CFD: 2012-03-28 - 08:02:30 - [0] ----D C:\Documents and Settings\Sylvain\Local Settings\Application Data\Research In Motion
O43 - CFD: 2012-11-10 - 12:56:52 - [0,033] ----D C:\Documents and Settings\Sylvain\Local Settings\Application Data\Sun
O43 - CFD: 2011-09-09 - 18:18:23 - [0] ----D C:\Documents and Settings\Sylvain\Local Settings\Application Data\Temp
O43 - CFD: 2011-03-02 - 09:28:33 - [47,119] ----D C:\Documents and Settings\Sylvain\Local Settings\Application Data\Thunderbird
O43 - CFD: 2011-08-08 - 10:47:39 - [0] ----D C:\Documents and Settings\Sylvain\Local Settings\Application Data\uTorrent
O43 - CFD: 2011-05-08 - 08:43:18 - [0] ----D C:\Documents and Settings\Sylvain\Local Settings\Application Data\WMTools Downloaded Files
O43 - CFD: 2011-02-17 - 01:09:06 - [0,014] R---D C:\Documents and Settings\Sylvain\Menu Démarrer\Programmes\Accessoires
O43 - CFD: 2010-04-14 - 07:47:11 - [0,005] ----D C:\Documents and Settings\Sylvain\Menu Démarrer\Programmes\CyberLink PowerDVD
O43 - CFD: 2011-04-04 - 19:02:50 - [0,000] R---D C:\Documents and Settings\Sylvain\Menu Démarrer\Programmes\Démarrage
O43 - CFD: 2011-07-25 - 19:10:23 - [0,005] ----D C:\Documents and Settings\Sylvain\Menu Démarrer\Programmes\LG Power Tools
O43 - CFD: 2012-12-09 - 08:59:56 - [0,003] ----D C:\Documents and Settings\Sylvain\Menu Démarrer\Programmes\MétéoMédia
O43 - CFD: 2009-12-13 - 12:48:14 - [0,000] R---D C:\Documents and Settings\Sylvain\Menu Démarrer\Programmes\Outils d'administration
O43 - CFD: 2010-11-26 - 22:04:11 - [0,006] ----D C:\Documents and Settings\Sylvain\Menu Démarrer\Programmes\Outlook Express Launcher
O43 - CFD: 2009-10-11 - 10:13:05 - [0,006] ----D C:\Documents and Settings\Sylvain\Menu Démarrer\Programmes\PowerISO
O43 - CFD: 2012-04-10 - 10:34:37 - [0,003] ----D C:\Documents and Settings\Sylvain\Menu Démarrer\Programmes\Revo Uninstaller
O43 - CFD: 2011-04-06 - 19:17:10 - [0,002] ----D C:\Documents and Settings\Sylvain\Menu Démarrer\Programmes\WinRAR
~ Program Folder: 204 Scanned in 01mn 11s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.77F352F75F8FCF62A26A95C4BF613077] - 2013-05-26 - 09:08:00 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt   [32142]
O44 - LFC:[MD5.4AF5941E6D027573B138C2DBC4CB346F] - 2013-05-26 - 15:20:44 ---A- . (...) -- C:\WINDOWS\system32\wpa.dbl   [13646]
O44 - LFC:[MD5.05899B096B9DD873ADC2B8CD287C0903] - 2013-05-26 - 15:28:29 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log   [1564493]
~ Files: 3 Scanned in 00mn 25s



---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)
O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll
O46 - SEH:ShellExecuteHooks - DVDIdleShell Class - {93994DE8-8239-4655-B1D1-5F4E91300429} - C:\PROGRA~1\DVDREG~1\DVDShell.dll
~ ShellExecuteHooks:  Scanned in 00mn 00s



---\\ Export de clé d'application autorisée (O47)
O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\sessmgr.exe" [Disabled] .(.Microsoft Corporation.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Mozilla Thunderbird\thunderbird.exe" [Disabled] .(.Mozilla Corporation.) -- C:\Program Files\Mozilla Thunderbird\thunderbird.exe
O47 - AAKE:Key Export SP - "C:\Program Files\TeamViewer\Version4\TeamViewer.exe" [Disabled] .(.TeamViewer GmbH.) -- C:\Program Files\TeamViewer\Version4\TeamViewer.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Messenger\msmsgs.exe" [Disabled] .(.Microsoft Corporation.) -- C:\Program Files\Messenger\msmsgs.exe
O47 - AAKE:Key Export SP - "C:\WINDOWS\Network Diagnostic\xpnetdiag.exe" [Disabled] .(.Microsoft Corporation.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O47 - AAKE:Key Export SP - "C:\Program Files\uTorrent\uTorrent.exe" [Enabled] .(.BitTorrent, Inc..) -- C:\Program Files\uTorrent\uTorrent.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Java\jre6\bin\java.exe" [Disabled] .(...) -- C:\Program Files\Java\jre6\bin\java.exe (.not file.)
O47 - AAKE:Key Export SP - "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" [Enabled] .(.Microsoft Corporation.) -- C:\Program Files\Microsoft Office\Office12\OUTLOOK.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [Enabled] .(.Adobe Systems Incorporated.) -- C:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe
O47 - AAKE:Key Export SP - "C:\Program Files\CyberLink\PowerDVD8\PowerDVD8.exe" [Enabled] .(.CyberLink Corp..) -- C:\Program Files\CyberLink\PowerDVD8\PowerDVD8.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Mozilla Firefox\firefox.exe" [Disabled] .(.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Bonjour\mDNSResponder.exe" [Enabled] .(.Apple Inc..) -- C:\Program Files\Bonjour\mDNSResponder.exe
O47 - AAKE:Key Export SP - "C:\Program Files\iTunes\iTunes.exe" [Enabled] .(.Apple Inc..) -- C:\Program Files\iTunes\iTunes.exe
O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\ARFC\wrtc.exe" [Enabled] .(...) -- C:\WINDOWS\system32\ARFC\wrtc.exe (.not file.)
O47 - AAKE:Key Export SP - "C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe" [Disabled] .(.NVIDIA Corporation.) -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\dmwu.exe" [Disabled] .(...) -- C:\WINDOWS\system32\dmwu.exe (.not file.)
O47 - AAKE:Key Export DP - "C:\Program Files\CyberLink\PowerDVD8\PowerDVD8.exe" [Enabled] .(.CyberLink Corp..) -- C:\Program Files\CyberLink\PowerDVD8\PowerDVD8.exe
O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
~ Keys Export: 19 Scanned in 00mn 00s



---\\ Déni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\WINDOWS\system32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Kerberos Security Package.) -- C:\WINDOWS\system32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\WINDOWS\system32\wdigest.dll
~ LSA: 6 Scanned in 00mn 00s



---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\Wdf01000.sys . (.Microsoft Corporation - Kernel Mode Driver Framework Runtime.) -- C:\WINDOWS\system32\Drivers\Wdf01000.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys . (.Microsoft Corporation - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\system32\Drivers\ip6fw.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\system32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\system32\Drivers\rdpcdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys . (...) -- C:\WINDOWS\system32\Drivers\rdpdd.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOWS\system32\Drivers\rdpwd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\Wdf01000.sys . (.Microsoft Corporation - Kernel Mode Driver Framework Runtime.) -- C:\WINDOWS\system32\Drivers\Wdf01000.sys
~ CSB: 23 Scanned in 00mn 00s



---\\ Image File Execution Options (IFEO) (O50)
O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d
~ IFEO:  Scanned in 00mn 00s



---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech(TM) DSP Group pour MSACM V3.50.) -- C:\WINDOWS\system32\tssoft32.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\system32\iccvid.dll
O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\system32\ir41_32.ax
O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm
O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\system32\ir50_32.dll
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
O52 - TDSD: \Drivers32\"VIDC.DIVX"="divx.dll" . (.DivX, Inc. - DivX.) -- C:\WINDOWS\system32\divx.dll
O52 - TDSD: \Drivers32\"VIDC.XVID"="xvidvfw.dll" . (...) -- C:\WINDOWS\system32\xvidvfw.dll
O52 - TDSD: \Drivers32\"vidc.yv12"="yv12vfw.dll" . (.www.helixcommunity.org - Helix YV12 YUV Codec.) -- C:\WINDOWS\system32\yv12vfw.dll
O52 - TDSD: \Drivers32\"msacm.ac3acm"="ac3acm.acm" . (.fccHandler - AC-3 ACM Codec.) -- C:\WINDOWS\system32\ac3acm.acm
O52 - TDSD: \Drivers32\"VIDC.FFDS"="ff_vfw.dll" . (...) -- C:\WINDOWS\system32\ff_vfw.dll
O52 - TDSD: \Drivers32\"vidc.VP60"="C:\WINDOWS\system32\vp6vfw.dll" . (.On2.com - VP6 VIDEO FOR WINDOWS CODEC.) -- C:\WINDOWS\system32\vp6vfw.dll
O52 - TDSD: \Drivers32\"vidc.VP61"="C:\WINDOWS\system32\vp6vfw.dll" . (.On2.com - VP6 VIDEO FOR WINDOWS CODEC.) -- C:\WINDOWS\system32\vp6vfw.dll
O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
O52 - TDSD: \drivers.desc\"ac3acm.acm"="AC3 ACM Decompressor" . (.fccHandler - AC-3 ACM Codec.) -- C:\WINDOWS\system32\ac3acm.acm
O52 - TDSD: \drivers.desc\"ff_vfw.dll"="ffdshow video encoder" . (...) -- C:\WINDOWS\system32\ff_vfw.dll
O52 - TDSD: \drivers.desc\"vp6vfw.dll"="EA VP6 Codec" . (.On2.com - VP6 VIDEO FOR WINDOWS CODEC.) -- C:\WINDOWS\system32\vp6vfw.dll
~ TDSD: 22 Scanned in 00mn 01s



---\\ ShareTools MSconfig StartupReg (O53)
O53 - SMSR:HKLM\...\startupreg\Adobe ARM  [Key] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe
O53 - SMSR:HKLM\...\startupreg\AdobeCS4ServiceManager  [Key] . (.Adobe Systems Incorporated - Adobe CS4 Service Manager.) -- C:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe
O53 - SMSR:HKLM\...\startupreg\avgnt  [Key] . (...) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\BDRegion  [Key] . (.cyberlink - brs.) -- C:\Program Files\Cyberlink\Shared Files\brs.exe
O53 - SMSR:HKLM\...\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}  [Key] . (.Nero AG - Nero Home.) -- C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
O53 - SMSR:HKLM\...\startupreg\ctfmon.exe  [Key] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O53 - SMSR:HKLM\...\startupreg\DVD43  [Key] . (.Fengtao Software Inc. - DVD Region-Free Application.) -- C:\Program Files\DVDREG~1\DVDRegionFree.exe
O53 - SMSR:HKLM\...\startupreg\FileHippo.com  [Key] . (.FileHippo.com - FileHippo.com Update Checker.) -- C:\Program Files\FileHippo.com\UpdateChecker.exe
O53 - SMSR:HKLM\...\startupreg\IntelliPoint  [Key] . (.Microsoft Corporation - IPoint.exe.) -- C:\Program Files\Microsoft IntelliPoint\ipoint.exe
O53 - SMSR:HKLM\...\startupreg\LightScribe Control Panel  [Key] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe
O53 - SMSR:HKLM\...\startupreg\Malwarebytes Anti-Malware  [Key] . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
O53 - SMSR:HKLM\...\startupreg\MSMSGS  [Key] . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
O53 - SMSR:HKLM\...\startupreg\msnmsgr  [Key] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O53 - SMSR:HKLM\...\startupreg\NvCplDaemon  [Key] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32\NvCpl.dll
O53 - SMSR:HKLM\...\startupreg\NvMediaCenter  [Key] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\WINDOWS\system32\NvMCTray.dll
O53 - SMSR:HKLM\...\startupreg\nwiz  [Key] . (...) -- C:\Program Files\NVIDIA Corporation\nview\nwiz.exe
O53 - SMSR:HKLM\...\startupreg\PDVD8LanguageShortcut  [Key] . (.CyberLink Corp. - PowerDVD Language Application.) -- C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe
O53 - SMSR:HKLM\...\startupreg\QuickTime Task  [Key] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\K-Lite Codec Pack\QuickTime\QTTask.exe
O53 - SMSR:HKLM\...\startupreg\RemoteControl8  [Key] . (.CyberLink Corp. - PowerDVD RC Service.) -- C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe
O53 - SMSR:HKLM\...\startupreg\RoboForm  [Key] . (.Siber Systems - RoboForm TaskBar Icon.) -- C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
O53 - SMSR:HKLM\...\startupreg\SunJavaUpdateSched  [Key] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe
O53 - SMSR:HKLM\...\startupreg\swg  [Key] . (...) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\uTorrent  [Key] . (.BitTorrent, Inc. - µTorrent.) -- C:\Program Files\uTorrent\uTorrent.exe
~ SMSR Keys: 24 Scanned in 00mn 01s



---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll
~ MSCP: 3 Scanned in 00mn 00s



---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "DisableRegistryTools"=0
~ MWPS: 6 Scanned in 00mn 00s



---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=323
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveAutoRun"=67108863
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDrives"=0
O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveAutoRun"=67108863
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveTypeAutoRun"=323
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDrives"=0
~ MWPE Keys: 7 Scanned in 00mn 00s



---\\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.6D7F09CD92A9FEF3A8EFCE66231FDD79] - 2008-08-14 - 06:57:42 ---A- . (.Adobe Systems, Inc. - Adobe Drive File System Driver.) -- C:\WINDOWS\system32\Drivers\adfs.sys   [74720]
O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 2004-08-05 - 07:00:00 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys   [9037]
~ Drivers:  Scanned in 00mn 00s



---\\ Liste des outils de nettoyage (O63)
O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
~ ADS:  Scanned in 00mn 00s



---\\ Liste des services Legacy (O64)
O64 - Services: CurCS - 2011-08-17 - C:\WINDOWS\system32\drivers\afd.sys (AFD)  .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\alg.exe (ALG)  .(.Microsoft Corporation - Application Layer Gateway Service.) - LEGACY_ALG
O64 - Services: CurCS - 2011-02-18 - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Mobile Device)  .(.Apple Inc. - MobileDeviceService.) - LEGACY_APPLE_MOBILE_DEVICE
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (AppMgmt)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_APPMGMT
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\DRIVERS\arp1394.sys (Arp1394)  .(.Microsoft Corporation - IP/1394 Arp Client.) - LEGACY_ARP1394
O64 - Services: CurCS - 2013-03-06 - C:\WINDOWS\system32\Drivers\aswFsBlk.sys (aswFsBlk)  .(.AVAST Software - avast! File System Access Blocking Driver.) - LEGACY_ASWFSBLK
O64 - Services: CurCS - 2013-03-06 - C:\WINDOWS\system32\drivers\aswFW.sys (aswFW)  .(.AVAST Software - avast! Filtering TDI driver.) - LEGACY_ASWFW
O64 - Services: CurCS - 2013-03-06 - C:\WINDOWS\system32\drivers\aswMonFlt.sys (aswMonFlt)  .(.AVAST Software - avast! File System Minifilter for Windows 2.) - LEGACY_ASWMONFLT
O64 - Services: CurCS - 2013-03-06 - C:\WINDOWS\system32\drivers\aswNdis2.sys (aswNdis2)  .(.AVAST Software - avast! Filtering NDIS driver.) - LEGACY_ASWNDIS2
O64 - Services: CurCS - 2013-03-06 - C:\WINDOWS\system32\Drivers\AswRdr.sys (AswRdr)  .(.AVAST Software - avast! TDI Redirect Driver.) - LEGACY_ASWRDR
O64 - Services: CurCS - 2013-03-06 - Pas de propriétaire (aswRvrt)  .(...) - LEGACY_ASWRVRT
O64 - Services: CurCS - 2013-03-06 - C:\WINDOWS\system32\Drivers\aswSnx.sys (aswSnx)  .(.AVAST Software - avast! Virtualization Driver.) - LEGACY_ASWSNX
O64 - Services: CurCS - 2013-03-06 - C:\WINDOWS\system32\Drivers\aswSP.sys (aswSP)  .(.AVAST Software - avast! self protection module.) - LEGACY_ASWSP
O64 - Services: CurCS - 2013-03-06 - C:\WINDOWS\system32\Drivers\aswTdi.sys (aswTdi)  .(.AVAST Software - avast! TDI Filter Driver.) - LEGACY_ASWTDI
O64 - Services: CurCS - 2013-03-06 - Pas de propriétaire (aswVmm)  .(...) - LEGACY_ASWVMM
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (AudioSrv)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_AUDIOSRV
O64 - Services: CurCS - 2013-03-06 - C:\Program Files\AVAST Software\Avast\AvastSvc.exe (avast! Antivirus)  .(.AVAST Software - avast! Service.) - LEGACY_AVAST!_ANTIVIRUS
O64 - Services: CurCS - 2013-03-06 - C:\Program Files\AVAST Software\Avast\afwServ.exe (avast! Firewall)  .(.AVAST Software - avast! firewall service.) - LEGACY_AVAST!_FIREWALL
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (BITS)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_BITS
O64 - Services: CurCS - 2011-04-06 - C:\Program Files\Bonjour\mDNSResponder.exe (Bonjour Service)  .(.Apple Inc. - Bonjour Service.) - LEGACY_BONJOUR_SERVICE
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (Browser)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_BROWSER
O64 - Services: CurCS - 1899-12-30 - Pas de propriétaire (catchme)  .(...) - LEGACY_CATCHME
O64 - Services: CurCS - 2008-07-25 - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (clr_optimization_v2.0.50727_32)  .(.Microsoft Corporation - .NET Runtime Optimization Service.) - LEGACY_CLR_OPTIMIZATION_V2.0.50727_32
O64 - Services: CurCS - 2010-03-18 - C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (clr_optimization_v4.0.30319_32)  .(.Microsoft Corporation - .NET Runtime Optimization Service.) - LEGACY_CLR_OPTIMIZATION_V4.0.30319_32
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\dllhost.exe (COMSysApp)  .(.Microsoft Corporation - COM Surrogate.) - LEGACY_COMSYSAPP
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (CryptSvc)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_CRYPTSVC
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (DcomLaunch)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DCOMLAUNCH
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (Dhcp)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DHCP
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\dmadmin.exe (dmadmin)  .(.Microsoft Corp., Veritas Software - Processus du service Gestionnaire de disque.) - LEGACY_DMADMIN
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\drivers\dmboot.sys (dmboot)  .(.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) - LEGACY_DMBOOT
O64 - Services: CurCS - 2004-08-05 - C:\WINDOWS\system32\drivers\dmload.sys (dmload)  .(.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) - LEGACY_DMLOAD
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (dmserver)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DMSERVER
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (Dnscache)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DNSCACHE
O64 - Services: CurCS - 2010-01-01 - C:\WINDOWS\system32\Drivers\ElbyCDIO.sys (ElbyCDIO)  .(.Elaborate Bytes AG - ElbyCD Windows NT/2000/XP I/O driver.) - LEGACY_ELBYCDIO
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (ERSvc)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_ERSVC
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (EventSystem)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_EVENTSYSTEM
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (FastUserSwitchingCompatibility)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_FASTUSERSWITCHINGCOMPATIBILITY
O64 - Services: CurCS - 2010-04-19 - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (FLEXnet Licensing Service)  .(.Acresso Software Inc. - Activation Licensing Service.) - LEGACY_FLEXNET_LICENSING_SERVICE
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\drivers\fltmgr.sys (FltMgr)  .(.Microsoft Corporation - Microsoft Filesystem Filter Manager.) - LEGACY_FLTMGR
O64 - Services: CurCS - 2008-07-29 - C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe (FontCache3.0.0.0)  .(.Microsoft Corporation - PresentationFontCache.exe.) - LEGACY_FONTCACHE3.0.0.0
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\DRIVERS\msgpc.sys (Gpc)  .(.Microsoft Corporation - MS General Packet Classifier.) - LEGACY_GPC
O64 - Services: CurCS - 2011-04-17 - C:\Program Files\Google\Update\GoogleUpdate.exe (gupdate)  .(.Google Inc. - Programme d'installation de Google.) - LEGACY_GUPDATE
O64 - Services: CurCS - 2011-04-17 - C:\Program Files\Google\Update\GoogleUpdate.exe (gupdatem)  .(.Google Inc. - Programme d'installation de Google.) - LEGACY_GUPDATEM
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (helpsvc)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HELPSVC
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (HidServ)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HIDSERV
O64 - Services: CurCS - 2009-10-20 - C:\WINDOWS\system32\Drivers\HTTP.sys (HTTP)  .(.Microsoft Corporation - HTTP Protocol Stack.) - LEGACY_HTTP
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (HTTPFilter)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HTTPFILTER
O64 - Services: CurCS - 2008-07-29 - C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe (idsvc)  .(.Microsoft Corporation - Windows CardSpace.) - LEGACY_IDSVC
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\imapi.exe (ImapiService)  .(.Microsoft Corporation - API Image Mastering.) - LEGACY_IMAPISERVICE
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\DRIVERS\ipnat.sys (IpNat)  .(.Microsoft Corporation - IP Network Address Translator.) - LEGACY_IPNAT
O64 - Services: CurCS - 2011-04-14 - C:\Program Files\iPod\bin\iPodService.exe (iPod Service)  .(.Apple Inc. - iPodService Module (32-bit).) - LEGACY_IPOD_SERVICE
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\DRIVERS\ipsec.sys (IPSec)  .(.Microsoft Corporation - IPSec Driver.) - LEGACY_IPSEC
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\DRIVERS\irda.sys (irda)  .(.Microsoft Corporation - IRDA Protocol Driver.) - LEGACY_IRDA
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (Irmon)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_IRMON
O64 - Services: CurCS - 2012-11-10 - C:\Program Files\Java\jre7\bin\jqs.exe (JavaQuickStarterService)  .(.Oracle Corporation - Java(TM) Quick Starter Service.) - LEGACY_JAVAQUICKSTARTERSERVICE
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (lanmanserver)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LANMANSERVER
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (LanmanWorkstation)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LANMANWORKSTATION
O64 - Services: CurCS - 2009-08-20 - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe (LightScribeService)  .(.Hewlett-Packard Company - LightScribe Service.) - LEGACY_LIGHTSCRIBESERVICE
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (LmHosts)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LMHOSTS
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\Drivers\mountmgr.sys (mountmgr)  .(.Microsoft Corporation - Mount Manager.) - LEGACY_MOUNTMGR
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\DRIVERS\mrxdav.sys (MRxDAV)  .(.Microsoft Corporation - Windows NT WebDav Minirdr.) - LEGACY_MRXDAV
O64 - Services: CurCS - 2011-07-15 - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys (MRxSmb)  .(.Microsoft Corporation - Windows NT SMB Minirdr.) - LEGACY_MRXSMB
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\msdtc.exe (MSDTC)  .(.Microsoft Corporation - MS DTC console program.) - LEGACY_MSDTC
O64 - Services: CurCS - 2008-05-19 - C:\WINDOWS\system32\msiexec.exe (MSIServer)  .(.Microsoft Corporation - Windows® installer.) - LEGACY_MSISERVER
O64 - Services: CurCS - 2011-04-21 - C:\WINDOWS\system32\Drivers\Mup.sys (Mup)  .(.Microsoft Corporation - Multiple UNC Provider driver.) - LEGACY_MUP
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\Drivers\NDIS.sys (NDIS)  .(.Microsoft Corporation - NDIS 5.1 wrapper driver.) - LEGACY_NDIS
O64 - Services: CurCS - 2011-07-08 - C:\WINDOWS\system32\DRIVERS\ndistapi.sys (NdisTapi)  .(.Microsoft Corporation - NDIS 3.0 connection wrapper driver.) - LEGACY_NDISTAPI
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\DRIVERS\ndisuio.sys (Ndisuio)  .(.Microsoft Corporation - NDIS User mode I/O Driver.) - LEGACY_NDISUIO
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\DRIVERS\netbios.sys (NetBIOS)  .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\DRIVERS\netbt.sys (NetBT)  .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (Netman)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NETMAN
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (Nla)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NLA
O64 - Services: CurCS - 2006-12-23 - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe (NMIndexingService)  .(.Nero AG - Nero Home.) - LEGACY_NMINDEXINGSERVICE
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (NtmsSvc)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NTMSSVC
O64 - Services: CurCS - 2012-09-23 - C:\WINDOWS\system32\nvsvc32.exe (nvsvc)  .(.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 306.8.) - LEGACY_NVSVC
O64 - Services: CurCS - 2012-09-23 - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (nvUpdatusService)  .(.NVIDIA Corporation - NVIDIA Settings Update Manager.) - LEGACY_NVUPDATUSSERVICE
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\Drivers\PartMgr.sys (PartMgr)  .(.Microsoft Corporation - Partition Manager.) - LEGACY_PARTMGR
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\lsass.exe (PolicyAgent)  .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_POLICYAGENT
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\lsass.exe (ProtectedStorage)  .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_PROTECTEDSTORAGE
O64 - Services: CurCS - 2007-07-24 - c:\Program Files\Fichiers communs\Protexis\License Service\PsiService_2.exe (PSI_SVC_2)  .(.Protexis Inc. - PsiService PsiService.) - LEGACY_PSI_SVC_2
O64 - Services: CurCS - 2011-02-17 - C:\WINDOWS\system32\Drivers\pssdk42.sys (PSSDK42)  .(.microOLAP Technologies LTD - PSSDK Driver Protocol v4.2 32bit.) - LEGACY_PSSDK42
O64 - Services: CurCS - 2004-08-05 - C:\WINDOWS\system32\DRIVERS\rasacd.sys (RasAcd)  .(.Microsoft Corporation - RAS Automatic Connection Driver.) - LEGACY_RASACD
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (RasMan)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_RASMAN
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\DRIVERS\rdbss.sys (Rdbss)  .(.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - LEGACY_RDBSS
O64 - Services: CurCS - 2004-08-05 - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys (RDPCDD)  .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD
O64 - Services: CurCS - 2007-10-15 - C:\Program Files\CyberLink\Shared Files\RichVideo.exe (RichVideo)  .(.Pas de propriétaire - RichVideo Module.) - LEGACY_RICHVIDEO
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (RpcSs)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_RPCSS
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\lsass.exe (SamSs)  .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_SAMSS
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (Schedule)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SCHEDULE
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (seclogon)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SECLOGON
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (SENS)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SENS
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (SharedAccess)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SHAREDACCESS
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (ShellHWDetection)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SHELLHWDETECTION
O64 - Services: CurCS - 2010-08-17 - C:\WINDOWS\system32\spoolsv.exe (Spooler)  .(.Microsoft Corporation - Spooler SubSystem App.) - LEGACY_SPOOLER
O64 - Services: CurCS - 1899-12-30 - Pas de propriétaire (sptd)  .(...) - LEGACY_SPTD
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\DRIVERS\sr.sys (sr)  .(.Microsoft Corporation - Pilote de filtre de système de fichiers pou.) - LEGACY_SR
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (srservice)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SRSERVICE
O64 - Services: CurCS - 2011-02-17 - C:\WINDOWS\system32\DRIVERS\srv.sys (Srv)  .(.Microsoft Corporation - Server driver.) - LEGACY_SRV
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (SSDPSRV)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SSDPSRV
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (stisvc)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_STISVC
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\dllhost.exe (SwPrv)  .(.Microsoft Corporation - COM Surrogate.) - LEGACY_SWPRV
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\smlogsvc.exe (SysmonLog)  .(.Microsoft Corporation - Service des alertes et des journaux de perf.) - LEGACY_SYSMONLOG
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (TapiSrv)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TAPISRV
O64 - Services: CurCS - 2008-06-20 - C:\WINDOWS\system32\DRIVERS\tcpip.sys (Tcpip)  .(.Microsoft Corporation - TCP/IP Protocol Driver.) - LEGACY_TCPIP
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (TermService)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TERMSERVICE
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (Themes)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_THEMES
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (TrkWks)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TRKWKS
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (upnphost)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_UPNPHOST
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\drivers\vga.sys (VgaSave)  .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\vssvc.exe (VSS)  .(.Microsoft Corporation - Service de cliché instantané de volumes Mic.) - LEGACY_VSS
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (W32Time)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_W32TIME
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\DRIVERS\wanarp.sys (Wanarp)  .(.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - LEGACY_WANARP
O64 - Services: CurCS - 2009-07-14 - C:\WINDOWS\system32\Drivers\wdf01000.sys (Wdf01000)  .(.Microsoft Corporation - Kernel Mode Driver Framework Runtime.) - LEGACY_WDF01000
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (WebClient)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WEBCLIENT
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (winmgmt)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WINMGMT
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\wbem\wmiapsrv.exe (WmiApSrv)  .(.Microsoft Corporation - Service de la carte de performance WMI.) - LEGACY_WMIAPSRV
O64 - Services: CurCS - 2010-03-18 - C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe (WPFFontCache_v0400)  .(.Microsoft Corporation - wpffontcache_v0400.exe.) - LEGACY_WPFFONTCACHE_V0400
O64 - Services: CurCS - 2004-08-05 - C:\WINDOWS\system32\drivers\ws2ifsl.sys (WS2IFSL)  .(.Microsoft Corporation - Winsock2 IFS Layer.) - LEGACY_WS2IFSL
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (wscsvc)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WSCSVC
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (wuauserv)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WUAUSERV
O64 - Services: CurCS - 2006-09-28 - C:\WINDOWS\system32\DRIVERS\WudfPf.sys (WudfPf)  .(.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) - LEGACY_WUDFPF
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (WudfSvc)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WUDFSVC
O64 - Services: CurCS - 2008-04-13 - C:\WINDOWS\system32\svchost.exe (WZCSVC)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WZCSVC
O64 - Services: CurCS - 2007-11-02 - C:\Program Files\CyberLink\PowerDVD\000.fcl ({95808DC4-FA4A-4C74-92FE-5B863F82066B})  .(.Cyberlink Corp. - FCL Driver.) - LEGACY_{95808DC4-FA4A-4C74-92FE-5B863F82066B}
~ Legacy: 162 Scanned in 00mn 02s



---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <ComFile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKLM\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe
O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <ComFile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe
~ FASS Keys: 16 Scanned in 00mn 00s



---\\ Start Menu Internet (O68)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\internet explorer\iexplore.exe
~ Keys:  Scanned in 00mn 00s



---\\ Search Browser Infection (O69)
O69 - SBI: SearchScopes [HKCU] ${searchCLSID} - (@ieframe.dll,-12512) - http://search.live.com
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {43A2665C-9B48-48E1-B76D-7CABB4F91B9B} - (Google) - http://www.google.com
O69 - SBI: SearchScopes [HKCU] {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} [DefaultScope] - (MyStart Search) - http://mystart.incredibar.com  =>Adware.IncrediBar
~ Keys:  Scanned in 00mn 00s



---\\ Recherche des services démarrés par Svchost (O83)
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (...) -- C:\WINDOWS\system32\appmgmts.dll   [0]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS\system32\audiosrv.dll   [42496]
O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\system32\browser.dll   [78336]
O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS\system32\cryptsvc.dll   [62464]
O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - DLL Service gestionnaire de disque logique.) -- C:\WINDOWS\system32\dmserver.dll   [24576]
O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - Service client DHCP.) -- C:\WINDOWS\system32\dhcpcsvc.dll   [127488]
O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS\system32\ersvc.dll   [23040]
O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\es.dll   [253952]
O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll   [135680]
O83 - Search Svchost Services: HidServ (HidServ) . (.Microsoft Corporation - HID Audio Service.) -- C:\WINDOWS\system32\hidserv.dll   [21504]
O83 - Search Svchost Services: Irmon (Irmon) . (.Microsoft Corporation - Moniteur infrarouge.) -- C:\WINDOWS\system32\irmon.dll   [29184]
O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\system32\srvsvc.dll   [99840]
O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS\system32\wkssvc.dll   [132096]
O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS\system32\msgsvc.dll   [33792]
O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Gestionnaire de connexions réseau.) -- C:\WINDOWS\system32\netman.dll   [198144]
O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll   [247808]
O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Gestionnaire de stockage amovible.) -- C:\WINDOWS\system32\ntmssvc.dll   [438272]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\system32\rasauto.dll   [88576]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\system32\rasmans.dll   [186368]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS\system32\mprdim.dll   [53248]
O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll   [194560]
O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secondaire.) -- C:\WINDOWS\system32\seclogon.dll   [18944]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll   [39424]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à Microsoft NAT.) -- C:\WINDOWS\system32\ipnathlp.dll   [332800]
O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - Service de restauration du système.) -- C:\WINDOWS\system32\srsvc.dll   [171520]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\WINDOWS\system32\tapisrv.dll   [249856]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll   [135680]
O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll   [90112]
O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Service de temps Windows.) -- C:\WINDOWS\system32\w32time.dll   [178176]
O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Service configuration automatique sans fil.) -- C:\WINDOWS\system32\wzcsvc.dll   [483840]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll   [145408]
O83 - Search Svchost Services: wscsvc (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) -- C:\WINDOWS\system32\wscsvc.dll   [80896]
O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS\system32\xmlprov.dll   [129024]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\WINDOWS\system32\qmgr.dll   [409088]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll   [6656]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll   [135680]
O83 - Search Svchost Services: helpsvc (helpsvc) . (.Microsoft Corporation - Microsoft PCHealth Service Holder.) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll   [38400]
O83 - Search Svchost Services: WmdmPmSN (WmdmPmSN) . (.Microsoft Corporation - Microsoft Media Device Service Provider.) -- C:\WINDOWS\system32\MsPMSNSv.dll   [27136]
O83 - Search Svchost Services: napagent (napagent) . (.Microsoft Corporation - Exécution du service Agent de quarantaine.) -- C:\WINDOWS\system32\qagentrt.dll   [293376]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\WINDOWS\system32\kmsvc.dll   [61440]
~ Services: 40 Scanned in 00mn 02s



---\\ Recherche particuliere à la racine de certains dossiers (O84)
[MD5.D7327CB02005AC33504CA70A754EC9E0] [SPRF][2013-05-26] (...) -- C:\Documents and Settings\All Users\Application Data\8ADECEF8B4.sys   [88]
[MD5.265E4D5575C002684FEAAA80EF7851DB] [SPRF][2013-05-26] (...) -- C:\Documents and Settings\All Users\Application Data\KGyGaAvL.sys   [2516]
[MD5.254FBCA565E049648B0CCE2CEADF05D2] [SPRF][2009-10-04] (...) -- C:\Documents and Settings\Sylvain\Application Data\inst.exe   [87608]
[MD5.5B6C11DE7E839C05248CED8825470FEF] [SPRF][2009-10-04] (.VSO Software - low level access layer for CD/DVD/BD devices.) -- C:\Documents and Settings\Sylvain\Application Data\pcouffin.sys   [47360]
[MD5.400EBC8B593132B4AEBFD81DB00737B1] [SPRF][2009-12-07] (...) -- C:\Documents and Settings\Sylvain\Application Data\ViewerApp.dat   [560]
[MD5.77D31FB654A53DBFB151C7A8E11E3A02] [SPRF][2009-07-17] (.Adobe Systems Incorporated - Adobe® Flash® Player ActiveX Installer.) -- C:\WINDOWS\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe   [1962160]
~ Files:  Scanned in 00mn 00s



---\\ Scan Additionnel (O88)
Database Version : v2.11716 - (2013-04-25)
Clés trouvées (Keys found) : 30
Valeurs trouvées (Values found) : 0
Dossiers trouvés  (Folders found) : 0
Fichiers trouvés  (Files found) : 0

[HKLM\Software\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}]   =>PUP.Funmoods
[HKLM\Software\Classes\CLSID\{35b8892d-c3fb-4d88-990d-31db2ebd72bd}]   =>Adware.RecordNRip
[HKLM\Software\Classes\Interface\{3f607e46-0d3c-4442-b1de-de7fa4768f5c}]   =>Adware.RecordNRip
[HKLM\Software\Classes\TypeLib\{93e3d79c-0786-48ff-9329-93bc9f6dc2b3}]   =>Adware.RecordNRip
[HKLM\Software\Classes\Interface\{fe0273d1-99df-4ac0-87d5-1371c6271785}]   =>Adware.RecordNRip
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{336D0C35-8A85-403a-B9D2-65C292C39087}]   =>Adware.IncrediBar
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{336D0C35-8A85-403a-B9D2-65C292C39087}]   =>Adware.IncrediBar
[HKLM\Software\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}]   =>Adware.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}]   =>Adware.IncrediBar
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}]   =>Adware.IncrediBar
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}]   =>Adware.Yontoo
[HKLM\Software\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}]   =>Adware.CDNHelper
[HKLM\Software\Classes\AppID\{BDB69379-802F-4eaf-B541-F8DE92DD98DB}]   =>Toolbar.Babylon
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}]   =>Adware.IncrediBar
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9639E4A-801B-4843-AEE3-03D9DA199E77}]   =>Adware.IncrediBar
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F9639E4A-801B-4843-AEE3-03D9DA199E77}]   =>Adware.IncrediBar
[HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\incredibar]   =>Adware.IncrediBar
[HKLM\Software\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd]   =>Adware.IncrediBar
[HKCU\Software\1ClickDownload]   =>PUP.1ClickDownloader
[HKLM\Software\Iminent]   =>Adware.IMBooster
[HKCU\Software\SweetIM]   =>PUP.SweetIM
[HKLM\Software\SweetIM]   =>PUP.SweetIM
[HKLM\Software\Tarma Installer]   =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{336D0C35-8A85-403A-B9D2-65C292C39087}]   =>Adware.IncrediBar
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{336D0C35-8A85-403A-B9D2-65C292C39087}]   =>Adware.IncrediBar
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]   =>Toolbar.Yahoo
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]   =>Toolbar.Yahoo
[HKLM\Software\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]   =>Toolbar.Yahoo
[HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]   =>Toolbar.Yahoo
[HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\Arpcache\incredibar]   =>Adware.Incredibar
~ Additionnel Scan: 296442 Items scanned in 01mn 20s



---\\ Product Upgrade Codes (O90)
O90 - PUC: "000021090200C0400000000000F01FEC" . (.Module de compatibilité pour Microsoft Office System 2007.) -- C:\WINDOWS\Installer\{90120000-0020-040C-0000-0000000FF1CE}\O12ConvIcon.exe
O90 - PUC: "0153467DEA1CDA440B9F60564C7DB3DF" . (.WordPerfect Office X5 - LegalTools.) -- c:\WINDOWS\Installer\{D7643510-C1AE-44AD-B0F9-0665C4D73BFD}\ARPPRODUCTICON.exe
O90 - PUC: "07B23B4318082E1198FA8BCAF689CC3E" . (.Google Earth Plug-in.) -- C:\WINDOWS\Installer\{34B32B70-8081-11E2-89AF-B8AC6F98CCE3}\ARPPRODUCTICON.exe
O90 - PUC: "0AAC118621FB4D11E91A0005AB3E711E" . (.PowerDVD.) -- C:\WINDOWS\Installer\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\ARPPRODUCTICON.exe
O90 - PUC: "127B935E8544CFE4B80D404D480215EA" . (.Wordperfect Office X5 - EN.) -- c:\WINDOWS\Installer\{E539B721-4458-4EFC-8BD0-04D4842051AE}\ARPPRODUCTICON.exe
O90 - PUC: "15539BAAEFF32B2438516952B2CB0133" . (.Nero 7 Essentials.) -- C:\WINDOWS\Installer\{AAB93551-3FFE-42B2-8315-96252BBC1033}\ARPPRODUCTICON.exe
O90 - PUC: "19CAB8738EA30F54094EF4183EAEBE5C" . (.WordPerfect Office X5 - PR.) -- c:\WINDOWS\Installer\{378BAC91-3AE8-45F0-90E4-4F81E3EAEBC5}\ARPPRODUCTICON.exe
O90 - PUC: "1A4ED6ED3430EBD4D92C6E76AA305F97" . (.WordPerfect Office X5 - Setup Files.) -- c:\WINDOWS\Installer\{DE6DE4A1-0343-4DBE-9DC2-E667AA03F579}\ARPPRODUCTICON.exe
O90 - PUC: "22DD1096A725FE1409958EF1DE9E4E49" . (.Windows Presentation Foundation Language Pack (FRA).) -- c:\WINDOWS\Installer\{6901DD22-527A-41EF-9059-E81FEDE9E494}\ArpIcon
O90 - PUC: "24E1B4E6138A4B447A500D606F5806CE" . (.WordPerfect Office X5 - Graphics.) -- c:\WINDOWS\Installer\{6E4B1E42-A831-44B4-A705-D006F68560EC}\ARPPRODUCTICON.exe
O90 - PUC: "2A49E8CC7C55064459C3A297100875C8" . (.LightScribe System Software.) -- C:\WINDOWS\Installer\{CC8E94A2-55C7-4460-953C-2A790180578C}\ARPPRODUCTICON.exe
O90 - PUC: "3069DE7667BC83347B0B96F01E444CAD" . (.WordPerfect Lightning.) -- c:\WINDOWS\Installer\{67ED9603-CB76-4338-B7B0-690FE144C4DA}\ARPPRODUCTICON.exe
O90 - PUC: "35839F003D9D59748AE948CCAB20509C" . (.Microsoft IntelliPoint 8.0.) -- C:\WINDOWS\Installer\{00F93853-D9D3-4795-A89E-84CCBA0205C9}\Mouse.ico
O90 - PUC: "3674A35834664064D84682DB8D29F5C4" . (.Apple Application Support.) -- C:\WINDOWS\Installer\{853A4763-6643-4604-8D64-28BDD8925F4C}\WinInstall.ico
O90 - PUC: "3DB30219E3C6F274DADB6FF0CDC70401" . (.Camera Window DS.) -- C:\WINDOWS\Installer\{91203BD3-6C3E-472F-ADBD-F60FDC7C4010}\ARPPRODUCTICON.exe
O90 - PUC: "3F1E9F561C2A9AA4F9333AEA0B52F5E0" . (.Garmin USB Drivers.) -- C:\WINDOWS\Installer\{65F9E1F3-A2C1-4AA9-9F33-A3AEB0255F0E}\GarminSetup.ico
O90 - PUC: "41DC8ECD5FBF46449B4A1EE87453647C" . (.Assistant de connexion Windows Live.) -- C:\WINDOWS\Installer\{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}\prodicon.ico
O90 - PUC: "4254C26B5B1456E459B263EA5CE1F355" . (.WordPerfect Office X5.) -- c:\WINDOWS\Installer\{B62C4524-41B5-4E65-952B-36AEC51E3F55}\ARPPRODUCTICON.exe
O90 - PUC: "4331DF6A57DF159439D5808F7C4E6C0B" . (.WordPerfect Office X5 - Sharepoint.) -- c:\WINDOWS\Installer\{A6FD1334-FD75-4951-935D-08F8C7E4C6B0}\ARPPRODUCTICON.exe
O90 - PUC: "51D7D0F163A84EA4583707EB7AFD73D9" . (.WordPerfect Office X5 - Migration Manager.) -- c:\WINDOWS\Installer\{1F0D7D15-8A36-4AE4-8573-70BEA7DF379D}\ARPPRODUCTICON.exe
O90 - PUC: "582A5C716B7FB294F8B343D3208BD457" . (.WordPerfect Office X5 - Common.) -- c:\WINDOWS\Installer\{17C5A285-F7B6-492B-8F3B-343D02B84D75}\ARPPRODUCTICON.exe
O90 - PUC: "5DB192822D29586428CDCC9A525CC3AC" . (.RemoteCapture Task 1.1.) -- C:\WINDOWS\Installer\{28291BD5-92D2-4685-82DC-CCA925C53CCA}\ARPPRODUCTICON.exe
O90 - PUC: "5DB954468EA398647B0B5DB766D73899" . (.WordPerfect Office X5 - PerfectExperts EN.) -- c:\WINDOWS\Installer\{64459BD5-3AE8-4689-B7B0-D57B667D8399}\ARPPRODUCTICON.exe
O90 - PUC: "62287FAB00234BD4EB33D429A2978904" . (.Windows Presentation Foundation.) -- C:\WINDOWS\Installer\{BAF78226-3200-4DB4-BE33-4D922A799840}\ArpIcon
O90 - PUC: "68267DD57EB949849A099E509EA18C81" . (.Windows Live Mail.) -- C:\WINDOWS\Installer\{5DD76286-9BE7-4894-A990-E905E91AC818}\wlmail.exe
O90 - PUC: "68AB67CA7DA73301B744BA0000000010" . (.Adobe Reader XI (11.0.02).) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1033-7B44-AB0000000001}\SC_Reader.ico
O90 - PUC: "6D0A1F19DA32EF94D8E4734958562241" . (.Camera Support Core Library.) -- C:\WINDOWS\Installer\{91F1A0D6-23AD-49FE-8D4E-379485652214}\ARPPRODUCTICON.exe
O90 - PUC: "7021827C4AA4E5245BA7E0E98F446553" . (.Camera Window MC.) -- C:\WINDOWS\Installer\{C7281207-4AA4-425E-B57A-0E9EF8445635}\ARPPRODUCTICON.exe
O90 - PUC: "70DC4B91919120042BF85A2D2007620E" . (.WordPerfect Office X5 - IPM.) -- c:\WINDOWS\Installer\{19B4CD07-1919-4002-B28F-A5D2027026E0}\ARPPRODUCTICON.exe
O90 - PUC: "807C31C682FF1994486E55620AEE76B7" . (.WordPerfect Office X5 - Oxford.) -- c:\WINDOWS\Installer\{6C13C708-FF28-4991-84E6-5526A0EE677B}\ARPPRODUCTICON.exe
O90 - PUC: "80D7614D16F044F4CBF3624B6970544C" . (.WordPerfect Office X5 - Skins.) -- c:\WINDOWS\Installer\{D4167D08-0F61-4F44-BC3F-26B4960745C4}\ARPPRODUCTICON.exe
O90 - PUC: "85CC37848D96D094E9C500D12CEE0201" . (.WordPerfect Lightning - Messages.) -- c:\WINDOWS\Installer\{4873CC58-69D8-490D-9E5C-001DC2EE2010}\ARPPRODUCTICON.exe
O90 - PUC: "85CC37848D96D094E9C500D12CEE0202" . (.WordPerfect Lightning - IPM.) -- c:\WINDOWS\Installer\{4873CC58-69D8-490D-9E5C-001DC2EE2020}\ARPPRODUCTICON.exe
O90 - PUC: "8E9FBE31FF280D743A4235B497FEF717" . (.WordPerfect Office X5 - WT.) -- c:\WINDOWS\Installer\{13EBF9E8-82FF-47D0-A324-534B79EF7F71}\ARPPRODUCTICON.exe
O90 - PUC: "9235E7D91575B5345B58E0FF1587A302" . (.NWZ-E350 WALKMAN Guide.) -- C:\WINDOWS\Installer\{9D7E5329-5751-435B-B585-0EFF51783A20}\ARPPRODUCTICON.exe
O90 - PUC: "92C6C5DCBC6E3FD44BF50A04781B2C49" . (.WordPerfect Office X5 - Templates.) -- c:\WINDOWS\Installer\{CD5C6C29-E6CB-4DF3-B45F-A04087B1C294}\ARPPRODUCTICON.exe
O90 - PUC: "979257759C1A20C458B6BF2BA74C0EC2" . (.QuickTime.) -- C:\WINDOWS\Installer\{57752979-A1C9-4C02-856B-FBB27AC4E02C}\Installer.ico
O90 - PUC: "9D6C16CEB95141B4AA3FFA33CFAF05DD" . (.WordPerfect Office X5 - WP.) -- c:\WINDOWS\Installer\{EC61C6D9-159B-4B14-AAF3-AF33FCFA50DD}\ARPPRODUCTICON.exe
O90 - PUC: "A7D67D1CBB3FAE747A64B5E1F2CFD12F" . (.Canon ZoomBrowser EX.) -- C:\WINDOWS\Installer\{C1D76D7A-F3BB-47EA-A746-5B1E2FFC1DF2}\ARPPRODUCTICON.exe
O90 - PUC: "A85969C4265634148B02FF84093D7B43" . (.Camera Window DVC.) -- C:\WINDOWS\Installer\{4C96958A-6562-4143-B820-FF4890D3B734}\ARPPRODUCTICON.exe
O90 - PUC: "B61EF353EF03A964FB559B874F120830" . (.iTunes.) -- C:\WINDOWS\Installer\{353FE16B-30FE-469A-BF55-B978F4218003}\Installer.ico
O90 - PUC: "BD6219EF48F5A594BB64C327F4C1D280" . (.MSXML 6.0 Parser (KB925673).) -- C:\WINDOWS\Installer\{FE9126DB-5F84-495A-BB46-3C724F1C2D08}\ARPIco
O90 - PUC: "C141C48B31A9EB44A99603D1B7118D63" . (.Windows Workflow Foundation FR Language Pack.) -- c:\WINDOWS\Installer\{B84C141C-9A13-44BE-9A69-301D7B11D836}\Setup.ico
O90 - PUC: "D381B5441F4F8C549BBD1F3155AC56B7" . (.Windows Live Messenger.) -- C:\WINDOWS\Installer\{445B183D-F4F1-45C8-B9DB-F11355CA657B}\MsblIco.Exe
O90 - PUC: "D3DCDEAD189B01F41BB7677435DEFAF9" . (.WordPerfect Office X5 - QP.) -- c:\WINDOWS\Installer\{DAEDCD3D-B981-4F10-B17B-764753EDAF9F}\ARPPRODUCTICON.exe
O90 - PUC: "D7314F9862C648A4DB8BE2A5B47BE100" . (.Microsoft Silverlight.) -- C:\WINDOWS\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ARPIcon
O90 - PUC: "DB5B4E2CBD2371840A0643A11BC7F309" . (.Bonjour.) -- C:\WINDOWS\Installer\{C2E4B5BD-32DB-4817-A060-341AB17C3F90}\Bonjour.ico
O90 - PUC: "DDB6C50237B7ED245850A990F3532A83" . (.Outil de téléchargement Windows Live.) -- C:\WINDOWS\Installer\{205C6BDD-7B73-42DE-8505-9A093F35A238}\RichUpload.ico
O90 - PUC: "DF94EE6F637B88840AA511F5B31106AF" . (.WordPerfect Lightning - MSOM.) -- c:\WINDOWS\Installer\{F6EE49FD-B736-4888-A05A-115F3B1160FA}\ARPPRODUCTICON.exe
O90 - PUC: "ECE30FD14FA6E4141B813C611F159A2A" . (.Corel WordPerfect Office - iFilter.) -- c:\WINDOWS\Installer\{1DF03ECE-6AF4-414E-B118-C316F151A9A2}\ARPPRODUCTICON.exe
O90 - PUC: "ED23776E7833E1F4DBADD2C080CB20B5" . (.WordPerfect Office X5 - Filters.) -- c:\WINDOWS\Installer\{E67732DE-3387-4F1E-BDDA-2D0C08BC025B}\ARPPRODUCTICON.exe
O90 - PUC: "EE8F2D1754D959D46A6F6F34C3B2495B" . (.WordPerfect Office X5 - System EN.) -- c:\WINDOWS\Installer\{71D2F8EE-9D45-4D95-A6F6-F6433C2B94B5}\ARPPRODUCTICON.exe
O90 - PUC: "F13E2FB2BB8B7A046B05892DE8F0D774" . (.PowerDVD.) -- C:\WINDOWS\Installer\{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}\ARPPRODUCTICON.exe
O90 - PUC: "F5BEACACD471C7C4CA653A23988A70AC" . (.Apple Mobile Device Support.) -- C:\WINDOWS\Installer\{CACAEB5F-174D-4C7C-AC56-A33289A807CA}\Installer.ico
O90 - PUC: "F65865963B6B0EB4ABB0F894B53E0233" . (.Apple Software Update.) -- C:\WINDOWS\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}\Installer.ico
O90 - PUC: "FA4EDAFCFC0C40A47A674731811F56F8" . (.Content Transfer.) -- C:\WINDOWS\Installer\{CFADE4AF-C0CF-4A04-A776-741318F1658F}\ARPPRODUCTICON.exe
~ Update Products: 141 Scanned in 00mn 00s



---\\ MyComputer Name Space (O92)
O92 - MNS: Web Folders - {BDEADF00-C265-11D0-BCED-00A0C90AB50F}
~ MNS: 1 Scanned in 00mn 00s



---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Demand 2013-04-15 256904 |  (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
SR - | Auto 2011-02-18 37664 |  (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - | Auto 2013-03-06 45248 |  (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
SR - | Auto 2013-03-06 136912 |  (avast! Firewall) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\afwServ.exe
SR - | Auto 2011-04-06 349472 |  (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SS - | Demand 2008-04-13 225280 |  (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\system32\dmadmin.exe
SS - | Demand 2010-04-19 655624 |  (FLEXnet Licensing Service) . (.Acresso Software Inc..) - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
SS - | Auto 2011-04-17 136176 |  (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Demand 2011-04-17 136176 |  (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Demand 2011-04-14 820520 |  (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
SR - | Auto 2012-11-10 161768 |  (JavaQuickStarterService) . (.Oracle Corporation.) - C:\Program Files\Java\jre7\bin\jqs.exe
SR - | Auto 2009-08-20 73728 |  (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
SS - | Demand 2013-04-12 115608 |  (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
SS - | Demand 2007-01-05 774144 |  (NBService) . (.Nero AG.) - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
SS - | Disabled 2006-12-23 262144 |  (NMIndexingService) . (.Nero AG.) - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
SS - | Auto 2012-09-23 164200 |  (NVSvc) . (.NVIDIA Corporation.) - C:\WINDOWS\system32\nvsvc32.exe
SR - | Auto 2012-09-23 1258856 |  (nvUpdatusService) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
SR - | Auto 2007-07-24 185632 |  (PSI_SVC_2) . (.Protexis Inc..) - c:\Program Files\Fichiers communs\Protexis\License Service\PsiService_2.exe
SR - | Auto  243056 |  (RichVideo) . (...) - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
SR - | Auto 2007-11-02 41456 |  ({95808DC4-FA4A-4C74-92FE-5B863F82066B}) . (.Cyberlink Corp..) - C:\Program Files\CyberLink\PowerDVD\000.fcl
~ Services:  Scanned in 00mn 01s



End of the scan (1551 lines in 03mn 48s)(0)